$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f18747e6-7bea-32fa-877d-0db804fae88a.roa File: f18747e6-7bea-32fa-877d-0db804fae88a.roa (raw, json) Hash identifier: XJ7QGP+JJP3GM6fOY5wJEppeBx/FyNyuGPRtnodosaw= Subject key identifier: 7D:60:3E:76:B6:D5:84:0B:1E:F2:C9:65:B1:69:60:F4:55:F7:6A:65 Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Certificate serial: 010D0C9F43285845304D3A13301DECBBA6826A00 Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f18747e6-7bea-32fa-877d-0db804fae88a.roa Signing time: Wed 13 Mar 2024 01:00:26 +0000 ROA not before: Wed 13 Mar 2024 01:00:26 +0000 ROA not after: Tue 11 Jun 2024 01:00:26 +0000 asID: 10397 IP address blocks: 209.209.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:30:4d:3a:13:30:1d:ec:bb:a6:82:6a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Validity Not Before: Mar 13 01:00:26 2024 GMT Not After : Jun 11 01:00:26 2024 GMT Subject: CN=e5b9f7c0-16f0-470f-b4c9-f6ef7d111b72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:12:c2:0d:cf:72:a8:9d:13:44:48:1e:cf:a8: 0f:fe:ee:9d:d7:5e:d1:54:c1:92:7f:b4:29:90:e0: 72:e4:e2:9e:9f:0a:c7:0c:91:95:bd:95:4a:07:f1: ed:f8:8a:bd:b6:af:71:6d:db:77:ac:72:28:39:f5: 7f:20:df:a2:c3:1c:6a:3a:9a:5c:26:06:7f:e2:d9: ba:40:73:f1:4f:44:e5:9d:77:54:3c:36:ae:3b:b6: 90:4c:78:df:4b:17:45:0d:c0:e4:0c:8f:c2:eb:ac: 13:0f:17:72:a7:9d:2b:af:05:b2:b6:43:07:ab:70: 0c:bd:26:3d:fe:8a:d9:70:8f:ef:8d:bf:f4:4e:c8: ce:65:6d:f0:8d:c3:54:b5:9b:47:cb:2e:2b:c8:15: 64:4c:31:7b:b8:1b:5c:25:26:14:af:91:8b:67:80: 14:84:7b:cd:b3:4d:98:d7:4a:45:7e:cc:02:fc:c6: 6a:1b:e5:b0:a6:d0:01:e8:0f:43:36:11:30:15:6c: c9:0b:d2:18:01:7a:5c:d1:b3:d0:e3:1a:ea:c1:55: 17:19:25:9a:44:0e:60:19:24:60:da:a2:08:55:55: df:c7:35:a4:e5:10:b9:f3:72:8e:f9:0e:66:03:14: 2c:75:ce:df:01:0c:8f:44:8e:fd:c6:3e:8a:11:86: 19:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:60:3E:76:B6:D5:84:0B:1E:F2:C9:65:B1:69:60:F4:55:F7:6A:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f18747e6-7bea-32fa-877d-0db804fae88a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl X509v3 Authority Key Identifier: keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer sbgp-ipAddrBlock: critical IPv4: 209.209.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:7b:81:a5:47:52:59:65:1e:56:38:5d:6f:10:c5:67:2f:34: 2b:06:cb:5f:a0:65:b3:9c:5b:91:73:f1:ff:d3:de:dc:36:27: 37:da:fe:1e:38:49:62:ce:72:ea:e4:2c:0b:2a:71:fc:88:4d: 30:95:2f:00:97:05:bb:d4:15:57:e3:45:7b:dc:4d:c4:59:ab: d1:2d:f1:3e:cd:7a:24:e6:4f:f1:24:b3:a1:2f:a9:71:43:91: 9d:a9:94:33:6e:88:ed:4a:0a:9e:2d:40:b1:1f:6a:9a:b3:28: ad:3a:16:ac:15:e2:2b:52:e6:b1:1f:1d:74:b6:56:0f:4a:4b: ac:e8:26:2b:a0:44:95:74:18:8c:76:97:63:21:64:81:ce:51: e6:e9:76:db:65:27:22:18:fa:39:f5:53:e9:59:e1:91:a9:01: 67:af:7a:02:71:5b:63:c4:ba:37:c3:0c:ca:62:bc:5f:93:8e: 43:73:65:5c:03:52:73:8f:9c:d9:56:b7:5b:96:d3:ca:c6:a5: 87:fb:cd:32:ca:76:82:0e:da:19:b5:24:a7:ab:cb:63:5f:ab: 33:d4:ec:05:16:0d:92:f2:5a:21:57:10:27:62:a5:00:f6:0f: f0:f8:58:3d:4a:7f:4d:dd:51:25:7e:57:73:69:56:7f:29:fb: c2:1c:c7:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUwTToTMB3su6aCagAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjNiYzZiNjQtY2E4My00NTI1LTlmMWItNTczMWI2YzY4 MzcwMB4XDTI0MDMxMzAxMDAyNloXDTI0MDYxMTAxMDAyNlowLzEtMCsGA1UEAxMk ZTViOWY3YzAtMTZmMC00NzBmLWI0YzktZjZlZjdkMTExYjcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiBLCDc9yqJ0TREgez6gP/u6d117RVMGSf7Qp kOBy5OKenwrHDJGVvZVKB/Ht+Iq9tq9xbdt3rHIoOfV/IN+iwxxqOppcJgZ/4tm6 QHPxT0TlnXdUPDauO7aQTHjfSxdFDcDkDI/C66wTDxdyp50rrwWytkMHq3AMvSY9 /orZcI/vjb/0TsjOZW3wjcNUtZtHyy4ryBVkTDF7uBtcJSYUr5GLZ4AUhHvNs02Y 10pFfswC/MZqG+WwptAB6A9DNhEwFWzJC9IYAXpc0bPQ4xrqwVUXGSWaRA5gGSRg 2qIIVVXfxzWk5RC583KO+Q5mAxQsdc7fAQyPRI79xj6KEYYZSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH1gPna21YQLHvLJZbFpYPRV92plMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mM2Jj NmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMxYjZjNjgzNzAvZjE4NzQ3ZTYtN2JlYS0z MmZhLTg3N2QtMGRiODA0ZmFlODhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjNiYzZiNjQtY2E4My00NTI1LTlm MWItNTczMWI2YzY4MzcwL2YzYmM2YjY0LWNhODMtNDUyNS05ZjFiLTU3MzFiNmM2 ODM3MC5jcmwwHwYDVR0jBBgwFoAUGooG3FhpS+fgJJqk0bP6H9jgWx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mM2JjNmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMx YjZjNjgzNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0dGqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGR7gaVHUlllHlY4XW8QxWcvNCsGy1+gZbOcW5Fz8f/T3tw2Jzfa/h44 SWLOcurkLAsqcfyITTCVLwCXBbvUFVfjRXvcTcRZq9Et8T7NeiTmT/Eks6EvqXFD kZ2plDNuiO1KCp4tQLEfapqzKK06FqwV4itS5rEfHXS2Vg9KS6zoJiugRJV0GIx2 l2MhZIHOUebpdttlJyIY+jn1U+lZ4ZGpAWevegJxW2PEujfDDMpivF+TjkNzZVwD UnOPnNlWt1uW08rGpYf7zTLKdoIO2hm1JKery2NfqzPU7AUWDZLyWiFXECdipQD2 D/D4WD1Kf03dUSV+V3NpVn8p+8Icx5Q= -----END CERTIFICATE-----Generated at Sat May 18 13:41:13 2024 by rpki-client on console-ams.rpki-client.org