$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56b96151-8a90-41ad-aefc-1091ab214a92/33ce6ede-9c40-3d7d-9178-caa155d72046.roa File: 33ce6ede-9c40-3d7d-9178-caa155d72046.roa (raw, json) Hash identifier: bQEFIPe6gMwsz7xkXmrhAl60gb+kPPQy1SN7ARIDXAU= Subject key identifier: 17:B9:64:C7:11:BB:1E:DC:11:AE:97:D7:20:32:A8:54:D9:1D:B5:C1 Certificate issuer: /CN=56b96151-8a90-41ad-aefc-1091ab214a92 Certificate serial: 010D0C9F43285844F5CAAE7EF3C8305E8C474280 Authority key identifier: DC:FC:BD:81:79:AC:17:F1:5F:B1:DD:0D:72:15:FA:F6:4F:1B:95:DF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56b96151-8a90-41ad-aefc-1091ab214a92.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56b96151-8a90-41ad-aefc-1091ab214a92/33ce6ede-9c40-3d7d-9178-caa155d72046.roa Signing time: Wed 21 Feb 2024 02:00:25 +0000 ROA not before: Wed 21 Feb 2024 02:00:25 +0000 ROA not after: Tue 21 May 2024 01:00:25 +0000 asID: 14618 IP address blocks: 199.91.188.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56b96151-8a90-41ad-aefc-1091ab214a92/56b96151-8a90-41ad-aefc-1091ab214a92.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56b96151-8a90-41ad-aefc-1091ab214a92/56b96151-8a90-41ad-aefc-1091ab214a92.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56b96151-8a90-41ad-aefc-1091ab214a92.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:f5:ca:ae:7e:f3:c8:30:5e:8c:47:42:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56b96151-8a90-41ad-aefc-1091ab214a92 Validity Not Before: Feb 21 02:00:25 2024 GMT Not After : May 21 01:00:25 2024 GMT Subject: CN=80103a7a-72f0-488a-b260-9f90e3314619 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:88:d9:19:3b:7f:d0:17:55:7d:69:f1:08:7b: 5b:08:4e:a6:2a:2a:00:e8:97:4c:f7:8c:b0:65:0b: 87:f3:cf:43:38:d4:10:e7:b1:2e:52:5d:13:c7:77: 56:23:22:bd:39:15:48:15:3f:2b:de:c6:02:82:50: 12:97:f2:3a:0d:a1:21:9e:97:0b:bc:b4:96:14:4f: 37:07:d6:a6:50:c7:c3:f9:f9:6c:f5:21:a9:3a:dd: 8d:d6:3f:1c:ab:e5:81:61:f5:9c:a2:c0:69:70:8e: 49:92:7b:8c:48:9c:da:c1:f2:85:30:c7:2b:a7:68: 4c:56:60:09:99:d1:86:0f:0a:ec:e8:64:fe:74:b5: 45:73:89:1b:62:0c:f4:e6:b7:52:50:67:b7:d7:87: 00:96:bd:1e:10:f1:69:dd:21:7d:04:bb:ea:45:d7: 17:71:27:36:df:29:77:42:35:d8:46:a5:2d:10:03: eb:64:86:6d:51:2f:33:44:91:af:19:c8:4c:af:2d: be:38:ab:df:63:7d:3c:ca:e8:2b:4e:37:f7:4a:9f: c7:64:4b:fb:e8:7c:4b:6d:cc:22:0f:d2:27:a0:20: 05:03:cf:3d:0a:5e:bb:d3:a4:22:6c:23:32:ec:92: 35:15:f7:0f:c5:dd:35:ce:41:8a:00:9b:84:46:49: 77:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:B9:64:C7:11:BB:1E:DC:11:AE:97:D7:20:32:A8:54:D9:1D:B5:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56b96151-8a90-41ad-aefc-1091ab214a92/33ce6ede-9c40-3d7d-9178-caa155d72046.