$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/09eadd5e-9c3f-3f81-b80f-f4e5faaa9ef3.roa File: 09eadd5e-9c3f-3f81-b80f-f4e5faaa9ef3.roa (raw, json) Hash identifier: QNFP+3I72tvCCJ0kwJVuV9WWh+Nh83VTd+a9alPp51Y= Subject key identifier: 1C:3A:28:FB:9F:1D:80:F8:14:68:8E:7B:1D:35:C2:20:21:13:34:8F Certificate issuer: /CN=3b4d7105-d9bd-4ee4-b958-2e9902d5eb97 Certificate serial: 010D0C9F43285845A9BE1ADEFC6C46EEBA16E538 Authority key identifier: AC:F8:01:B7:30:95:23:B1:95:58:85:FF:A2:E4:EB:26:B9:9F:63:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/09eadd5e-9c3f-3f81-b80f-f4e5faaa9ef3.roa Signing time: Thu 25 Apr 2024 13:00:33 +0000 ROA not before: Thu 25 Apr 2024 13:00:33 +0000 ROA not after: Wed 24 Jul 2024 13:00:33 +0000 asID: 6597 IP address blocks: 208.73.216.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 May 2024 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:a9:be:1a:de:fc:6c:46:ee:ba:16:e5:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b4d7105-d9bd-4ee4-b958-2e9902d5eb97 Validity Not Before: Apr 25 13:00:33 2024 GMT Not After : Jul 24 13:00:33 2024 GMT Subject: CN=9c6da83c-1dda-4fd6-888b-7586f4c6f2d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c5:9d:97:76:da:fe:2e:b1:7b:c1:64:5c:a8: c6:cd:f3:b6:b9:64:ca:d0:85:df:e9:ba:5e:31:42: b9:c0:5a:55:30:16:ff:5c:0e:e5:d2:c7:9c:d9:0c: e7:50:93:f0:45:ae:15:a0:ba:ce:78:50:1c:32:70: bd:63:74:9f:26:22:e9:c0:e3:e3:c0:75:36:a2:89: 73:0a:9a:c9:5e:7d:54:6e:76:f7:d0:64:1f:07:6a: 58:fc:da:d4:32:f4:a5:c1:0f:e6:db:e9:16:0f:89: 0c:22:cf:5f:73:7f:20:6a:6e:3e:26:d1:1f:8e:f0: ed:aa:e9:7c:bc:37:9c:95:4e:76:bc:07:3a:79:c5: b6:1d:20:d3:a4:5b:3a:23:f9:60:d0:40:b4:b2:dc: 84:5a:58:0b:1a:5a:72:f6:29:52:66:ce:cc:0e:47: e1:3c:6f:21:5f:81:a6:e9:6b:e3:55:ec:4e:cd:ac: 93:4a:6d:59:c4:a3:a9:69:1a:ed:49:21:ae:84:2c: 47:3f:59:06:6a:2a:6b:d7:3b:bf:eb:aa:f4:a8:76: 71:45:fb:fb:9e:fa:ef:16:20:4a:63:e8:2e:94:62: 93:84:80:49:40:8e:79:9d:c3:07:60:09:61:66:71: cf:59:91:9b:81:d6:70:e6:a8:83:d5:b2:d8:2c:dc: e1:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:3A:28:FB:9F:1D:80:F8:14:68:8E:7B:1D:35:C2:20:21:13:34:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/09eadd5e-9c3f-3f81-b80f-f4e5faaa9ef3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.crl X509v3 Authority Key Identifier: keyid:AC:F8:01:B7:30:95:23:B1:95:58:85:FF:A2:E4:EB:26:B9:9F:63:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.cer sbgp-ipAddrBlock: critical IPv4: 208.73.