$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/7101c9f8-dd5c-3483-aa11-8715eea0bec4.roa File: 7101c9f8-dd5c-3483-aa11-8715eea0bec4.roa (raw, json) Hash identifier: ZljWoPgwaIXQO4LxRI+jYfNqP1HuEFe/7fm2vDOyOmo= Subject key identifier: 18:C5:E9:DD:61:CF:12:BB:6B:93:B6:31:28:C8:F4:B4:49:06:F3:B8 Certificate issuer: /CN=b386e256-2dc3-4d21-93b9-c253dcd37e4f Certificate serial: 010D0C9F4328584545300B442E44AD41811ED4C0 Authority key identifier: F2:22:5C:07:C2:CC:A7:84:83:BD:D6:14:A6:AB:B3:79:EF:26:DE:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/7101c9f8-dd5c-3483-aa11-8715eea0bec4.roa Signing time: Wed 20 Mar 2024 12:33:39 +0000 ROA not before: Wed 20 Mar 2024 12:33:39 +0000 ROA not after: Tue 18 Jun 2024 12:33:39 +0000 asID: 54702 IP address blocks: 172.99.136.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/b386e256-2dc3-4d21-93b9-c253dcd37e4f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/b386e256-2dc3-4d21-93b9-c253dcd37e4f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 05 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:45:30:0b:44:2e:44:ad:41:81:1e:d4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b386e256-2dc3-4d21-93b9-c253dcd37e4f Validity Not Before: Mar 20 12:33:39 2024 GMT Not After : Jun 18 12:33:39 2024 GMT Subject: CN=a4c0429a-2f8a-4a6b-9d9d-b4c84f2365a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:79:8b:7b:79:44:b3:cd:78:8e:ed:6a:37:ad: 10:c5:0e:1b:d5:6b:cd:61:bc:a3:78:61:c7:ef:2c: 8c:4c:2c:af:48:c3:02:4c:63:82:b7:df:45:c6:37: eb:38:ea:d6:41:e2:2f:d7:f5:f3:e6:6d:86:5d:89: 42:12:95:00:4a:13:01:45:41:5b:46:22:d4:09:27: 35:12:be:a8:00:50:ae:f1:30:12:e9:23:9d:12:af: 90:7d:cc:b2:63:4e:bd:1e:39:7f:1e:7a:a7:2f:04: 63:9d:b9:16:69:90:c9:52:0a:c1:d5:39:dc:fd:8d: cd:ff:bf:e6:88:de:81:bd:05:b2:a7:c0:15:c0:ef: f4:4a:62:28:f6:19:c2:af:0b:13:e1:99:d6:91:94: 7d:1a:c5:1b:93:15:84:c8:52:d5:6f:17:b9:c2:4d: 7d:c6:f0:2d:5d:16:48:70:f6:5c:b2:bd:8e:c6:e5: 33:d5:4c:fb:85:62:c0:8d:04:c9:16:e3:62:86:16: b1:be:27:67:10:14:e1:bf:f5:6c:91:6f:e3:e8:71: 2e:80:91:18:0a:25:5b:1a:a4:fc:c6:cd:70:83:fe: b7:06:1d:40:5e:28:7c:d6:d4:64:f8:19:0d:d7:15: e1:d5:86:b5:66:07:cb:23:b4:2d:da:9f:96:bd:ea: d3:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:C5:E9:DD:61:CF:12:BB:6B:93:B6:31:28:C8:F4:B4:49:06:F3:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/7101c9f8-dd5c-3483-aa11-8715eea0bec4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/b386e256-2dc3-4d21-93b9-c253dcd37e4f.crl X509v3 Authority Key Identifier: keyid:F2:22:5C:07:C2:CC:A7:84:83:BD:D6:14:A6:AB:B3:79:EF:26:DE:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer sbgp-ipAddrBlock: critical IPv4: 172.99.