$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/5cc4d6c1-eff2-3a40-8619-5f616f8af19a.roa File: 5cc4d6c1-eff2-3a40-8619-5f616f8af19a.roa (raw, json) Hash identifier: TWFpwdTPrYDaRWH5zDsyjAtLtJN8kybZ7SaAPLQwy50= Subject key identifier: 63:89:A4:62:67:90:2F:A4:F3:8C:5A:97:C7:9C:72:D5:FA:EF:35:64 Certificate issuer: /CN=1add3b23-5fb0-4412-be17-98450d352516 Certificate serial: 010D0C9F432858452EE7EC37A8E8B224F4D7BC00 Authority key identifier: DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/5cc4d6c1-eff2-3a40-8619-5f616f8af19a.roa Signing time: Tue 12 Mar 2024 13:00:28 +0000 ROA not before: Tue 12 Mar 2024 13:00:28 +0000 ROA not after: Mon 10 Jun 2024 13:00:28 +0000 asID: 36298 IP address blocks: 209.166.149.0/24 maxlen: 24 209.166.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:2e:e7:ec:37:a8:e8:b2:24:f4:d7:bc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1add3b23-5fb0-4412-be17-98450d352516 Validity Not Before: Mar 12 13:00:28 2024 GMT Not After : Jun 10 13:00:28 2024 GMT Subject: CN=2800d017-6b6d-465f-abd9-77c2829898e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:37:75:f1:89:4c:cc:d6:82:b7:94:65:fe:ec: 10:48:b5:6b:dc:91:ce:bf:64:6e:0b:da:64:50:db: 7e:27:b5:60:5f:12:80:15:63:bf:d5:1f:27:e8:ab: d7:12:12:53:45:ac:19:11:b8:1b:39:b4:fd:fc:04: 8b:ab:0c:bc:68:33:a9:23:15:1d:88:9e:40:61:28: c2:7d:33:ba:43:22:45:81:f3:05:46:63:ea:46:9a: be:24:4f:95:d7:36:18:f2:69:6a:cd:79:89:48:0d: 16:eb:5a:2c:8f:22:2b:6e:f4:05:59:07:ff:7b:0c: 65:0a:01:25:83:ce:02:53:12:21:d1:b9:73:f0:6f: 2c:5e:9f:d6:28:57:32:17:7d:d3:12:2e:37:73:fb: ae:ef:a5:cf:66:e8:74:e3:4c:d5:f7:e8:ef:a7:c4: ac:18:57:0d:41:93:17:5f:61:30:be:4c:4d:5a:81: 5a:a5:19:75:b7:78:64:35:1d:99:aa:73:15:2d:ed: 88:76:c5:8b:ad:23:16:d8:5b:30:e6:94:f7:d8:4d: 85:35:ef:1f:b3:d6:2d:dd:0f:8f:3f:f4:57:65:86: aa:b7:b2:1c:ba:50:13:79:39:94:5a:4b:b0:b4:f9: 86:80:ec:b6:f8:cd:76:b7:d9:ae:9b:80:49:72:49: 75:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:89:A4:62:67:90:2F:A4:F3:8C:5A:97:C7:9C:72:D5:FA:EF:35:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/5cc4d6c1-eff2-3a40-8619-5f616f8af19a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl X509v3 Authority Key Identifier: keyid:DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer sbgp-ipAddrBlock: critical IPv4: 209.166.148.