$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e/bf6594f7-1c16-36b8-bcc6-6f815b2ec6b3.roa File: bf6594f7-1c16-36b8-bcc6-6f815b2ec6b3.roa (raw, json) Hash identifier: tEF5qMCjJy5Hv8TfrPY5g/p68Fe7KkZ9h4NajqC6pMk= Subject key identifier: BD:76:1B:07:E9:1D:45:AE:7A:64:C1:B0:94:5D:33:C0:77:65:F4:30 Certificate issuer: /CN=344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e Certificate serial: 010D0C9F4328584551CD6DF39F25D8A2F89E0CA0 Authority key identifier: D2:45:C5:55:D1:22:08:EA:2C:9E:16:94:D7:69:27:DF:D6:27:3E:50 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e/bf6594f7-1c16-36b8-bcc6-6f815b2ec6b3.roa Signing time: Mon 25 Mar 2024 01:00:25 +0000 ROA not before: Mon 25 Mar 2024 01:00:25 +0000 ROA not after: Sun 23 Jun 2024 01:00:25 +0000 asID: 55076 IP address blocks: 198.37.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e/344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e/344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 03 Jun 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:51:cd:6d:f3:9f:25:d8:a2:f8:9e:0c:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e Validity Not Before: Mar 25 01:00:25 2024 GMT Not After : Jun 23 01:00:25 2024 GMT Subject: CN=ab2b680e-c0f7-4f0e-9092-3fc760a744b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:db:d5:f4:a2:29:a6:78:ad:f5:b1:3d:40:e0: a0:cb:a8:53:67:d5:6d:8d:6d:e6:3c:05:5b:64:e2: 1e:01:99:0e:32:9a:5d:8f:d2:7d:1c:4b:00:f3:19: f5:a7:56:36:60:e3:44:28:88:7a:bd:2b:da:d1:39: 46:93:07:ef:b5:a8:1d:c5:8f:e3:cc:f2:30:85:cc: f7:45:b0:15:34:fe:4b:7b:c5:81:97:e6:30:67:da: b1:5a:61:e8:ab:dd:6a:2d:ea:42:34:83:a6:f0:cf: 48:76:1b:b8:99:f5:72:25:6f:c3:09:2d:90:56:7d: 55:a0:5c:3d:92:7c:c8:da:75:51:34:a1:82:b4:a3: ed:68:4f:3b:55:3d:b9:b1:21:aa:af:3c:ee:2d:99: db:be:ad:86:25:39:52:af:1f:3e:04:26:d9:13:70: 25:60:48:d6:89:fa:57:35:db:c0:e1:37:79:70:fe: 4b:7f:d1:dc:6a:ea:83:5f:6b:e4:33:39:d0:da:9d: c4:c3:a4:5a:3f:7c:5d:39:a0:cf:87:eb:f3:90:14: 58:ba:14:f7:7d:df:62:90:23:c7:82:64:b6:ef:3c: 2f:aa:69:b1:31:6b:96:99:c0:fe:25:cb:c3:db:8e: 4a:a4:d4:9f:76:c8:18:ea:9e:28:ce:65:03:e4:bd: b9:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:76:1B:07:E9:1D:45:AE:7A:64:C1:B0:94:5D:33:C0:77:65:F4:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e/bf6594f7-1c16-36b8-bcc6-6f815b2ec6b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e/344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e.crl X509v3 Authority Key Identifier: keyid:D2:45:C5:55:D1:22:08:EA:2C:9E:16:94:D7:69:27:DF:D6:27:3E:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e.cer sbgp-ipAddrBlock: critical IPv4: 198.37.