$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/211726d9-186c-32fa-9269-934166f8a1be.roa File: 211726d9-186c-32fa-9269-934166f8a1be.roa (raw, json) Hash identifier: giRa3EArkLv6TiFTJzsNxNmTU/DkNJWo2cTMVr5vx60= Subject key identifier: DD:2D:8E:D3:57:0F:DE:23:D0:8C:E5:3F:9C:1A:BB:01:BD:ED:FC:88 Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F432858454C38148D91D898B2A2C3CE80 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/211726d9-186c-32fa-9269-934166f8a1be.roa Signing time: Sat 23 Mar 2024 01:00:24 +0000 ROA not before: Sat 23 Mar 2024 01:00:24 +0000 ROA not after: Fri 21 Jun 2024 01:00:24 +0000 asID: 11090 IP address blocks: 216.137.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 03 Jun 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:4c:38:14:8d:91:d8:98:b2:a2:c3:ce:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Mar 23 01:00:24 2024 GMT Not After : Jun 21 01:00:24 2024 GMT Subject: CN=65abaa58-3490-40ea-9276-8f02e1e3a62c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:95:a6:60:6a:b3:0c:4d:9e:25:6a:49:a6:80: 6c:42:bc:e0:92:3d:40:dd:5c:9f:29:d6:e3:a1:49: 6d:ee:06:32:8d:aa:b9:27:3a:fe:27:ea:da:3d:9b: b2:d4:48:48:8f:54:ae:3c:10:62:47:b1:8d:92:32: ed:8b:3d:e0:44:aa:aa:c3:3d:c0:be:2a:77:7d:da: fc:78:3d:2c:24:f5:01:3a:a6:1b:f4:f3:3b:7d:e9: 88:4f:98:0e:76:82:e5:b2:ad:be:e2:42:18:4f:e5: 21:cd:38:0e:85:11:2e:d0:20:3b:95:fa:24:b2:32: c5:99:cd:01:00:54:09:8f:76:eb:64:fb:4d:b4:60: 60:81:8c:1e:e8:06:41:f7:8d:6b:9c:0c:98:6b:29: b7:2e:12:7f:9a:dd:31:18:68:f2:2a:c7:34:3b:86: cc:7b:bc:f6:53:43:bb:46:cd:25:8e:3f:e5:04:8b: c8:1d:12:d0:81:b9:a6:fd:fb:ac:b4:7f:be:b1:d1: 4d:0f:3b:cd:4f:9a:27:e9:eb:18:54:70:76:21:08: b9:3d:e6:b7:23:03:6e:41:b2:14:85:51:56:3c:d4: 57:b3:11:87:0e:80:79:10:28:1d:3c:c7:08:4f:03: 86:1a:4d:52:f8:c1:72:a6:64:38:5e:eb:6c:99:c5: 91:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:2D:8E:D3:57:0F:DE:23:D0:8C:E5:3F:9C:1A:BB:01:BD:ED:FC:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/211726d9-186c-32fa-9269-934166f8a1be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 216.137.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:71:6b:fc:2c:89:9a:fa:22:91:21:b2:03:a1:f5:2d:dd:ac: e4:80:83:17:cb:84:e7:db:26:a2:a6:1c:82:65:04:77:04:b0: 3d:55:60:37:91:0e:b1:eb:70:cb:19:2e:d6:70:fd:e6:25:d5: d5:e4:e2:41:ae:05:fc:3b:83:e2:1a:1f:a3:ac:77:c0:e9:67: d2:f3:1f:48:75:95:34:7f:7f:2d:18:d2:45:7a:f1:9a:0b:e0: c1:c1:02:fd:a4:34:1e:a8:2e:62:98:d2:b5:69:1f:f6:2d:d7: 42:9a:ea:69:56:7f:c0:8e:74:d2:bd:50:f8:49:a2:26:f2:7d: 8d:e5:3e:ec:03:4c:a3:1c:9f:b5:1b:c5:25:68:b9:04:fd:6d: 49:86:b9:f8:8b:7b:d7:18:f6:58:2a:0a:54:90:c2:61:3d:23: 87:e8:3e:93:79:46:a7:58:c4:ac:1c:34:ce:33:22:a9:ce:9d: 6a:8e:e5:a4:43:0b:49:87:aa:8d:45:61:5a:9f:11:bb:d8:b9: 64:78:0c:f0:88:73:86:98:dc:5a:9c:27:ff:7b:1c:97:d5:a9: b3:97:6b:c1:87:10:8c:76:b4:7e:65:74:8f:af:d2:78:78:76: ff:e9:fd:ab:3c:27:b4:74:a6:4b:5a:20:8d:73:f8:ae:e6:26: 0f:d6:c8:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVMOBSNkdiYsqLDzoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI0MDMyMzAxMDAyNFoXDTI0MDYyMTAxMDAyNFowLzEtMCsGA1UEAxMk NjVhYmFhNTgtMzQ5MC00MGVhLTkyNzYtOGYwMmUxZTNhNjJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppWmYGqzDE2eJWpJpoBsQrzgkj1A3VyfKdbj oUlt7gYyjaq5Jzr+J+raPZuy1EhIj1SuPBBiR7GNkjLtiz3gRKqqwz3Avip3fdr8 eD0sJPUBOqYb9PM7femIT5gOdoLlsq2+4kIYT+UhzTgOhREu0CA7lfoksjLFmc0B AFQJj3brZPtNtGBggYwe6AZB941rnAyYaym3LhJ/mt0xGGjyKsc0O4bMe7z2U0O7 Rs0ljj/lBIvIHRLQgbmm/fustH++sdFNDzvNT5on6esYVHB2IQi5Pea3IwNuQbIU hVFWPNRXsxGHDoB5ECgdPMcITwOGGk1S+MFypmQ4XutsmcWRRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN0tjtNXD94j0IzlP5wauwG97fyIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvMjExNzI2ZDktMTg2Yy0z MmZhLTkyNjktOTM0MTY2ZjhhMWJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD2IngMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALhxa/wsiZr6IpEhsgOh9S3drOSAgxfLhOfbJqKmHIJlBHcEsD1VYDeR DrHrcMsZLtZw/eYl1dXk4kGuBfw7g+IaH6Osd8DpZ9LzH0h1lTR/fy0Y0kV68ZoL 4MHBAv2kNB6oLmKY0rVpH/Yt10Ka6mlWf8COdNK9UPhJoibyfY3lPuwDTKMcn7Ub xSVouQT9bUmGufiLe9cY9lgqClSQwmE9I4foPpN5RqdYxKwcNM4zIqnOnWqO5aRD C0mHqo1FYVqfEbvYuWR4DPCIc4aY3FqcJ/97HJfVqbOXa8GHEIx2tH5ldI+v0nh4 dv/p/as8J7R0pktaII1z+K7mJg/WyLQ= -----END CERTIFICATE-----Generated at Sat Jun 1 16:35:03 2024 by rpki-client on console-ams.rpki-client.org