$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/df938649-fe0c-3f68-86dd-87b8933d0a23.roa File: df938649-fe0c-3f68-86dd-87b8933d0a23.roa (raw, json) Hash identifier: EO7jf0ZqLQ5PoZI/JWbqNqcvi3j2J3RpC67Ln/UOk3I= Subject key identifier: 1D:91:33:AC:1F:DF:45:F9:FE:6C:3A:06:98:03:33:12:A5:38:FA:7C Certificate issuer: /CN=f63fbc75-bfbc-423c-991c-efb130c5d3df Certificate serial: 010D0C9F4328584531B29B67EFA7BC858D1B1200 Authority key identifier: 1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/df938649-fe0c-3f68-86dd-87b8933d0a23.roa Signing time: Wed 13 Mar 2024 13:00:30 +0000 ROA not before: Wed 13 Mar 2024 13:00:30 +0000 ROA not after: Tue 11 Jun 2024 13:00:30 +0000 asID: 36352 IP address blocks: 64.20.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 May 2024 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:31:b2:9b:67:ef:a7:bc:85:8d:1b:12:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f63fbc75-bfbc-423c-991c-efb130c5d3df Validity Not Before: Mar 13 13:00:30 2024 GMT Not After : Jun 11 13:00:30 2024 GMT Subject: CN=d8ee9bc4-d259-4f84-9421-d5b4a4c355af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:85:0b:d0:32:32:19:ad:00:75:67:3b:45:19: cb:d3:e3:7e:bf:6b:a2:84:35:f9:1a:60:fb:85:23: 46:d7:5b:c0:98:e4:34:76:6e:e9:72:8a:cc:81:20: 3c:b5:7b:93:12:76:ec:26:9b:ce:1e:2b:25:46:2c: e2:b7:e9:23:db:0c:18:79:db:8d:5e:06:9c:e1:3d: 20:2c:f7:d1:37:77:bc:f2:ea:31:a0:80:b0:e0:c7: 47:8b:e3:42:7c:68:40:58:95:61:38:81:3b:3d:96: 54:18:21:78:ff:0a:38:eb:c6:38:7e:97:30:a3:0a: a8:12:98:df:fe:51:a6:ea:d2:0b:88:52:b5:e1:9e: 21:5b:e9:09:11:05:ed:f8:0b:1c:df:c4:8e:fc:c6: 88:8a:a8:10:85:38:46:dc:d5:67:a1:b3:00:90:1c: e4:e0:a3:4a:27:c6:71:d4:fa:a0:e6:43:29:38:f1: 6b:80:16:91:81:f4:e1:9c:d2:24:48:08:9d:09:b7: 48:9f:ee:05:5c:52:df:22:c9:ac:f4:4b:6f:72:21: c3:eb:2f:8f:35:53:1c:db:55:4e:41:f3:5f:f7:90: 23:2a:b9:96:80:be:64:dd:8b:b8:e6:7f:aa:57:6a: a9:c4:25:82:b5:d1:93:27:76:e5:19:b9:6d:d9:f5: b6:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:91:33:AC:1F:DF:45:F9:FE:6C:3A:06:98:03:33:12:A5:38:FA:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/df938649-fe0c-3f68-86dd-87b8933d0a23.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.crl X509v3 Authority Key Identifier: keyid:1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer sbgp-ipAddrBlock: critical IPv4: 64.20.