$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/cfe742b2-41bb-382c-9370-7bcf5af91a4a.roa File: cfe742b2-41bb-382c-9370-7bcf5af91a4a.roa (raw, json) Hash identifier: 9+kjhGwsyDPn9iTrbSsSiIUaRRyQGp0Hj2EOWLKVn6s= Subject key identifier: A7:D5:18:8F:30:06:E8:34:05:0D:0D:06:44:26:33:12:63:C5:ED:B3 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F432858452C1D3E5774BE0F4B041EC200 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/cfe742b2-41bb-382c-9370-7bcf5af91a4a.roa Signing time: Mon 11 Mar 2024 13:00:31 +0000 ROA not before: Mon 11 Mar 2024 13:00:31 +0000 ROA not after: Sun 09 Jun 2024 13:00:31 +0000 asID: 40820 IP address blocks: 207.194.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:2c:1d:3e:57:74:be:0f:4b:04:1e:c2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Mar 11 13:00:31 2024 GMT Not After : Jun 9 13:00:31 2024 GMT Subject: CN=231ec718-aa4e-4483-a91d-7ac6d6d53475 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:9a:be:f1:34:47:69:74:c5:67:d2:fa:f8:cf: a5:cf:0c:50:1f:0a:c1:e6:fe:71:e0:d8:70:ec:f9: 94:25:68:50:dd:ea:af:84:1a:14:9c:9a:ff:b6:1f: 54:21:ca:33:33:51:00:5d:28:69:b6:c4:47:1d:85: 50:fe:70:44:97:0f:89:c7:38:cb:db:92:0d:29:44: 65:c8:25:37:ab:ea:72:ab:31:a2:a2:9c:3d:29:5d: ff:16:dc:de:0e:c5:b7:04:16:16:bd:f6:ca:ef:f4: f3:59:69:0c:da:3e:5e:4b:b0:70:62:2b:4b:b4:f2: 06:a6:76:2d:50:83:90:72:5b:6a:1b:64:2d:20:1a: 28:72:e5:4e:e8:c4:2a:80:ec:a3:99:8a:65:c0:3d: 26:c7:d8:e0:a5:1c:f8:c5:94:79:a8:b1:b7:7b:e3: d2:4b:42:c5:6e:52:50:aa:88:a7:48:61:bc:6a:79: 66:c8:db:73:c0:ae:49:1b:7b:6a:60:a4:29:ce:b8: d8:7a:e6:94:6a:38:65:66:b1:18:aa:bd:ce:96:07: 64:48:8b:47:77:b8:73:ad:5a:ec:24:67:6f:0e:bb: 81:d9:26:75:28:77:e0:4d:9f:c7:c0:b8:ca:ef:9a: 18:26:65:18:8e:82:fc:e3:a4:58:77:ce:cd:0f:24: bd:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:D5:18:8F:30:06:E8:34:05:0D:0D:06:44:26:33:12:63:C5:ED:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/cfe742b2-41bb-382c-9370-7bcf5af91a4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 207.194.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:89:16:88:9b:4b:83:72:4a:7b:e1:75:4c:3c:02:8a:38:bc: f7:40:2c:62:a0:9e:43:37:b2:e3:40:09:b4:56:56:cc:cb:a4: 0d:68:56:6f:94:95:03:d8:39:03:61:39:f2:d0:62:b0:04:d4: 75:10:50:8b:09:ba:ec:d8:c2:ab:1f:d2:2d:d1:00:46:ff:07: f8:66:65:40:1e:10:3b:5b:9a:2b:f4:ed:80:62:db:8a:7c:a9: 62:4f:1d:f3:02:65:bb:c3:b1:f7:20:4c:0c:4c:97:8b:3c:0b: 2e:04:70:77:ae:88:96:72:48:77:a3:c6:55:c6:1f:45:21:2e: 4c:41:f4:11:63:f7:4f:5a:01:3c:80:ec:5e:4d:03:9f:66:18: c8:f1:e0:a9:dc:3b:26:5b:c6:e4:fc:ff:d3:36:90:08:9f:3f: ab:07:f9:11:58:bc:c6:75:10:23:04:47:85:9a:7c:0a:75:39: a1:fb:53:dd:71:dd:89:c7:5a:01:68:7f:9f:ca:67:ac:8c:0c: 70:31:a9:c9:c4:b6:3e:39:74:38:e3:64:37:9e:12:0a:14:cd: 7f:0a:37:ab:2a:91:f0:7f:bb:75:f8:01:2d:0c:0e:6e:9a:92: 57:2a:30:e0:75:ef:76:53:03:38:07:8b:57:14:96:bc:5a:c4: a9:c0:41:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUsHT5XdL4PSwQewgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI0MDMxMTEzMDAzMVoXDTI0MDYwOTEzMDAzMVowLzEtMCsGA1UEAxMk MjMxZWM3MTgtYWE0ZS00NDgzLWE5MWQtN2FjNmQ2ZDUzNDc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspq+8TRHaXTFZ9L6+M+lzwxQHwrB5v5x4Nhw 7PmUJWhQ3eqvhBoUnJr/th9UIcozM1EAXShptsRHHYVQ/nBElw+JxzjL25INKURl yCU3q+pyqzGiopw9KV3/FtzeDsW3BBYWvfbK7/TzWWkM2j5eS7BwYitLtPIGpnYt UIOQcltqG2QtIBoocuVO6MQqgOyjmYplwD0mx9jgpRz4xZR5qLG3e+PSS0LFblJQ qoinSGG8anlmyNtzwK5JG3tqYKQpzrjYeuaUajhlZrEYqr3OlgdkSItHd7hzrVrs JGdvDruB2SZ1KHfgTZ/HwLjK75oYJmUYjoL846RYd87NDyS9CwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKfVGI8wBug0BQ0NBkQmMxJjxe2zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvY2ZlNzQyYjItNDFiYi0z ODJjLTkzNzAtN2JjZjVhZjkxYTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz8KIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKuJFoibS4NySnvhdUw8Aoo4vPdALGKgnkM3suNACbRWVszLpA1oVm+U lQPYOQNhOfLQYrAE1HUQUIsJuuzYwqsf0i3RAEb/B/hmZUAeEDtbmiv07YBi24p8 qWJPHfMCZbvDsfcgTAxMl4s8Cy4EcHeuiJZySHejxlXGH0UhLkxB9BFj909aATyA 7F5NA59mGMjx4KncOyZbxuT8/9M2kAifP6sH+RFYvMZ1ECMER4WafAp1OaH7U91x 3YnHWgFof5/KZ6yMDHAxqcnEtj45dDjjZDeeEgoUzX8KN6sqkfB/u3X4AS0MDm6a klcqMOB173ZTAzgHi1cUlrxaxKnAQVg= -----END CERTIFICATE-----Generated at Sun May 19 01:55:04 2024 by rpki-client on console-fra.rpki-client.org