$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887/10a59856-f71a-35fa-aa0d-3c293faa8ca8.roa File: 10a59856-f71a-35fa-aa0d-3c293faa8ca8.roa (raw, json) Hash identifier: d6A2WOUNuH16f25+8BM4K9jqisDkCmvfuIQXnXauZog= Subject key identifier: BA:ED:53:F9:68:55:9F:85:3F:09:B7:B5:4A:2F:DD:0E:BF:DD:BE:C8 Certificate issuer: /CN=8c902da3-488d-44d9-9833-f1295a9fd887 Certificate serial: 010D0C9F432858450D85843BFEFC19E42A810300 Authority key identifier: 1A:3F:BD:48:B8:18:D6:2E:89:17:81:D2:0A:54:B5:D9:4C:F6:36:F2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887/10a59856-f71a-35fa-aa0d-3c293faa8ca8.roa Signing time: Thu 29 Feb 2024 14:00:31 +0000 ROA not before: Thu 29 Feb 2024 14:00:31 +0000 ROA not after: Wed 29 May 2024 13:00:31 +0000 asID: 3925 IP address blocks: 209.165.202.0/24 maxlen: 24 209.165.214.0/24 maxlen: 24 209.165.212.0/24 maxlen: 24 209.165.213.0/24 maxlen: 24 209.165.215.0/24 maxlen: 24 209.165.209.0/24 maxlen: 24 209.165.211.0/24 maxlen: 24 209.165.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887/8c902da3-488d-44d9-9833-f1295a9fd887.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887/8c902da3-488d-44d9-9833-f1295a9fd887.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:0d:85:84:3b:fe:fc:19:e4:2a:81:03:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c902da3-488d-44d9-9833-f1295a9fd887 Validity Not Before: Feb 29 14:00:31 2024 GMT Not After : May 29 13:00:31 2024 GMT Subject: CN=feea5e39-615e-4beb-80aa-05cf28896d92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:7d:8b:23:b6:7a:f0:5a:49:6b:75:fe:0a:a6: 42:02:53:f3:05:9d:7b:d6:3b:1a:ed:c7:10:fd:e4: 8a:14:47:cd:a0:68:55:f0:1d:cc:0a:fc:1b:79:40: 40:bb:95:cb:6a:b1:2d:0e:86:77:ab:73:f2:f2:2f: a7:b0:a3:3d:b5:31:81:04:cb:ed:ab:2b:83:65:7d: 92:d4:c0:09:6d:3e:0f:c2:f5:c9:17:02:3b:23:6f: 26:ab:d2:60:9d:3e:e3:f2:94:69:9f:0e:4e:47:fe: 79:3e:cf:56:07:5a:7d:01:8a:7e:08:c6:04:34:3d: a6:b1:8c:d1:30:81:0f:55:a0:4d:46:c2:c5:f1:7b: a3:1a:34:8d:40:97:3e:07:9a:47:09:8b:ea:6b:44: fe:81:3d:61:b2:18:c4:c4:32:0c:c1:52:7c:ed:49: 63:b0:ee:da:f3:6a:b3:af:5f:45:83:5d:4a:cb:b8: fc:b8:67:2d:0b:00:80:e2:a8:5b:b2:9c:10:1f:45: ea:f3:cf:15:83:f3:a7:f8:c9:ad:6a:3c:a5:04:46: 56:51:6c:60:5d:96:5b:8f:0a:a7:75:0d:25:78:58: cf:d1:3a:90:15:51:04:40:d9:0c:ef:60:31:52:d6: f4:40:4a:91:09:69:ce:47:59:27:c0:64:24:22:67: cd:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:ED:53:F9:68:55:9F:85:3F:09:B7:B5:4A:2F:DD:0E:BF:DD:BE:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887/10a59856-f71a-35fa-aa0d-3c293faa8ca8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887/8c902da3-488d-44d9-9833-f1295a9fd887.crl X509v3 Authority Key Identifier: keyid:1A:3F:BD:48:B8:18:D6:2E:89:17:81:D2:0A:54:B5:D9:4C:F6:36:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887.cer sbgp-ipAddrBlock: critical IPv4: 209.165.201.0-209.165.202.255 209.165.209.0/24 209.165.211.0-209.165.215.