$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/19b4e8e2-6d34-3ea5-91b5-8fb3918a6abe.roa File: 19b4e8e2-6d34-3ea5-91b5-8fb3918a6abe.roa (raw, json) Hash identifier: x6lPQ7f+5VFG+jJVBCeZ+BLGpqfqCF1Vpb29yZU2y/8= Subject key identifier: F6:37:23:B7:D3:78:EB:A4:0C:B0:D3:02:14:F0:E6:29:BF:98:18:08 Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Certificate serial: 010D0C9F4328584538AD44506A39D9FADC043000 Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/19b4e8e2-6d34-3ea5-91b5-8fb3918a6abe.roa Signing time: Sat 16 Mar 2024 01:00:25 +0000 ROA not before: Sat 16 Mar 2024 01:00:25 +0000 ROA not after: Fri 14 Jun 2024 01:00:25 +0000 asID: 10397 IP address blocks: 209.209.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 27 May 2024 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:38:ad:44:50:6a:39:d9:fa:dc:04:30:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Validity Not Before: Mar 16 01:00:25 2024 GMT Not After : Jun 14 01:00:25 2024 GMT Subject: CN=7fb02dc5-2722-4ec8-b396-00ae41c1223f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:1b:a9:0e:df:3c:b5:9e:56:3b:c9:74:72:4e: b1:be:d4:03:ec:78:e0:7c:40:2d:f0:eb:00:b6:7c: c9:73:d3:53:e9:63:cd:0b:24:58:4d:40:cb:12:47: cf:e0:66:c0:65:7d:88:13:35:0a:a6:c9:fe:70:7d: 1d:4f:cd:bb:0f:00:c9:38:dc:8d:32:58:95:33:db: 97:38:5a:17:b2:e0:3a:7a:7c:68:3a:13:49:33:28: 7e:d1:29:dd:70:63:eb:53:6a:b5:82:5b:dd:50:51: ee:63:15:ca:84:62:da:69:5a:f0:0d:e8:eb:ff:46: 0d:92:f1:e4:1b:aa:d1:70:15:52:54:90:10:6e:ce: 2b:4d:53:de:c7:c6:e1:7a:9d:38:b0:d6:33:79:6a: 2d:ac:7a:ea:26:f4:a2:48:a1:0c:0a:2a:88:60:bd: ba:75:7c:f8:28:1b:7f:f2:c6:6e:39:c8:3a:97:22: 17:ac:9d:01:8f:b0:c4:4e:59:eb:a4:c0:e5:76:ac: da:65:68:f3:95:3f:bd:c7:e5:49:8b:da:70:66:0a: 1e:95:ce:c3:74:37:6d:b6:ff:8e:7b:d7:45:fa:61: 54:b3:9e:c5:ea:ac:72:4c:55:25:39:e0:60:32:57: fc:4f:3a:75:15:9b:7f:ff:0a:d7:05:51:61:4d:50: a3:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:37:23:B7:D3:78:EB:A4:0C:B0:D3:02:14:F0:E6:29:BF:98:18:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/19b4e8e2-6d34-3ea5-91b5-8fb3918a6abe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl X509v3 Authority Key Identifier: keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer sbgp-ipAddrBlock: critical IPv4: 209.209.