$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/48351c25-8c04-3be2-9d0c-45dc5703d206.roa File: 48351c25-8c04-3be2-9d0c-45dc5703d206.roa (raw, json) Hash identifier: RdEDVqG0dIAcJ8hz3Zxiaji3+Z1KRkKxIN0uErEyahg= Subject key identifier: 94:CE:15:D3:31:D6:12:23:DF:6E:06:7C:7E:AC:99:FE:FE:F0:71:65 Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Certificate serial: 010D0C9F43285845CF6E3AD148D2ACE7CCC69900 Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/48351c25-8c04-3be2-9d0c-45dc5703d206.roa Signing time: Thu 09 May 2024 01:00:26 +0000 ROA not before: Thu 09 May 2024 01:00:26 +0000 ROA not after: Wed 07 Aug 2024 01:00:26 +0000 asID: 13414 IP address blocks: 209.237.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 May 2024 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:cf:6e:3a:d1:48:d2:ac:e7:cc:c6:99:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Validity Not Before: May 9 01:00:26 2024 GMT Not After : Aug 7 01:00:26 2024 GMT Subject: CN=72ed8652-631e-4a1c-934d-e90095a76870 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:43:d5:be:97:1d:77:20:05:a3:86:74:e3:fb: c5:1a:60:42:dc:bf:de:e2:75:46:e3:c6:29:08:bf: 7d:32:b7:41:7c:c4:e1:1c:ef:cf:2c:8c:dc:44:aa: 87:1c:e1:99:98:c4:96:4e:d3:5c:18:cd:0a:c7:ff: a9:57:76:13:6b:f2:3c:29:b2:47:8f:25:44:6b:b9: 05:17:32:8a:4e:be:e6:5d:ff:fd:95:06:a7:27:25: 3b:f9:b0:72:3a:4c:56:07:43:de:a5:1d:3d:dc:b9: 9f:4a:32:b0:f9:9d:a4:0c:69:87:fe:42:50:54:4d: f1:e7:20:e4:bb:7b:d6:7e:0e:e0:df:36:b2:94:36: cc:24:54:92:3d:de:07:ad:28:b7:ca:c2:c3:c7:c2: d7:40:a9:60:e1:b4:aa:34:6c:74:16:4b:a5:6e:32: 5d:bb:82:48:c8:9e:92:b5:65:26:75:07:c9:e4:63: 3b:a3:df:b8:1b:06:22:6c:35:6c:53:1b:a3:90:14: c6:3f:d0:e0:56:1e:76:ec:5d:91:fa:70:6d:68:40: 24:b8:6c:9b:de:3f:73:2d:a6:a8:92:c5:b4:6f:0a: 8b:61:11:14:76:09:90:2d:d0:f7:42:89:cd:78:50: da:d9:6a:ea:fb:cc:b6:7a:73:a6:33:4e:bb:05:91: e8:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:CE:15:D3:31:D6:12:23:DF:6E:06:7C:7E:AC:99:FE:FE:F0:71:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/48351c25-8c04-3be2-9d0c-45dc5703d206.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl X509v3 Authority Key Identifier: keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer sbgp-ipAddrBlock: critical IPv4: 209.237.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:6b:d0:21:88:1f:76:1f:e8:69:99:39:99:71:b8:f1:b7:5c: 15:ef:f2:94:a7:1b:f2:01:17:ce:58:3c:53:f1:64:ae:0a:f4: 06:fc:64:a4:ad:36:64:45:cd:b5:96:95:05:5c:0f:c8:56:33: 47:a1:c4:d6:16:ff:86:99:b5:ea:f2:e8:57:19:cb:55:49:98: 2e:dd:8c:53:f3:64:6f:bf:3a:a4:df:4d:57:e1:05:bb:61:7f: ae:d9:14:c7:bc:b6:69:62:9d:46:9d:51:76:03:a3:16:08:e7: 44:f6:4c:da:c5:16:21:43:00:f0:29:a0:24:95:98:cc:9f:14: 19:3d:7d:9e:f5:f0:68:55:15:55:7f:0c:03:32:69:a8:fb:97: 85:76:71:42:20:c7:22:fe:a5:f9:9e:f2:5a:8c:75:a5:61:ed: bc:41:f8:8c:15:89:20:14:ee:ac:bc:a3:15:22:c8:72:37:77: cd:20:0f:91:55:be:9a:5b:58:98:cc:02:de:f9:e4:1b:9f:10: 11:91:1d:68:ab:af:c8:c8:dd:45:64:1f:18:18:12:0d:3a:6f: 39:e2:9e:7f:d0:57:2b:c4:60:66:e0:df:1b:fa:d0:cd:b3:e2: ad:25:aa:92:b8:12:33:a4:b6:62:2e:65:40:7f:ee:59:92:32: 73:ec:2c:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXPbjrRSNKs58zGmQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy NTc2MB4XDTI0MDUwOTAxMDAyNloXDTI0MDgwNzAxMDAyNlowLzEtMCsGA1UEAxMk NzJlZDg2NTItNjMxZS00YTFjLTkzNGQtZTkwMDk1YTc2ODcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhUPVvpcddyAFo4Z04/vFGmBC3L/e4nVG48Yp CL99MrdBfMThHO/PLIzcRKqHHOGZmMSWTtNcGM0Kx/+pV3YTa/I8KbJHjyVEa7kF FzKKTr7mXf/9lQanJyU7+bByOkxWB0PepR093LmfSjKw+Z2kDGmH/kJQVE3x5yDk u3vWfg7g3zaylDbMJFSSPd4HrSi3ysLDx8LXQKlg4bSqNGx0FkulbjJdu4JIyJ6S tWUmdQfJ5GM7o9+4GwYibDVsUxujkBTGP9DgVh527F2R+nBtaEAkuGyb3j9zLaao ksW0bwqLYREUdgmQLdD3QonNeFDa2Wrq+8y2enOmM067BZHoIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJTOFdMx1hIj324GfH6smf7+8HFlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3 YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvNDgzNTFjMjUtOGMwNC0z YmUyLTlkMGMtNDVkYzU3MDNkMjA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3 YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0e3TMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEVr0CGIH3Yf6GmZOZlxuPG3XBXv8pSnG/IBF85YPFPxZK4K9Ab8ZKSt NmRFzbWWlQVcD8hWM0ehxNYW/4aZtery6FcZy1VJmC7djFPzZG+/OqTfTVfhBbth f67ZFMe8tmlinUadUXYDoxYI50T2TNrFFiFDAPApoCSVmMyfFBk9fZ718GhVFVV/ DAMyaaj7l4V2cUIgxyL+pfme8lqMdaVh7bxB+IwViSAU7qy8oxUiyHI3d80gD5FV vppbWJjMAt755BufEBGRHWirr8jI3UVkHxgYEg06bzninn/QVyvEYGbg3xv60M2z 4q0lqpK4EjOktmIuZUB/7lmSMnPsLCc= -----END CERTIFICATE-----Generated at Sat May 18 16:09:42 2024 by rpki-client on console-ams.rpki-client.org