$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/1b7492c1-6637-37b3-9d1f-a4a7d76422a1.roa File: 1b7492c1-6637-37b3-9d1f-a4a7d76422a1.roa (raw, json) Hash identifier: L0QVmNi0Z3Z4Rm8NnR39Ro5iPZKtQkKEFBjEPbORyDg= Subject key identifier: 44:CF:4F:7F:E7:54:9F:2C:CB:ED:91:87:B8:46:C5:74:73:E5:24:97 Certificate issuer: /CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Certificate serial: 010D0C9F43285845A15776C0ABBFEC5FF969EA40 Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/1b7492c1-6637-37b3-9d1f-a4a7d76422a1.roa Signing time: Mon 22 Apr 2024 12:47:27 +0000 ROA not before: Mon 22 Apr 2024 12:47:27 +0000 ROA not after: Sun 21 Jul 2024 12:47:27 +0000 asID: 1239 IP address blocks: 199.11.92.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 05 May 2024 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:a1:57:76:c0:ab:bf:ec:5f:f9:69:ea:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Validity Not Before: Apr 22 12:47:27 2024 GMT Not After : Jul 21 12:47:27 2024 GMT Subject: CN=c7a70ec3-dada-4770-8d0a-d648c499e635 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:51:e3:23:f8:dd:36:07:32:1e:69:83:bd:72: d6:d3:75:2f:25:74:d0:11:6c:ee:78:51:4e:5b:9d: 86:9d:78:6b:dd:ea:5d:3e:3d:03:ea:10:32:57:ba: 2d:c0:ba:da:60:35:bf:86:83:6d:60:e8:e6:04:ae: 7e:48:c6:bd:02:33:dd:57:47:c0:7e:86:b8:de:7b: 26:13:f7:30:37:50:93:a7:0e:63:39:ff:a2:f7:7f: 1e:1d:3d:1a:8e:01:46:ae:87:d2:4f:76:6e:ba:44: 76:07:eb:21:1b:4f:b4:79:63:b3:ad:a6:b2:ac:3a: 41:3e:0b:58:57:e9:97:88:c4:c3:ca:c5:c9:80:61: ff:cb:31:c3:55:9d:34:6d:07:f3:56:1d:53:32:cc: a5:fc:18:d7:22:20:b7:1a:8b:27:24:38:7f:6a:1c: 09:10:b2:f9:76:e5:ae:a3:85:19:02:79:76:d2:b0: a1:ff:3a:a4:ad:98:08:e0:0f:a6:f9:4a:5b:6c:35: 36:eb:8b:42:c9:19:1c:08:16:18:48:8e:f6:60:ba: 37:c8:46:f2:63:33:e2:ed:aa:99:24:5b:22:aa:d4: 6d:76:e2:80:21:9b:e5:ef:f6:56:28:e9:7e:c9:d3: 93:9d:54:b3:86:10:a7:31:6e:a4:fb:1b:04:34:c6: b1:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:CF:4F:7F:E7:54:9F:2C:CB:ED:91:87:B8:46:C5:74:73:E5:24:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/1b7492c1-6637-37b3-9d1f-a4a7d76422a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl X509v3 Authority Key Identifier: keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer sbgp-ipAddrBlock: critical IPv4: 199.11.92.