$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/b9e091d8-8a4b-3b4f-be44-c83818f16ab3.roa File: b9e091d8-8a4b-3b4f-be44-c83818f16ab3.roa (raw, json) Hash identifier: qSjeWUXQ32UusroU2Z/bR74WdAw/Wtzpem4yRNfnK0c= Subject key identifier: 7E:13:E0:FA:10:D2:5A:77:A5:12:4A:CA:AA:2A:3C:05:48:0F:75:0A Certificate issuer: /CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e Certificate serial: 010D0C9F4328584574B319FED1D11C7790F173C0 Authority key identifier: FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/b9e091d8-8a4b-3b4f-be44-c83818f16ab3.roa Signing time: Sat 06 Apr 2024 13:00:35 +0000 ROA not before: Sat 06 Apr 2024 13:00:35 +0000 ROA not after: Fri 05 Jul 2024 13:00:35 +0000 asID: 25649 IP address blocks: 199.187.232.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 16 May 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:74:b3:19:fe:d1:d1:1c:77:90:f1:73:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e Validity Not Before: Apr 6 13:00:35 2024 GMT Not After : Jul 5 13:00:35 2024 GMT Subject: CN=039c0c54-a8bf-4cee-8daa-fd8956a74ee1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:63:f5:2c:0a:16:9a:ee:9b:92:6d:cf:57:e3: 71:59:93:dc:dd:1f:ad:9b:cd:83:7e:c6:40:06:a8: c3:8c:d6:09:90:42:61:a1:29:96:5e:fa:6c:7e:e2: 77:a9:de:80:5a:85:4f:24:f8:69:3d:89:88:d7:92: 2d:d1:56:c8:d9:34:9f:71:ba:26:d5:b0:2c:c7:33: 75:c1:d0:70:07:a5:6a:6b:2e:4f:2b:ee:d9:f6:36: f2:51:47:30:e5:e9:66:0c:54:69:85:d0:6a:5c:54: 3d:01:bc:30:31:2a:27:32:0f:cd:6b:fc:f0:d0:c7: 76:dc:f3:96:cf:38:74:24:03:b8:8f:2f:c7:46:89: 80:5b:5a:41:4a:0e:41:70:8f:ca:bb:3c:73:ea:98: ea:1e:1f:6a:06:f2:84:00:57:fa:2b:8c:25:f3:17: b3:63:98:9e:c8:ce:82:05:34:6b:02:0a:5a:b6:29: fb:ca:94:57:8b:3d:48:2d:e1:b0:c7:83:2b:f7:0e: da:42:3f:e0:ec:42:66:a7:cd:c3:b5:63:87:46:dc: aa:86:fd:22:85:87:6e:42:4e:f8:8c:26:45:fc:84: 8a:99:8e:ea:b8:8b:e2:7e:63:27:48:6b:75:00:c1: aa:8c:bb:68:d8:59:f9:5a:aa:20:34:dd:2c:06:ad: 8c:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:13:E0:FA:10:D2:5A:77:A5:12:4A:CA:AA:2A:3C:05:48:0F:75:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/b9e091d8-8a4b-3b4f-be44-c83818f16ab3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.crl X509v3 Authority Key Identifier: keyid:FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer sbgp-ipAddrBlock: critical IPv4: 199.187.232.