$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/495695bd-2a52-32cc-aa09-a0dc9b1f2b20.roa File: 495695bd-2a52-32cc-aa09-a0dc9b1f2b20.roa (raw, json) Hash identifier: mQ6pyH0WWnhyh5Rww8xw+VWSRNwERQPtxqHDRfNtGxo= Subject key identifier: CD:F9:E1:18:4D:BE:AB:3B:1A:8F:D8:9F:C8:DC:27:DA:19:0D:97:F1 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F43285844F73007D64CA05F22A2EB9F60 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/495695bd-2a52-32cc-aa09-a0dc9b1f2b20.roa Signing time: Wed 21 Feb 2024 14:00:32 +0000 ROA not before: Wed 21 Feb 2024 14:00:32 +0000 ROA not after: Tue 21 May 2024 13:00:32 +0000 asID: 14618 IP address blocks: 173.199.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:f7:30:07:d6:4c:a0:5f:22:a2:eb:9f:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Feb 21 14:00:32 2024 GMT Not After : May 21 13:00:32 2024 GMT Subject: CN=6f5a93b7-a46e-453a-bc2a-c3ac7cfbdeb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:97:eb:ae:31:c8:f2:f4:8c:a7:2a:19:82:42: 14:e8:3d:1e:67:ce:2f:9c:ec:71:ed:c3:d3:f8:d4: 0a:2c:58:5e:e9:75:47:d6:2d:64:39:d6:c7:0b:6e: 82:18:22:7d:f7:3c:33:e8:91:a3:99:9f:06:04:ba: e9:25:01:a2:f0:b9:89:d5:ed:a8:ac:5b:55:a8:fd: 3e:df:cf:a8:23:16:28:de:aa:c3:32:de:ca:2e:3d: db:94:e5:e3:ac:d8:a1:cb:f2:d4:18:2d:4a:7b:a7: 07:be:89:71:5d:4e:67:9f:93:f3:09:f7:0f:41:3d: 06:96:b6:36:e3:90:f4:47:ba:25:4f:0d:5e:e6:18: 66:99:d6:8d:17:65:1b:f5:0e:89:d9:fb:4a:01:48: b6:35:2d:3e:2a:16:45:aa:89:47:40:33:17:d7:7f: 1d:d0:fc:e9:94:32:c7:17:a4:10:af:6e:d1:14:bd: 6e:b2:34:5b:b1:aa:d3:36:66:8b:e8:33:63:99:e9: 2b:da:6a:29:fc:8b:97:b1:4a:9e:7e:03:dc:a7:bf: 65:0a:e9:6d:e8:4a:96:2f:f2:97:cb:5d:0f:26:9d: 67:c5:e7:ee:d7:5b:ed:37:ed:11:b1:2f:2a:e1:d0: d3:25:62:40:3d:94:d2:26:b2:c6:c0:1a:5f:1b:15: 38:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:F9:E1:18:4D:BE:AB:3B:1A:8F:D8:9F:C8:DC:27:DA:19:0D:97:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/495695bd-2a52-32cc-aa09-a0dc9b1f2b20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 173.199.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:f1:82:56:a2:00:87:36:31:79:13:0f:dd:d1:84:49:36:89: 89:09:90:d9:44:6d:b3:6c:bb:7d:a8:bd:ed:2c:bd:00:d8:5a: 0b:68:1d:2e:24:99:7c:ec:62:31:31:13:f2:6a:70:b2:d6:be: 2d:07:98:6b:b7:3f:c5:ac:84:27:3c:97:48:39:b8:2d:68:63: 8e:cd:70:03:0e:ac:04:ea:a6:10:ca:ac:f1:36:fb:b6:91:de: a2:2b:c3:19:7b:2b:98:fc:ee:92:fb:15:4d:fb:82:52:fe:4e: 39:23:c1:c1:92:05:8f:31:95:d1:2b:58:8a:db:e9:e5:5f:e4: 05:7c:b8:26:cb:17:cd:f4:47:8b:b5:1d:08:f2:8b:e3:00:12: 5c:6c:f7:ab:23:24:94:19:7e:6a:3f:8b:be:3d:4a:27:1f:60: 1d:ed:64:f4:df:80:6b:a8:cd:65:cf:28:4b:3d:50:e1:0b:b5: 91:f4:10:90:65:00:8a:68:f4:00:ad:5e:79:90:f8:33:3e:8d: 41:2b:e7:55:5f:26:d2:be:ec:65:95:3a:b5:68:2f:fa:3a:9f: 0a:d1:ac:ea:f2:46:cb:0c:a6:b2:5e:49:17:56:1c:7c:aa:4c: 1e:f8:21:54:3e:7c:b0:58:72:fb:b4:66:c2:96:08:93:71:6c: 57:99:3c:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWET3MAfWTKBfIqLrn2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI0MDIyMTE0MDAzMloXDTI0MDUyMTEzMDAzMlowLzEtMCsGA1UEAxMk NmY1YTkzYjctYTQ2ZS00NTNhLWJjMmEtYzNhYzdjZmJkZWI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZfrrjHI8vSMpyoZgkIU6D0eZ84vnOxx7cPT +NQKLFhe6XVH1i1kOdbHC26CGCJ99zwz6JGjmZ8GBLrpJQGi8LmJ1e2orFtVqP0+ 38+oIxYo3qrDMt7KLj3blOXjrNihy/LUGC1Ke6cHvolxXU5nn5PzCfcPQT0GlrY2 45D0R7olTw1e5hhmmdaNF2Ub9Q6J2ftKAUi2NS0+KhZFqolHQDMX138d0PzplDLH F6QQr27RFL1usjRbsarTNmaL6DNjmekr2mop/IuXsUqefgPcp79lCult6EqWL/KX y10PJp1nxefu11vtN+0RsS8q4dDTJWJAPZTSJrLGwBpfGxU44QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM354RhNvqs7Go/Yn8jcJ9oZDZfxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvNDk1Njk1YmQtMmE1Mi0z MmNjLWFhMDktYTBkYzliMWYyYjIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcckMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAnxglaiAIc2MXkTD93RhEk2iYkJkNlEbbNsu32ove0svQDYWgtoHS4k mXzsYjExE/JqcLLWvi0HmGu3P8WshCc8l0g5uC1oY47NcAMOrATqphDKrPE2+7aR 3qIrwxl7K5j87pL7FU37glL+TjkjwcGSBY8xldErWIrb6eVf5AV8uCbLF830R4u1 HQjyi+MAElxs96sjJJQZfmo/i749SicfYB3tZPTfgGuozWXPKEs9UOELtZH0EJBl AIpo9ACtXnmQ+DM+jUEr51VfJtK+7GWVOrVoL/o6nwrRrOryRssMprJeSRdWHHyq TB74IVQ+fLBYcvu0ZsKWCJNxbFeZPB0= -----END CERTIFICATE-----Generated at Wed May 1 22:28:50 2024 by rpki-client on console-fra.rpki-client.org