$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/c7bd9a87-a8fa-3a0d-8336-9db4f83d2c6b.roa File: c7bd9a87-a8fa-3a0d-8336-9db4f83d2c6b.roa (raw, json) Hash identifier: Yqa/s0faODYlJ/+CZnD4O4w7AR8gnvAte81CHUScfZ0= Subject key identifier: 6D:F3:FD:08:A9:BC:DC:3C:81:9B:32:FE:99:5F:6A:86:E2:9F:67:0E Certificate issuer: /CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa Certificate serial: 010D0C9F43285845D39E61E545A8C4567B7980C0 Authority key identifier: 91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/c7bd9a87-a8fa-3a0d-8336-9db4f83d2c6b.roa Signing time: Fri 10 May 2024 13:00:36 +0000 ROA not before: Fri 10 May 2024 13:00:36 +0000 ROA not after: Thu 08 Aug 2024 13:00:36 +0000 asID: 54203 IP address blocks: 209.234.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 May 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:d3:9e:61:e5:45:a8:c4:56:7b:79:80:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa Validity Not Before: May 10 13:00:36 2024 GMT Not After : Aug 8 13:00:36 2024 GMT Subject: CN=7c26f844-c86b-4cc9-907c-3672057631fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:1b:9c:6f:ee:30:ec:ae:22:4b:36:0a:51:8c: 6b:a4:cf:b0:95:5d:89:cd:34:12:3b:33:29:76:cd: ff:b2:c6:c6:c1:71:21:b2:04:4c:bf:22:94:ac:67: c9:d3:25:4a:1b:81:96:5e:30:6b:84:60:1b:56:3d: 28:ec:ba:26:c6:6f:ec:17:30:73:5a:d0:55:b9:79: 70:a3:8c:2f:35:8a:fe:d4:15:38:c7:d0:6e:1a:c9: 60:32:b3:32:1c:ce:a5:4c:d0:13:72:43:ac:83:2b: 8c:1e:68:01:dc:1c:a7:64:60:3c:c0:a4:9e:d0:60: 67:f9:23:1a:24:58:61:19:ea:93:36:9d:98:68:61: 6a:79:e9:03:11:ce:26:81:76:8b:77:ba:88:bf:7b: 64:45:b6:c0:28:73:76:2f:73:3e:d1:dd:d0:e6:a5: 9a:bc:c3:97:f6:fd:ab:4d:55:94:87:d3:1d:e7:ac: a5:b7:29:44:12:0d:9e:be:9c:b0:49:42:09:69:3c: 0f:fe:85:45:f9:46:8b:74:91:c5:57:6c:6c:f9:50: e1:86:59:30:b8:a8:73:56:bd:0f:59:f8:9b:53:63: ad:e3:0e:77:48:01:e0:ff:55:a3:c7:de:f7:03:1b: a2:04:b0:1c:fd:fc:4f:7a:75:9d:7e:59:8a:38:22: 8b:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:F3:FD:08:A9:BC:DC:3C:81:9B:32:FE:99:5F:6A:86:E2:9F:67:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/c7bd9a87-a8fa-3a0d-8336-9db4f83d2c6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl X509v3 Authority Key Identifier: keyid:91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer sbgp-ipAddrBlock: critical IPv4: 209.234.