$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/be99669b-76e7-3a62-9151-901a36da86da.roa File: be99669b-76e7-3a62-9151-901a36da86da.roa (raw, json) Hash identifier: aHIXOu/E7VgqR7gloA91zX8PTGwCirdZhHBQu6XgiSc= Subject key identifier: FC:15:A2:99:50:31:E5:4B:18:B6:0E:11:2F:CA:64:77:17:E9:52:65 Certificate issuer: /CN=994b2ed8-1a2a-4bd1-b709-7479db7c4ea9 Certificate serial: 010D0C9F432858453317EBC550870186E4FED5C0 Authority key identifier: 90:7D:4E:BD:0C:A7:F5:DD:13:FF:42:95:1E:9A:F4:9B:33:E9:79:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/be99669b-76e7-3a62-9151-901a36da86da.roa Signing time: Thu 14 Mar 2024 01:00:25 +0000 ROA not before: Thu 14 Mar 2024 01:00:25 +0000 ROA not after: Wed 12 Jun 2024 01:00:25 +0000 asID: 212238 IP address blocks: 199.181.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 29 Apr 2024 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:33:17:eb:c5:50:87:01:86:e4:fe:d5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=994b2ed8-1a2a-4bd1-b709-7479db7c4ea9 Validity Not Before: Mar 14 01:00:25 2024 GMT Not After : Jun 12 01:00:25 2024 GMT Subject: CN=d8d57a6a-0a32-475d-a254-3a7c5b383f59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:45:26:d8:e8:b1:26:39:2d:e0:45:47:83:1d: 1b:e9:07:69:0e:c7:33:76:91:ad:c4:a9:ee:04:f9: fe:d6:9d:9a:01:61:76:c4:e8:ae:0c:6a:d7:9f:37: 30:96:fd:cd:b9:f8:14:c1:77:c8:a0:d4:92:12:31: 82:65:6d:1a:17:11:e4:45:b3:7f:94:90:2b:b1:68: ae:20:83:d3:28:a2:34:b4:58:6d:78:d9:dd:b7:e7: 03:83:b4:55:74:92:60:87:ae:ef:28:84:fe:84:e8: 4b:fd:7a:21:f1:67:50:25:79:e2:82:5c:3e:a7:32: c9:55:a9:89:bf:20:5f:83:c7:35:4c:20:9c:a1:a4: bd:26:7e:2a:b7:b5:91:e1:30:f2:97:23:eb:ff:81: 5b:c9:6a:c0:e6:f8:4f:fe:b0:21:dc:83:23:0b:82: 89:c1:a2:4e:19:8a:48:b4:09:55:89:71:6d:be:0d: 9e:02:2b:71:24:15:01:02:18:25:08:94:f1:1f:d0: 64:54:11:e1:be:19:31:19:b8:1a:52:21:8e:5f:8d: 2a:8e:f1:e4:57:6c:eb:a1:8d:de:ee:d8:86:60:af: 6c:f7:c6:4e:ee:1d:ba:e0:36:2e:5a:59:69:a7:ba: 28:56:dc:8a:86:a0:18:13:1a:81:57:c6:42:76:d2: 07:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:15:A2:99:50:31:E5:4B:18:B6:0E:11:2F:CA:64:77:17:E9:52:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/be99669b-76e7-3a62-9151-901a36da86da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.crl X509v3 Authority Key Identifier: keyid:90:7D:4E:BD:0C:A7:F5:DD:13:FF:42:95:1E:9A:F4:9B:33:E9:79:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer sbgp-ipAddrBlock: critical IPv4: 199.181.