$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/0fa25648-d9a1-3c94-9e66-3b8347e9f66d.roa File: 0fa25648-d9a1-3c94-9e66-3b8347e9f66d.roa (raw, json) Hash identifier: XSLSIYtWe4d3gGQ9qTXs0ZUV48/A1+6nbMtsRt8InZM= Subject key identifier: 20:0C:F6:0A:67:01:B5:39:33:6E:3A:62:F4:C0:02:23:05:8D:35:CE Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Certificate serial: 010D0C9F43285845CF6E3B7FD8B8337DCABAE400 Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/0fa25648-d9a1-3c94-9e66-3b8347e9f66d.roa Signing time: Thu 09 May 2024 01:00:26 +0000 ROA not before: Thu 09 May 2024 01:00:26 +0000 ROA not after: Wed 07 Aug 2024 01:00:26 +0000 asID: 13414 IP address blocks: 209.237.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 May 2024 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:cf:6e:3b:7f:d8:b8:33:7d:ca:ba:e4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Validity Not Before: May 9 01:00:26 2024 GMT Not After : Aug 7 01:00:26 2024 GMT Subject: CN=40ab0ca3-bd1a-4158-9a5f-b1809818977d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:b3:ce:8f:fe:91:32:48:b6:6f:0d:7a:2a:13: e4:32:39:1e:20:d2:32:60:8d:f9:45:c0:4b:ad:8d: e6:b8:6c:a5:ca:9c:92:32:06:73:85:dd:c5:ab:36: 75:4f:be:2d:52:99:dd:a9:a5:cc:79:73:ac:1e:70: 49:4f:b2:b7:7c:b1:ab:eb:4f:e5:91:91:28:9c:de: 07:1b:15:22:69:c9:7e:6a:8c:e4:a2:2c:66:02:ca: 94:ad:a0:a5:2b:7a:4e:95:80:2b:6f:94:12:4b:3e: dc:0d:c1:68:7d:4d:bb:75:9a:b4:fa:aa:e1:9b:71: bb:9f:e5:97:37:81:37:44:d9:45:30:26:19:55:e5: 03:05:bb:79:1e:b8:f3:1d:c5:75:64:ba:aa:26:e2: 5c:0c:67:bf:bc:59:41:6e:0d:d4:7f:5b:ba:66:74: 05:5c:68:c0:2b:68:b6:36:5e:f7:52:28:82:50:7f: 2d:65:7f:07:8a:24:1d:35:0c:c3:ca:18:e9:63:92: 20:db:56:13:1b:cb:e7:a0:63:4b:80:93:6c:09:40: 9e:4e:ed:47:ab:b7:05:41:5e:52:2f:52:99:a5:e5: 7e:dc:44:d1:10:24:c3:8e:4b:55:f3:0d:22:59:28: 04:86:07:9d:1a:87:37:fe:f6:a9:93:34:e4:86:23: e2:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:0C:F6:0A:67:01:B5:39:33:6E:3A:62:F4:C0:02:23:05:8D:35:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/0fa25648-d9a1-3c94-9e66-3b8347e9f66d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl X509v3 Authority Key Identifier: keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer sbgp-ipAddrBlock: critical IPv4: 209.237.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:22:40:31:5a:6f:61:b0:3d:d7:9f:77:c8:9d:d7:91:1b:71: 7b:8f:67:a6:4c:98:53:df:1e:b3:6e:15:9b:06:e3:18:12:df: 66:f4:b5:77:c9:08:3e:4d:04:89:79:eb:35:40:5a:95:d7:6e: 6c:87:08:34:17:72:2e:53:48:24:bb:f9:c6:66:e6:ff:4d:66: 79:ae:55:bb:de:d5:44:80:95:3c:56:42:a7:d3:7e:d9:9d:fc: 7f:7d:62:b9:17:1a:71:28:96:88:96:04:57:86:0b:88:04:cd: 69:2d:68:76:aa:77:03:89:cc:15:88:90:0d:8d:87:73:d2:27: 18:f2:13:42:7e:b9:b4:72:5b:c1:c3:97:ec:55:be:14:43:aa: 1d:4e:35:fa:96:98:be:78:0f:5e:08:a5:ed:0a:a6:33:d9:d0: 9e:e5:22:9a:2d:32:1c:0c:85:1f:b1:aa:a0:85:75:ca:d1:72: dc:87:64:33:fa:71:95:be:3f:83:7b:ed:9f:4a:cd:9e:bc:a0: 7e:5f:bd:58:be:0c:5b:8d:e7:b2:8c:e0:35:a8:1a:ae:d4:a0: 83:ca:fb:31:a8:00:b0:a7:a6:13:73:06:aa:0b:df:fa:8f:4c: 15:55:d0:84:81:0e:b3:48:94:8a:87:37:8e:bb:af:47:c6:7a: 5e:69:75:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXPbjt/2Lgzfcq65AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy NTc2MB4XDTI0MDUwOTAxMDAyNloXDTI0MDgwNzAxMDAyNlowLzEtMCsGA1UEAxMk NDBhYjBjYTMtYmQxYS00MTU4LTlhNWYtYjE4MDk4MTg5NzdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLPOj/6RMki2bw16KhPkMjkeINIyYI35RcBL rY3muGylypySMgZzhd3FqzZ1T74tUpndqaXMeXOsHnBJT7K3fLGr60/lkZEonN4H GxUiacl+aozkoixmAsqUraClK3pOlYArb5QSSz7cDcFofU27dZq0+qrhm3G7n+WX N4E3RNlFMCYZVeUDBbt5HrjzHcV1ZLqqJuJcDGe/vFlBbg3Uf1u6ZnQFXGjAK2i2 Nl73UiiCUH8tZX8HiiQdNQzDyhjpY5Ig21YTG8vnoGNLgJNsCUCeTu1Hq7cFQV5S L1KZpeV+3ETRECTDjktV8w0iWSgEhgedGoc3/vapkzTkhiPitwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCAM9gpnAbU5M246YvTAAiMFjTXOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3 YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvMGZhMjU2NDgtZDlhMS0z Yzk0LTllNjYtM2I4MzQ3ZTlmNjZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3 YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0e3fMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKsiQDFab2GwPdefd8id15EbcXuPZ6ZMmFPfHrNuFZsG4xgS32b0tXfJ CD5NBIl56zVAWpXXbmyHCDQXci5TSCS7+cZm5v9NZnmuVbve1USAlTxWQqfTftmd /H99YrkXGnEoloiWBFeGC4gEzWktaHaqdwOJzBWIkA2Nh3PSJxjyE0J+ubRyW8HD l+xVvhRDqh1ONfqWmL54D14Ipe0KpjPZ0J7lIpotMhwMhR+xqqCFdcrRctyHZDP6 cZW+P4N77Z9KzZ68oH5fvVi+DFuN57KM4DWoGq7UoIPK+zGoALCnphNzBqoL3/qP TBVV0ISBDrNIlIqHN467r0fGel5pdbg= -----END CERTIFICATE-----Generated at Sat May 18 15:35:27 2024 by rpki-client on console-fra.rpki-client.org