$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1380a44d-7851-4eb6-8887-413917dcdc12/564dab34-32c7-3d2a-89a2-0f3e970ee2e5.roa File: 564dab34-32c7-3d2a-89a2-0f3e970ee2e5.roa (raw, json) Hash identifier: y7U8GslQ1diSq3I57JewxxvMOI5T4C4PWFSZxarXh5I= Subject key identifier: AE:BF:C3:20:2C:32:18:66:D0:41:D7:E5:F9:68:F0:29:14:8F:E9:72 Certificate issuer: /CN=1380a44d-7851-4eb6-8887-413917dcdc12 Certificate serial: 010D0C9F4328584510502814400929EC8D63F840 Authority key identifier: 6C:37:E1:61:68:B4:CF:88:64:11:CB:68:E9:4A:65:72:4A:96:54:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1380a44d-7851-4eb6-8887-413917dcdc12.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1380a44d-7851-4eb6-8887-413917dcdc12/564dab34-32c7-3d2a-89a2-0f3e970ee2e5.roa Signing time: Fri 01 Mar 2024 14:00:30 +0000 ROA not before: Fri 01 Mar 2024 14:00:30 +0000 ROA not after: Thu 30 May 2024 13:00:30 +0000 asID: 132369 IP address blocks: 199.101.116.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1380a44d-7851-4eb6-8887-413917dcdc12/1380a44d-7851-4eb6-8887-413917dcdc12.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1380a44d-7851-4eb6-8887-413917dcdc12/1380a44d-7851-4eb6-8887-413917dcdc12.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1380a44d-7851-4eb6-8887-413917dcdc12.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 06 May 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:10:50:28:14:40:09:29:ec:8d:63:f8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1380a44d-7851-4eb6-8887-413917dcdc12 Validity Not Before: Mar 1 14:00:30 2024 GMT Not After : May 30 13:00:30 2024 GMT Subject: CN=c95d4ee8-204a-40fe-831c-baff4043243b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:a7:14:4d:dd:e9:a6:fa:ff:02:bb:85:83:81: 25:77:b7:ae:23:a8:53:ae:f9:88:ab:53:f9:ea:df: f8:f4:3d:9c:ef:26:2a:98:11:76:ed:96:16:4b:d9: 46:ec:3b:81:2e:cd:78:23:a6:11:fb:6e:23:b9:26: 4f:cf:db:2e:36:9d:68:a9:a4:58:65:19:b1:cc:fb: 0e:26:35:dd:1b:71:59:02:72:f1:c6:93:0a:74:3b: 82:05:4f:9e:f9:2b:1e:48:f9:7a:b9:c6:0d:5f:3f: e1:c1:21:47:67:8b:2f:4e:b3:ec:ab:ed:e5:44:1b: 0f:dd:97:6c:6a:e0:e5:35:35:53:b2:e3:34:0c:6f: 6a:7e:4c:11:70:b6:69:30:12:aa:9b:55:fc:b0:04: d7:3f:5e:15:05:4a:ae:da:2e:04:a6:84:66:0c:02: 2c:28:53:f4:99:b7:fa:eb:a9:79:a3:69:e7:b2:cb: c3:53:be:82:1c:9c:33:c9:c2:5d:19:a9:2d:8a:c9: ec:2f:47:5f:cb:1b:c7:82:61:d7:f5:57:de:d3:71: 1a:ff:31:dd:57:e8:43:f3:86:e8:4c:de:22:c2:99: 3a:d1:c7:66:79:00:17:69:d0:1b:e0:75:dc:3a:87: 0c:31:ec:7a:18:12:7a:ee:ec:58:2e:b3:87:63:a0: 94:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:BF:C3:20:2C:32:18:66:D0:41:D7:E5:F9:68:F0:29:14:8F:E9:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1380a44d-7851-4eb6-8887-413917dcdc12/564dab34-32c7-3d2a-89a2-0f3e970ee2e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1380a44d-7851-4eb6-8887-413917dcdc12/1380a44d-7851-4eb6-8887-413917dcdc12.crl X509v3 Authority Key Identifier: keyid:6C:37:E1:61:68:B4:CF:88:64:11:CB:68:E9:4A:65:72:4A:96:54:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1380a44d-7851-4eb6-8887-413917dcdc12.cer sbgp-ipAddrBlock: critical IPv4: 199.101.116.