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:f8:8b:42:32:2b:b9:a6:1a:cc:56:6a:22:2a:9c:d4:1e:20: 30:f8:09:4d:60:e2:78:15:3f:f7:51:77:8c:16:13:d9:5d:3d: cc:d1:0e:b9:a6:02:fa:f0:61:5b:34:1c:4a:28:1c:16:d4:73: 2c:8b:f6:53:fd:59:6a:13:f7:62:39:f3:be:9c:f1:6f:4c:68: b3:e5:55:65:2e:3a:43:83:73:8b:e3:19:32:11:4e:f9:61:ee: 0d:00:8e:43:2a:6b:17:3b:4a:4f:30:0c:b8:5c:b5:19:ef:6e: 13:19:97:67:ad:f4:21:f5:bf:ae:11:b8:16:0e:c2:a0:e7:ba: cd:3b:84:8f:c2:f3:0d:26:31:08:a0:88:73:06:96:18:88:5e: 82:50:78:68:ff:0b:e4:5d:11:e7:b4:bc:05:c8:ad:b3:5e:68: 48:ff:25:b7:fa:fd:5f:64:47:7e:d7:70:33:1d:62:68:c4:97: 00:54:c8:31:27:95:02:bc:61:f3:40:e5:d5:1e:82:6d:76:94: 26:94:5e:5a:38:59:a6:4e:f8:14:5a:10:60:2c:4e:f7:76:d4: 96:f5:d8:cd:6c:96:8a:29:4d:1e:11:17:b5:02:25:63:fa:01: 1a:44:6b:17:3d:d2:8e:c7:d6:fe:68:d9:6c:48:69:ec:1f:3e: cf:47:57:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWpvhre/GxG7roW5TgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2I0ZDcxMDUtZDliZC00ZWU0LWI5NTgtMmU5OTAyZDVl Yjk3MB4XDTI0MDQyNTEzMDAzM1oXDTI0MDcyNDEzMDAzM1owLzEtMCsGA1UEAxMk OWM2ZGE4M2MtMWRkYS00ZmQ2LTg4OGItNzU4NmY0YzZmMmQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApsWdl3ba/i6xe8FkXKjGzfO2uWTK0IXf6bpe MUK5wFpVMBb/XA7l0sec2QznUJPwRa4VoLrOeFAcMnC9Y3SfJiLpwOPjwHU2oolz CprJXn1Ubnb30GQfB2pY/NrUMvSlwQ/m2+kWD4kMIs9fc38gam4+JtEfjvDtqul8 vDeclU52vAc6ecW2HSDTpFs6I/lg0EC0styEWlgLGlpy9ilSZs7MDkfhPG8hX4Gm 6WvjVexOzayTSm1ZxKOpaRrtSSGuhCxHP1kGaipr1zu/66r0qHZxRfv7nvrvFiBK Y+gulGKThIBJQI55ncMHYAlhZnHPWZGbgdZw5qiD1bLYLNzh4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBw6KPufHYD4FGiOex01wiAhEzSPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zYjRk NzEwNS1kOWJkLTRlZTQtYjk1OC0yZTk5MDJkNWViOTcvMDllYWRkNWUtOWMzZi0z ZjgxLWI4MGYtZjRlNWZhYWE5ZWYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvM2I0ZDcxMDUtZDliZC00ZWU0LWI5 NTgtMmU5OTAyZDVlYjk3LzNiNGQ3MTA1LWQ5YmQtNGVlNC1iOTU4LTJlOTkwMmQ1 ZWI5Ny5jcmwwHwYDVR0jBBgwFoAUrPgBtzCVI7GVWIX/ouTrJrmfYzswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zYjRkNzEwNS1kOWJkLTRlZTQtYjk1OC0yZTk5 MDJkNWViOTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0EnYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGf4i0IyK7mmGsxWaiIqnNQeIDD4CU1g4ngVP/dRd4wWE9ldPczRDrmm AvrwYVs0HEooHBbUcyyL9lP9WWoT92I5876c8W9MaLPlVWUuOkODc4vjGTIRTvlh 7g0AjkMqaxc7Sk8wDLhctRnvbhMZl2et9CH1v64RuBYOwqDnus07hI/C8w0mMQig iHMGlhiIXoJQeGj/C+RdEee0vAXIrbNeaEj/Jbf6/V9kR37XcDMdYmjElwBUyDEn lQK8YfNA5dUegm12lCaUXlo4WaZO+BRaEGAsTvd21Jb12M1sloopTR4RF7UCJWP6 ARpEaxc90o7H1v5o2WxIaewfPs9HV6Q= -----END CERTIFICATE-----Generated at Sat May 18 16:09:11 2024 by rpki-client on console-ams.rpki-client.org