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:88:14:75:cf:54:19:7f:68:90:98:fd:55:0c:c0:47:86:5f: a1:25:23:ab:86:45:c7:4c:e9:28:76:b4:53:b4:7c:fd:7b:bb: 94:15:5e:4c:f7:4b:01:02:97:c6:eb:b6:1c:bd:63:90:5e:17: 47:7c:87:b0:2a:48:3c:f2:bd:23:81:59:e2:46:c2:13:5d:4a: 4e:72:a0:88:44:b1:80:fe:02:19:ed:70:2c:95:cf:8b:59:20: fa:01:5c:1f:eb:5e:d8:96:80:e9:72:b7:6a:8e:cb:bd:a2:15: 6a:ca:31:ab:79:a5:ab:75:24:c4:fe:56:d0:e0:79:f8:57:42: c8:19:dc:c7:7b:cc:1c:f5:a4:42:95:29:0b:50:a8:f5:0b:04: ba:2a:2d:80:3c:12:91:bb:ef:a6:b8:24:cd:44:c2:10:27:21: 69:b1:58:6e:64:cb:82:7a:01:76:b4:97:30:f2:cf:67:2f:9d: 45:33:aa:a5:a8:3c:03:a0:4d:2e:7c:e7:dc:30:a6:8c:cd:75: c8:66:8a:d7:c2:82:c4:08:bf:c7:6c:ec:06:39:26:c7:86:52: 38:e5:35:85:da:d7:af:07:7a:1a:7c:40:68:54:56:82:eb:a8: ce:13:99:12:76:4e:4e:53:43:c9:8b:17:c5:3e:71:c9:ec:13: 46:3c:22:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUu5+w3qOiyJPTXvAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFkZDNiMjMtNWZiMC00NDEyLWJlMTctOTg0NTBkMzUy NTE2MB4XDTI0MDMxMjEzMDAyOFoXDTI0MDYxMDEzMDAyOFowLzEtMCsGA1UEAxMk MjgwMGQwMTctNmI2ZC00NjVmLWFiZDktNzdjMjgyOTg5OGUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiDd18YlMzNaCt5Rl/uwQSLVr3JHOv2RuC9pk UNt+J7VgXxKAFWO/1R8n6KvXEhJTRawZEbgbObT9/ASLqwy8aDOpIxUdiJ5AYSjC fTO6QyJFgfMFRmPqRpq+JE+V1zYY8mlqzXmJSA0W61osjyIrbvQFWQf/ewxlCgEl g84CUxIh0blz8G8sXp/WKFcyF33TEi43c/uu76XPZuh040zV9+jvp8SsGFcNQZMX X2EwvkxNWoFapRl1t3hkNR2ZqnMVLe2IdsWLrSMW2Fsw5pT32E2FNe8fs9Yt3Q+P P/RXZYaqt7IculATeTmUWkuwtPmGgOy2+M12t9mum4BJckl1bQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGOJpGJnkC+k84xal8ecctX67zVkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xYWRk M2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1MGQzNTI1MTYvNWNjNGQ2YzEtZWZmMi0z YTQwLTg2MTktNWY2MTZmOGFmMTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMWFkZDNiMjMtNWZiMC00NDEyLWJl MTctOTg0NTBkMzUyNTE2LzFhZGQzYjIzLTVmYjAtNDQxMi1iZTE3LTk4NDUwZDM1 MjUxNi5jcmwwHwYDVR0jBBgwFoAU39arNQjEZ6Npjktd6od4wHodjiYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xYWRkM2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1 MGQzNTI1MTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0aaUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAACIFHXPVBl/aJCY/VUMwEeGX6ElI6uGRcdM6Sh2tFO0fP17u5QVXkz3 SwECl8brthy9Y5BeF0d8h7AqSDzyvSOBWeJGwhNdSk5yoIhEsYD+AhntcCyVz4tZ IPoBXB/rXtiWgOlyt2qOy72iFWrKMat5pat1JMT+VtDgefhXQsgZ3Md7zBz1pEKV KQtQqPULBLoqLYA8EpG776a4JM1EwhAnIWmxWG5ky4J6AXa0lzDyz2cvnUUzqqWo PAOgTS5859wwpozNdchmitfCgsQIv8ds7AY5JseGUjjlNYXa168Hehp8QGhUVoLr qM4TmRJ2Tk5TQ8mLF8U+ccnsE0Y8ItQ= -----END CERTIFICATE-----Generated at Wed May 15 16:06:05 2024 by rpki-client on console-ams.rpki-client.org