$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085/d9aff715-467a-358e-a765-6f5f138dd650.roa File: d9aff715-467a-358e-a765-6f5f138dd650.roa (raw, json) Hash identifier: 1qmGVUVoS6uMRZhXSLhXs1txubz0KJrd2rYCC1GX5Qg= Subject key identifier: 9F:3F:A1:5A:70:1C:B0:04:27:1F:3E:2A:A3:42:7D:F8:6C:CB:FD:CC Certificate issuer: /CN=09c51633-340e-4eac-820c-a36b33746085 Certificate serial: 010D0C9F432858455CF82F1BC5FF9EC6F94FC120 Authority key identifier: 58:DB:44:5B:64:54:08:69:7A:39:63:68:B1:69:F1:A2:F8:8A:C1:34 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085/d9aff715-467a-358e-a765-6f5f138dd650.roa Signing time: Fri 29 Mar 2024 01:00:26 +0000 ROA not before: Fri 29 Mar 2024 01:00:26 +0000 ROA not after: Thu 27 Jun 2024 01:00:26 +0000 asID: 8075 IP address blocks: 199.21.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085/09c51633-340e-4eac-820c-a36b33746085.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085/09c51633-340e-4eac-820c-a36b33746085.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Jun 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:5c:f8:2f:1b:c5:ff:9e:c6:f9:4f:c1:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09c51633-340e-4eac-820c-a36b33746085 Validity Not Before: Mar 29 01:00:26 2024 GMT Not After : Jun 27 01:00:26 2024 GMT Subject: CN=b26b99e7-2e09-4781-b894-46629650bb87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:6b:25:35:29:bc:82:10:0e:f3:73:15:fb:c3: f2:fa:f8:d4:3e:ca:56:3d:79:fb:b7:ec:0f:00:98: a0:18:17:9e:b3:69:ee:ec:56:a2:44:8a:93:00:d4: 8a:d7:45:f3:a4:ea:83:93:b9:95:a9:64:d6:8b:6b: fe:8d:4c:76:75:1f:f0:2a:79:cd:1c:61:a0:35:6f: 5a:77:51:5d:49:54:91:2e:77:bc:35:bf:ee:d2:a9: 1c:1a:d0:85:71:3a:5c:5e:79:1c:2a:5b:df:c5:c1: 32:46:bb:00:89:ab:99:e4:c3:f2:88:b7:28:d3:60: b5:96:a9:76:86:2d:b6:97:87:26:9b:d9:23:5a:b3: 09:92:3d:fa:99:57:81:5b:5c:97:b7:74:02:36:32: d2:84:ed:18:c0:71:5b:ec:ee:f2:b9:97:c4:81:18: 89:c8:3c:ea:41:e7:c0:b6:2f:7d:85:73:27:ee:5d: 31:38:ef:b3:cc:c6:68:20:c7:2d:1a:c9:6a:5d:c1: 53:d2:d8:a4:0d:46:73:eb:19:66:04:06:14:7f:9d: f7:5c:c0:ca:8c:57:92:5e:d9:dd:36:11:8e:df:ed: 3c:e5:76:b7:35:cd:bd:2f:eb:ca:9d:38:cb:19:6b: cc:ba:f8:42:5b:a4:41:b4:01:e4:dd:fc:df:a2:82: 7d:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:3F:A1:5A:70:1C:B0:04:27:1F:3E:2A:A3:42:7D:F8:6C:CB:FD:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085/d9aff715-467a-358e-a765-6f5f138dd650.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085/09c51633-340e-4eac-820c-a36b33746085.crl X509v3 Authority Key Identifier: keyid:58:DB:44:5B:64:54:08:69:7A:39:63:68:B1:69:F1:A2:F8:8A:C1:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085.cer sbgp-ipAddrBlock: critical IPv4: 199.21.