$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90aacd5a-46ac-4e18-9ef2-722280ddfa94/1dcc2252-c71a-345a-ba00-93c43b487133.roa File: 1dcc2252-c71a-345a-ba00-93c43b487133.roa (raw, json) Hash identifier: iCKOjHfdELFIVFQQU2D3gklkj+wVlqzq3iUhTXKmWwM= Subject key identifier: 13:6E:71:69:FF:F8:90:0B:61:65:91:A9:DD:EB:01:07:A9:A4:C6:AB Certificate issuer: /CN=90aacd5a-46ac-4e18-9ef2-722280ddfa94 Certificate serial: 010D0C9F43285845B3836497F861FFA6ABE7E0F8 Authority key identifier: AA:85:0D:9E:7F:43:06:C8:15:96:5D:EB:4C:1C:CF:E4:FB:76:70:06 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90aacd5a-46ac-4e18-9ef2-722280ddfa94.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90aacd5a-46ac-4e18-9ef2-722280ddfa94/1dcc2252-c71a-345a-ba00-93c43b487133.roa Signing time: Mon 29 Apr 2024 01:00:25 +0000 ROA not before: Mon 29 Apr 2024 01:00:25 +0000 ROA not after: Sun 28 Jul 2024 01:00:25 +0000 asID: 25715 IP address blocks: 199.36.224.0/21 maxlen: 24 173.225.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90aacd5a-46ac-4e18-9ef2-722280ddfa94/90aacd5a-46ac-4e18-9ef2-722280ddfa94.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90aacd5a-46ac-4e18-9ef2-722280ddfa94/90aacd5a-46ac-4e18-9ef2-722280ddfa94.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90aacd5a-46ac-4e18-9ef2-722280ddfa94.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 27 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:b3:83:64:97:f8:61:ff:a6:ab:e7:e0:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90aacd5a-46ac-4e18-9ef2-722280ddfa94 Validity Not Before: Apr 29 01:00:25 2024 GMT Not After : Jul 28 01:00:25 2024 GMT Subject: CN=56ce7a76-8ae0-42bb-b73c-63b40e6cf7f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:fe:99:49:68:b6:06:f5:1d:b6:55:a6:e8:6f: 07:5c:65:97:ff:5c:5e:ae:64:81:cb:27:a1:54:18: 85:a6:2a:0d:d6:58:23:88:be:49:b6:1c:98:5f:29: a6:38:7e:4d:bd:96:16:1c:39:5b:a7:e0:39:04:3e: dc:6d:fd:a2:af:cd:70:4c:00:4f:d9:40:7c:4d:52: f3:59:62:0e:92:8a:14:4b:40:8d:df:b8:9f:fd:9f: 39:7b:ac:27:71:95:90:e0:93:4b:43:73:e1:7f:c8: 12:ab:78:69:d7:21:a2:57:68:26:52:59:e9:dc:74: e3:b7:94:90:a8:2b:62:42:33:c0:e7:7b:0a:90:f7: 7f:a0:6f:a1:bf:67:7e:24:7d:1a:cc:4b:d5:0e:79: ce:cb:54:4d:8f:41:36:b1:94:01:e4:a7:96:43:3e: 7f:3c:fc:64:e0:9f:c5:b6:29:85:1a:ec:3f:37:7d: b1:76:74:58:d4:15:6e:a7:6c:d0:f8:7a:f3:5c:16: 11:e8:84:ec:a6:ca:5c:c3:67:e9:bc:49:55:e5:af: a1:ce:f1:c6:2c:f8:65:c3:a7:dc:e9:82:ca:51:5a: 74:39:c6:e6:a8:4e:81:98:d6:71:46:14:20:79:45: 21:36:2e:f7:40:44:77:9b:66:85:00:b6:f6:20:5e: 21:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:6E:71:69:FF:F8:90:0B:61:65:91:A9:DD:EB:01:07:A9:A4:C6:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90aacd5a-46ac-4e18-9ef2-722280ddfa94/1dcc2252-c71a-345a-ba00-93c43b487133.