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:76:14:8c:bf:d8:80:52:52:45:65:fe:4e:91:77:bf:40:0b: bb:e1:10:23:c9:4b:2d:c7:b8:ac:96:46:1e:4d:f5:81:c7:64: 12:94:06:e7:5b:2f:be:4a:fe:47:21:91:c0:73:0f:0c:6e:a3: 18:3c:37:05:fa:91:82:60:bf:54:41:93:e7:69:b1:a0:09:36: 26:41:5a:ba:4b:71:90:42:b3:59:a9:55:7c:62:7b:05:7d:73: 3d:49:4e:48:f6:49:d1:56:d9:74:a0:3a:63:f4:a9:39:5c:f7: ea:48:7a:86:90:74:7c:38:5e:2d:b7:fc:cb:f4:e1:8b:8c:75: 60:dc:95:83:01:b7:b7:90:27:99:76:10:d9:a6:e3:47:47:5d: 3c:7e:40:77:c8:73:6d:ce:87:4e:7a:58:1d:12:51:23:ff:2a: 28:1b:83:fc:b7:c2:27:f6:6f:b8:cd:74:00:b1:08:c4:0a:35: 42:4d:c4:9f:d5:4b:38:e2:5b:a9:02:b5:22:8a:cc:e5:98:a4: b9:b4:83:d6:ba:a6:97:d5:0e:26:e8:ec:ae:4b:e8:df:3c:be: 2a:38:ad:72:e4:58:d1:f4:8c:0b:98:32:f5:60:88:b2:19:1e: dc:f1:60:8c:b5:9e:0e:46:ac:17:72:4d:dd:34:f8:69:22:d4: a6:4b:e9:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWhV3bAq7/sX/lp6kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDM3MGM0OWUtZjcwYy00NmZiLWEzMGYtZGYyNDc1ODUy Y2MyMB4XDTI0MDQyMjEyNDcyN1oXDTI0MDcyMTEyNDcyN1owLzEtMCsGA1UEAxMk YzdhNzBlYzMtZGFkYS00NzcwLThkMGEtZDY0OGM0OTllNjM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA61HjI/jdNgcyHmmDvXLW03UvJXTQEWzueFFO W52GnXhr3epdPj0D6hAyV7otwLraYDW/hoNtYOjmBK5+SMa9AjPdV0fAfoa43nsm E/cwN1CTpw5jOf+i938eHT0ajgFGrofST3ZuukR2B+shG0+0eWOzraayrDpBPgtY V+mXiMTDysXJgGH/yzHDVZ00bQfzVh1TMsyl/BjXIiC3GosnJDh/ahwJELL5duWu o4UZAnl20rCh/zqkrZgI4A+m+UpbbDU264tCyRkcCBYYSI72YLo3yEbyYzPi7aqZ JFsiqtRtduKAIZvl7/ZWKOl+ydOTnVSzhhCnMW6k+xsENMaxjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFETPT3/nVJ8sy+2Rh7hGxXRz5SSXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcw YzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0NzU4NTJjYzIvMWI3NDkyYzEtNjYzNy0z N2IzLTlkMWYtYTRhN2Q3NjQyMmExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDM3MGM0OWUtZjcwYy00NmZiLWEz MGYtZGYyNDc1ODUyY2MyL2QzNzBjNDllLWY3MGMtNDZmYi1hMzBmLWRmMjQ3NTg1 MmNjMi5jcmwwHwYDVR0jBBgwFoAUooa1EEFiDY7Lz82x8x6qqiVcZ5EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcwYzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0 NzU4NTJjYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxwtcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHZ2FIy/2IBSUkVl/k6Rd79AC7vhECPJSy3HuKyWRh5N9YHHZBKUBudb L75K/kchkcBzDwxuoxg8NwX6kYJgv1RBk+dpsaAJNiZBWrpLcZBCs1mpVXxiewV9 cz1JTkj2SdFW2XSgOmP0qTlc9+pIeoaQdHw4Xi23/Mv04YuMdWDclYMBt7eQJ5l2 ENmm40dHXTx+QHfIc23Oh056WB0SUSP/Kigbg/y3wif2b7jNdACxCMQKNUJNxJ/V SzjiW6kCtSKKzOWYpLm0g9a6ppfVDibo7K5L6N88vio4rXLkWNH0jAuYMvVgiLIZ HtzxYIy1ng5GrBdyTd00+Gki1KZL6S4= -----END CERTIFICATE-----Generated at Fri May 3 08:22:38 2024 by rpki-client on console-ams.rpki-client.org