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56b96151-8a90-41ad-aefc-1091ab214a92/56b96151-8a90-41ad-aefc-1091ab214a92.crl X509v3 Authority Key Identifier: keyid:DC:FC:BD:81:79:AC:17:F1:5F:B1:DD:0D:72:15:FA:F6:4F:1B:95:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56b96151-8a90-41ad-aefc-1091ab214a92.cer sbgp-ipAddrBlock: critical IPv4: 199.91.188.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:49:a2:7d:b4:be:3a:91:dd:ce:07:ca:79:7b:0e:5c:f9:50: da:cf:58:92:fb:d8:ba:28:00:6f:31:44:3c:4d:1b:e5:57:18: f0:82:7d:a4:a8:da:de:0c:95:07:d0:ba:ce:68:64:ba:c6:40: 28:04:3e:f0:98:d8:5d:78:1f:3d:b5:ac:b4:72:ed:40:67:07: 86:c9:3e:e7:87:27:49:15:fc:c9:2a:d8:1b:29:b5:d4:10:70: 5e:2d:4e:58:ff:5d:c9:4c:2f:71:7d:84:5f:6f:25:46:cf:bc: 1f:5f:e3:03:9d:23:fd:1e:30:ca:db:4b:e9:4f:c9:37:dc:d5: 31:2f:26:68:e2:c5:a2:c5:5c:40:74:39:57:37:59:1d:a0:db: 37:d7:0c:90:fa:f9:df:a0:82:41:38:b1:db:c7:6b:c3:2f:bc: 6e:3f:43:83:5c:99:aa:11:9a:5c:65:87:a7:b4:56:95:e7:21: a8:f4:07:20:27:01:ca:8d:33:0b:93:2c:f3:ac:d8:96:7d:2f: a7:92:eb:e4:9e:f7:51:79:2e:03:b6:56:d3:b5:25:26:c1:7c: e1:fc:11:e4:e5:98:f0:e7:92:ed:61:82:a1:06:35:d5:b8:91: 19:86:58:1e:15:0d:1a:cb:8e:ad:73:af:f5:7a:d9:27:b6:af: bd:8a:07:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWET1yq5+88gwXoxHQoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTZiOTYxNTEtOGE5MC00MWFkLWFlZmMtMTA5MWFiMjE0 YTkyMB4XDTI0MDIyMTAyMDAyNVoXDTI0MDUyMTAxMDAyNVowLzEtMCsGA1UEAxMk ODAxMDNhN2EtNzJmMC00ODhhLWIyNjAtOWY5MGUzMzE0NjE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4jZGTt/0BdVfWnxCHtbCE6mKioA6JdM94yw ZQuH889DONQQ57EuUl0Tx3dWIyK9ORVIFT8r3sYCglASl/I6DaEhnpcLvLSWFE83 B9amUMfD+fls9SGpOt2N1j8cq+WBYfWcosBpcI5JknuMSJzawfKFMMcrp2hMVmAJ mdGGDwrs6GT+dLVFc4kbYgz05rdSUGe314cAlr0eEPFp3SF9BLvqRdcXcSc23yl3 QjXYRqUtEAPrZIZtUS8zRJGvGchMry2+OKvfY308yugrTjf3Sp/HZEv76HxLbcwi D9InoCAFA889Cl6706QibCMy7JI1FfcPxd01zkGKAJuERkl34wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBe5ZMcRux7cEa6X1yAyqFTZHbXBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81NmI5 NjE1MS04YTkwLTQxYWQtYWVmYy0xMDkxYWIyMTRhOTIvMzNjZTZlZGUtOWM0MC0z ZDdkLTkxNzgtY2FhMTU1ZDcyMDQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNTZiOTYxNTEtOGE5MC00MWFkLWFl ZmMtMTA5MWFiMjE0YTkyLzU2Yjk2MTUxLThhOTAtNDFhZC1hZWZjLTEwOTFhYjIx NGE5Mi5jcmwwHwYDVR0jBBgwFoAU3Py9gXmsF/Ffsd0NchX69k8bld8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81NmI5NjE1MS04YTkwLTQxYWQtYWVmYy0xMDkx YWIyMTRhOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx1u8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACRJon20vjqR3c4Hynl7Dlz5UNrPWJL72LooAG8xRDxNG+VXGPCCfaSo 2t4MlQfQus5oZLrGQCgEPvCY2F14Hz21rLRy7UBnB4bJPueHJ0kV/Mkq2BsptdQQ cF4tTlj/XclML3F9hF9vJUbPvB9f4wOdI/0eMMrbS+lPyTfc1TEvJmjixaLFXEB0 OVc3WR2g2zfXDJD6+d+ggkE4sdvHa8MvvG4/Q4NcmaoRmlxlh6e0VpXnIaj0ByAn AcqNMwuTLPOs2JZ9L6eS6+Se91F5LgO2VtO1JSbBfOH8EeTlmPDnku1hgqEGNdW4 kRmGWB4VDRrLjq1zr/V62Se2r72KB+0= -----END CERTIFICATE-----Generated at Wed May 1 15:59:55 2024 by rpki-client on console-ams.rpki-client.org