$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0dc43efe-e9d9-42d7-9b51-d08600e413fa/6700284b-4b85-318a-8bb1-21ca06ce50e1.roa File: 6700284b-4b85-318a-8bb1-21ca06ce50e1.roa (raw, json) Hash identifier: A5tNXecNcUnib+9PBkPjxs8o2chfkv4jdB0qRpUuNvE= Subject key identifier: 44:FD:40:EE:DD:A1:23:6B:0A:B8:19:D8:B5:E6:BB:69:06:37:93:D6 Certificate issuer: /CN=0dc43efe-e9d9-42d7-9b51-d08600e413fa Certificate serial: 010D0C9F43285845D6690392EF83FE6457786D28 Authority key identifier: 31:B3:44:BB:3A:5E:1E:07:49:A0:AC:60:18:D5:52:DF:81:D3:F6:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0dc43efe-e9d9-42d7-9b51-d08600e413fa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0dc43efe-e9d9-42d7-9b51-d08600e413fa/6700284b-4b85-318a-8bb1-21ca06ce50e1.roa Signing time: Sat 11 May 2024 13:00:34 +0000 ROA not before: Sat 11 May 2024 13:00:34 +0000 ROA not after: Fri 09 Aug 2024 13:00:34 +0000 asID: 396298 IP address blocks: 209.237.128.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0dc43efe-e9d9-42d7-9b51-d08600e413fa/0dc43efe-e9d9-42d7-9b51-d08600e413fa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0dc43efe-e9d9-42d7-9b51-d08600e413fa/0dc43efe-e9d9-42d7-9b51-d08600e413fa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0dc43efe-e9d9-42d7-9b51-d08600e413fa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 May 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:d6:69:03:92:ef:83:fe:64:57:78:6d:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dc43efe-e9d9-42d7-9b51-d08600e413fa Validity Not Before: May 11 13:00:34 2024 GMT Not After : Aug 9 13:00:34 2024 GMT Subject: CN=d443b2d6-3b31-492d-a923-8591cbb44399 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:34:53:ac:6a:b8:24:c4:d7:52:b8:77:e9:d0: 9c:81:53:d6:a4:58:60:39:ee:df:72:5a:49:78:32: 7c:6e:13:ff:b8:4e:28:7f:57:ff:e8:da:10:e1:b9: 49:8d:2f:b6:52:b1:77:a4:bd:29:3f:8c:68:28:6d: 34:86:ec:a5:fc:da:9c:fe:75:03:fe:e5:70:59:a0: 4d:fa:27:dc:64:10:32:79:63:35:80:1a:26:a7:0e: bb:67:b5:ab:91:fd:86:dc:fb:9d:86:30:7b:16:37: 83:47:d3:d0:32:d1:ba:36:ea:8a:d2:d5:5b:9f:1d: d4:bb:e1:08:ba:3f:29:69:80:68:fd:2c:05:14:af: d2:39:6c:ba:a2:ad:34:15:55:ec:c5:aa:2f:30:56: 9f:44:15:dd:52:cf:7b:0d:92:9a:a6:e1:a0:45:eb: 4b:12:3b:9b:df:97:ec:d8:c8:79:7c:65:18:1c:09: 39:66:81:f3:72:41:b5:86:70:00:72:71:db:60:26: ec:9e:4f:61:08:b3:df:b9:71:82:d6:49:3d:97:e7: 44:3e:db:65:da:5c:28:66:35:c0:fb:9c:f0:47:6f: 21:c2:a4:da:fc:0f:aa:f4:d2:8d:21:66:b6:b2:35: 67:5b:c3:e0:70:ad:1c:cd:d1:0f:33:d8:27:50:7b: 7b:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:FD:40:EE:DD:A1:23:6B:0A:B8:19:D8:B5:E6:BB:69:06:37:93:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0dc43efe-e9d9-42d7-9b51-d08600e413fa/6700284b-4b85-318a-8bb1-21ca06ce50e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0dc43efe-e9d9-42d7-9b51-d08600e413fa/0dc43efe-e9d9-42d7-9b51-d08600e413fa.crl X509v3 Authority Key Identifier: keyid:31:B3:44:BB:3A:5E:1E:07:49:A0:AC:60:18:D5:52:DF:81:D3:F6:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0dc43efe-e9d9-42d7-9b51-d08600e413fa.cer sbgp-ipAddrBlock: critical IPv4: 209.237.