$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/3b1a4ed2-b69b-392a-8ddc-f37d955fa5fc.roa File: 3b1a4ed2-b69b-392a-8ddc-f37d955fa5fc.roa (raw, json) Hash identifier: DIzJuNS1NA1MOnBMQ7UEmxpUzJnwNqDKmHtIE5Y4x9k= Subject key identifier: 37:B9:63:48:AB:59:12:A8:E8:FD:21:A4:A8:00:16:99:87:E7:CE:90 Certificate issuer: /CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa Certificate serial: 010D0C9F4328584554981B7A631FA3BF172E1A00 Authority key identifier: 91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/3b1a4ed2-b69b-392a-8ddc-f37d955fa5fc.roa Signing time: Tue 26 Mar 2024 01:00:25 +0000 ROA not before: Tue 26 Mar 2024 01:00:25 +0000 ROA not after: Mon 24 Jun 2024 01:00:25 +0000 asID: 62651 IP address blocks: 209.107.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 May 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:54:98:1b:7a:63:1f:a3:bf:17:2e:1a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa Validity Not Before: Mar 26 01:00:25 2024 GMT Not After : Jun 24 01:00:25 2024 GMT Subject: CN=a317cb48-5ca1-46c2-b4e4-cf96c10c6117 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:fa:11:df:27:1a:e5:95:6a:f0:58:8e:19:ba: 77:60:9b:a1:3a:27:fd:73:af:8a:db:01:92:27:21: f9:cd:63:39:6b:af:87:8f:60:3c:1d:e5:66:8b:26: 84:ba:a0:67:88:66:82:44:a2:c2:18:3e:25:ba:d2: 2d:17:cd:6f:1c:67:c1:ce:c8:e7:81:d9:e0:91:28: 55:7e:f5:cb:4e:79:e2:e7:6c:dc:c5:e8:b8:4e:8c: 44:45:1e:3d:81:68:9a:1b:40:71:b7:d6:09:29:bb: 08:8f:b9:43:5b:a9:a5:45:f2:2a:49:9d:77:17:56: 84:79:e7:c1:d2:e8:61:70:26:d6:67:f7:8b:ff:2f: a2:50:7a:d8:be:b0:42:1e:0c:08:e8:bd:f3:57:eb: ef:74:2d:65:0f:14:c9:f2:e9:42:12:8f:28:94:0e: 94:a6:b4:41:f7:11:0d:3b:dd:aa:aa:d4:87:ed:c6: e7:0e:c3:db:21:a5:12:b0:e4:e2:cb:ad:4c:95:b5: 88:6e:6b:b2:a5:03:26:96:40:52:7a:74:b7:c1:7d: 22:30:7c:28:4b:38:0b:82:cd:13:32:2e:cd:9b:01: 82:64:71:a6:11:6f:47:89:f4:04:d0:46:5c:d1:63: f6:bb:16:6b:95:6b:f9:77:2d:76:d2:26:1d:19:a0: 7d:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:B9:63:48:AB:59:12:A8:E8:FD:21:A4:A8:00:16:99:87:E7:CE:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/3b1a4ed2-b69b-392a-8ddc-f37d955fa5fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl X509v3 Authority Key Identifier: keyid:91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer sbgp-ipAddrBlock: critical IPv4: 209.107.