$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/7375064a-0ebd-30f8-a5a1-a95e6e1ca63e.roa File: 7375064a-0ebd-30f8-a5a1-a95e6e1ca63e.roa (raw, json) Hash identifier: p7owP8dPA3Ddkw5gofm+7tixRbv+8qzJAaS1ps7wGsI= Subject key identifier: 62:88:F1:FB:6F:33:EF:C6:8C:7E:42:E0:7F:42:24:1B:6B:C3:3D:FE Certificate issuer: /CN=dfe98912-51fc-490e-b52f-0f6db9a2847e Certificate serial: 010D0C9F43285845D7CE3FDC29C417D55248C100 Authority key identifier: EC:81:53:34:C0:5B:18:F9:7E:DF:43:4A:6F:1A:97:CF:A0:AF:57:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/7375064a-0ebd-30f8-a5a1-a95e6e1ca63e.roa Signing time: Sun 12 May 2024 01:00:25 +0000 ROA not before: Sun 12 May 2024 01:00:25 +0000 ROA not after: Sat 10 Aug 2024 01:00:25 +0000 asID: 16509 IP address blocks: 209.240.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/dfe98912-51fc-490e-b52f-0f6db9a2847e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/dfe98912-51fc-490e-b52f-0f6db9a2847e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 May 2024 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:d7:ce:3f:dc:29:c4:17:d5:52:48:c1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfe98912-51fc-490e-b52f-0f6db9a2847e Validity Not Before: May 12 01:00:25 2024 GMT Not After : Aug 10 01:00:25 2024 GMT Subject: CN=ed6ef0f8-a844-4008-977a-463e42ec76ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:1e:60:40:bd:ea:ef:7d:73:c0:9e:87:26:54: 00:a4:76:d5:cd:cc:a3:93:fe:de:b6:c7:51:a7:4b: 87:b4:29:e4:d6:77:04:4f:bc:a2:b4:bc:41:69:49: d1:d3:67:e1:a8:6f:49:73:95:d6:3c:6c:dc:d5:0f: 5e:4a:e8:a3:e1:18:3c:45:8b:53:33:dc:4c:7c:fa: f5:dd:b8:61:69:d7:86:df:f6:9a:fa:11:43:99:37: 00:67:7e:c3:5d:b5:0e:39:d7:8b:21:ea:84:4d:f0: af:4e:e4:92:ca:cf:5f:d4:78:90:af:45:27:17:c2: 3b:c4:30:b0:0e:50:45:b7:48:d6:65:d5:5d:70:99: 96:fa:1e:d6:3e:1e:be:63:fd:04:1b:f8:19:c3:8d: 46:8c:53:6a:e0:05:be:ce:d7:8d:39:f4:9a:e0:90: fe:0d:48:32:b0:1e:10:4e:2e:f2:e8:9e:1b:ad:ae: 8b:9e:48:e4:7d:0d:5f:c8:61:b9:14:6e:b5:57:f6: a1:2a:7d:5d:04:f0:97:02:f8:c7:f9:f8:6e:5d:fd: 5a:36:27:47:b7:80:ef:2c:58:84:ca:20:0e:e9:3a: 67:ca:67:30:d6:10:e7:ad:4b:9b:e0:ff:b6:fa:a9: 9c:b6:f7:73:55:16:68:41:c6:4d:6b:75:32:68:14: 14:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:88:F1:FB:6F:33:EF:C6:8C:7E:42:E0:7F:42:24:1B:6B:C3:3D:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/7375064a-0ebd-30f8-a5a1-a95e6e1ca63e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/dfe98912-51fc-490e-b52f-0f6db9a2847e.crl X509v3 Authority Key Identifier: keyid:EC:81:53:34:C0:5B:18:F9:7E:DF:43:4A:6F:1A:97:CF:A0:AF:57:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e.cer sbgp-ipAddrBlock: critical IPv4: 209.240.