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:64:35:a2:af:e2:10:0f:d9:20:43:9b:da:27:10:b1:94:53: 5d:3c:01:02:48:43:30:2a:b7:a5:ef:e7:6a:e0:e4:ba:b0:d3: 03:30:c6:74:47:a5:5d:1e:e3:27:e2:ad:a0:de:d1:0b:0e:4d: 27:25:70:2c:6d:ce:03:81:8f:4f:98:59:55:42:04:f6:15:a9: 88:f6:9a:f6:ca:cc:57:6c:0e:b9:12:02:7f:f9:e4:d5:b0:08: c1:e4:c1:ac:57:bb:ea:83:a1:b8:2e:c6:8b:ed:27:ca:ce:80: 6e:e5:6a:92:d2:da:67:be:18:6c:39:96:05:c2:fe:ae:43:47: 60:64:6a:b0:98:8d:11:84:2c:ec:dc:f3:94:0f:1d:bd:e7:2b: a0:8d:11:cf:6a:9e:03:30:11:b2:2d:69:a1:df:e1:56:52:15: bc:c8:7e:b3:af:24:48:05:f7:ec:54:37:c3:65:44:8d:9e:1e: a9:6c:45:c2:9d:f4:fd:2b:ef:0f:9c:ff:3c:97:b9:df:f6:c9: 5b:fa:3e:1c:ad:34:68:67:83:a1:65:3a:5a:45:a2:f6:8c:59: 05:0b:2c:c3:e5:29:16:45:da:60:b8:b0:ed:ae:75:89:25:7b: 70:f1:16:06:8c:0a:98:96:c1:4c:19:28:e9:ff:4a:55:8d:77: 1c:77:ca:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUQUCgUQAkp7I1j+EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTM4MGE0NGQtNzg1MS00ZWI2LTg4ODctNDEzOTE3ZGNk YzEyMB4XDTI0MDMwMTE0MDAzMFoXDTI0MDUzMDEzMDAzMFowLzEtMCsGA1UEAxMk Yzk1ZDRlZTgtMjA0YS00MGZlLTgzMWMtYmFmZjQwNDMyNDNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKcUTd3ppvr/AruFg4Eld7euI6hTrvmIq1P5 6t/49D2c7yYqmBF27ZYWS9lG7DuBLs14I6YR+24juSZPz9suNp1oqaRYZRmxzPsO JjXdG3FZAnLxxpMKdDuCBU+e+SseSPl6ucYNXz/hwSFHZ4svTrPsq+3lRBsP3Zds auDlNTVTsuM0DG9qfkwRcLZpMBKqm1X8sATXP14VBUqu2i4EpoRmDAIsKFP0mbf6 66l5o2nnssvDU76CHJwzycJdGaktisnsL0dfyxvHgmHX9Vfe03Ea/zHdV+hD84bo TN4iwpk60cdmeQAXadAb4HXcOocMMex6GBJ67uxYLrOHY6CU9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK6/wyAsMhhm0EHX5flo8CkUj+lyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xMzgw YTQ0ZC03ODUxLTRlYjYtODg4Ny00MTM5MTdkY2RjMTIvNTY0ZGFiMzQtMzJjNy0z ZDJhLTg5YTItMGYzZTk3MGVlMmU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMTM4MGE0NGQtNzg1MS00ZWI2LTg4 ODctNDEzOTE3ZGNkYzEyLzEzODBhNDRkLTc4NTEtNGViNi04ODg3LTQxMzkxN2Rj ZGMxMi5jcmwwHwYDVR0jBBgwFoAUbDfhYWi0z4hkEcto6UplckqWVJMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xMzgwYTQ0ZC03ODUxLTRlYjYtODg4Ny00MTM5 MTdkY2RjMTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx2V0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJhkNaKv4hAP2SBDm9onELGUU108AQJIQzAqt6Xv52rg5Lqw0wMwxnRH pV0e4yfiraDe0QsOTSclcCxtzgOBj0+YWVVCBPYVqYj2mvbKzFdsDrkSAn/55NWw CMHkwaxXu+qDobguxovtJ8rOgG7lapLS2me+GGw5lgXC/q5DR2BkarCYjRGELOzc 85QPHb3nK6CNEc9qngMwEbItaaHf4VZSFbzIfrOvJEgF9+xUN8NlRI2eHqlsRcKd 9P0r7w+c/zyXud/2yVv6PhytNGhng6FlOlpFovaMWQULLMPlKRZF2mC4sO2udYkl e3DxFgaMCpiWwUwZKOn/SlWNdxx3yps= -----END CERTIFICATE-----Generated at Sun May 5 00:14:08 2024 by rpki-client on console-fra.rpki-client.org