$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a60bbee-04d5-4806-9055-a09c70ce8f2b/ae8c8fa6-957c-379d-8e86-602baa8282b0.roa File: ae8c8fa6-957c-379d-8e86-602baa8282b0.roa (raw, json) Hash identifier: Dkc7RFRwQGJ+74hqbSpjCtLalNqZXR0WXifjspEwK3Y= Subject key identifier: 59:43:E2:57:0C:DC:8D:9F:8F:AD:A7:2A:05:AB:48:2B:C9:22:E0:C9 Certificate issuer: /CN=4a60bbee-04d5-4806-9055-a09c70ce8f2b Certificate serial: 010D0C9F4328584523DAFA4E6DFBF31160A0C080 Authority key identifier: BA:C0:A5:A5:2B:19:03:F8:61:E2:8B:40:F8:72:6A:05:E7:34:8D:95 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a60bbee-04d5-4806-9055-a09c70ce8f2b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a60bbee-04d5-4806-9055-a09c70ce8f2b/ae8c8fa6-957c-379d-8e86-602baa8282b0.roa Signing time: Fri 08 Mar 2024 14:00:30 +0000 ROA not before: Fri 08 Mar 2024 14:00:30 +0000 ROA not after: Thu 06 Jun 2024 13:00:30 +0000 asID: 16509 IP address blocks: 199.4.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a60bbee-04d5-4806-9055-a09c70ce8f2b/4a60bbee-04d5-4806-9055-a09c70ce8f2b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a60bbee-04d5-4806-9055-a09c70ce8f2b/4a60bbee-04d5-4806-9055-a09c70ce8f2b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a60bbee-04d5-4806-9055-a09c70ce8f2b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 05 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:23:da:fa:4e:6d:fb:f3:11:60:a0:c0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a60bbee-04d5-4806-9055-a09c70ce8f2b Validity Not Before: Mar 8 14:00:30 2024 GMT Not After : Jun 6 13:00:30 2024 GMT Subject: CN=00966d07-5adf-4c2b-abf4-185c9822dae7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:41:98:85:f8:21:c2:05:97:34:6b:ec:08:eb: cd:05:1d:97:73:38:15:01:38:1b:a0:fe:f0:e2:42: b1:6e:91:97:90:1c:7b:e8:eb:93:04:76:67:95:9a: 2b:48:f6:dc:42:55:d1:bb:6f:7b:98:21:dd:f8:4b: fd:ce:ef:af:59:74:c1:ca:4f:9d:21:e5:e3:ad:ba: 71:d2:45:1f:46:79:a0:44:3c:8e:a4:aa:6c:4c:03: 13:70:0b:d2:ac:a7:1e:b4:50:75:b4:f1:f0:a6:6f: 8e:a9:1e:8c:fc:c9:5f:9c:58:ed:04:1e:ba:7d:44: b1:ef:bf:87:c2:91:c3:20:11:1c:bf:78:45:db:d8: e6:91:10:ee:54:38:31:23:3d:74:76:12:57:a3:99: c2:1a:fb:d2:b5:5d:5d:13:c4:9f:12:35:d7:a5:7e: 81:e3:07:a6:49:b1:d8:8f:8f:01:4a:40:75:c2:38: 6d:6e:81:3f:9d:46:89:a6:aa:8c:d1:82:7b:6b:5b: c6:79:20:45:6b:2e:d7:dd:21:0f:c4:7e:ca:d4:dc: d7:01:bb:20:b3:8b:d4:28:0c:df:94:3f:42:de:62: 55:f9:d0:0f:55:2e:e7:4f:d2:b9:70:2f:6d:ab:cb: 70:b2:2c:1a:db:6f:72:4b:b0:5c:06:73:75:3d:cb: 23:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:43:E2:57:0C:DC:8D:9F:8F:AD:A7:2A:05:AB:48:2B:C9:22:E0:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a60bbee-04d5-4806-9055-a09c70ce8f2b/ae8c8fa6-957c-379d-8e86-602baa8282b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a60bbee-04d5-4806-9055-a09c70ce8f2b/4a60bbee-04d5-4806-9055-a09c70ce8f2b.crl X509v3 Authority Key Identifier: keyid:BA:C0:A5:A5:2B:19:03:F8:61:E2:8B:40:F8:72:6A:05:E7:34:8D:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a60bbee-04d5-4806-9055-a09c70ce8f2b.cer sbgp-ipAddrBlock: critical IPv4: 199.4.