$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/72f38f26-3d9f-31fa-afdc-35c64c5c1b6d.roa File: 72f38f26-3d9f-31fa-afdc-35c64c5c1b6d.roa (raw, json) Hash identifier: h7laQXocPTnVJS5VumQ2vzpjhXvZ1W0B+jwJ7NatNrk= Subject key identifier: C6:8F:67:CE:02:BD:2E:D0:CE:A6:3A:FB:A5:64:5D:F7:FF:96:AC:09 Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Certificate serial: 010D0C9F43285845CE090A98F53503E5DFC8E240 Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/72f38f26-3d9f-31fa-afdc-35c64c5c1b6d.roa Signing time: Wed 08 May 2024 13:00:34 +0000 ROA not before: Wed 08 May 2024 13:00:34 +0000 ROA not after: Tue 06 Aug 2024 13:00:34 +0000 asID: 13414 IP address blocks: 209.237.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:ce:09:0a:98:f5:35:03:e5:df:c8:e2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Validity Not Before: May 8 13:00:34 2024 GMT Not After : Aug 6 13:00:34 2024 GMT Subject: CN=a90613a7-7bf3-42b1-96c9-8ef4d40a6bb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:93:ea:d1:ec:9d:6c:16:3b:78:fe:31:0f:d1: 8b:2f:57:d7:71:cc:08:61:c7:c5:a0:c0:a1:48:50: b6:14:7c:a1:53:f9:20:ea:11:45:eb:74:ae:79:92: 12:14:fb:31:c5:02:98:1e:dd:2c:8c:ff:44:ce:5e: df:7e:3d:7f:03:84:7f:39:f8:10:63:05:cd:d0:b1: cd:33:30:fb:00:2f:1c:74:6d:e6:93:9c:8d:49:bd: 44:42:23:fd:51:e0:82:6b:63:91:ef:89:4e:5e:fe: c4:11:28:67:96:d1:07:d5:40:77:60:17:02:4f:97: d4:71:70:9e:3b:30:80:a8:63:11:0f:17:c0:b6:27: ff:92:ed:aa:50:83:c9:c8:47:da:f9:58:29:45:9d: 6a:27:83:54:16:ab:84:55:08:d6:81:b5:aa:4c:1f: ee:d7:7e:30:d1:3e:88:3c:90:76:95:8e:69:44:89: 56:19:d4:c0:f7:ac:a8:bf:e2:77:1b:cb:42:5e:bb: 4e:c0:a1:85:4a:64:46:73:f6:65:13:1b:e9:1a:01: fe:4f:f4:d9:26:6c:df:2a:78:9d:b3:76:74:cf:dd: a1:03:8b:b4:9a:e1:02:9a:b7:56:f5:e0:b0:e4:ed: be:85:af:11:71:d4:87:af:ff:39:ee:56:e4:ba:8b: 22:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:8F:67:CE:02:BD:2E:D0:CE:A6:3A:FB:A5:64:5D:F7:FF:96:AC:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/72f38f26-3d9f-31fa-afdc-35c64c5c1b6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl X509v3 Authority Key Identifier: keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer sbgp-ipAddrBlock: critical IPv4: 209.237.202.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:60:58:a6:7a:35:2d:7b:46:8c:e6:45:1a:b1:41:8c:0b:c3: e6:59:7f:19:8f:98:fa:81:6a:8c:e9:4a:0d:58:e1:61:1f:58: 1f:52:b4:b2:f3:b8:39:9c:3f:6c:7b:9c:df:a5:2e:4c:47:b9: d6:2e:7c:27:34:e3:76:78:cc:d6:6b:c3:08:e2:b1:98:9b:8e: 59:02:c3:7e:a9:f5:13:69:bb:52:19:3e:aa:79:76:cb:2c:9d: 0b:1f:52:e3:0a:b3:41:dd:5b:6c:86:7d:bb:9c:0c:a2:ea:0c: 97:71:ba:89:da:fd:0a:1e:65:c6:3f:31:3b:12:0a:54:b6:97: 6a:9e:69:02:87:45:53:1d:fe:68:6c:67:d7:a7:ce:5c:f7:b4: 9b:ab:27:ee:5a:56:5c:4e:98:67:b6:65:cd:08:b9:9f:40:97: 6f:60:f3:8a:a4:99:19:ca:7b:69:f7:76:ff:6f:e2:d8:9b:b7: 47:2f:98:f5:24:b3:be:7c:76:17:f8:9b:74:e3:91:b8:79:75: 48:7d:47:32:bf:87:f4:a3:22:f3:f1:00:28:93:fd:72:80:48: 00:f0:0f:dd:48:c8:d4:a7:ab:73:54:a7:ea:1c:35:91:49:b3: 6b:0f:52:bc:32:6a:75:85:d2:4f:97:d5:04:33:95:2b:75:0d: 0b:17:07:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXOCQqY9TUD5d/I4kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy NTc2MB4XDTI0MDUwODEzMDAzNFoXDTI0MDgwNjEzMDAzNFowLzEtMCsGA1UEAxMk YTkwNjEzYTctN2JmMy00MmIxLTk2YzktOGVmNGQ0MGE2YmI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ZPq0eydbBY7eP4xD9GLL1fXccwIYcfFoMCh SFC2FHyhU/kg6hFF63SueZISFPsxxQKYHt0sjP9Ezl7ffj1/A4R/OfgQYwXN0LHN MzD7AC8cdG3mk5yNSb1EQiP9UeCCa2OR74lOXv7EEShnltEH1UB3YBcCT5fUcXCe OzCAqGMRDxfAtif/ku2qUIPJyEfa+VgpRZ1qJ4NUFquEVQjWgbWqTB/u134w0T6I PJB2lY5pRIlWGdTA96yov+J3G8tCXrtOwKGFSmRGc/ZlExvpGgH+T/TZJmzfKnid s3Z0z92hA4u0muECmrdW9eCw5O2+ha8RcdSHr/857lbkuositwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMaPZ84CvS7QzqY6+6VkXff/lqwJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3 YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvNzJmMzhmMjYtM2Q5Zi0z MWZhLWFmZGMtMzVjNjRjNWMxYjZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3 YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0e3KMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIxgWKZ6NS17RozmRRqxQYwLw+ZZfxmPmPqBaozpSg1Y4WEfWB9StLLz uDmcP2x7nN+lLkxHudYufCc043Z4zNZrwwjisZibjlkCw36p9RNpu1IZPqp5dsss nQsfUuMKs0HdW2yGfbucDKLqDJdxuona/QoeZcY/MTsSClS2l2qeaQKHRVMd/mhs Z9enzlz3tJurJ+5aVlxOmGe2Zc0IuZ9Al29g84qkmRnKe2n3dv9v4tibt0cvmPUk s758dhf4m3Tjkbh5dUh9RzK/h/SjIvPxACiT/XKASADwD91IyNSnq3NUp+ocNZFJ s2sPUrwyanWF0k+X1QQzlSt1DQsXB6s= -----END CERTIFICATE-----Generated at Sat May 18 13:31:03 2024 by rpki-client on console-fra.rpki-client.org