$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/aa5922ce-6574-311d-bc01-e66125efb577.roa File: aa5922ce-6574-311d-bc01-e66125efb577.roa (raw, json) Hash identifier: iG/apeFO/dE5ZgGtsFY5kLZWkiQNsiavr0ZXdpC7y6I= Subject key identifier: 0A:08:00:36:D8:AB:C9:97:42:1F:B9:09:B9:4D:7B:C8:67:4C:97:20 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F432858454AF1CB62B8BB9BE37E7FF040 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/aa5922ce-6574-311d-bc01-e66125efb577.roa Signing time: Fri 22 Mar 2024 14:03:05 +0000 ROA not before: Fri 22 Mar 2024 14:03:05 +0000 ROA not after: Thu 20 Jun 2024 14:03:05 +0000 asID: 31898 IP address blocks: 199.87.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:4a:f1:cb:62:b8:bb:9b:e3:7e:7f:f0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Mar 22 14:03:05 2024 GMT Not After : Jun 20 14:03:05 2024 GMT Subject: CN=05fc9bca-b9b3-4355-a4f3-55ea808a03d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:40:bc:40:ea:0e:d8:ab:e6:4e:b7:cd:0f:ea: 41:91:9e:09:d9:bc:e6:bb:cc:c6:c7:d3:4d:d5:e2: 78:cb:0f:e4:b9:91:c0:bc:29:32:57:32:08:39:5f: 51:cf:34:81:63:29:9b:d7:16:62:91:e8:ce:ab:c7: c4:41:04:a4:bf:be:bd:07:f3:4f:59:79:07:4a:40: a2:a2:f3:7a:7d:10:6f:58:fd:f5:1c:21:6b:c9:5f: 84:ea:20:bf:75:a8:a8:9c:02:cd:b4:f4:13:ad:ef: 9c:6f:8b:a6:3a:ad:2b:43:57:46:1e:ca:35:06:9b: aa:90:df:47:f8:b4:b9:cf:61:f2:f1:6d:07:a9:2c: 75:a3:98:85:f0:a2:95:ef:d4:fd:59:13:f4:08:1d: 14:9d:5e:21:15:68:2d:15:a3:dd:03:8f:dd:40:d5: de:bd:6d:62:00:20:e7:ad:43:07:12:3f:87:89:a9: 07:f5:7c:fe:18:63:b6:56:90:23:bd:ea:ae:46:3a: cb:19:0d:91:ee:97:6f:04:f4:df:fd:34:48:aa:ac: c5:98:05:3e:49:ed:f4:7f:a9:e8:c1:e0:55:d3:57: 30:08:5d:32:f6:4f:d3:4a:5e:2e:f7:c9:b9:9d:1d: 2b:84:94:8f:e7:be:da:3b:91:0e:50:83:d3:37:f2: 53:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:08:00:36:D8:AB:C9:97:42:1F:B9:09:B9:4D:7B:C8:67:4C:97:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/aa5922ce-6574-311d-bc01-e66125efb577.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 199.87.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:5b:5c:82:15:61:89:d6:7b:18:7a:ba:f7:8e:63:3b:8a:db: fe:f3:7a:30:92:67:e6:17:be:66:ce:53:12:7c:85:d0:b7:aa: 66:50:f3:e8:ec:7a:82:33:aa:ea:3d:c2:e5:82:9e:ca:3e:82: 07:65:62:68:fc:1c:d4:d1:6c:40:27:8b:74:ec:50:21:c7:8e: af:fe:55:a4:8b:74:92:b8:da:31:bd:ff:cc:d6:15:71:bc:1d: 3e:18:78:61:e7:f5:7a:d2:86:1a:34:b4:7b:aa:a2:e6:92:82: 9e:e2:00:63:f9:1a:ad:c1:36:fd:81:5d:24:ef:44:fe:e7:1c: f2:95:9a:17:8f:2f:3e:8f:d3:91:9a:2c:55:fc:c7:7a:4d:7f: ff:e6:78:77:7e:2e:98:2a:d1:40:85:fb:85:2c:e2:0d:1d:73: 22:4c:d9:66:b7:89:d0:5a:76:99:ba:36:7c:97:b6:ae:d1:be: e0:13:0a:32:12:e9:fe:58:41:b0:0f:5a:34:59:a3:fd:b7:e8: 45:36:92:45:3b:fa:aa:6a:69:99:07:10:91:0d:80:03:4b:03: e0:d7:fa:41:f5:22:15:10:fe:cb:de:db:16:87:6c:c7:49:dd: be:94:98:82:52:df:49:c0:d5:e8:d0:6d:b7:a8:89:07:66:b0: cf:7e:2c:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVK8ctiuLub435/8EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI0MDMyMjE0MDMwNVoXDTI0MDYyMDE0MDMwNVowLzEtMCsGA1UEAxMk MDVmYzliY2EtYjliMy00MzU1LWE0ZjMtNTVlYTgwOGEwM2QzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA10C8QOoO2KvmTrfND+pBkZ4J2bzmu8zGx9NN 1eJ4yw/kuZHAvCkyVzIIOV9RzzSBYymb1xZikejOq8fEQQSkv769B/NPWXkHSkCi ovN6fRBvWP31HCFryV+E6iC/daionALNtPQTre+cb4umOq0rQ1dGHso1BpuqkN9H +LS5z2Hy8W0HqSx1o5iF8KKV79T9WRP0CB0UnV4hFWgtFaPdA4/dQNXevW1iACDn rUMHEj+HiakH9Xz+GGO2VpAjvequRjrLGQ2R7pdvBPTf/TRIqqzFmAU+Se30f6no weBV01cwCF0y9k/TSl4u98m5nR0rhJSP577aO5EOUIPTN/JTKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAoIADbYq8mXQh+5CblNe8hnTJcgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvYWE1OTIyY2UtNjU3NC0z MTFkLWJjMDEtZTY2MTI1ZWZiNTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx1d4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKJbXIIVYYnWexh6uveOYzuK2/7zejCSZ+YXvmbOUxJ8hdC3qmZQ8+js eoIzquo9wuWCnso+ggdlYmj8HNTRbEAni3TsUCHHjq/+VaSLdJK42jG9/8zWFXG8 HT4YeGHn9XrShho0tHuqouaSgp7iAGP5Gq3BNv2BXSTvRP7nHPKVmhePLz6P05Ga LFX8x3pNf//meHd+Lpgq0UCF+4Us4g0dcyJM2Wa3idBadpm6NnyXtq7RvuATCjIS 6f5YQbAPWjRZo/236EU2kkU7+qpqaZkHEJENgANLA+DX+kH1IhUQ/sve2xaHbMdJ 3b6UmIJS30nA1ejQbbeoiQdmsM9+LNk= -----END CERTIFICATE-----Generated at Thu May 2 03:30:03 2024 by rpki-client on console-ams.rpki-client.org