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:47:b7:89:fb:78:05:7b:71:89:0c:61:a8:0b:0f:89:25:e6: 2b:6f:82:fd:1c:c3:d2:17:56:d9:0f:3b:9d:a7:f5:4e:87:24: 5b:3a:75:9a:b4:4b:24:eb:14:d9:71:76:1c:b3:b3:72:42:f4: eb:8f:b1:61:c0:d7:e8:af:1a:d0:63:5d:8e:e5:02:77:b2:30: 6f:52:06:fa:09:72:b9:b2:b4:ff:3c:37:69:b6:c2:59:c0:ab: 8f:9d:2c:ec:e0:0f:13:46:8a:c7:c3:db:24:1b:e5:64:a0:fd: a5:3f:f8:13:cc:41:8a:c0:e7:6d:ab:22:2b:5d:58:fe:65:bd: be:b8:3e:dc:df:b6:24:18:41:3f:76:c6:c5:63:dd:c3:64:d9: 84:3c:62:cd:ce:f1:74:aa:8e:ad:2d:be:c2:b0:d0:4c:32:6c: cb:ee:35:cd:8d:60:e1:eb:5d:e1:39:af:02:98:30:1a:08:f9: b9:4e:cd:aa:35:c7:4a:57:97:1e:1c:59:ea:01:d3:2f:d3:ea: e2:61:c1:cf:21:43:c9:fd:88:ee:fd:ae:1d:8e:0f:64:3d:a2: 1c:ee:53:90:8f:6d:10:54:88:da:d1:4a:0b:26:60:c4:78:5b: b6:87:d7:af:d6:8b:6b:28:b0:4e:f9:85:27:48:cb:af:74:1c: 63:0e:0f:b5 -----BEGIN CERTIFICATE----- MIIGXzCCBUegAwIBAgIUAQ0Mn0MoWEUNhYQ7/vwZ5CqBAwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGM5MDJkYTMtNDg4ZC00NGQ5LTk4MzMtZjEyOTVhOWZk ODg3MB4XDTI0MDIyOTE0MDAzMVoXDTI0MDUyOTEzMDAzMVowLzEtMCsGA1UEAxMk ZmVlYTVlMzktNjE1ZS00YmViLTgwYWEtMDVjZjI4ODk2ZDkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo32LI7Z68FpJa3X+CqZCAlPzBZ171jsa7ccQ /eSKFEfNoGhV8B3MCvwbeUBAu5XLarEtDoZ3q3Py8i+nsKM9tTGBBMvtqyuDZX2S 1MAJbT4PwvXJFwI7I28mq9JgnT7j8pRpnw5OR/55Ps9WB1p9AYp+CMYEND2msYzR MIEPVaBNRsLF8XujGjSNQJc+B5pHCYvqa0T+gT1hshjExDIMwVJ87UljsO7a82qz r19Fg11Ky7j8uGctCwCA4qhbspwQH0Xq888Vg/On+MmtajylBEZWUWxgXZZbjwqn dQ0leFjP0TqQFVEEQNkM72AxUtb0QEqRCWnOR1knwGQkImfN3QIDAQABo4IDcTCC A20wHQYDVR0OBBYEFLrtU/loVZ+FPwm3tUov3Q6/3b7IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84Yzkw MmRhMy00ODhkLTQ0ZDktOTgzMy1mMTI5NWE5ZmQ4ODcvMTBhNTk4NTYtZjcxYS0z NWZhLWFhMGQtM2MyOTNmYWE4Y2E4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOGM5MDJkYTMtNDg4ZC00NGQ5LTk4 MzMtZjEyOTVhOWZkODg3LzhjOTAyZGEzLTQ4OGQtNDRkOS05ODMzLWYxMjk1YTlm ZDg4Ny5jcmwwHwYDVR0jBBgwFoAUGj+9SLgY1i6JF4HSClS12Uz2NvIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84YzkwMmRhMy00ODhkLTQ0ZDktOTgzMy1mMTI5 NWE5ZmQ4ODcuY2VyMDsGCCsGAQUFBwEHAQH/BCwwKjAoBAIAATAiMAwDBADRpckD BADRpcoDBADRpdEwDAMEANGl0wMEA9Gl0DBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCJR7eJ+3gFe3GJDGGo Cw+JJeYrb4L9HMPSF1bZDzudp/VOhyRbOnWatEsk6xTZcXYcs7NyQvTrj7FhwNfo rxrQY12O5QJ3sjBvUgb6CXK5srT/PDdptsJZwKuPnSzs4A8TRorHw9skG+VkoP2l P/gTzEGKwOdtqyIrXVj+Zb2+uD7c37YkGEE/dsbFY93DZNmEPGLNzvF0qo6tLb7C sNBMMmzL7jXNjWDh613hOa8CmDAaCPm5Ts2qNcdKV5ceHFnqAdMv0+riYcHPIUPJ /Yju/a4djg9kPaIc7lOQj20QVIja0UoLJmDEeFu2h9ev1otrKLBO+YUnSMuvdBxj Dg+1 -----END CERTIFICATE-----Generated at Sun May 19 01:56:19 2024 by rpki-client on console-fra.rpki-client.org