$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c42e23f5-032b-4670-8e05-b4b0477e4388/8a9cbae8-b649-3428-a65a-dee741bbf2ff.roa File: 8a9cbae8-b649-3428-a65a-dee741bbf2ff.roa (raw, json) Hash identifier: o+YEa3dvunLExgoxVlgUK/HIhyPSPocjp34F8FHZ1jE= Subject key identifier: 70:57:60:A5:A9:50:AD:30:75:0A:CB:90:35:59:29:EA:F5:1A:4D:5E Certificate issuer: /CN=c42e23f5-032b-4670-8e05-b4b0477e4388 Certificate serial: 010D0C9F43285845CB3E4F3DC3430A01A2232EC0 Authority key identifier: 2E:6C:39:E3:71:14:18:83:29:2C:46:0D:E9:EC:38:AA:87:EA:7D:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c42e23f5-032b-4670-8e05-b4b0477e4388.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c42e23f5-032b-4670-8e05-b4b0477e4388/8a9cbae8-b649-3428-a65a-dee741bbf2ff.roa Signing time: Tue 07 May 2024 13:00:35 +0000 ROA not before: Tue 07 May 2024 13:00:35 +0000 ROA not after: Mon 05 Aug 2024 13:00:35 +0000 asID: 13692 IP address blocks: 199.195.16.0/20 maxlen: 20 192.133.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c42e23f5-032b-4670-8e05-b4b0477e4388/c42e23f5-032b-4670-8e05-b4b0477e4388.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c42e23f5-032b-4670-8e05-b4b0477e4388/c42e23f5-032b-4670-8e05-b4b0477e4388.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c42e23f5-032b-4670-8e05-b4b0477e4388.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:cb:3e:4f:3d:c3:43:0a:01:a2:23:2e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c42e23f5-032b-4670-8e05-b4b0477e4388 Validity Not Before: May 7 13:00:35 2024 GMT Not After : Aug 5 13:00:35 2024 GMT Subject: CN=d2139ceb-f77b-467c-aff4-440ff25dc038 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:46:db:f9:14:90:6e:e4:c7:73:fd:be:2f:ff: ec:a3:bb:81:c0:2d:1c:47:03:d8:d4:a3:8e:aa:a1: 4e:b0:5b:f4:fe:8e:e2:d7:25:03:27:1d:5e:47:bb: 88:16:d6:43:20:23:79:7a:5e:69:e3:5f:b2:c9:86: 87:ef:f9:f6:80:48:e9:99:60:98:7a:04:da:cc:ef: 18:11:65:13:a8:bc:fb:dc:1a:7e:cc:19:61:36:57: 4d:86:0e:7b:00:0c:12:e0:a7:87:b1:02:ad:b6:41: c8:22:c2:e7:99:a3:b0:41:b6:fd:67:c4:4a:73:53: b3:03:21:6e:07:22:d6:ea:c1:38:08:2b:27:b1:e5: ef:29:49:d6:c5:56:91:94:3c:71:44:44:53:b9:cf: 87:95:d4:87:46:ee:6b:d9:76:7e:47:bc:4e:1f:90: 05:16:fd:07:1a:12:57:68:b3:f3:a5:db:f2:df:5e: 37:50:5a:e7:ce:c1:16:a5:d4:79:ba:43:03:11:5c: c3:a0:2d:61:a9:21:f5:ba:a0:22:21:da:81:bb:cc: db:e6:6e:c4:e6:a1:14:7e:9d:8d:2e:00:31:1a:aa: 7d:e8:63:ec:b3:58:e4:23:0a:3b:00:16:0a:11:86: fe:7e:0f:77:c8:02:d7:a7:87:bc:88:ed:57:bb:e8: 86:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:57:60:A5:A9:50:AD:30:75:0A:CB:90:35:59:29:EA:F5:1A:4D:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c42e23f5-032b-4670-8e05-b4b0477e4388/8a9cbae8-b649-3428-a65a-dee741bbf2ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c42e23f5-032b-4670-8e05-b4b0477e4388/c42e23f5-032b-4670-8e05-b4b0477e4388.crl X509v3 Authority Key Identifier: keyid:2E:6C:39:E3:71:14:18:83:29:2C:46:0D:E9:EC:38:AA:87:EA:7D:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c42e23f5-032b-4670-8e05-b4b0477e4388.cer sbgp-ipAddrBlock: critical IPv4: 192.133.23.0/24 199.195.