$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/91c894d6-b991-4966-bec4-7c58dac779b5/ab708923-0613-3a2c-b170-cadae0fe2f49.roa File: ab708923-0613-3a2c-b170-cadae0fe2f49.roa (raw, json) Hash identifier: DPaPss2rxBC4byzl+8PSSUXcLZ+uRrUIouvQrdBZUek= Subject key identifier: B8:72:36:44:A8:A7:80:00:0B:20:EF:45:44:9F:D2:AC:57:1E:1B:5F Certificate issuer: /CN=91c894d6-b991-4966-bec4-7c58dac779b5 Certificate serial: 010D0C9F432858456C530E8DAFEB31D43292AEC0 Authority key identifier: 13:B2:2C:28:79:5A:A5:CA:BB:C0:79:BF:76:C3:D6:8B:67:23:7B:C2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/91c894d6-b991-4966-bec4-7c58dac779b5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/91c894d6-b991-4966-bec4-7c58dac779b5/ab708923-0613-3a2c-b170-cadae0fe2f49.roa Signing time: Wed 03 Apr 2024 13:00:37 +0000 ROA not before: Wed 03 Apr 2024 13:00:37 +0000 ROA not after: Tue 02 Jul 2024 13:00:37 +0000 asID: 16509 IP address blocks: 199.87.144.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/91c894d6-b991-4966-bec4-7c58dac779b5/91c894d6-b991-4966-bec4-7c58dac779b5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/91c894d6-b991-4966-bec4-7c58dac779b5/91c894d6-b991-4966-bec4-7c58dac779b5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/91c894d6-b991-4966-bec4-7c58dac779b5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 04 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:6c:53:0e:8d:af:eb:31:d4:32:92:ae:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91c894d6-b991-4966-bec4-7c58dac779b5 Validity Not Before: Apr 3 13:00:37 2024 GMT Not After : Jul 2 13:00:37 2024 GMT Subject: CN=31606d45-690b-4e7f-9f45-1af6c7123b7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b9:3a:01:19:97:4c:6e:9e:88:e7:07:41:17: 01:4b:3c:91:fc:3d:32:3c:74:28:09:ec:d0:54:67: 94:dc:b0:9e:b0:9f:c5:57:45:33:17:56:26:a7:2d: 52:a8:48:e8:a8:ba:3d:c4:f5:fb:c9:5a:29:d7:36: 14:5c:ac:ea:9b:65:af:e0:12:c6:1c:b4:09:08:3f: b4:03:b2:ce:82:74:54:cd:d8:a0:ac:cc:34:0e:89: e0:25:78:7f:4d:44:55:9d:c0:6b:19:ed:f2:90:51: f0:2e:be:8e:c7:46:ac:6e:f8:de:71:81:17:f8:08: 07:49:84:24:75:30:2b:44:80:95:75:5b:24:12:a1: 04:64:bb:ed:b8:44:08:f6:c4:00:7c:46:38:19:28: ea:f2:0e:27:96:03:8c:9f:38:8c:0f:bc:8e:52:56: 20:90:95:1f:6b:9f:e3:27:ce:1e:9e:53:3f:ce:da: ae:86:c8:31:71:80:56:af:5a:46:4e:8d:00:37:8f: a4:ec:f9:82:77:e7:0d:b1:ca:54:78:ca:6f:79:37: 39:36:c0:dc:c1:e2:2c:57:6a:21:6e:c1:ec:a7:28: 1f:cb:06:11:65:34:49:92:ee:ec:9b:aa:4c:d0:f2: d6:47:c0:a0:83:70:07:d7:58:f0:90:1e:c8:2d:b5: 18:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:72:36:44:A8:A7:80:00:0B:20:EF:45:44:9F:D2:AC:57:1E:1B:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/91c894d6-b991-4966-bec4-7c58dac779b5/ab708923-0613-3a2c-b170-cadae0fe2f49.