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:16:dc:63:aa:cf:84:5a:54:59:7c:a0:6a:44:41:76:1b:1b: 56:6c:67:93:36:9a:26:0e:36:5a:14:c4:42:0d:77:10:3d:28: 28:00:68:20:31:0d:2c:32:a4:4f:e1:76:f7:bc:a1:d7:6a:72: 16:f5:0b:65:71:3d:7f:d0:57:3b:65:69:06:ae:f2:5e:29:1d: e0:7e:a5:f7:2d:05:7f:ca:b1:9e:a9:f6:51:18:50:74:e5:fd: f6:5b:1f:9a:c0:f5:cc:58:35:4d:49:a8:08:42:e8:31:55:cd: 16:e8:1f:ff:ad:d3:27:77:87:1c:df:25:b1:89:2d:77:d6:a0: 47:48:b3:37:b5:96:17:47:a2:0c:1d:4d:8e:30:76:09:04:52: df:14:05:12:65:8d:6a:cc:77:e6:48:8e:9d:41:11:98:ab:54: 97:45:2a:b2:7e:1c:d4:b4:05:2e:9b:f9:c5:0c:fc:37:d4:72: 9d:41:66:6e:40:04:3d:05:d5:0d:78:ad:be:5a:5c:3e:29:2f: 68:2c:d1:3a:dd:fd:e2:ed:9c:4e:1d:64:6e:6c:1a:b3:04:28: 85:70:c2:58:31:a6:17:b6:6b:15:48:11:45:2a:e0:1b:d5:1b: b0:9a:cf:87:9d:98:39:d9:3c:60:a4:28:8d:01:fe:ae:fa:1e: 9c:f7:47:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXXzj/cKcQX1VJIwQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGZlOTg5MTItNTFmYy00OTBlLWI1MmYtMGY2ZGI5YTI4 NDdlMB4XDTI0MDUxMjAxMDAyNVoXDTI0MDgxMDAxMDAyNVowLzEtMCsGA1UEAxMk ZWQ2ZWYwZjgtYTg0NC00MDA4LTk3N2EtNDYzZTQyZWM3NmVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjB5gQL3q731zwJ6HJlQApHbVzcyjk/7etsdR p0uHtCnk1ncET7yitLxBaUnR02fhqG9Jc5XWPGzc1Q9eSuij4Rg8RYtTM9xMfPr1 3bhhadeG3/aa+hFDmTcAZ37DXbUOOdeLIeqETfCvTuSSys9f1HiQr0UnF8I7xDCw DlBFt0jWZdVdcJmW+h7WPh6+Y/0EG/gZw41GjFNq4AW+zteNOfSa4JD+DUgysB4Q Ti7y6J4bra6LnkjkfQ1fyGG5FG61V/ahKn1dBPCXAvjH+fhuXf1aNidHt4DvLFiE yiAO6Tpnymcw1hDnrUub4P+2+qmctvdzVRZoQcZNa3UyaBQUswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGKI8ftvM+/GjH5C4H9CJBtrwz3+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kZmU5 ODkxMi01MWZjLTQ5MGUtYjUyZi0wZjZkYjlhMjg0N2UvNzM3NTA2NGEtMGViZC0z MGY4LWE1YTEtYTk1ZTZlMWNhNjNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGZlOTg5MTItNTFmYy00OTBlLWI1 MmYtMGY2ZGI5YTI4NDdlL2RmZTk4OTEyLTUxZmMtNDkwZS1iNTJmLTBmNmRiOWEy ODQ3ZS5jcmwwHwYDVR0jBBgwFoAU7IFTNMBbGPl+30NKbxqXz6CvV2kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kZmU5ODkxMi01MWZjLTQ5MGUtYjUyZi0wZjZk YjlhMjg0N2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0fAcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHgW3GOqz4RaVFl8oGpEQXYbG1ZsZ5M2miYONloUxEINdxA9KCgAaCAx DSwypE/hdve8oddqchb1C2VxPX/QVztlaQau8l4pHeB+pfctBX/KsZ6p9lEYUHTl /fZbH5rA9cxYNU1JqAhC6DFVzRboH/+t0yd3hxzfJbGJLXfWoEdIsze1lhdHogwd TY4wdgkEUt8UBRJljWrMd+ZIjp1BEZirVJdFKrJ+HNS0BS6b+cUM/DfUcp1BZm5A BD0F1Q14rb5aXD4pL2gs0Trd/eLtnE4dZG5sGrMEKIVwwlgxphe2axVIEUUq4BvV G7Caz4edmDnZPGCkKI0B/q76Hpz3R6Q= -----END CERTIFICATE-----Generated at Wed May 22 01:47:13 2024 by rpki-client on console-fra.rpki-client.org