$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/8658f928-bb2e-351c-baa0-b043397f7b78.roa File: 8658f928-bb2e-351c-baa0-b043397f7b78.roa (raw, json) Hash identifier: tb2KrGRBX2f7YdGEKu1YzlZm0WoFGsUiYISxenOXIEk= Subject key identifier: 5F:9E:DF:63:AA:68:B1:ED:39:09:1A:65:A6:62:8A:4F:FD:B4:F9:04 Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Certificate serial: 010D0C9F43285845CF6E3B6D623F6F86F9FA8CA0 Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/8658f928-bb2e-351c-baa0-b043397f7b78.roa Signing time: Thu 09 May 2024 01:00:26 +0000 ROA not before: Thu 09 May 2024 01:00:26 +0000 ROA not after: Wed 07 Aug 2024 01:00:26 +0000 asID: 13414 IP address blocks: 209.237.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:cf:6e:3b:6d:62:3f:6f:86:f9:fa:8c:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Validity Not Before: May 9 01:00:26 2024 GMT Not After : Aug 7 01:00:26 2024 GMT Subject: CN=1f386ac3-c2ee-4438-94b0-b1162173bbb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:47:e6:4b:30:e5:9d:34:30:f4:40:10:35:b3: 17:b3:01:44:43:ab:4a:6b:16:1c:87:a7:ac:20:34: 6a:cc:b7:f0:e5:cc:d4:93:36:96:5c:72:81:4e:32: e3:b5:5f:a8:14:fa:21:9f:38:02:ce:0f:80:a9:61: 58:5b:df:85:b6:dc:b4:28:e3:ef:26:76:cf:80:a3: b8:b1:89:fe:e5:83:8f:c2:f0:c5:31:71:29:56:78: e7:3d:74:e0:4a:fc:82:e4:da:4c:e0:5e:de:cc:90: 64:fd:33:5b:36:fe:89:a6:06:e4:78:5f:b8:8a:3f: 5a:6b:a3:7f:26:b6:0e:e3:38:15:b2:a9:f2:68:bb: 42:76:3c:32:89:b9:d7:e6:47:02:10:13:fa:3c:05: fa:b1:e1:52:6a:ba:5d:4b:da:8d:aa:5e:3e:79:df: 8d:31:ce:e0:1e:65:73:10:de:ca:02:b9:ee:c2:84: 88:9c:0d:c6:ce:fc:8e:c2:41:3c:69:fb:c2:f6:17: 35:64:4d:15:cc:dd:61:cb:b7:76:94:70:d9:be:79: 79:68:31:b8:43:70:b7:21:14:87:9e:3e:48:53:4f: ca:a3:0c:65:a8:36:1e:e7:52:24:ae:4b:f4:d3:74: 0b:f2:a2:96:06:73:07:0a:57:06:f3:a3:b3:f0:7f: 7d:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:9E:DF:63:AA:68:B1:ED:39:09:1A:65:A6:62:8A:4F:FD:B4:F9:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/8658f928-bb2e-351c-baa0-b043397f7b78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl X509v3 Authority Key Identifier: keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer sbgp-ipAddrBlock: critical IPv4: 209.237.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:56:c2:a8:e9:1e:e3:26:7e:73:80:81:97:c2:2c:ee:04:03: c9:e5:d3:bb:65:76:59:12:05:50:e0:f0:6c:cf:b8:c9:61:3e: c5:d2:27:08:0f:a5:22:b3:e4:27:8f:7e:e1:fa:3d:80:63:1a: 46:3c:4f:77:9d:49:40:36:1e:4e:05:5b:e5:3b:4b:af:0d:fc: d2:f4:77:3c:35:1d:e5:4e:06:5b:c7:0f:63:7f:26:a3:77:21: ca:3a:56:c3:ed:6d:1f:fe:af:2f:e7:7a:ac:ab:fe:bd:b3:49: f4:a0:24:f0:7b:fc:0a:08:48:91:27:b3:02:aa:f5:19:2e:8c: cc:d8:f9:52:22:f6:bc:38:1a:b0:80:e7:95:5f:4c:7b:1c:67: 34:d9:c7:3e:96:90:b1:e4:c4:98:c0:81:b2:2f:91:c1:79:7a: dd:6c:63:8a:1c:ab:b5:d1:bb:d8:6a:60:2e:1a:d8:45:e2:2a: a6:cf:96:f0:8e:23:ef:e2:51:cf:c0:58:6b:36:bc:29:d8:44: 73:c1:94:c0:aa:7f:a6:d6:57:10:d6:73:50:43:a5:02:c2:a4: eb:7b:82:6e:69:44:1b:5c:ac:4a:47:c6:17:49:75:13:fc:3e: 80:fb:88:63:38:1c:ca:ea:22:45:c7:94:86:23:cb:d2:94:51: 60:02:cb:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXPbjttYj9vhvn6jKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy NTc2MB4XDTI0MDUwOTAxMDAyNloXDTI0MDgwNzAxMDAyNlowLzEtMCsGA1UEAxMk MWYzODZhYzMtYzJlZS00NDM4LTk0YjAtYjExNjIxNzNiYmI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0fmSzDlnTQw9EAQNbMXswFEQ6tKaxYch6es IDRqzLfw5czUkzaWXHKBTjLjtV+oFPohnzgCzg+AqWFYW9+Ftty0KOPvJnbPgKO4 sYn+5YOPwvDFMXEpVnjnPXTgSvyC5NpM4F7ezJBk/TNbNv6JpgbkeF+4ij9aa6N/ JrYO4zgVsqnyaLtCdjwyibnX5kcCEBP6PAX6seFSarpdS9qNql4+ed+NMc7gHmVz EN7KArnuwoSInA3GzvyOwkE8afvC9hc1ZE0VzN1hy7d2lHDZvnl5aDG4Q3C3IRSH nj5IU0/KowxlqDYe51Ikrkv003QL8qKWBnMHClcG86Oz8H99KQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF+e32OqaLHtOQkaZaZiik/9tPkEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3 YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvODY1OGY5MjgtYmIyZS0z NTFjLWJhYTAtYjA0MzM5N2Y3Yjc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3 YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0e3eMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE9WwqjpHuMmfnOAgZfCLO4EA8nl07tldlkSBVDg8GzPuMlhPsXSJwgP pSKz5CePfuH6PYBjGkY8T3edSUA2Hk4FW+U7S68N/NL0dzw1HeVOBlvHD2N/JqN3 Ico6VsPtbR/+ry/neqyr/r2zSfSgJPB7/AoISJEnswKq9RkujMzY+VIi9rw4GrCA 55VfTHscZzTZxz6WkLHkxJjAgbIvkcF5et1sY4ocq7XRu9hqYC4a2EXiKqbPlvCO I+/iUc/AWGs2vCnYRHPBlMCqf6bWVxDWc1BDpQLCpOt7gm5pRBtcrEpHxhdJdRP8 PoD7iGM4HMrqIkXHlIYjy9KUUWACyw4= -----END CERTIFICATE-----Generated at Sat May 18 13:40:23 2024 by rpki-client on console-ams.rpki-client.org