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:d8:f9:a1:60:2c:0d:ea:7e:ce:0c:e5:51:21:0e:4d:3d:2f: 37:c7:b3:ee:ef:a5:b3:b9:bb:1a:fb:d8:1a:49:b9:ae:99:ac: 21:44:25:1b:b1:53:24:c9:62:fd:19:01:91:ed:eb:97:02:73: c1:17:7d:a4:f8:b4:cb:ae:e8:3b:66:97:d0:c6:8c:f1:69:5e: 7f:24:88:2e:3e:9e:72:f3:0d:d7:b5:6c:39:5d:1b:6c:f6:0b: ec:e0:31:cc:3b:e5:08:fc:1a:9a:4b:6e:d3:15:34:99:04:99: fe:52:f3:62:1e:06:53:62:f3:88:d0:b0:ea:5b:06:0b:75:62: ee:a8:66:80:d8:1d:04:23:38:f5:3f:60:1c:a3:3a:b6:55:cc: 94:51:20:94:da:c6:65:45:cc:38:54:7a:e7:24:98:8f:f8:2e: 29:8f:60:b3:24:dc:88:1f:0e:b2:06:19:17:f8:0a:1b:0d:00: e4:07:3e:03:d1:b0:29:b7:bd:a8:1f:7f:73:2b:17:f5:f1:43: b7:c6:64:c7:b0:c0:96:dc:ff:91:7e:36:2d:bf:55:ba:1a:de: 2b:55:4c:bd:4c:81:ce:14:f5:02:30:06:ef:73:d9:0e:e8:7b: 2e:83:ca:9f:a7:1c:f1:b8:1e:76:ec:e2:9d:dc:33:d7:fa:81: c9:93:57:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVFMAtELkStQYEe1MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjM4NmUyNTYtMmRjMy00ZDIxLTkzYjktYzI1M2RjZDM3 ZTRmMB4XDTI0MDMyMDEyMzMzOVoXDTI0MDYxODEyMzMzOVowLzEtMCsGA1UEAxMk YTRjMDQyOWEtMmY4YS00YTZiLTlkOWQtYjRjODRmMjM2NWE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA73mLe3lEs814ju1qN60QxQ4b1WvNYbyjeGHH 7yyMTCyvSMMCTGOCt99FxjfrOOrWQeIv1/Xz5m2GXYlCEpUAShMBRUFbRiLUCSc1 Er6oAFCu8TAS6SOdEq+QfcyyY069Hjl/HnqnLwRjnbkWaZDJUgrB1Tnc/Y3N/7/m iN6BvQWyp8AVwO/0SmIo9hnCrwsT4ZnWkZR9GsUbkxWEyFLVbxe5wk19xvAtXRZI cPZcsr2OxuUz1Uz7hWLAjQTJFuNihhaxvidnEBThv/VskW/j6HEugJEYCiVbGqT8 xs1wg/63Bh1AXih81tRk+BkN1xXh1Ya1ZgfLI7Qt2p+WverTawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBjF6d1hzxK7a5O2MSjI9LRJBvO4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iMzg2 ZTI1Ni0yZGMzLTRkMjEtOTNiOS1jMjUzZGNkMzdlNGYvNzEwMWM5ZjgtZGQ1Yy0z NDgzLWFhMTEtODcxNWVlYTBiZWM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYjM4NmUyNTYtMmRjMy00ZDIxLTkz YjktYzI1M2RjZDM3ZTRmL2IzODZlMjU2LTJkYzMtNGQyMS05M2I5LWMyNTNkY2Qz N2U0Zi5jcmwwHwYDVR0jBBgwFoAU8iJcB8LMp4SDvdYUpquzee8m3jwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iMzg2ZTI1Ni0yZGMzLTRkMjEtOTNiOS1jMjUz ZGNkMzdlNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrGOIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJPY+aFgLA3qfs4M5VEhDk09LzfHs+7vpbO5uxr72BpJua6ZrCFEJRux UyTJYv0ZAZHt65cCc8EXfaT4tMuu6Dtml9DGjPFpXn8kiC4+nnLzDde1bDldG2z2 C+zgMcw75Qj8GppLbtMVNJkEmf5S82IeBlNi84jQsOpbBgt1Yu6oZoDYHQQjOPU/ YByjOrZVzJRRIJTaxmVFzDhUeuckmI/4LimPYLMk3IgfDrIGGRf4ChsNAOQHPgPR sCm3vagff3MrF/XxQ7fGZMewwJbc/5F+Ni2/Vboa3itVTL1Mgc4U9QIwBu9z2Q7o ey6Dyp+nHPG4Hnbs4p3cM9f6gcmTV8E= -----END CERTIFICATE-----Generated at Sat May 4 02:07:55 2024 by rpki-client on console-ams.rpki-client.org