$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/3cd4923c-6128-376c-8446-baffa366fd39.roa File: 3cd4923c-6128-376c-8446-baffa366fd39.roa (raw, json) Hash identifier: ckhMItR0I+sy0ZTVNGg7bOOXoFzc2N4dZgDaf9cmoxk= Subject key identifier: 46:9D:5B:13:36:07:62:57:7A:23:47:7D:07:34:13:5F:07:67:ED:FF Certificate issuer: /CN=cf09e191-1cb7-4650-95d6-4e24c0aec69d Certificate serial: 010D0C9F43285845A9BE0CCEEFD74FD9DCD07780 Authority key identifier: C7:0D:A7:D7:72:A3:30:C8:8F:00:B9:98:15:AE:E9:72:6D:03:1A:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/3cd4923c-6128-376c-8446-baffa366fd39.roa Signing time: Thu 25 Apr 2024 13:00:33 +0000 ROA not before: Thu 25 Apr 2024 13:00:33 +0000 ROA not after: Wed 24 Jul 2024 13:00:33 +0000 asID: 14618 IP address blocks: 208.90.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/cf09e191-1cb7-4650-95d6-4e24c0aec69d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/cf09e191-1cb7-4650-95d6-4e24c0aec69d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:a9:be:0c:ce:ef:d7:4f:d9:dc:d0:77:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf09e191-1cb7-4650-95d6-4e24c0aec69d Validity Not Before: Apr 25 13:00:33 2024 GMT Not After : Jul 24 13:00:33 2024 GMT Subject: CN=a9e08925-f4f2-4b41-8823-362ab0b44cea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e1:b8:83:cc:94:f4:36:0f:3f:c9:f2:57:53: ee:4d:63:d8:11:1e:ad:e1:90:ed:31:8f:97:4d:11: 53:28:82:f2:75:69:52:21:99:10:a3:9b:10:9c:a8: 5e:df:f0:7d:a0:88:60:78:b5:c7:88:60:e2:79:39: 75:2c:12:5a:3f:8d:d3:72:db:b1:4e:9e:64:04:b5: e1:7e:a6:f9:4a:77:a4:47:62:c6:1c:55:64:6f:63: ab:23:1b:7b:c6:2e:72:b4:2d:03:00:c5:5c:0e:32: 02:d1:66:f2:c0:69:67:2f:59:70:12:44:8d:40:90: c9:c1:d1:75:62:2e:96:53:3a:a1:ca:f9:c6:5d:4a: cc:cf:d9:86:ce:aa:90:02:55:fe:13:4e:3c:11:f1: af:e6:71:72:01:8f:50:e7:8e:21:96:ca:99:00:db: 74:37:49:8d:72:b0:38:6b:26:87:4b:50:6a:29:44: 29:ce:12:a7:37:0a:42:b3:77:19:c2:f8:2d:d0:b2: 3b:7c:a7:99:f1:80:7b:74:75:72:85:e1:6b:3e:2f: 6f:3c:76:27:7a:24:6c:d2:28:9d:de:01:77:a3:1e: ae:90:89:88:15:21:4f:f5:fe:93:19:23:df:52:e6: 72:b5:ab:3a:22:74:b7:75:ad:1b:4d:ae:44:0e:f7: 88:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:9D:5B:13:36:07:62:57:7A:23:47:7D:07:34:13:5F:07:67:ED:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/3cd4923c-6128-376c-8446-baffa366fd39.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/cf09e191-1cb7-4650-95d6-4e24c0aec69d.crl X509v3 Authority Key Identifier: keyid:C7:0D:A7:D7:72:A3:30:C8:8F:00:B9:98:15:AE:E9:72:6D:03:1A:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d.cer sbgp-ipAddrBlock: critical IPv4: 208.90.