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:b7:a9:fb:93:02:c4:bc:86:a3:da:b4:46:56:30:4c:ff:77: e5:f6:18:8c:f8:fb:59:a8:7b:9e:47:6d:23:bd:b2:b9:08:f7: df:98:45:a5:d1:13:2c:c6:3b:24:de:c8:5e:bc:e9:b8:3c:79: 68:ae:24:67:27:88:04:5d:10:01:2b:d5:d2:60:65:33:b8:98: 9b:99:ac:51:35:41:58:a7:15:f0:e1:67:f1:f8:c6:d9:76:cd: e4:88:90:e2:d3:a0:4a:01:ed:3b:60:c3:d8:72:18:dd:2a:6d: fa:b8:a8:bd:ae:b8:80:05:44:b7:68:fb:8b:64:58:80:e3:12: e4:fa:19:61:4d:e6:34:d6:74:bc:b8:70:80:8f:20:cf:a0:1d: ce:31:59:9a:6b:73:40:b6:04:6b:2b:eb:53:69:df:b0:b0:42: 79:37:7f:5f:51:cd:bf:9f:4b:0a:b4:bd:f8:08:0b:43:34:b4: 98:66:f7:d2:b4:69:ba:0a:8f:0a:fe:08:27:18:e3:e7:6d:70: e7:ca:b1:b0:e1:d3:d4:2a:86:22:16:e4:be:ff:46:05:2e:cc: 19:99:3f:f9:fd:da:af:81:4f:70:47:ab:98:43:5f:58:9e:8d: b1:de:e9:64:b2:e0:1a:63:ef:25:31:09:c8:e6:87:d2:6d:7f: 6a:08:28:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVRzW3znyXYovieDKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzQ0YzY3MDQtYjNiYi00ZWQ4LWI2ZjctYjY1NmUyZmI5 ZTdlMB4XDTI0MDMyNTAxMDAyNVoXDTI0MDYyMzAxMDAyNVowLzEtMCsGA1UEAxMk YWIyYjY4MGUtYzBmNy00ZjBlLTkwOTItM2ZjNzYwYTc0NGI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudvV9KIppnit9bE9QOCgy6hTZ9VtjW3mPAVb ZOIeAZkOMppdj9J9HEsA8xn1p1Y2YONEKIh6vSva0TlGkwfvtagdxY/jzPIwhcz3 RbAVNP5Le8WBl+YwZ9qxWmHoq91qLepCNIOm8M9Idhu4mfVyJW/DCS2QVn1VoFw9 knzI2nVRNKGCtKPtaE87VT25sSGqrzzuLZnbvq2GJTlSrx8+BCbZE3AlYEjWifpX NdvA4Td5cP5Lf9HcauqDX2vkMznQ2p3Ew6RaP3xdOaDPh+vzkBRYuhT3fd9ikCPH gmS27zwvqmmxMWuWmcD+JcvD245KpNSfdsgY6p4ozmUD5L25YwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL12GwfpHUWuemTBsJRdM8B3ZfQwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zNDRj NjcwNC1iM2JiLTRlZDgtYjZmNy1iNjU2ZTJmYjllN2UvYmY2NTk0ZjctMWMxNi0z NmI4LWJjYzYtNmY4MTViMmVjNmIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMzQ0YzY3MDQtYjNiYi00ZWQ4LWI2 ZjctYjY1NmUyZmI5ZTdlLzM0NGM2NzA0LWIzYmItNGVkOC1iNmY3LWI2NTZlMmZi OWU3ZS5jcmwwHwYDVR0jBBgwFoAU0kXFVdEiCOosnhaU12kn39YnPlAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zNDRjNjcwNC1iM2JiLTRlZDgtYjZmNy1iNjU2 ZTJmYjllN2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxiWIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFu3qfuTAsS8hqPatEZWMEz/d+X2GIz4+1moe55HbSO9srkI99+YRaXR EyzGOyTeyF686bg8eWiuJGcniARdEAEr1dJgZTO4mJuZrFE1QVinFfDhZ/H4xtl2 zeSIkOLToEoB7Ttgw9hyGN0qbfq4qL2uuIAFRLdo+4tkWIDjEuT6GWFN5jTWdLy4 cICPIM+gHc4xWZprc0C2BGsr61Np37CwQnk3f19Rzb+fSwq0vfgIC0M0tJhm99K0 aboKjwr+CCcY4+dtcOfKsbDh09QqhiIW5L7/RgUuzBmZP/n92q+BT3BHq5hDX1ie jbHe6WSy4Bpj7yUxCcjmh9Jtf2oIKPk= -----END CERTIFICATE-----Generated at Sat Jun 1 23:02:59 2024 by rpki-client on console-ams.rpki-client.org