$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/966134d8-1fc4-30cd-a882-fabc6c02c9af.roa File: 966134d8-1fc4-30cd-a882-fabc6c02c9af.roa (raw, json) Hash identifier: oHGfQcOckfkaxnfwdubcga5ftnXd2eQXGtjhFvvgG3g= Subject key identifier: B8:50:76:66:97:8D:6B:18:D9:4D:58:A4:7A:99:B2:A9:92:69:E2:C4 Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Certificate serial: 010D0C9F43285845CE08EF615876211407641000 Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/966134d8-1fc4-30cd-a882-fabc6c02c9af.roa Signing time: Wed 08 May 2024 13:00:34 +0000 ROA not before: Wed 08 May 2024 13:00:34 +0000 ROA not after: Tue 06 Aug 2024 13:00:34 +0000 asID: 13414 IP address blocks: 209.237.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:ce:08:ef:61:58:76:21:14:07:64:10:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Validity Not Before: May 8 13:00:34 2024 GMT Not After : Aug 6 13:00:34 2024 GMT Subject: CN=f1e7f617-d0e8-47e9-959d-28913a2b4285 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:d2:d1:64:bc:75:92:7c:be:7e:cd:4a:f2:ec: 42:45:3b:11:93:d5:9c:98:ff:0a:e1:11:59:63:4b: df:23:a6:86:ed:cc:62:09:8f:5c:b2:3a:d3:44:e4: 46:2c:07:0e:57:ba:09:6c:e0:c7:ec:53:36:c3:0d: c1:96:28:86:2b:8c:a8:a0:24:cd:36:74:88:8b:c0: a5:8f:ea:50:37:16:16:bc:f9:ac:fd:da:1c:7b:1e: be:7b:2f:ff:b7:3a:ab:46:c2:c3:77:62:9c:3f:df: d7:bd:9c:f6:48:ff:21:d1:fa:f6:ab:f5:06:22:f6: 8a:d2:5f:18:4a:86:86:d3:4d:de:30:a4:1d:b5:c9: c6:ff:24:49:5b:64:af:ee:2f:7c:36:dd:47:5e:72: 5a:9f:c8:07:b1:a2:86:e1:1f:10:5b:08:c9:80:7c: 4c:7e:d3:64:fd:64:f3:24:fa:9a:d0:93:43:3b:00: 58:f4:bf:e9:60:ee:df:55:01:53:29:ce:e0:ba:2a: 55:95:32:75:db:94:f6:d5:15:74:38:d5:ac:14:a3: c8:1d:88:e9:40:4e:c7:bb:a9:b8:67:f4:d5:22:f1: e4:03:61:7a:1c:15:f1:9f:a1:e1:b0:e3:e7:86:3e: 89:29:c8:0d:7a:af:fd:e5:26:97:4c:56:2e:b4:20: a0:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:50:76:66:97:8D:6B:18:D9:4D:58:A4:7A:99:B2:A9:92:69:E2:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/966134d8-1fc4-30cd-a882-fabc6c02c9af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl X509v3 Authority Key Identifier: keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer sbgp-ipAddrBlock: critical IPv4: 209.237.193.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:3c:59:00:98:94:4f:50:af:fb:84:3b:bc:f4:2e:69:d8:05: c8:8e:79:a2:59:e6:42:9c:e9:f0:1e:a8:93:c0:60:bb:8d:72: 1d:d9:19:00:c1:5e:5d:f6:8d:2f:b3:95:72:53:e0:f5:6b:a7: 7c:9b:3b:6b:39:2a:31:82:95:7b:ef:9c:08:8a:de:36:1b:39: 86:b3:22:18:ca:72:75:c6:10:21:63:ef:5d:d7:af:88:16:00: 56:c9:39:96:8c:1b:0e:91:a6:a9:4e:ed:4b:6f:24:cd:3b:c3: 97:38:f8:d1:b9:06:a9:04:14:ed:82:c0:81:ef:4b:ae:85:da: de:a7:3b:29:3d:91:33:bd:0e:64:aa:ec:37:4d:45:5b:68:cc: 47:d3:8a:2a:5e:42:8e:6c:aa:b7:90:ad:a2:37:84:94:52:94: 38:8a:55:d3:27:41:e7:80:9b:ba:b4:05:8f:a9:9d:07:ef:77: f5:e0:fb:74:1b:86:e9:72:42:75:60:4e:89:89:58:f3:3d:20: 52:b4:bc:e1:dd:bf:c4:75:ab:2b:9e:b0:5f:56:98:15:20:06: c7:e6:b2:c3:33:49:9b:d4:36:d0:20:4f:7a:0e:28:7a:6b:d4: 8f:4b:c5:84:8c:1b:5d:14:c8:1e:67:7b:94:9d:d8:93:b0:cc: 27:23:13:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXOCO9hWHYhFAdkEAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy NTc2MB4XDTI0MDUwODEzMDAzNFoXDTI0MDgwNjEzMDAzNFowLzEtMCsGA1UEAxMk ZjFlN2Y2MTctZDBlOC00N2U5LTk1OWQtMjg5MTNhMmI0Mjg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9LRZLx1kny+fs1K8uxCRTsRk9WcmP8K4RFZ Y0vfI6aG7cxiCY9csjrTRORGLAcOV7oJbODH7FM2ww3BliiGK4yooCTNNnSIi8Cl j+pQNxYWvPms/docex6+ey//tzqrRsLDd2KcP9/XvZz2SP8h0fr2q/UGIvaK0l8Y SoaG003eMKQdtcnG/yRJW2Sv7i98Nt1HXnJan8gHsaKG4R8QWwjJgHxMftNk/WTz JPqa0JNDOwBY9L/pYO7fVQFTKc7guipVlTJ125T21RV0ONWsFKPIHYjpQE7Hu6m4 Z/TVIvHkA2F6HBXxn6HhsOPnhj6JKcgNeq/95SaXTFYutCCgPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLhQdmaXjWsY2U1YpHqZsqmSaeLEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3 YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvOTY2MTM0ZDgtMWZjNC0z MGNkLWE4ODItZmFiYzZjMDJjOWFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3 YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0e3BMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGY8WQCYlE9Qr/uEO7z0LmnYBciOeaJZ5kKc6fAeqJPAYLuNch3ZGQDB Xl32jS+zlXJT4PVrp3ybO2s5KjGClXvvnAiK3jYbOYazIhjKcnXGECFj713Xr4gW AFbJOZaMGw6RpqlO7UtvJM07w5c4+NG5BqkEFO2CwIHvS66F2t6nOyk9kTO9DmSq 7DdNRVtozEfTiipeQo5sqreQraI3hJRSlDiKVdMnQeeAm7q0BY+pnQfvd/Xg+3Qb hulyQnVgTomJWPM9IFK0vOHdv8R1qyuesF9WmBUgBsfmssMzSZvUNtAgT3oOKHpr 1I9LxYSMG10UyB5ne5Sd2JOwzCcjEyk= -----END CERTIFICATE-----Generated at Sat May 18 13:40:23 2024 by rpki-client on console-ams.rpki-client.org