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:ac:e8:51:72:f0:fa:ce:9d:fb:a7:ad:2c:53:17:23:9a:8d: 36:85:4a:d2:c9:e1:ec:71:9e:d0:e5:4b:c5:ca:6f:7e:77:08: f7:a6:42:ba:69:20:2f:37:5e:ce:d2:64:cd:5c:13:55:34:98: 30:4d:81:df:16:e6:7a:e4:57:95:52:b6:40:b9:66:3d:82:08: d0:f1:c8:2a:53:1f:75:1d:47:6d:26:ca:0b:4b:5c:37:75:e9: 28:0b:5a:97:ae:1c:67:d6:b2:a6:a1:12:8b:2f:10:c3:08:ec: 38:98:d2:72:cb:3d:c7:11:3f:b2:81:9a:aa:b0:79:1d:63:ba: 3f:73:49:c6:98:b4:1c:ed:67:b5:46:82:22:a2:f9:7c:3f:0a: c4:6e:9c:a5:69:fe:7e:64:d2:5a:8e:b2:cb:d7:2e:5c:00:c8: 35:6c:a2:1a:99:42:b3:ec:f1:00:4f:3e:7e:38:53:fe:31:69: df:70:a5:9a:23:b2:02:8a:3f:ff:3a:42:95:e7:6b:00:8c:c3: 2a:18:bd:18:07:5c:5b:fd:18:8b:06:bd:aa:d9:07:f3:a3:f3: 16:2e:12:77:99:4c:f9:37:ce:f0:d6:e4:15:41:a3:d5:a9:36: f0:cf:e4:1b:2e:33:9d:34:d9:e7:06:78:c7:39:46:fe:c2:cf: 1e:92:9d:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEV0sxn+0dEcd5Dxc8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGYwY2Y2ZmYtNmY2OS00MWI0LWFhNjctMjZkMGFiYTAy ZThlMB4XDTI0MDQwNjEzMDAzNVoXDTI0MDcwNTEzMDAzNVowLzEtMCsGA1UEAxMk MDM5YzBjNTQtYThiZi00Y2VlLThkYWEtZmQ4OTU2YTc0ZWUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWP1LAoWmu6bkm3PV+NxWZPc3R+tm82DfsZA BqjDjNYJkEJhoSmWXvpsfuJ3qd6AWoVPJPhpPYmI15It0VbI2TSfcbom1bAsxzN1 wdBwB6Vqay5PK+7Z9jbyUUcw5elmDFRphdBqXFQ9AbwwMSonMg/Na/zw0Md23POW zzh0JAO4jy/HRomAW1pBSg5BcI/Kuzxz6pjqHh9qBvKEAFf6K4wl8xezY5ieyM6C BTRrAgpatin7ypRXiz1ILeGwx4Mr9w7aQj/g7EJmp83DtWOHRtyqhv0ihYduQk74 jCZF/ISKmY7quIvifmMnSGt1AMGqjLto2Fn5WqogNN0sBq2MUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH4T4PoQ0lp3pRJKyqoqPAVID3UKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjBj ZjZmZi02ZjY5LTQxYjQtYWE2Ny0yNmQwYWJhMDJlOGUvYjllMDkxZDgtOGE0Yi0z YjRmLWJlNDQtYzgzODE4ZjE2YWIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGYwY2Y2ZmYtNmY2OS00MWI0LWFh NjctMjZkMGFiYTAyZThlL2RmMGNmNmZmLTZmNjktNDFiNC1hYTY3LTI2ZDBhYmEw MmU4ZS5jcmwwHwYDVR0jBBgwFoAU/GAffSctPt57SUZisgIHLGcDogIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjBjZjZmZi02ZjY5LTQxYjQtYWE2Ny0yNmQw YWJhMDJlOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx7voMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFes6FFy8PrOnfunrSxTFyOajTaFStLJ4exxntDlS8XKb353CPemQrpp IC83Xs7SZM1cE1U0mDBNgd8W5nrkV5VStkC5Zj2CCNDxyCpTH3UdR20mygtLXDd1 6SgLWpeuHGfWsqahEosvEMMI7DiY0nLLPccRP7KBmqqweR1juj9zScaYtBztZ7VG giKi+Xw/CsRunKVp/n5k0lqOssvXLlwAyDVsohqZQrPs8QBPPn44U/4xad9wpZoj sgKKP/86QpXnawCMwyoYvRgHXFv9GIsGvarZB/Oj8xYuEneZTPk3zvDW5BVBo9Wp NvDP5BsuM5002ecGeMc5Rv7Czx6SnTI= -----END CERTIFICATE-----Generated at Wed May 15 15:08:45 2024 by rpki-client on console-fra.rpki-client.org