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:a2:7c:d7:54:1d:4a:d9:34:ec:bd:6f:c1:93:be:06:a9:22: e5:1c:e8:2a:49:bd:d2:fc:9a:ba:6c:f6:7f:88:bc:8e:b3:9a: 06:cd:c4:8e:b0:62:33:0f:b8:3a:49:15:d7:76:a4:9e:f6:9d: d4:05:55:03:70:25:1a:47:57:70:9f:b2:0e:e3:04:ce:11:b8: a8:17:9a:fa:af:d4:87:e0:4b:6a:bc:58:8e:4c:66:11:96:c7: 7e:f2:02:d5:55:66:e3:ab:f9:a3:32:be:39:d7:06:d7:58:1a: b2:f2:06:92:3a:96:12:72:5a:fa:63:c4:ee:62:df:a0:f6:f2: c2:db:e9:67:4b:75:84:08:92:ea:84:d9:28:b9:ff:f5:03:c6: ec:5e:15:1d:04:2c:d1:7e:8d:11:57:d8:2b:18:34:58:be:0f: a7:fc:2b:84:da:67:c7:05:e9:35:bb:b5:20:ab:61:de:95:df: 4a:9b:2a:0e:5d:8e:59:e2:25:7a:83:f8:83:a2:bb:fb:a1:53: 10:0d:4c:00:1c:65:bf:e9:d2:74:15:f5:83:7c:98:82:bd:03: 6e:de:64:aa:75:9a:01:09:81:b5:a0:56:3e:b1:38:eb:b0:ed: 34:9e:2f:13:96:ae:f6:6f:66:51:c3:b4:94:b4:c7:99:58:57: 51:2e:3b:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUj2vpObfvzEWCgwIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGE2MGJiZWUtMDRkNS00ODA2LTkwNTUtYTA5YzcwY2U4 ZjJiMB4XDTI0MDMwODE0MDAzMFoXDTI0MDYwNjEzMDAzMFowLzEtMCsGA1UEAxMk MDA5NjZkMDctNWFkZi00YzJiLWFiZjQtMTg1Yzk4MjJkYWU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlUGYhfghwgWXNGvsCOvNBR2XczgVATgboP7w 4kKxbpGXkBx76OuTBHZnlZorSPbcQlXRu297mCHd+Ev9zu+vWXTByk+dIeXjrbpx 0kUfRnmgRDyOpKpsTAMTcAvSrKcetFB1tPHwpm+OqR6M/MlfnFjtBB66fUSx77+H wpHDIBEcv3hF29jmkRDuVDgxIz10dhJXo5nCGvvStV1dE8SfEjXXpX6B4wemSbHY j48BSkB1wjhtboE/nUaJpqqM0YJ7a1vGeSBFay7X3SEPxH7K1NzXAbsgs4vUKAzf lD9C3mJV+dAPVS7nT9K5cC9tq8twsiwa229yS7BcBnN1PcsjwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFlD4lcM3I2fj62nKgWrSCvJIuDJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80YTYw YmJlZS0wNGQ1LTQ4MDYtOTA1NS1hMDljNzBjZThmMmIvYWU4YzhmYTYtOTU3Yy0z NzlkLThlODYtNjAyYmFhODI4MmIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNGE2MGJiZWUtMDRkNS00ODA2LTkw NTUtYTA5YzcwY2U4ZjJiLzRhNjBiYmVlLTA0ZDUtNDgwNi05MDU1LWEwOWM3MGNl OGYyYi5jcmwwHwYDVR0jBBgwFoAUusClpSsZA/hh4otA+HJqBec0jZUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80YTYwYmJlZS0wNGQ1LTQ4MDYtOTA1NS1hMDlj NzBjZThmMmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwSHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGSifNdUHUrZNOy9b8GTvgapIuUc6CpJvdL8mrps9n+IvI6zmgbNxI6w YjMPuDpJFdd2pJ72ndQFVQNwJRpHV3Cfsg7jBM4RuKgXmvqv1IfgS2q8WI5MZhGW x37yAtVVZuOr+aMyvjnXBtdYGrLyBpI6lhJyWvpjxO5i36D28sLb6WdLdYQIkuqE 2Si5//UDxuxeFR0ELNF+jRFX2CsYNFi+D6f8K4TaZ8cF6TW7tSCrYd6V30qbKg5d jlniJXqD+IOiu/uhUxANTAAcZb/p0nQV9YN8mIK9A27eZKp1mgEJgbWgVj6xOOuw 7TSeLxOWrvZvZlHDtJS0x5lYV1EuOwY= -----END CERTIFICATE-----Generated at Thu May 2 15:00:15 2024 by rpki-client on console-ams.rpki-client.org