$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/40185669-7cfc-3465-8a11-d5521152b30e.roa File: 40185669-7cfc-3465-8a11-d5521152b30e.roa (raw, json) Hash identifier: 7RGoBJmrROdVnhUzzPkVNiQHSemwf6BaWhIZ9jYp95s= Subject key identifier: FA:88:BC:D1:EA:94:00:EB:17:B2:BC:F9:96:AD:45:4C:D4:38:65:C0 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F432858452C1D42AC0AA2117C5D47E540 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/40185669-7cfc-3465-8a11-d5521152b30e.roa Signing time: Mon 11 Mar 2024 13:00:31 +0000 ROA not before: Mon 11 Mar 2024 13:00:31 +0000 ROA not after: Sun 09 Jun 2024 13:00:31 +0000 asID: 25668 IP address blocks: 209.53.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:2c:1d:42:ac:0a:a2:11:7c:5d:47:e5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Mar 11 13:00:31 2024 GMT Not After : Jun 9 13:00:31 2024 GMT Subject: CN=24431ba1-b4ef-404a-87d6-1d8193b99474 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:37:0c:67:6d:9b:17:af:f6:6e:19:25:5c:d7: 38:b1:3b:d3:5f:ba:54:f1:04:c2:9e:62:09:2b:52: 91:f7:15:ef:eb:f9:c5:a1:2a:db:ac:78:4b:8b:63: e9:8c:5c:6f:42:12:1f:59:5a:35:11:2e:0b:28:ee: 06:cb:b9:7d:4e:74:d9:96:64:55:0a:61:57:b7:d0: f6:a0:13:17:2d:0d:4b:00:14:11:1b:86:e8:6c:c8: fa:0b:f9:3e:3c:00:ec:9e:ab:30:2b:9b:13:d1:e0: c7:c7:5d:22:7a:97:9d:9e:7b:42:df:45:f3:4e:73: 64:69:20:85:28:8c:16:90:a3:e8:eb:04:28:05:a7: cc:fd:b0:3b:22:8b:6e:d4:b7:af:bd:3f:04:46:9e: 2c:24:20:d4:ae:7c:19:89:09:40:01:24:96:d4:f6: c8:44:20:c1:1f:3c:12:d6:0c:8b:ba:3a:84:21:51: 11:ec:8e:a0:b8:55:eb:ea:18:5a:90:ad:68:dc:e7: 32:69:47:62:ab:0c:28:dc:c5:1a:69:39:11:d1:b8: 73:1f:3c:d5:69:43:b5:ee:a0:da:33:5c:e7:75:62: 67:a3:84:b7:f3:df:12:d0:85:d8:3a:0d:77:f1:7f: e5:90:e9:a7:5c:94:93:c9:08:37:a3:a0:4b:3c:67: 25:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:88:BC:D1:EA:94:00:EB:17:B2:BC:F9:96:AD:45:4C:D4:38:65:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/40185669-7cfc-3465-8a11-d5521152b30e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.53.214.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:2e:1f:7e:5f:1d:d0:4c:8b:d0:94:e4:74:cd:24:bf:e7:8d: 0f:48:4d:6b:11:14:4d:c2:f0:ab:3a:64:d9:14:90:81:d3:17: dc:8a:a9:fe:2a:44:0d:62:ff:b3:41:f7:35:bd:49:39:47:13: 97:02:34:4a:41:31:de:78:19:ec:36:fe:ab:3d:2c:3d:88:5a: 02:38:f4:3c:7b:6a:10:48:5e:6c:3f:7a:9f:e1:aa:1b:92:5f: ff:51:c6:bf:af:97:fa:42:fb:32:91:23:71:76:d5:06:a4:b5: a2:53:95:58:12:e6:aa:2d:9b:4a:62:6f:ab:00:b6:46:d4:6d: a7:33:15:20:24:e9:34:fa:59:29:d4:32:48:ac:ff:8a:f3:08: 02:a2:af:5e:8c:70:47:ce:62:9a:d1:aa:17:82:c9:fa:58:97: ff:0d:e3:7d:6c:5a:94:0c:32:65:42:bc:f6:bc:8a:f7:5b:ab: 0d:0c:2b:51:28:77:15:c5:70:98:86:cc:44:c5:21:6a:03:0a: 24:3a:23:fc:73:4d:76:89:09:02:df:20:c4:5e:ca:43:5a:a8: 30:08:37:8f:16:ef:86:5b:18:f0:99:04:59:01:11:f5:dd:87: 98:bc:e5:b1:f2:14:95:24:19:94:dd:23:3e:a0:8b:30:7f:98: 6c:52:f0:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUsHUKsCqIRfF1H5UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI0MDMxMTEzMDAzMVoXDTI0MDYwOTEzMDAzMVowLzEtMCsGA1UEAxMk MjQ0MzFiYTEtYjRlZi00MDRhLTg3ZDYtMWQ4MTkzYjk5NDc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTcMZ22bF6/2bhklXNc4sTvTX7pU8QTCnmIJ K1KR9xXv6/nFoSrbrHhLi2PpjFxvQhIfWVo1ES4LKO4Gy7l9TnTZlmRVCmFXt9D2 oBMXLQ1LABQRG4bobMj6C/k+PADsnqswK5sT0eDHx10iepednntC30XzTnNkaSCF KIwWkKPo6wQoBafM/bA7Iotu1LevvT8ERp4sJCDUrnwZiQlAASSW1PbIRCDBHzwS 1gyLujqEIVER7I6guFXr6hhakK1o3OcyaUdiqwwo3MUaaTkR0bhzHzzVaUO17qDa M1zndWJno4S3898S0IXYOg138X/lkOmnXJSTyQg3o6BLPGcl7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPqIvNHqlADrF7K8+ZatRUzUOGXAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvNDAxODU2NjktN2NmYy0z NDY1LThhMTEtZDU1MjExNTJiMzBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TXWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKwuH35fHdBMi9CU5HTNJL/njQ9ITWsRFE3C8Ks6ZNkUkIHTF9yKqf4q RA1i/7NB9zW9STlHE5cCNEpBMd54Gew2/qs9LD2IWgI49Dx7ahBIXmw/ep/hqhuS X/9Rxr+vl/pC+zKRI3F21QaktaJTlVgS5qotm0pib6sAtkbUbaczFSAk6TT6WSnU Mkis/4rzCAKir16McEfOYprRqheCyfpYl/8N431sWpQMMmVCvPa8ivdbqw0MK1Eo dxXFcJiGzETFIWoDCiQ6I/xzTXaJCQLfIMReykNaqDAIN48W74ZbGPCZBFkBEfXd h5i85bHyFJUkGZTdIz6gizB/mGxS8NU= -----END CERTIFICATE-----Generated at Sun May 19 01:55:02 2024 by rpki-client on console-fra.rpki-client.org