$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f4168cf-189e-31fc-8ad6-098547940f9d.roa File: 3f4168cf-189e-31fc-8ad6-098547940f9d.roa (raw, json) Hash identifier: EwUD6X4Irvd5QkG81a+KUNrGVPquGVJUMfdU0SHPAVQ= Subject key identifier: 94:B0:92:49:E1:2C:83:C5:65:90:4D:71:C4:09:48:CA:53:13:4F:A9 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285845347D45266E8FE92C1F2F67CC Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f4168cf-189e-31fc-8ad6-098547940f9d.roa Signing time: Thu 14 Mar 2024 13:00:30 +0000 ROA not before: Thu 14 Mar 2024 13:00:30 +0000 ROA not after: Wed 12 Jun 2024 13:00:30 +0000 asID: 7861 IP address blocks: 209.20.38.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:34:7d:45:26:6e:8f:e9:2c:1f:2f:67:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Mar 14 13:00:30 2024 GMT Not After : Jun 12 13:00:30 2024 GMT Subject: CN=9f532cd6-ca27-46c4-9ee9-b9cbd7024d16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:62:d0:48:eb:d4:7e:98:19:f4:7e:9d:84:f8: 0e:e5:a9:05:a3:c1:28:8b:f7:6a:f0:71:8f:87:7a: f2:b9:ec:cc:30:cb:4d:a5:9b:be:02:8c:99:f1:0c: 14:a6:e0:2a:a5:69:4d:75:2b:1c:2f:2e:ed:52:3b: d7:b0:c4:9e:8b:1c:1e:93:51:8a:2a:c0:8a:8e:94: f7:0b:72:81:7e:e6:45:fb:ba:0c:44:99:d3:35:77: c6:dc:cf:e1:89:a2:07:94:18:88:ce:ee:cf:e5:75: 9b:d7:72:5a:43:e4:b9:9e:53:f8:e9:fd:fd:98:72: 3a:24:27:98:74:b8:90:1b:98:1d:b1:60:c9:75:1c: 6b:b6:9e:84:30:a4:b2:91:84:ea:19:1d:be:a8:95: 6e:e8:94:e2:fc:ef:bf:38:9d:af:cb:2b:b8:d6:5a: 93:b5:c1:a1:95:86:c1:0a:be:65:43:d4:86:a8:5e: f0:38:2e:4c:8f:27:96:fd:76:de:7e:f4:44:2c:f3: 50:5f:05:00:7a:cd:5d:15:10:64:a1:6d:c7:18:31: a5:0d:93:0c:25:c8:93:76:14:9d:a1:d0:f2:41:ae: 6d:4e:9a:53:35:99:54:35:df:f7:9b:e4:76:0c:58: 27:34:19:6c:74:26:3f:4e:42:c9:73:b2:8c:e0:da: 86:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:B0:92:49:E1:2C:83:C5:65:90:4D:71:C4:09:48:CA:53:13:4F:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f4168cf-189e-31fc-8ad6-098547940f9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.20.38.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption f4:7b:c3:05:37:af:31:dc:b5:19:7c:a0:96:97:a5:8d:ad:64: 7c:7a:e7:2a:d9:32:bf:31:ff:f8:1b:bc:33:e2:27:17:78:03: ad:2b:36:df:5e:9e:5c:e5:b7:ad:0b:3b:f0:66:6f:1a:78:65: af:bc:76:ee:3c:27:59:c0:44:5a:dc:4a:56:e2:00:76:93:f5: 6f:1c:f2:cf:86:24:b0:9e:4c:fa:ab:21:9b:51:5f:4e:27:ea: 5f:e3:fb:4f:c8:a7:84:f9:91:7b:eb:4d:a8:7b:08:b2:14:49: 41:17:01:78:3a:80:cf:49:42:9a:af:3e:49:a0:11:45:cd:a8: 95:db:c7:01:b8:1e:66:68:65:23:b8:b3:76:79:35:e2:e8:3a: e5:62:03:c0:59:1c:2c:68:dc:4f:0f:fc:8a:cd:15:20:0a:21: 4b:f0:2c:6d:f2:9b:08:6c:c3:76:f6:05:a5:e4:8c:b8:2e:59: 25:55:cf:9f:d0:10:cd:ce:65:b9:54:05:97:64:1f:fa:4d:95: 3d:36:60:b4:29:d9:c5:6a:fd:69:1d:4e:4e:0f:f9:c0:34:a4: 58:f2:78:aa:ba:4b:9b:ed:0c:69:54:ef:df:76:1c:51:48:ea: e6:d5:cf:e2:38:2a:3d:e9:17:f5:8d:79:ed:cc:e7:d6:7a:30: 60:45:81:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEU0fUUmbo/pLB8vZ8wwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI0MDMxNDEzMDAzMFoXDTI0MDYxMjEzMDAzMFowLzEtMCsGA1UEAxMk OWY1MzJjZDYtY2EyNy00NmM0LTllZTktYjljYmQ3MDI0ZDE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmLQSOvUfpgZ9H6dhPgO5akFo8Eoi/dq8HGP h3ryuezMMMtNpZu+AoyZ8QwUpuAqpWlNdSscLy7tUjvXsMSeixwek1GKKsCKjpT3 C3KBfuZF+7oMRJnTNXfG3M/hiaIHlBiIzu7P5XWb13JaQ+S5nlP46f39mHI6JCeY dLiQG5gdsWDJdRxrtp6EMKSykYTqGR2+qJVu6JTi/O+/OJ2vyyu41lqTtcGhlYbB Cr5lQ9SGqF7wOC5MjyeW/XbefvRELPNQXwUAes1dFRBkoW3HGDGlDZMMJciTdhSd odDyQa5tTppTNZlUNd/3m+R2DFgnNBlsdCY/TkLJc7KM4NqGwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJSwkknhLIPFZZBNccQJSMpTE0+pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvM2Y0MTY4Y2YtMTg5ZS0z MWZjLThhZDYtMDk4NTQ3OTQwZjlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0RQmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAPR7wwU3rzHctRl8oJaXpY2tZHx65yrZMr8x//gbvDPiJxd4A60rNt9e nlzlt60LO/Bmbxp4Za+8du48J1nARFrcSlbiAHaT9W8c8s+GJLCeTPqrIZtRX04n 6l/j+0/Ip4T5kXvrTah7CLIUSUEXAXg6gM9JQpqvPkmgEUXNqJXbxwG4HmZoZSO4 s3Z5NeLoOuViA8BZHCxo3E8P/IrNFSAKIUvwLG3ymwhsw3b2BaXkjLguWSVVz5/Q EM3OZblUBZdkH/pNlT02YLQp2cVq/WkdTk4P+cA0pFjyeKq6S5vtDGlU7992HFFI 6ubVz+I4Kj3pF/WNee3M59Z6MGBFgTo= -----END CERTIFICATE-----Generated at Sun May 19 01:58:20 2024 by rpki-client on console-ams.rpki-client.org