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/91c894d6-b991-4966-bec4-7c58dac779b5/91c894d6-b991-4966-bec4-7c58dac779b5.crl X509v3 Authority Key Identifier: keyid:13:B2:2C:28:79:5A:A5:CA:BB:C0:79:BF:76:C3:D6:8B:67:23:7B:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/91c894d6-b991-4966-bec4-7c58dac779b5.cer sbgp-ipAddrBlock: critical IPv4: 199.87.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:f2:97:f2:2e:70:70:f1:a3:31:8c:49:9b:5e:98:2b:4e:93: e4:bb:2e:9d:72:4a:0e:51:ab:09:65:c2:e9:16:33:0f:b4:07: 3b:a9:33:79:e9:b5:e7:cb:8c:47:51:eb:b3:63:23:a3:3f:88: d0:2e:e9:1c:14:54:a6:37:b0:d0:30:d6:b9:bb:27:7c:85:2f: fb:e8:15:89:e2:9f:ee:73:bd:57:80:69:de:2c:60:95:14:e1: 0b:9d:06:54:28:77:1e:94:3f:cc:58:9d:ca:8e:61:cd:c8:38: 22:77:c3:89:df:c1:62:cc:0e:ef:8c:3a:97:20:76:38:bb:42: 72:bf:b4:71:bf:81:1d:d6:b9:91:43:88:b1:28:90:39:cc:0f: e7:60:99:04:31:3c:d3:54:b7:ab:da:0d:78:aa:5c:da:42:fc: ce:d9:ad:ec:17:73:8c:75:f0:46:41:45:a7:47:76:28:d1:19: 42:53:62:e8:e6:98:b3:fc:01:47:be:11:20:e6:2c:f3:30:50: 41:5d:aa:19:3d:eb:a4:c1:06:d3:a3:ba:60:05:60:18:8e:5a: dc:10:f3:22:c3:07:63:63:18:b2:64:7e:5c:c3:fb:a8:bc:36: 32:31:0e:66:c8:a6:93:16:42:32:7f:bf:6c:d8:32:25:6a:bc: 40:17:a8:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVsUw6Nr+sx1DKSrsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTFjODk0ZDYtYjk5MS00OTY2LWJlYzQtN2M1OGRhYzc3 OWI1MB4XDTI0MDQwMzEzMDAzN1oXDTI0MDcwMjEzMDAzN1owLzEtMCsGA1UEAxMk MzE2MDZkNDUtNjkwYi00ZTdmLTlmNDUtMWFmNmM3MTIzYjdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbk6ARmXTG6eiOcHQRcBSzyR/D0yPHQoCezQ VGeU3LCesJ/FV0UzF1Ympy1SqEjoqLo9xPX7yVop1zYUXKzqm2Wv4BLGHLQJCD+0 A7LOgnRUzdigrMw0DongJXh/TURVncBrGe3ykFHwLr6Ox0asbvjecYEX+AgHSYQk dTArRICVdVskEqEEZLvtuEQI9sQAfEY4GSjq8g4nlgOMnziMD7yOUlYgkJUfa5/j J84enlM/ztquhsgxcYBWr1pGTo0AN4+k7PmCd+cNscpUeMpveTc5NsDcweIsV2oh bsHspygfywYRZTRJku7sm6pM0PLWR8Cgg3AH11jwkB7ILbUY1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLhyNkSop4AACyDvRUSf0qxXHhtfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MWM4 OTRkNi1iOTkxLTQ5NjYtYmVjNC03YzU4ZGFjNzc5YjUvYWI3MDg5MjMtMDYxMy0z YTJjLWIxNzAtY2FkYWUwZmUyZjQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTFjODk0ZDYtYjk5MS00OTY2LWJl YzQtN2M1OGRhYzc3OWI1LzkxYzg5NGQ2LWI5OTEtNDk2Ni1iZWM0LTdjNThkYWM3 NzliNS5jcmwwHwYDVR0jBBgwFoAUE7IsKHlapcq7wHm/dsPWi2cje8IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MWM4OTRkNi1iOTkxLTQ5NjYtYmVjNC03YzU4 ZGFjNzc5YjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx1eQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFzyl/IucHDxozGMSZtemCtOk+S7Lp1ySg5RqwllwukWMw+0BzupM3np tefLjEdR67NjI6M/iNAu6RwUVKY3sNAw1rm7J3yFL/voFYnin+5zvVeAad4sYJUU 4QudBlQodx6UP8xYncqOYc3IOCJ3w4nfwWLMDu+MOpcgdji7QnK/tHG/gR3WuZFD iLEokDnMD+dgmQQxPNNUt6vaDXiqXNpC/M7ZrewXc4x18EZBRadHdijRGUJTYujm mLP8AUe+ESDmLPMwUEFdqhk966TBBtOjumAFYBiOWtwQ8yLDB2NjGLJkflzD+6i8 NjIxDmbIppMWQjJ/v2zYMiVqvEAXqAM= -----END CERTIFICATE-----Generated at Thu May 2 14:59:58 2024 by rpki-client on console-fra.rpki-client.org