$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/d11c1cd0-2f14-3290-b454-ae651e07470e.roa File: d11c1cd0-2f14-3290-b454-ae651e07470e.roa (raw, json) Hash identifier: WinQqb8tIXsObUDcuE8zQeXWu50WNGC3cwCgFJBhI3I= Subject key identifier: FC:4A:29:05:0F:09:E9:E6:6E:94:CD:A4:7C:C5:8F:E8:77:93:58:05 Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d Certificate serial: 010D0C9F432858452AB7E4014E3E6C6A4FE39C80 Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/d11c1cd0-2f14-3290-b454-ae651e07470e.roa Signing time: Mon 11 Mar 2024 01:00:26 +0000 ROA not before: Mon 11 Mar 2024 01:00:26 +0000 ROA not after: Sun 09 Jun 2024 01:00:26 +0000 asID: 395381 IP address blocks: 216.59.80.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:2a:b7:e4:01:4e:3e:6c:6a:4f:e3:9c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d Validity Not Before: Mar 11 01:00:26 2024 GMT Not After : Jun 9 01:00:26 2024 GMT Subject: CN=bcb1bcb5-d9c8-429f-869a-28fc16fc88f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:a3:3f:ba:bc:83:63:12:f7:12:2d:94:02:7d: 5b:9d:c9:3b:1b:0c:23:00:12:c9:5d:a9:04:59:ce: c6:d2:4e:13:36:6b:c6:d1:41:27:01:b5:9e:be:b4: 1a:76:fb:b2:5c:12:56:b9:be:2d:2e:85:93:30:2b: e6:d2:76:3d:6b:76:b5:f3:b9:ee:65:af:43:b7:1d: a4:90:9b:28:7f:24:57:9c:85:1b:e1:c0:c2:7d:d7: 60:18:fb:3d:9a:49:80:78:83:6e:cf:e4:81:83:5f: 58:03:2d:a8:d9:c7:81:40:89:99:0e:5c:44:f4:be: 52:e3:5e:4e:39:bc:27:a8:c5:bc:7a:13:32:16:4f: d0:b9:c7:5c:8f:a4:63:01:5d:1e:ec:3f:31:ee:e3: e3:10:6f:66:b6:e5:34:d7:9b:89:76:6b:d3:24:86: c1:73:77:46:0a:55:cd:b9:dc:5d:51:58:2d:3f:e4: 04:1c:83:a1:b2:28:64:2a:6e:78:d1:d0:d6:0b:37: ca:62:5c:93:1b:59:f8:cf:4d:c1:60:c4:26:b1:4e: 61:63:b4:b9:08:a0:c5:02:21:a7:93:53:58:d3:29: 8d:dc:a7:57:83:76:b2:bc:53:43:22:24:f6:d9:fd: 2b:28:01:d8:56:89:81:4f:50:ec:36:7e:e8:a6:d1: 60:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:4A:29:05:0F:09:E9:E6:6E:94:CD:A4:7C:C5:8F:E8:77:93:58:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/d11c1cd0-2f14-3290-b454-ae651e07470e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl X509v3 Authority Key Identifier: keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer sbgp-ipAddrBlock: critical IPv4: 216.59.80.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d3:64:1c:3d:53:f3:03:47:38:34:64:16:e2:d2:46:83:b9:d3: 8a:7a:97:30:bd:78:fe:f7:3b:d6:c3:c1:18:cd:81:30:dc:44: 09:a0:c8:96:68:2b:6d:85:2c:26:3c:46:c3:d2:6f:0e:8b:a0: 94:51:3b:86:7e:ff:a4:d6:76:15:2f:5e:a6:ed:13:09:57:e1: e1:1b:65:a1:4b:b3:a9:3c:aa:97:78:19:6e:f1:5a:89:0d:11: a0:9d:36:a3:1d:5c:57:3b:d0:38:c9:5e:2c:f7:cf:17:68:fe: 11:53:a0:d4:65:bb:19:61:95:43:c2:84:35:cb:b6:bb:03:42: ad:5e:34:ea:b9:3b:be:4c:78:c9:16:9b:e3:90:22:e8:8e:e6: e8:5e:1b:ef:db:70:4b:f6:22:06:8c:ad:5f:be:2c:0d:d5:ce: 35:c5:3d:97:35:6f:5d:a8:7c:18:47:7f:18:1a:78:c6:ac:d2: d7:cf:47:c7:ec:13:1f:09:38:94:63:40:cd:86:ff:60:e8:2c: 99:1d:24:f1:c8:f1:6e:25:9c:14:1e:b0:42:49:58:d0:d0:a8: 47:70:cc:51:a6:f3:0b:91:2b:5d:98:42:f9:f4:42:cd:79:48: 1d:ba:d3:27:8f:36:88:47:21:f4:6a:e3:d7:6a:d0:d0:09:0e: d2:d9:79:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUqt+QBTj5sak/jnIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM5YTYyMDEtZmU4Yy00OWE0LTk4NWQtNTQ2MzA3NmIz OTdkMB4XDTI0MDMxMTAxMDAyNloXDTI0MDYwOTAxMDAyNlowLzEtMCsGA1UEAxMk YmNiMWJjYjUtZDljOC00MjlmLTg2OWEtMjhmYzE2ZmM4OGY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA96M/uryDYxL3Ei2UAn1bnck7GwwjABLJXakE Wc7G0k4TNmvG0UEnAbWevrQadvuyXBJWub4tLoWTMCvm0nY9a3a187nuZa9Dtx2k kJsofyRXnIUb4cDCfddgGPs9mkmAeINuz+SBg19YAy2o2ceBQImZDlxE9L5S415O ObwnqMW8ehMyFk/Qucdcj6RjAV0e7D8x7uPjEG9mtuU015uJdmvTJIbBc3dGClXN udxdUVgtP+QEHIOhsihkKm540dDWCzfKYlyTG1n4z03BYMQmsU5hY7S5CKDFAiGn k1NY0ymN3KdXg3ayvFNDIiT22f0rKAHYVomBT1DsNn7optFgfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPxKKQUPCenmbpTNpHzFj+h3k1gFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlh NjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYzMDc2YjM5N2QvZDExYzFjZDAtMmYxNC0z MjkwLWI0NTQtYWU2NTFlMDc0NzBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWM5YTYyMDEtZmU4Yy00OWE0LTk4 NWQtNTQ2MzA3NmIzOTdkL2FjOWE2MjAxLWZlOGMtNDlhNC05ODVkLTU0NjMwNzZi Mzk3ZC5jcmwwHwYDVR0jBBgwFoAUv6Kzddwji/mK9k2cK6vYghgKdFQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlhNjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYz MDc2YjM5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD2DtQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANNkHD1T8wNHODRkFuLSRoO504p6lzC9eP73O9bDwRjNgTDcRAmgyJZo K22FLCY8RsPSbw6LoJRRO4Z+/6TWdhUvXqbtEwlX4eEbZaFLs6k8qpd4GW7xWokN EaCdNqMdXFc70DjJXiz3zxdo/hFToNRluxlhlUPChDXLtrsDQq1eNOq5O75MeMkW m+OQIuiO5uheG+/bcEv2IgaMrV++LA3VzjXFPZc1b12ofBhHfxgaeMas0tfPR8fs Ex8JOJRjQM2G/2DoLJkdJPHI8W4lnBQesEJJWNDQqEdwzFGm8wuRK12YQvn0Qs15 SB260yePNohHIfRq49dq0NAJDtLZeSs= -----END CERTIFICATE-----Generated at Thu May 23 19:00:50 2024 by rpki-client on console-fra.rpki-client.org