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:c1:e7:84:91:21:5b:ff:98:23:59:18:7b:99:1c:b4:89:57: e4:c5:49:2b:5b:31:5a:ea:63:6e:9c:5f:de:d3:ab:64:60:f6: 6f:18:52:79:21:5e:96:c5:70:b6:20:a2:7a:b4:02:dc:3f:a4: dc:49:6e:c1:27:8b:82:f4:2f:37:d1:a9:55:59:a6:bf:b7:90: 6d:c6:54:cf:8a:69:0f:b9:55:34:05:b3:7c:96:52:3e:0d:73: 9c:59:4a:df:2e:58:b5:23:f0:72:63:a9:f7:6c:62:a7:5d:f9: f8:cc:d1:1a:44:47:da:2c:b9:ab:37:f3:9b:46:96:54:8f:e9: e5:a3:a4:a5:f2:18:85:0b:7d:60:4e:a3:11:6d:3c:8d:62:4f: a9:1d:8c:ae:68:00:63:97:62:3d:3d:ce:39:bf:47:f2:6a:92: 5d:03:c2:ab:f4:bb:9b:29:4d:cf:fd:2d:05:19:7c:29:f8:e8: 18:6d:83:36:e3:47:5f:f8:7a:53:19:79:b1:38:50:c6:3a:94: 62:34:e2:0e:44:6a:02:a3:42:58:ae:d1:f8:67:76:fa:60:6c: ef:73:66:99:b6:ff:c0:4e:84:e7:e5:ba:1b:db:71:d0:5b:11: f4:00:11:1e:a8:41:b4:6f:7d:1f:59:fc:fc:5e:de:94:15:24: 3f:f2:c7:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWpvgzO79dP2dzQd4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2YwOWUxOTEtMWNiNy00NjUwLTk1ZDYtNGUyNGMwYWVj NjlkMB4XDTI0MDQyNTEzMDAzM1oXDTI0MDcyNDEzMDAzM1owLzEtMCsGA1UEAxMk YTllMDg5MjUtZjRmMi00YjQxLTg4MjMtMzYyYWIwYjQ0Y2VhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAseG4g8yU9DYPP8nyV1PuTWPYER6t4ZDtMY+X TRFTKILydWlSIZkQo5sQnKhe3/B9oIhgeLXHiGDieTl1LBJaP43TctuxTp5kBLXh fqb5SnekR2LGHFVkb2OrIxt7xi5ytC0DAMVcDjIC0WbywGlnL1lwEkSNQJDJwdF1 Yi6WUzqhyvnGXUrMz9mGzqqQAlX+E048EfGv5nFyAY9Q544hlsqZANt0N0mNcrA4 ayaHS1BqKUQpzhKnNwpCs3cZwvgt0LI7fKeZ8YB7dHVyheFrPi9vPHYneiRs0iid 3gF3ox6ukImIFSFP9f6TGSPfUuZytas6InS3da0bTa5EDveIMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEadWxM2B2JXeiNHfQc0E18HZ+3/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZjA5 ZTE5MS0xY2I3LTQ2NTAtOTVkNi00ZTI0YzBhZWM2OWQvM2NkNDkyM2MtNjEyOC0z NzZjLTg0NDYtYmFmZmEzNjZmZDM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2YwOWUxOTEtMWNiNy00NjUwLTk1 ZDYtNGUyNGMwYWVjNjlkL2NmMDllMTkxLTFjYjctNDY1MC05NWQ2LTRlMjRjMGFl YzY5ZC5jcmwwHwYDVR0jBBgwFoAUxw2n13KjMMiPALmYFa7pcm0DGqgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jZjA5ZTE5MS0xY2I3LTQ2NTAtOTVkNi00ZTI0 YzBhZWM2OWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FruMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHXB54SRIVv/mCNZGHuZHLSJV+TFSStbMVrqY26cX97Tq2Rg9m8YUnkh XpbFcLYgonq0Atw/pNxJbsEni4L0LzfRqVVZpr+3kG3GVM+KaQ+5VTQFs3yWUj4N c5xZSt8uWLUj8HJjqfdsYqdd+fjM0RpER9osuas385tGllSP6eWjpKXyGIULfWBO oxFtPI1iT6kdjK5oAGOXYj09zjm/R/Jqkl0Dwqv0u5spTc/9LQUZfCn46Bhtgzbj R1/4elMZebE4UMY6lGI04g5EagKjQliu0fhndvpgbO9zZpm2/8BOhOfluhvbcdBb EfQAER6oQbRvfR9Z/Pxe3pQVJD/yx00= -----END CERTIFICATE-----Generated at Sun May 5 16:31:29 2024 by rpki-client on console-fra.rpki-client.org