$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323/4049b2cc-3517-376c-bb5b-5b5249957e1e.roa File: 4049b2cc-3517-376c-bb5b-5b5249957e1e.roa (raw, json) Hash identifier: sXKNAv2BCz/L5Kl+7W+DN4HTTBljltRvCDiqfLbOlIY= Subject key identifier: 22:76:EE:A3:A5:17:05:EF:08:C1:ED:4F:1B:FB:04:5D:68:33:92:FF Certificate issuer: /CN=2d00478e-6a9e-4570-970a-f0a5baefc323 Certificate serial: 010D0C9F43285845F253ED208D975D52AA6BE900 Authority key identifier: 43:02:31:2F:E6:67:48:11:3A:0F:60:A4:03:91:D9:D5:01:66:40:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323/4049b2cc-3517-376c-bb5b-5b5249957e1e.roa Signing time: Tue 21 May 2024 13:00:34 +0000 ROA not before: Tue 21 May 2024 13:00:34 +0000 ROA not after: Mon 19 Aug 2024 13:00:34 +0000 asID: 7850 IP address blocks: 198.187.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323/2d00478e-6a9e-4570-970a-f0a5baefc323.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323/2d00478e-6a9e-4570-970a-f0a5baefc323.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:f2:53:ed:20:8d:97:5d:52:aa:6b:e9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d00478e-6a9e-4570-970a-f0a5baefc323 Validity Not Before: May 21 13:00:34 2024 GMT Not After : Aug 19 13:00:34 2024 GMT Subject: CN=b39db8ce-bf24-4409-9f10-0ec0e2f2ca48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:e7:3b:fc:74:b7:41:84:be:4f:f5:2e:d1:80: e7:38:89:75:7e:93:7a:75:04:05:b7:84:43:48:3e: 44:d3:eb:b6:34:8c:e8:9b:38:c8:df:a4:28:ca:91: e4:77:53:91:4b:fc:36:a5:5c:2f:42:c4:53:0c:39: d0:bf:9c:32:39:f4:28:be:d4:e6:46:f4:34:5d:45: 3b:6a:d1:99:11:4b:47:cd:21:00:27:4a:1b:d9:6e: df:cb:44:aa:b7:b4:ce:5c:7d:20:53:fb:de:70:2e: 3a:c2:0b:2b:4c:08:64:99:ff:06:30:9b:c5:6d:3e: 19:c5:f6:ed:c2:02:fd:8c:d3:22:2e:53:a7:65:9c: e3:c3:bd:ba:43:bd:92:ef:7a:44:70:3e:7f:fb:7a: 0b:bf:c6:86:9b:ac:a1:7a:ee:42:5a:8e:f3:e2:f7: e2:e0:64:22:a3:7d:2b:8c:5c:16:b9:00:97:10:6e: 8a:88:c5:89:94:93:b4:e2:b7:0d:5a:72:ff:fd:75: 73:5f:4e:ab:e2:1f:c3:5d:be:d9:34:2b:61:05:74: da:55:4e:2c:e7:8b:77:95:ea:97:b4:8d:9d:c2:cd: e2:19:9e:58:38:bf:b6:a8:99:a4:e5:d2:ea:6e:0e: 1e:09:29:45:07:73:42:97:87:20:ee:9c:fe:9e:a2: 29:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:76:EE:A3:A5:17:05:EF:08:C1:ED:4F:1B:FB:04:5D:68:33:92:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323/4049b2cc-3517-376c-bb5b-5b5249957e1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323/2d00478e-6a9e-4570-970a-f0a5baefc323.crl X509v3 Authority Key Identifier: keyid:43:02:31:2F:E6:67:48:11:3A:0F:60:A4:03:91:D9:D5:01:66:40:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323.cer sbgp-ipAddrBlock: critical IPv4: 198.187.