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:e0:e5:4e:7c:13:43:5a:20:32:9b:03:87:f0:cf:4f:04:87: 05:09:b9:1e:e0:ad:c2:6a:9b:1a:df:5d:07:57:74:11:86:7e: 7a:e1:45:df:0e:15:21:b2:36:11:82:5d:60:8b:db:61:c5:86: 6f:99:b4:43:b9:70:f6:c3:ec:d2:95:4e:c5:7b:ea:d1:12:6b: bf:a8:c6:5d:80:c0:5e:99:b4:63:16:d9:56:2d:b1:6f:1e:b4: 0d:e4:73:da:7b:97:34:5f:c4:e1:3a:20:71:45:c6:de:45:ee: 8b:4f:ff:db:0e:72:ce:f3:be:8e:59:6c:27:fe:b4:81:62:8b: 90:75:82:a2:8a:bd:52:3d:49:f7:fc:0b:5d:5e:77:8f:7b:45: fc:71:c4:dc:3a:0a:d8:7b:3d:6f:5f:27:44:ed:5c:23:48:ca: 45:29:02:ad:57:b7:7b:fd:33:a3:13:70:0a:45:b5:39:c6:1b: 9b:d6:25:3d:f6:a8:b2:76:41:1e:0c:26:c4:68:48:18:73:f0: 64:3f:95:97:5c:b2:d7:b4:36:6d:0c:f7:34:8f:83:73:e4:71: 70:6c:53:7c:64:f5:55:48:ce:02:e8:11:61:33:32:46:6b:cc: 8c:09:ae:bb:93:ae:46:c5:b4:85:d7:37:58:7b:76:d2:cd:05: 80:65:13:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVc+C8bxf+exvlPwSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDljNTE2MzMtMzQwZS00ZWFjLTgyMGMtYTM2YjMzNzQ2 MDg1MB4XDTI0MDMyOTAxMDAyNloXDTI0MDYyNzAxMDAyNlowLzEtMCsGA1UEAxMk YjI2Yjk5ZTctMmUwOS00NzgxLWI4OTQtNDY2Mjk2NTBiYjg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk2slNSm8ghAO83MV+8Py+vjUPspWPXn7t+wP AJigGBees2nu7FaiRIqTANSK10XzpOqDk7mVqWTWi2v+jUx2dR/wKnnNHGGgNW9a d1FdSVSRLne8Nb/u0qkcGtCFcTpcXnkcKlvfxcEyRrsAiauZ5MPyiLco02C1lql2 hi22l4cmm9kjWrMJkj36mVeBW1yXt3QCNjLShO0YwHFb7O7yuZfEgRiJyDzqQefA ti99hXMn7l0xOO+zzMZoIMctGslqXcFT0tikDUZz6xlmBAYUf533XMDKjFeSXtnd NhGO3+085Xa3Nc29L+vKnTjLGWvMuvhCW6RBtAHk3fzfooJ9twIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ8/oVpwHLAEJx8+KqNCffhsy/3MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8wOWM1 MTYzMy0zNDBlLTRlYWMtODIwYy1hMzZiMzM3NDYwODUvZDlhZmY3MTUtNDY3YS0z NThlLWE3NjUtNmY1ZjEzOGRkNjUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMDljNTE2MzMtMzQwZS00ZWFjLTgy MGMtYTM2YjMzNzQ2MDg1LzA5YzUxNjMzLTM0MGUtNGVhYy04MjBjLWEzNmIzMzc0 NjA4NS5jcmwwHwYDVR0jBBgwFoAUWNtEW2RUCGl6OWNosWnxoviKwTQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8wOWM1MTYzMy0zNDBlLTRlYWMtODIwYy1hMzZi MzM3NDYwODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxxWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGbg5U58E0NaIDKbA4fwz08EhwUJuR7grcJqmxrfXQdXdBGGfnrhRd8O FSGyNhGCXWCL22HFhm+ZtEO5cPbD7NKVTsV76tESa7+oxl2AwF6ZtGMW2VYtsW8e tA3kc9p7lzRfxOE6IHFFxt5F7otP/9sOcs7zvo5ZbCf+tIFii5B1gqKKvVI9Sff8 C11ed497RfxxxNw6Cth7PW9fJ0TtXCNIykUpAq1Xt3v9M6MTcApFtTnGG5vWJT32 qLJ2QR4MJsRoSBhz8GQ/lZdcste0Nm0M9zSPg3PkcXBsU3xk9VVIzgLoEWEzMkZr zIwJrruTrkbFtIXXN1h7dtLNBYBlE1I= -----END CERTIFICATE-----Generated at Sun Jun 2 19:27:00 2024 by rpki-client on console-ams.rpki-client.org