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:47:fe:58:95:43:0e:e7:18:82:2b:37:df:70:76:b5:7d:3d: da:2a:24:8d:d3:66:46:04:f1:e0:2f:e3:2d:e4:c7:39:1f:ab: 95:80:40:4e:19:66:8c:a3:79:44:41:c6:e6:b4:e2:92:64:13: b5:e1:7e:41:87:67:0f:82:0d:77:f8:83:a9:bb:04:80:bc:10: d9:bb:97:af:cb:f4:e3:dd:d4:77:b3:f5:bf:35:10:f8:d2:61: 4a:f3:de:d9:fe:47:e9:2c:e7:23:2f:d1:15:87:6d:9e:f6:66: 08:84:f2:88:a2:10:6a:69:34:5f:ba:d6:66:98:18:d0:5c:da: d5:14:a0:a5:e0:ff:4a:b3:dd:5e:03:63:58:89:1a:46:86:bc: 88:40:7f:7b:a5:d1:80:cf:16:46:4f:26:35:33:ed:ce:56:91: 58:34:ba:ea:a0:8e:bf:62:73:f9:60:14:10:18:2e:2a:16:de: 17:c1:91:38:3d:20:4d:90:b9:c0:61:a7:60:36:73:b1:c8:ae: 82:18:30:16:a7:65:1b:29:75:12:80:18:59:f3:9d:e7:2f:9f: 94:a7:e2:45:42:4c:8d:f4:73:a6:c9:32:a7:80:92:4c:af:b8: 06:b9:a9:95:64:02:0b:b4:9f:d6:bf:78:69:08:15:78:d3:cd: f7:c2:4c:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVUmBt6Yx+jvxcuGgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQyZDFiOTgtNTEyMi00ZDAzLTg2ZjUtMGRjOGQ2MzIz OGFhMB4XDTI0MDMyNjAxMDAyNVoXDTI0MDYyNDAxMDAyNVowLzEtMCsGA1UEAxMk YTMxN2NiNDgtNWNhMS00NmMyLWI0ZTQtY2Y5NmMxMGM2MTE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/oR3yca5ZVq8FiOGbp3YJuhOif9c6+K2wGS JyH5zWM5a6+Hj2A8HeVmiyaEuqBniGaCRKLCGD4lutItF81vHGfBzsjngdngkShV fvXLTnni52zcxei4ToxERR49gWiaG0Bxt9YJKbsIj7lDW6mlRfIqSZ13F1aEeefB 0uhhcCbWZ/eL/y+iUHrYvrBCHgwI6L3zV+vvdC1lDxTJ8ulCEo8olA6UprRB9xEN O92qqtSH7cbnDsPbIaUSsOTiy61MlbWIbmuypQMmlkBSenS3wX0iMHwoSzgLgs0T Mi7NmwGCZHGmEW9HifQE0EZc0WP2uxZrlWv5dy120iYdGaB99QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDe5Y0irWRKo6P0hpKgAFpmH586QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xZDJk MWI5OC01MTIyLTRkMDMtODZmNS0wZGM4ZDYzMjM4YWEvM2IxYTRlZDItYjY5Yi0z OTJhLThkZGMtZjM3ZDk1NWZhNWZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMWQyZDFiOTgtNTEyMi00ZDAzLTg2 ZjUtMGRjOGQ2MzIzOGFhLzFkMmQxYjk4LTUxMjItNGQwMy04NmY1LTBkYzhkNjMy MzhhYS5jcmwwHwYDVR0jBBgwFoAUkS7TWanq9XfcNdgKY6T/wq3OaCMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xZDJkMWI5OC01MTIyLTRkMDMtODZmNS0wZGM4 ZDYzMjM4YWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WvEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGNH/liVQw7nGIIrN99wdrV9PdoqJI3TZkYE8eAv4y3kxzkfq5WAQE4Z ZoyjeURBxua04pJkE7XhfkGHZw+CDXf4g6m7BIC8ENm7l6/L9OPd1Hez9b81EPjS YUrz3tn+R+ks5yMv0RWHbZ72ZgiE8oiiEGppNF+61maYGNBc2tUUoKXg/0qz3V4D Y1iJGkaGvIhAf3ul0YDPFkZPJjUz7c5WkVg0uuqgjr9ic/lgFBAYLioW3hfBkTg9 IE2QucBhp2A2c7HIroIYMBanZRspdRKAGFnznecvn5Sn4kVCTI30c6bJMqeAkkyv uAa5qZVkAgu0n9a/eGkIFXjTzffCTAo= -----END CERTIFICATE-----Generated at Sat May 18 15:59:36 2024 by rpki-client on console-ams.rpki-client.org