$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/5c6a2600-430c-3c39-a484-f05a9a811305.roa File: 5c6a2600-430c-3c39-a484-f05a9a811305.roa (raw, json) Hash identifier: MZNecqAI4ncZvZQ0/ig/m/eA9Gb7iWYETMZlqf/I7UU= Subject key identifier: C5:5A:77:B8:83:FE:F2:5D:1C:F4:92:F1:F3:46:E3:CE:0B:81:F4:54 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285845C44379ABD18F91F7F3289D40 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/5c6a2600-430c-3c39-a484-f05a9a811305.roa Signing time: Sun 05 May 2024 01:00:25 +0000 ROA not before: Sun 05 May 2024 01:00:25 +0000 ROA not after: Sat 03 Aug 2024 01:00:25 +0000 asID: 852 IP address blocks: 209.171.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:c4:43:79:ab:d1:8f:91:f7:f3:28:9d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: May 5 01:00:25 2024 GMT Not After : Aug 3 01:00:25 2024 GMT Subject: CN=81f52bfe-3d3d-419a-8b2e-33fe9ce1da19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:7a:61:22:4d:40:50:0a:e6:2c:da:3f:a3:ba: f7:d0:2e:e7:0c:9d:80:79:40:0e:4e:28:bf:c6:5a: a9:6c:09:6c:24:9c:2c:8c:4c:d8:db:12:fc:69:68: 44:36:8c:53:25:9d:2b:36:c0:df:ad:a0:0b:1e:4b: 87:b9:2d:d3:35:27:59:17:9b:67:6e:9b:d3:f8:86: d8:74:bb:90:b3:e4:10:6a:84:64:91:f6:37:1b:06: e9:3d:69:c5:cf:bd:b9:8c:05:95:81:a7:73:31:dc: 7f:28:b6:d3:ab:a0:2e:01:85:29:74:5f:b7:9f:81: fc:4f:9b:7d:34:c9:5a:56:ef:54:31:02:5a:43:01: 9f:e3:e5:a8:f8:e7:63:c0:61:26:3e:73:b7:71:b0: 1c:11:d5:ff:03:a2:2a:27:c7:de:80:fe:89:6d:a8: 80:fc:d3:08:3f:e0:b8:e1:ea:c0:6b:e4:2f:32:72: 82:96:f9:88:6e:05:f0:36:ca:ac:4c:67:8a:84:67: a1:c6:87:75:75:46:59:f4:da:77:77:a8:68:27:ed: 38:30:a4:9b:de:37:37:fa:21:29:33:fe:07:76:a0: 77:b6:c1:9e:7b:32:e8:81:cd:6d:6a:00:99:7c:fa: 10:e1:8e:8b:b2:78:e5:07:06:da:e5:46:7f:17:d4: bb:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:5A:77:B8:83:FE:F2:5D:1C:F4:92:F1:F3:46:E3:CE:0B:81:F4:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/5c6a2600-430c-3c39-a484-f05a9a811305.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.171.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:f7:ea:f2:66:dd:77:00:6a:6f:31:f9:80:dc:b9:c9:ac:0f: 7f:69:0e:db:ef:50:6c:f5:21:a3:db:fd:50:74:d4:6a:af:5f: c8:7b:77:81:ad:77:25:50:60:e2:2a:04:ad:18:ca:5a:15:1b: 1c:86:7b:63:f2:ca:a6:ac:cf:ff:36:95:2f:46:5a:f7:b4:2a: 81:76:8e:f6:7e:3c:a8:c8:01:20:d2:6f:c7:2d:8c:75:00:dd: 68:24:5e:10:8b:06:0c:05:31:e2:66:ff:33:8b:3e:2b:7e:d8: f2:7c:87:dd:68:e1:dd:b5:b7:53:c9:5c:bb:79:35:46:82:0e: e6:58:0e:cf:60:c6:0a:d3:57:cb:4a:d4:3e:87:6d:01:0c:a5: 98:3c:27:3b:9b:43:d7:88:60:86:92:b3:7b:94:0c:48:10:6d: 05:e5:33:81:ab:9e:3e:fe:c8:49:d8:3f:17:d9:b0:bb:f8:66: 25:99:80:bc:d1:a4:15:5e:ee:d7:c4:20:a9:f7:f5:68:03:70: ea:4d:82:d0:6f:4a:51:58:b0:98:0c:96:47:ea:a7:a8:25:8e: 55:55:d3:b3:9b:28:f8:4e:82:a4:8c:70:81:98:6e:36:f6:a2: 9f:2a:be:dc:72:05:c5:e2:44:fb:23:29:de:79:7b:63:45:f5: 71:8a:68:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXEQ3mr0Y+R9/MonUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI0MDUwNTAxMDAyNVoXDTI0MDgwMzAxMDAyNVowLzEtMCsGA1UEAxMk ODFmNTJiZmUtM2QzZC00MTlhLThiMmUtMzNmZTljZTFkYTE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3phIk1AUArmLNo/o7r30C7nDJ2AeUAOTii/ xlqpbAlsJJwsjEzY2xL8aWhENoxTJZ0rNsDfraALHkuHuS3TNSdZF5tnbpvT+IbY dLuQs+QQaoRkkfY3GwbpPWnFz725jAWVgadzMdx/KLbTq6AuAYUpdF+3n4H8T5t9 NMlaVu9UMQJaQwGf4+Wo+OdjwGEmPnO3cbAcEdX/A6IqJ8fegP6JbaiA/NMIP+C4 4erAa+QvMnKClvmIbgXwNsqsTGeKhGehxod1dUZZ9Np3d6hoJ+04MKSb3jc3+iEp M/4HdqB3tsGeezLogc1tagCZfPoQ4Y6LsnjlBwba5UZ/F9S7swIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMVad7iD/vJdHPSS8fNG484LgfRUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvNWM2YTI2MDAtNDMwYy0z YzM5LWE0ODQtZjA1YTlhODExMzA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0atVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABT36vJm3XcAam8x+YDcucmsD39pDtvvUGz1IaPb/VB01GqvX8h7d4Gt dyVQYOIqBK0YyloVGxyGe2Pyyqasz/82lS9GWve0KoF2jvZ+PKjIASDSb8ctjHUA 3WgkXhCLBgwFMeJm/zOLPit+2PJ8h91o4d21t1PJXLt5NUaCDuZYDs9gxgrTV8tK 1D6HbQEMpZg8JzubQ9eIYIaSs3uUDEgQbQXlM4Grnj7+yEnYPxfZsLv4ZiWZgLzR pBVe7tfEIKn39WgDcOpNgtBvSlFYsJgMlkfqp6gljlVV07ObKPhOgqSMcIGYbjb2 op8qvtxyBcXiRPsjKd55e2NF9XGKaO0= -----END CERTIFICATE-----Generated at Sun May 19 01:55:03 2024 by rpki-client on console-fra.rpki-client.org