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:c9:aa:24:b0:fa:2a:2f:b3:af:a2:18:8a:e0:68:fc:ce:bf: af:8d:24:dd:68:1d:fc:c8:1c:78:bf:cc:70:09:78:b5:2e:ca: 7e:83:07:9f:9a:8e:23:1a:9e:57:4f:a6:9b:48:09:42:79:70: 0d:2a:f8:f9:f2:c1:64:83:d4:4f:49:c4:77:e6:93:13:e4:8c: 53:dc:8b:a1:6f:23:7a:6b:7b:8d:e2:54:3e:36:e7:ed:f8:40: d5:94:2a:02:dd:a2:f2:7e:40:50:ea:94:78:09:e5:55:0d:3e: 52:11:0a:ad:a1:0a:74:a9:0b:57:53:04:4d:a4:ec:d1:1d:ca: 47:78:14:bf:a9:44:3b:e8:90:40:7d:c1:35:43:a0:cb:62:71: df:51:bb:0d:39:ea:d7:1e:5e:88:0d:5d:3e:aa:e4:5e:c1:13: 97:18:00:29:21:4b:81:56:50:f9:4f:ce:2a:00:72:3c:89:83: 50:5d:5e:9e:8b:de:ec:0e:65:2b:27:7c:02:4a:bd:2e:91:8a: 4c:49:d8:bb:f7:aa:02:ba:d1:e4:02:54:91:13:4e:32:f6:c7: 91:7d:ad:26:44:ca:64:5c:44:e4:28:cd:34:ff:02:46:3b:23: 9f:29:63:95:68:16:d6:e4:15:80:36:f9:5d:99:dd:86:6b:2a: 8c:4c:47:3f -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEXLPk89w0MKAaIjLsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQyZTIzZjUtMDMyYi00NjcwLThlMDUtYjRiMDQ3N2U0 Mzg4MB4XDTI0MDUwNzEzMDAzNVoXDTI0MDgwNTEzMDAzNVowLzEtMCsGA1UEAxMk ZDIxMzljZWItZjc3Yi00NjdjLWFmZjQtNDQwZmYyNWRjMDM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEbb+RSQbuTHc/2+L//so7uBwC0cRwPY1KOO qqFOsFv0/o7i1yUDJx1eR7uIFtZDICN5el5p41+yyYaH7/n2gEjpmWCYegTazO8Y EWUTqLz73Bp+zBlhNldNhg57AAwS4KeHsQKttkHIIsLnmaOwQbb9Z8RKc1OzAyFu ByLW6sE4CCsnseXvKUnWxVaRlDxxRERTuc+HldSHRu5r2XZ+R7xOH5AFFv0HGhJX aLPzpdvy3143UFrnzsEWpdR5ukMDEVzDoC1hqSH1uqAiIdqBu8zb5m7E5qEUfp2N LgAxGqp96GPss1jkIwo7ABYKEYb+fg93yALXp4e8iO1Xu+iGLQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFHBXYKWpUK0wdQrLkDVZKer1Gk1eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9jNDJl MjNmNS0wMzJiLTQ2NzAtOGUwNS1iNGIwNDc3ZTQzODgvOGE5Y2JhZTgtYjY0OS0z NDI4LWE2NWEtZGVlNzQxYmJmMmZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYzQyZTIzZjUtMDMyYi00NjcwLThl MDUtYjRiMDQ3N2U0Mzg4L2M0MmUyM2Y1LTAzMmItNDY3MC04ZTA1LWI0YjA0Nzdl NDM4OC5jcmwwHwYDVR0jBBgwFoAULmw543EUGIMpLEYN6ew4qofqfW8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9jNDJlMjNmNS0wMzJiLTQ2NzAtOGUwNS1iNGIw NDc3ZTQzODguY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwIUXAwQE x8MQMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBADjJqiSw+iovs6+iGIrgaPzOv6+NJN1oHfzIHHi/zHAJeLUu yn6DB5+ajiManldPpptICUJ5cA0q+PnywWSD1E9JxHfmkxPkjFPci6FvI3pre43i VD425+34QNWUKgLdovJ+QFDqlHgJ5VUNPlIRCq2hCnSpC1dTBE2k7NEdykd4FL+p RDvokEB9wTVDoMticd9Ruw056tceXogNXT6q5F7BE5cYACkhS4FWUPlPzioAcjyJ g1BdXp6L3uwOZSsnfAJKvS6RikxJ2Lv3qgK60eQCVJETTjL2x5F9rSZEymRcROQo zTT/AkY7I58pY5VoFtbkFYA2+V2Z3YZrKoxMRz8= -----END CERTIFICATE-----Generated at Wed May 22 20:14:50 2024 by rpki-client on console-ams.rpki-client.org