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:05:90:d1:39:93:23:6b:77:b6:fd:a8:20:d3:ae:8a:b1:08: 2d:0f:c2:d9:73:c8:eb:d0:cf:39:c3:94:8c:4c:49:f7:f7:8f: ec:f4:fc:12:cc:91:f3:73:2b:81:dc:f7:e8:68:3e:b0:d5:9d: 3b:51:19:da:c5:19:c8:c2:85:22:3c:34:5c:5e:18:9d:0f:51: 5a:88:89:ef:d1:f5:6f:18:c7:65:2b:4c:d9:9c:7c:b5:09:51: b5:aa:9a:5d:23:2c:32:79:e7:b2:cd:0d:e9:d9:ff:b4:c2:f7: 1e:46:45:56:51:b3:16:ef:a9:b1:98:52:c3:fa:2c:f7:c3:38: bf:ad:e0:f3:41:2c:98:cc:91:64:f3:3e:c9:31:e9:3b:8d:9e: c4:8c:77:9e:7e:d6:78:fe:65:be:1f:4d:87:bd:88:c2:f4:cd: 4c:a7:04:93:aa:d4:c1:cb:95:c4:44:25:b6:f3:db:f9:26:b0: 6a:ce:09:8b:38:84:46:eb:c1:a2:0e:d1:74:91:e8:19:7d:a8: 1b:34:35:5b:32:73:42:c1:8d:7b:0a:7b:e7:a2:31:ac:63:3b: 8a:61:f4:e0:59:00:24:b5:8a:8a:12:35:1b:62:4d:90:0b:9a: 0b:80:2a:56:98:2f:4a:3f:bf:50:08:4d:39:51:a6:e7:02:13: ed:51:2b:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXTnmHlRajEVnt5gMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQyZDFiOTgtNTEyMi00ZDAzLTg2ZjUtMGRjOGQ2MzIz OGFhMB4XDTI0MDUxMDEzMDAzNloXDTI0MDgwODEzMDAzNlowLzEtMCsGA1UEAxMk N2MyNmY4NDQtYzg2Yi00Y2M5LTkwN2MtMzY3MjA1NzYzMWZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBucb+4w7K4iSzYKUYxrpM+wlV2JzTQSOzMp ds3/ssbGwXEhsgRMvyKUrGfJ0yVKG4GWXjBrhGAbVj0o7Lomxm/sFzBzWtBVuXlw o4wvNYr+1BU4x9BuGslgMrMyHM6lTNATckOsgyuMHmgB3BynZGA8wKSe0GBn+SMa JFhhGeqTNp2YaGFqeekDEc4mgXaLd7qIv3tkRbbAKHN2L3M+0d3Q5qWavMOX9v2r TVWUh9Md56yltylEEg2evpywSUIJaTwP/oVF+UaLdJHFV2xs+VDhhlkwuKhzVr0P WfibU2Ot4w53SAHg/1Wjx973AxuiBLAc/fxPenWdflmKOCKLuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG3z/QipvNw8gZsy/plfaobin2cOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xZDJk MWI5OC01MTIyLTRkMDMtODZmNS0wZGM4ZDYzMjM4YWEvYzdiZDlhODctYThmYS0z YTBkLTgzMzYtOWRiNGY4M2QyYzZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMWQyZDFiOTgtNTEyMi00ZDAzLTg2 ZjUtMGRjOGQ2MzIzOGFhLzFkMmQxYjk4LTUxMjItNGQwMy04NmY1LTBkYzhkNjMy MzhhYS5jcmwwHwYDVR0jBBgwFoAUkS7TWanq9XfcNdgKY6T/wq3OaCMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xZDJkMWI5OC01MTIyLTRkMDMtODZmNS0wZGM4 ZDYzMjM4YWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0er4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHUFkNE5kyNrd7b9qCDTroqxCC0PwtlzyOvQzznDlIxMSff3j+z0/BLM kfNzK4Hc9+hoPrDVnTtRGdrFGcjChSI8NFxeGJ0PUVqIie/R9W8Yx2UrTNmcfLUJ UbWqml0jLDJ557LNDenZ/7TC9x5GRVZRsxbvqbGYUsP6LPfDOL+t4PNBLJjMkWTz Pskx6TuNnsSMd55+1nj+Zb4fTYe9iML0zUynBJOq1MHLlcREJbbz2/kmsGrOCYs4 hEbrwaIO0XSR6Bl9qBs0NVsyc0LBjXsKe+eiMaxjO4ph9OBZACS1iooSNRtiTZAL mguAKlaYL0o/v1AITTlRpucCE+1RK1o= -----END CERTIFICATE-----Generated at Fri May 17 03:50:09 2024 by rpki-client on console-fra.rpki-client.org