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:da:52:bd:19:b5:9a:c2:64:4f:c0:2c:cc:c0:e4:85:4f:5e: 51:ef:ac:cb:6a:59:cc:5f:45:f9:a3:e7:17:a2:cc:ad:b0:1c: 47:16:90:29:56:bf:26:da:84:e7:e9:cd:61:bb:9f:2d:e1:cc: 12:01:38:4f:3a:50:41:01:b6:23:00:fa:e9:1a:a2:b2:0f:9f: f6:48:6e:2d:ae:2f:4e:e9:cb:91:7f:6e:00:b1:7f:b7:31:e1: 9e:7e:f1:3d:83:85:26:7c:d1:9c:c4:60:ed:b6:18:ae:30:5e: 0a:5b:17:10:69:21:d7:71:15:61:77:f8:d6:54:9c:d8:22:33: 59:84:38:c6:a8:da:84:b1:46:16:21:3a:01:67:d6:87:ce:30: 07:64:7a:f5:72:5b:24:28:30:46:ed:68:ae:9e:f4:68:55:56: 9e:17:e5:32:e3:3d:13:d9:ad:44:5e:6e:55:0d:e0:47:99:e0: 67:f1:31:22:47:92:b4:0c:55:df:8d:07:07:da:b7:57:1a:fe: 32:52:5f:88:4a:c7:49:ad:89:bc:d1:d7:57:58:50:99:92:56: 6a:b0:bd:8a:57:3a:99:82:1b:ec:81:52:e3:66:9d:b9:19:c1: a1:77:5a:cc:41:f6:39:6f:44:3e:cb:05:6a:7c:82:8f:71:e1: bb:5a:14:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXyU+0gjZddUqpr6QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmQwMDQ3OGUtNmE5ZS00NTcwLTk3MGEtZjBhNWJhZWZj MzIzMB4XDTI0MDUyMTEzMDAzNFoXDTI0MDgxOTEzMDAzNFowLzEtMCsGA1UEAxMk YjM5ZGI4Y2UtYmYyNC00NDA5LTlmMTAtMGVjMGUyZjJjYTQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Oc7/HS3QYS+T/Uu0YDnOIl1fpN6dQQFt4RD SD5E0+u2NIzomzjI36QoypHkd1ORS/w2pVwvQsRTDDnQv5wyOfQovtTmRvQ0XUU7 atGZEUtHzSEAJ0ob2W7fy0Sqt7TOXH0gU/vecC46wgsrTAhkmf8GMJvFbT4Zxfbt wgL9jNMiLlOnZZzjw726Q72S73pEcD5/+3oLv8aGm6yheu5CWo7z4vfi4GQio30r jFwWuQCXEG6KiMWJlJO04rcNWnL//XVzX06r4h/DXb7ZNCthBXTaVU4s54t3leqX tI2dws3iGZ5YOL+2qJmk5dLqbg4eCSlFB3NCl4cg7pz+nqIpWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCJ27qOlFwXvCMHtTxv7BF1oM5L/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yZDAw NDc4ZS02YTllLTQ1NzAtOTcwYS1mMGE1YmFlZmMzMjMvNDA0OWIyY2MtMzUxNy0z NzZjLWJiNWItNWI1MjQ5OTU3ZTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMmQwMDQ3OGUtNmE5ZS00NTcwLTk3 MGEtZjBhNWJhZWZjMzIzLzJkMDA0NzhlLTZhOWUtNDU3MC05NzBhLWYwYTViYWVm YzMyMy5jcmwwHwYDVR0jBBgwFoAUQwIxL+ZnSBE6D2CkA5HZ1QFmQPgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yZDAwNDc4ZS02YTllLTQ1NzAtOTcwYS1mMGE1 YmFlZmMzMjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxrv9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHTaUr0ZtZrCZE/ALMzA5IVPXlHvrMtqWcxfRfmj5xeizK2wHEcWkClW vybahOfpzWG7ny3hzBIBOE86UEEBtiMA+ukaorIPn/ZIbi2uL07py5F/bgCxf7cx 4Z5+8T2DhSZ80ZzEYO22GK4wXgpbFxBpIddxFWF3+NZUnNgiM1mEOMao2oSxRhYh OgFn1ofOMAdkevVyWyQoMEbtaK6e9GhVVp4X5TLjPRPZrUReblUN4EeZ4GfxMSJH krQMVd+NBwfat1ca/jJSX4hKx0mtibzR11dYUJmSVmqwvYpXOpmCG+yBUuNmnbkZ waF3WsxB9jlvRD7LBWp8go9x4btaFKo= -----END CERTIFICATE-----Generated at Wed May 22 07:21:29 2024 by rpki-client on console-ams.rpki-client.org