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:47:2a:c9:a9:30:be:05:a2:9c:57:a1:19:3e:02:af:7d:c9: 9c:34:96:f4:86:8c:a4:2b:ac:bb:00:7b:cb:73:dc:77:5e:7c: 75:17:a0:e3:2c:e4:40:b5:9d:b7:37:13:af:e9:b9:23:97:f4: b0:95:fd:73:e5:18:a1:19:ad:37:e2:23:0a:79:15:08:ec:62: 11:e9:97:18:43:ee:c0:6d:d2:af:b6:96:c7:9f:ed:6c:ca:81: 0b:e4:34:b8:56:c8:63:8e:b6:df:a4:cc:11:07:c6:99:e0:87: 55:45:23:0b:b0:8a:98:42:64:7c:e4:93:5e:c7:5c:61:b4:d1: b7:dc:8c:8c:a6:e9:ed:51:54:e0:b0:64:23:c5:a4:0d:98:d7: b6:ae:1e:d2:df:d6:38:7e:8b:77:1f:eb:36:ba:ac:fe:cd:8e: 25:e7:fd:88:31:34:07:85:17:8a:b5:31:dd:53:31:17:74:8e: c8:d6:be:f1:ce:1a:8d:31:50:ad:7c:fa:35:0a:39:1e:1f:5d: b0:c9:27:a7:25:7f:a5:72:cf:73:16:02:3d:3b:92:4a:6d:8a: 3c:df:9e:8d:d3:f1:da:06:4e:d5:d5:53:7c:0e:2f:2e:d5:32: 24:12:18:80:d5:90:57:ea:4a:6c:89:7a:79:c9:f1:b2:52:4b: f4:02:20:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXWaQOS74P+ZFd4bSgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRjNDNlZmUtZTlkOS00MmQ3LTliNTEtZDA4NjAwZTQx M2ZhMB4XDTI0MDUxMTEzMDAzNFoXDTI0MDgwOTEzMDAzNFowLzEtMCsGA1UEAxMk ZDQ0M2IyZDYtM2IzMS00OTJkLWE5MjMtODU5MWNiYjQ0Mzk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjRTrGq4JMTXUrh36dCcgVPWpFhgOe7fclpJ eDJ8bhP/uE4of1f/6NoQ4blJjS+2UrF3pL0pP4xoKG00huyl/Nqc/nUD/uVwWaBN +ifcZBAyeWM1gBompw67Z7Wrkf2G3PudhjB7FjeDR9PQMtG6NuqK0tVbnx3Uu+EI uj8paYBo/SwFFK/SOWy6oq00FVXsxaovMFafRBXdUs97DZKapuGgRetLEjub35fs 2Mh5fGUYHAk5ZoHzckG1hnAAcnHbYCbsnk9hCLPfuXGC1kk9l+dEPttl2lwoZjXA +5zwR28hwqTa/A+q9NKNIWa2sjVnW8PgcK0czdEPM9gnUHt7MwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFET9QO7doSNrCrgZ2LXmu2kGN5PWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wZGM0 M2VmZS1lOWQ5LTQyZDctOWI1MS1kMDg2MDBlNDEzZmEvNjcwMDI4NGItNGI4NS0z MThhLThiYjEtMjFjYTA2Y2U1MGUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMGRjNDNlZmUtZTlkOS00MmQ3LTli NTEtZDA4NjAwZTQxM2ZhLzBkYzQzZWZlLWU5ZDktNDJkNy05YjUxLWQwODYwMGU0 MTNmYS5jcmwwHwYDVR0jBBgwFoAUMbNEuzpeHgdJoKxgGNVS34HT9r4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8wZGM0M2VmZS1lOWQ5LTQyZDctOWI1MS1kMDg2 MDBlNDEzZmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0e2AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAZHKsmpML4FopxXoRk+Aq99yZw0lvSGjKQrrLsAe8tz3HdefHUXoOMs 5EC1nbc3E6/puSOX9LCV/XPlGKEZrTfiIwp5FQjsYhHplxhD7sBt0q+2lsef7WzK gQvkNLhWyGOOtt+kzBEHxpngh1VFIwuwiphCZHzkk17HXGG00bfcjIym6e1RVOCw ZCPFpA2Y17auHtLf1jh+i3cf6za6rP7NjiXn/YgxNAeFF4q1Md1TMRd0jsjWvvHO Go0xUK18+jUKOR4fXbDJJ6clf6Vyz3MWAj07kkptijzfno3T8doGTtXVU3wOLy7V MiQSGIDVkFfqSmyJennJ8bJSS/QCIO4= -----END CERTIFICATE-----Generated at Sat May 18 15:59:36 2024 by rpki-client on console-ams.rpki-client.org