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:d4:a0:34:05:65:5d:15:53:a3:9b:40:67:a3:ab:bb:cd:0f: d2:d2:f1:94:e1:4f:3d:2c:d4:7d:d1:06:5a:de:b2:6a:f3:f4: 66:1d:fe:06:ef:fc:b6:f0:9e:c4:97:cb:4d:bc:4a:a4:1e:10: 24:3c:c8:ce:65:8d:6d:71:96:c3:b8:1e:f5:41:dd:be:ca:cf: 3b:01:e3:8c:31:12:a9:44:68:22:12:30:5b:0d:10:20:be:6d: 60:64:4e:a0:a1:fa:21:6b:b5:63:db:fa:85:fa:cb:65:55:38: d2:7e:60:22:f4:8c:b8:77:03:fd:35:59:b6:d7:31:e3:d6:42: 20:39:6f:a2:c3:a0:b0:88:9d:33:8b:f2:5a:0f:09:b8:12:77: 56:e9:7b:56:e4:fe:ac:2b:ec:1d:de:99:f4:38:f7:44:3d:f8: 32:9a:4e:f1:50:7d:f7:b1:00:0f:fe:a8:9d:cf:0b:b1:03:bf: 2d:39:86:93:09:f3:79:c2:63:d1:7e:23:3a:96:a4:3b:db:3a: 17:98:19:af:6c:18:84:76:cd:70:92:d1:02:4f:3e:99:09:9a: 33:bb:19:2d:0e:bb:89:1b:7d:65:fa:2b:fd:75:c1:eb:a7:e6: 66:fd:ec:e4:f6:f6:1c:88:0e:38:1d:e6:d4:8a:2f:01:a6:8f: 01:ca:98:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEU4rURQajnZ+twEMAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjNiYzZiNjQtY2E4My00NTI1LTlmMWItNTczMWI2YzY4 MzcwMB4XDTI0MDMxNjAxMDAyNVoXDTI0MDYxNDAxMDAyNVowLzEtMCsGA1UEAxMk N2ZiMDJkYzUtMjcyMi00ZWM4LWIzOTYtMDBhZTQxYzEyMjNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAihupDt88tZ5WO8l0ck6xvtQD7HjgfEAt8OsA tnzJc9NT6WPNCyRYTUDLEkfP4GbAZX2IEzUKpsn+cH0dT827DwDJONyNMliVM9uX OFoXsuA6enxoOhNJMyh+0SndcGPrU2q1glvdUFHuYxXKhGLaaVrwDejr/0YNkvHk G6rRcBVSVJAQbs4rTVPex8bhep04sNYzeWotrHrqJvSiSKEMCiqIYL26dXz4KBt/ 8sZuOcg6lyIXrJ0Bj7DETlnrpMDldqzaZWjzlT+9x+VJi9pwZgoelc7DdDdttv+O e9dF+mFUs57F6qxyTFUlOeBgMlf8Tzp1FZt//wrXBVFhTVCjmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPY3I7fTeOukDLDTAhTw5im/mBgIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mM2Jj NmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMxYjZjNjgzNzAvMTliNGU4ZTItNmQzNC0z ZWE1LTkxYjUtOGZiMzkxOGE2YWJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjNiYzZiNjQtY2E4My00NTI1LTlm MWItNTczMWI2YzY4MzcwL2YzYmM2YjY0LWNhODMtNDUyNS05ZjFiLTU3MzFiNmM2 ODM3MC5jcmwwHwYDVR0jBBgwFoAUGooG3FhpS+fgJJqk0bP6H9jgWx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mM2JjNmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMx YjZjNjgzNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0dGsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADrUoDQFZV0VU6ObQGejq7vND9LS8ZThTz0s1H3RBlresmrz9GYd/gbv /LbwnsSXy028SqQeECQ8yM5ljW1xlsO4HvVB3b7KzzsB44wxEqlEaCISMFsNECC+ bWBkTqCh+iFrtWPb+oX6y2VVONJ+YCL0jLh3A/01WbbXMePWQiA5b6LDoLCInTOL 8loPCbgSd1bpe1bk/qwr7B3emfQ490Q9+DKaTvFQffexAA/+qJ3PC7EDvy05hpMJ 83nCY9F+IzqWpDvbOheYGa9sGIR2zXCS0QJPPpkJmjO7GS0Ou4kbfWX6K/11weun 5mb97OT29hyIDjgd5tSKLwGmjwHKmP8= -----END CERTIFICATE-----Generated at Fri May 24 14:57:01 2024 by rpki-client on console-ams.rpki-client.org