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:3b:a5:4e:c7:d5:33:a4:61:42:25:42:3f:c3:26:fd:40:f4: ea:d4:e9:1b:d3:b6:20:95:92:62:5a:57:1a:de:07:21:c0:e4: 86:3d:2c:1d:dd:21:0e:b2:8a:bb:af:7c:b2:14:0f:5d:b5:ae: 88:38:6c:8b:23:74:e4:b6:6c:db:13:46:bc:48:c5:e5:55:de: bd:f5:ac:36:b7:43:82:02:0d:fe:b8:0c:e5:68:e7:9f:ac:a0: 1b:9b:53:fd:6a:69:f8:ee:cd:dc:53:ac:42:0f:5a:e5:d5:87: 50:de:5f:25:9c:9a:f4:5a:d7:0d:2f:d1:fb:9b:f0:42:21:19: 05:49:78:7d:34:26:39:97:39:66:32:f6:9f:13:02:85:c7:c8: 49:16:96:e4:90:7a:08:27:bc:a5:bc:e4:15:95:68:24:d2:21: 16:42:3b:75:ec:e8:5a:dc:8b:38:59:9b:4e:95:c1:98:d7:16: a8:3e:21:1e:40:8d:3b:54:e9:4f:38:72:27:99:54:5b:42:7a: 09:e1:2b:99:5b:94:be:b3:e0:88:4c:2b:98:67:35:96:70:fb: 08:8d:09:e5:a3:ef:bc:6a:b5:29:01:e4:22:5b:36:10:21:d2: bd:8a:5f:fe:8f:60:ea:ff:75:66:1d:98:e2:32:55:2a:10:aa: 8d:54:43:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUxsptn76e8hY0bEgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYzZmJjNzUtYmZiYy00MjNjLTk5MWMtZWZiMTMwYzVk M2RmMB4XDTI0MDMxMzEzMDAzMFoXDTI0MDYxMTEzMDAzMFowLzEtMCsGA1UEAxMk ZDhlZTliYzQtZDI1OS00Zjg0LTk0MjEtZDViNGE0YzM1NWFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYUL0DIyGa0AdWc7RRnL0+N+v2uihDX5GmD7 hSNG11vAmOQ0dm7pcorMgSA8tXuTEnbsJpvOHislRizit+kj2wwYeduNXgac4T0g LPfRN3e88uoxoICw4MdHi+NCfGhAWJVhOIE7PZZUGCF4/wo468Y4fpcwowqoEpjf /lGm6tILiFK14Z4hW+kJEQXt+Asc38SO/MaIiqgQhThG3NVnobMAkBzk4KNKJ8Zx 1Pqg5kMpOPFrgBaRgfThnNIkSAidCbdIn+4FXFLfIsms9EtvciHD6y+PNVMc21VO QfNf95AjKrmWgL5k3Yu45n+qV2qpxCWCtdGTJ3blGblt2fW2aQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB2RM6wf30X5/mw6BpgDMxKlOPp8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mNjNm YmM3NS1iZmJjLTQyM2MtOTkxYy1lZmIxMzBjNWQzZGYvZGY5Mzg2NDktZmUwYy0z ZjY4LTg2ZGQtODdiODkzM2QwYTIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjYzZmJjNzUtYmZiYy00MjNjLTk5 MWMtZWZiMTMwYzVkM2RmL2Y2M2ZiYzc1LWJmYmMtNDIzYy05OTFjLWVmYjEzMGM1 ZDNkZi5jcmwwHwYDVR0jBBgwFoAUH0xpGYOm2R2sLU0+2r3c40zpjDIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mNjNmYmM3NS1iZmJjLTQyM2MtOTkxYy1lZmIx MzBjNWQzZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBTRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACc7pU7H1TOkYUIlQj/DJv1A9OrU6RvTtiCVkmJaVxreByHA5IY9LB3d IQ6yiruvfLIUD121rog4bIsjdOS2bNsTRrxIxeVV3r31rDa3Q4ICDf64DOVo55+s oBubU/1qafjuzdxTrEIPWuXVh1DeXyWcmvRa1w0v0fub8EIhGQVJeH00JjmXOWYy 9p8TAoXHyEkWluSQeggnvKW85BWVaCTSIRZCO3Xs6FrcizhZm06VwZjXFqg+IR5A jTtU6U84cieZVFtCegnhK5lblL6z4IhMK5hnNZZw+wiNCeWj77xqtSkB5CJbNhAh 0r2KX/6PYOr/dWYdmOIyVSoQqo1UQ24= -----END CERTIFICATE-----Generated at Mon May 6 15:15:08 2024 by rpki-client on console-ams.rpki-client.org