$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/35a49db3-a778-3bfc-877a-c9cea9e5abd3.roa File: 35a49db3-a778-3bfc-877a-c9cea9e5abd3.roa (raw, json) Hash identifier: TUqyV4LBPag7m/LWvDJyNfvzLiVLOC8idU3HcYwAA/Y= Subject key identifier: 6C:7F:20:16:5C:97:98:0D:42:33:67:25:39:88:D9:F8:71:AF:48:22 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F432858453317E7F1C43BF5C0CF71F200 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/35a49db3-a778-3bfc-877a-c9cea9e5abd3.roa Signing time: Thu 14 Mar 2024 01:00:25 +0000 ROA not before: Thu 14 Mar 2024 01:00:25 +0000 ROA not after: Wed 12 Jun 2024 01:00:25 +0000 asID: 7861 IP address blocks: 209.20.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:33:17:e7:f1:c4:3b:f5:c0:cf:71:f2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Mar 14 01:00:25 2024 GMT Not After : Jun 12 01:00:25 2024 GMT Subject: CN=dc8a1bf7-7fe6-4b66-ba5f-078f91d18542 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:25:75:0c:39:ea:6b:1c:05:1a:57:ed:45:d1: 96:19:37:e7:cd:24:2d:23:5c:7a:44:b0:c8:58:6f: 4b:e0:e9:b1:f0:a2:e0:da:7f:af:b0:a7:0d:6d:4a: 1c:ae:5f:63:66:09:57:70:e7:a3:12:07:5f:2a:26: 1e:52:d8:d8:a8:b6:05:cb:8b:0d:15:3c:87:19:35: 30:eb:fe:2a:8d:fd:82:52:47:97:c6:20:e7:70:31: 8e:35:c7:19:3f:f1:16:71:b7:0e:b5:94:53:15:d9: 06:cf:9f:23:54:ab:3c:a2:5f:cf:e1:7d:fb:81:75: 39:6a:83:b3:38:74:fe:78:84:eb:4d:32:df:73:ac: 84:7d:d9:e3:d3:3a:02:07:7b:57:87:22:81:e7:3b: 7f:2d:fa:1f:5c:3d:c8:36:35:9d:fa:78:41:6b:a6: b1:a8:12:bc:dd:95:fc:16:60:2d:dd:3e:3f:76:96: a6:13:5c:b2:0a:7c:9e:3e:7c:11:b0:03:48:ad:c2: 9a:e7:79:86:56:94:33:ef:7c:a6:7d:12:45:50:b5: 0b:ee:31:bb:6f:f5:cf:c9:7b:02:0e:25:3c:a0:68: 93:6e:51:a2:78:fa:5d:a5:4d:0d:dc:92:ee:4a:36: 69:f9:5e:66:3c:33:dd:50:05:20:22:42:7d:c9:26: 59:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:7F:20:16:5C:97:98:0D:42:33:67:25:39:88:D9:F8:71:AF:48:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/35a49db3-a778-3bfc-877a-c9cea9e5abd3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.20.31.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:33:70:8d:d0:58:9c:b9:43:ea:06:35:64:ee:d5:d2:c3:0e: 73:2e:1e:9e:ab:5d:48:21:cf:01:78:d3:08:3b:73:b9:a5:62: c7:8a:8c:40:05:5b:84:02:ac:0c:9b:44:ca:bb:f9:dd:fa:ac: 83:bd:84:2a:f1:b8:5d:bb:0c:e0:4d:89:30:32:82:d2:55:7d: c4:72:fe:39:f6:78:ee:1f:26:21:48:ac:14:69:ab:5f:2a:12: 3f:47:80:8b:87:fb:53:97:37:af:8d:c2:4f:be:5a:cb:ec:84: 28:87:fc:cf:68:7f:25:3e:69:d0:a7:a3:5f:af:c2:70:6c:f1: 44:41:cc:fb:07:bb:f8:00:8e:e3:89:f1:18:c0:3a:a8:da:d6: 60:0c:61:c3:fa:3b:0a:26:92:cb:ac:0a:20:fd:51:de:a9:d6: 2c:32:d0:b6:1d:d8:08:6a:c5:27:c0:98:4b:09:9d:21:82:09: 2a:5a:de:fb:44:53:b3:99:24:a6:c8:f4:67:be:b4:03:d7:a1: 90:89:c1:be:16:7a:69:f7:ae:4d:1e:b2:8e:f5:6f:20:cc:14: 58:41:e4:0f:7b:c4:84:67:ca:b6:2b:75:f7:2f:b7:ee:ad:4a: c2:ce:68:d3:22:b2:2b:2b:eb:74:3e:70:44:96:9e:90:d3:1c: 6b:83:5b:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUzF+fxxDv1wM9x8gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI0MDMxNDAxMDAyNVoXDTI0MDYxMjAxMDAyNVowLzEtMCsGA1UEAxMk ZGM4YTFiZjctN2ZlNi00YjY2LWJhNWYtMDc4ZjkxZDE4NTQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgiV1DDnqaxwFGlftRdGWGTfnzSQtI1x6RLDI WG9L4Omx8KLg2n+vsKcNbUocrl9jZglXcOejEgdfKiYeUtjYqLYFy4sNFTyHGTUw 6/4qjf2CUkeXxiDncDGONccZP/EWcbcOtZRTFdkGz58jVKs8ol/P4X37gXU5aoOz OHT+eITrTTLfc6yEfdnj0zoCB3tXhyKB5zt/LfofXD3INjWd+nhBa6axqBK83ZX8 FmAt3T4/dpamE1yyCnyePnwRsANIrcKa53mGVpQz73ymfRJFULUL7jG7b/XPyXsC DiU8oGiTblGiePpdpU0N3JLuSjZp+V5mPDPdUAUgIkJ9ySZZjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGx/IBZcl5gNQjNnJTmI2fhxr0giMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMzVhNDlkYjMtYTc3OC0z YmZjLTg3N2EtYzljZWE5ZTVhYmQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0RQfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIAzcI3QWJy5Q+oGNWTu1dLDDnMuHp6rXUghzwF40wg7c7mlYseKjEAF W4QCrAybRMq7+d36rIO9hCrxuF27DOBNiTAygtJVfcRy/jn2eO4fJiFIrBRpq18q Ej9HgIuH+1OXN6+Nwk++WsvshCiH/M9ofyU+adCno1+vwnBs8URBzPsHu/gAjuOJ 8RjAOqja1mAMYcP6OwomksusCiD9Ud6p1iwy0LYd2AhqxSfAmEsJnSGCCSpa3vtE U7OZJKbI9Ge+tAPXoZCJwb4Wemn3rk0eso71byDMFFhB5A97xIRnyrYrdfcvt+6t SsLOaNMisisr63Q+cESWnpDTHGuDW+A= -----END CERTIFICATE-----Generated at Sun May 19 01:55:02 2024 by rpki-client on console-fra.rpki-client.org