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:87:55:6e:2e:3c:41:d5:f2:1f:b8:15:78:ee:5a:86:ac:2c: e0:88:a9:1a:c1:d1:3b:52:5e:a7:b3:39:b0:79:3f:73:67:50: 38:c7:41:1e:dd:c6:a1:af:6f:1e:62:cc:63:c0:6c:1b:ba:92: fc:bd:c3:b7:ec:7d:f3:7c:9f:9a:c0:f3:a4:c5:6d:e7:6e:9a: d0:28:65:7f:86:3c:a9:c4:1c:a6:d6:b1:7d:93:67:23:d7:44: 71:6b:6e:a1:d0:78:5a:0b:ae:12:de:4e:00:f7:5c:5e:76:cd: d6:c4:99:62:7c:46:c3:36:88:6b:c6:88:41:27:7c:d6:af:0f: 95:6b:9c:30:90:55:54:3b:c3:61:dd:e7:94:c7:6f:cd:13:6d: 0a:b9:39:05:72:75:bb:4b:9e:02:74:df:1f:64:2e:9f:c2:aa: 1c:cf:44:9a:f0:96:f3:49:21:fe:1c:59:e7:f3:bb:9f:c9:1a: 47:48:c5:0d:d5:e8:e3:a1:df:57:a8:70:0e:1c:8a:bd:b1:7c: e4:d5:da:6e:81:51:62:d5:c9:64:92:ad:a9:8f:91:1a:8a:03: 42:54:5e:08:78:ba:db:1c:0e:43:35:e7:2d:fa:d1:3f:91:b6: bc:c2:e7:62:de:0f:0c:d0:64:80:90:54:8a:25:d1:13:7c:56: f3:c0:91:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUzF+vFUIcBhuT+1cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk0YjJlZDgtMWEyYS00YmQxLWI3MDktNzQ3OWRiN2M0 ZWE5MB4XDTI0MDMxNDAxMDAyNVoXDTI0MDYxMjAxMDAyNVowLzEtMCsGA1UEAxMk ZDhkNTdhNmEtMGEzMi00NzVkLWEyNTQtM2E3YzViMzgzZjU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjEUm2OixJjkt4EVHgx0b6QdpDsczdpGtxKnu BPn+1p2aAWF2xOiuDGrXnzcwlv3NufgUwXfIoNSSEjGCZW0aFxHkRbN/lJArsWiu IIPTKKI0tFhteNndt+cDg7RVdJJgh67vKIT+hOhL/Xoh8WdQJXniglw+pzLJVamJ vyBfg8c1TCCcoaS9Jn4qt7WR4TDylyPr/4FbyWrA5vhP/rAh3IMjC4KJwaJOGYpI tAlViXFtvg2eAitxJBUBAhglCJTxH9BkVBHhvhkxGbgaUiGOX40qjvHkV2zroY3e 7tiGYK9s98ZO7h264DYuWllpp7ooVtyKhqAYExqBV8ZCdtIHtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPwVoplQMeVLGLYOES/KZHcX6VJlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OTRi MmVkOC0xYTJhLTRiZDEtYjcwOS03NDc5ZGI3YzRlYTkvYmU5OTY2OWItNzZlNy0z YTYyLTkxNTEtOTAxYTM2ZGE4NmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTk0YjJlZDgtMWEyYS00YmQxLWI3 MDktNzQ3OWRiN2M0ZWE5Lzk5NGIyZWQ4LTFhMmEtNGJkMS1iNzA5LTc0NzlkYjdj NGVhOS5jcmwwHwYDVR0jBBgwFoAUkH1OvQyn9d0T/0KVHpr0mzPpeXwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85OTRiMmVkOC0xYTJhLTRiZDEtYjcwOS03NDc5 ZGI3YzRlYTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx7XvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAASHVW4uPEHV8h+4FXjuWoasLOCIqRrB0TtSXqezObB5P3NnUDjHQR7d xqGvbx5izGPAbBu6kvy9w7fsffN8n5rA86TFbedumtAoZX+GPKnEHKbWsX2TZyPX RHFrbqHQeFoLrhLeTgD3XF52zdbEmWJ8RsM2iGvGiEEnfNavD5VrnDCQVVQ7w2Hd 55THb80TbQq5OQVydbtLngJ03x9kLp/CqhzPRJrwlvNJIf4cWefzu5/JGkdIxQ3V 6OOh31eocA4cir2xfOTV2m6BUWLVyWSSramPkRqKA0JUXgh4utscDkM15y360T+R trzC52LeDwzQZICQVIol0RN8VvPAkaA= -----END CERTIFICATE-----Generated at Sat Apr 27 21:44:27 2024 by rpki-client on console-ams.rpki-client.org