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90aacd5a-46ac-4e18-9ef2-722280ddfa94/90aacd5a-46ac-4e18-9ef2-722280ddfa94.crl X509v3 Authority Key Identifier: keyid:AA:85:0D:9E:7F:43:06:C8:15:96:5D:EB:4C:1C:CF:E4:FB:76:70:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90aacd5a-46ac-4e18-9ef2-722280ddfa94.cer sbgp-ipAddrBlock: critical IPv4: 173.225.32.0/20 199.36.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:9d:54:28:51:2b:9d:7a:0a:7c:34:6e:31:93:7a:ad:39:43: 19:91:40:19:cf:93:2e:40:30:42:d6:1f:62:41:3f:47:45:a9: d5:1a:de:b3:2c:05:b8:0e:5d:48:59:37:be:84:55:67:d7:36: 5e:37:8f:7c:26:d7:6e:0c:35:7d:fe:11:ad:74:ef:c9:e4:93: 00:e0:9e:fd:f1:ff:3e:1d:6e:f5:92:44:33:ea:a5:1c:a4:96: 00:53:cd:3e:31:67:e3:34:21:dc:87:a1:da:13:52:8b:3e:b0: d9:e3:94:ca:d5:74:08:1f:d4:7f:fa:14:27:9c:bd:61:58:c8: be:b9:5f:56:5e:53:84:cb:90:18:0e:23:e9:6d:43:48:54:41: 95:0d:67:51:29:01:34:ad:b4:3b:77:13:ec:a8:35:35:a0:55: dc:42:34:b7:f6:15:f0:7b:64:a6:e3:bd:76:05:72:05:54:4e: fc:42:32:6c:b3:0a:20:ce:09:cd:60:a1:c6:2f:d7:50:5f:24: dc:64:1f:51:eb:60:b0:80:59:b3:39:e3:46:40:bc:0c:d1:4d: e2:f1:94:22:d7:85:2a:9f:74:17:e8:82:e6:77:bf:78:42:26: 59:bc:d4:32:a3:0d:06:57:bc:3e:6d:59:86:7d:50:4c:83:6e: 97:68:cd:b7 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEWzg2SX+GH/pqvn4PgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBhYWNkNWEtNDZhYy00ZTE4LTllZjItNzIyMjgwZGRm YTk0MB4XDTI0MDQyOTAxMDAyNVoXDTI0MDcyODAxMDAyNVowLzEtMCsGA1UEAxMk NTZjZTdhNzYtOGFlMC00MmJiLWI3M2MtNjNiNDBlNmNmN2YyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiP6ZSWi2BvUdtlWm6G8HXGWX/1xermSByyeh VBiFpioN1lgjiL5JthyYXymmOH5NvZYWHDlbp+A5BD7cbf2ir81wTABP2UB8TVLz WWIOkooUS0CN37if/Z85e6wncZWQ4JNLQ3Phf8gSq3hp1yGiV2gmUlnp3HTjt5SQ qCtiQjPA53sKkPd/oG+hv2d+JH0azEvVDnnOy1RNj0E2sZQB5KeWQz5/PPxk4J/F timFGuw/N32xdnRY1BVup2zQ+HrzXBYR6ITspspcw2fpvElV5a+hzvHGLPhlw6fc 6YLKUVp0OcbmqE6BmNZxRhQgeUUhNi73QER3m2aFALb2IF4h1QIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFBNucWn/+JALYWWRqd3rAQeppMarMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGFh Y2Q1YS00NmFjLTRlMTgtOWVmMi03MjIyODBkZGZhOTQvMWRjYzIyNTItYzcxYS0z NDVhLWJhMDAtOTNjNDNiNDg3MTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBhYWNkNWEtNDZhYy00ZTE4LTll ZjItNzIyMjgwZGRmYTk0LzkwYWFjZDVhLTQ2YWMtNGUxOC05ZWYyLTcyMjI4MGRk ZmE5NC5jcmwwHwYDVR0jBBgwFoAUqoUNnn9DBsgVll3rTBzP5Pt2cAYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGFhY2Q1YS00NmFjLTRlMTgtOWVmMi03MjIy ODBkZGZhOTQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEreEgAwQD xyTgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAAadVChRK516Cnw0bjGTeq05QxmRQBnPky5AMELWH2JBP0dF qdUa3rMsBbgOXUhZN76EVWfXNl43j3wm124MNX3+Ea1078nkkwDgnv3x/z4dbvWS RDPqpRyklgBTzT4xZ+M0IdyHodoTUos+sNnjlMrVdAgf1H/6FCecvWFYyL65X1Ze U4TLkBgOI+ltQ0hUQZUNZ1EpATSttDt3E+yoNTWgVdxCNLf2FfB7ZKbjvXYFcgVU TvxCMmyzCiDOCc1gocYv11BfJNxkH1HrYLCAWbM540ZAvAzRTeLxlCLXhSqfdBfo guZ3v3hCJlm81DKjDQZXvD5tWYZ9UEyDbpdozbc= -----END CERTIFICATE-----Generated at Sun May 26 15:23:56 2024 by rpki-client on console-ams.rpki-client.org