$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/1839d6ea-ba2f-3f03-89da-d50dd4ef08e1.roa File: 1839d6ea-ba2f-3f03-89da-d50dd4ef08e1.roa (raw, json) Hash identifier: vtRpRW7hJdFIB9Q2qK7XM6O087Y0NSuZ7DD3wPbCegA= Subject key identifier: 88:72:EC:84:5D:8B:AE:5F:28:7C:70:30:AF:E7:A3:14:A3:E1:77:6D Certificate issuer: /CN=509a1ba4-f033-4e9b-89e1-8df073375b17 Certificate serial: 010D0C9F432858467B8C7A27D75EAE81AFD48340 Authority key identifier: 7C:CD:4D:63:F9:70:FB:BF:86:FF:3E:F8:45:0E:4F:AE:EE:99:57:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/1839d6ea-ba2f-3f03-89da-d50dd4ef08e1.roa Signing time: Tue 09 Jul 2024 16:40:29 +0000 ROA not before: Tue 09 Jul 2024 16:40:29 +0000 ROA not after: Mon 07 Oct 2024 16:40:29 +0000 asID: 16509 IP address blocks: 208.71.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/509a1ba4-f033-4e9b-89e1-8df073375b17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/509a1ba4-f033-4e9b-89e1-8df073375b17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 10 Sep 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:46:7b:8c:7a:27:d7:5e:ae:81:af:d4:83:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=509a1ba4-f033-4e9b-89e1-8df073375b17 Validity Not Before: Jul 9 16:40:29 2024 GMT Not After : Oct 7 16:40:29 2024 GMT Subject: CN=de3acad5-b4f8-4284-98ff-9db3f238df01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:66:a8:ac:ec:9e:92:d1:d2:3b:ed:70:3f:19: c8:3f:5d:da:c9:5f:6b:bf:6d:52:44:25:33:43:2c: 4f:87:24:f3:39:1c:f8:ad:47:39:1c:62:25:fc:5e: 41:c0:b2:0d:ff:3d:8b:fd:74:fa:bb:bd:6a:b2:ff: d4:cf:28:54:00:a0:a3:5b:4e:58:18:39:f5:4c:91: 49:57:3f:94:07:a2:e6:3c:dc:ff:09:6a:6f:3b:f0: 3c:0c:f9:68:2d:7f:6c:fb:5b:96:f6:30:b5:68:57: e0:3d:4f:20:d9:f1:31:3c:2b:d2:51:be:fc:f1:75: 7b:d4:22:2a:2e:99:92:44:34:9f:06:bf:d9:2f:69: dc:14:44:c8:33:df:2b:e1:fb:d9:19:7e:2f:7f:3d: d7:62:64:66:4f:38:fc:b0:f3:83:0d:ab:6d:de:55: be:a0:90:8d:a3:06:d1:91:b5:7a:e1:71:49:80:2d: 8c:1c:6a:0f:12:cb:76:1f:57:03:b5:95:ba:f9:af: a2:4a:d7:f0:bd:0e:b2:61:9a:b0:69:22:66:1f:67: cb:8b:a5:e3:be:d9:f4:69:07:4d:43:f9:b2:de:94: 84:6f:4a:b5:64:40:07:0a:f1:75:e3:a9:d2:e3:93: 0a:b2:6e:37:37:58:42:05:14:37:db:c5:e1:96:2f: bc:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:72:EC:84:5D:8B:AE:5F:28:7C:70:30:AF:E7:A3:14:A3:E1:77:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/1839d6ea-ba2f-3f03-89da-d50dd4ef08e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/509a1ba4-f033-4e9b-89e1-8df073375b17.crl X509v3 Authority Key Identifier: keyid:7C:CD:4D:63:F9:70:FB:BF:86:FF:3E:F8:45:0E:4F:AE:EE:99:57:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17.cer sbgp-ipAddrBlock: critical IPv4: 208.71.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:83:c5:ef:28:b3:53:32:03:d5:23:95:14:52:e1:33:12:ca: 6b:c9:8f:d5:a7:a7:8d:2c:81:bb:34:8a:4b:aa:4a:af:c6:72: 0c:79:43:91:92:42:42:f4:74:40:c0:ae:26:50:be:e4:90:a9: 72:ce:29:c2:10:80:08:de:65:0b:06:ad:5a:98:07:e0:1d:3d: 9c:10:62:cb:57:78:ad:4d:f7:0d:4a:d2:69:9e:ba:c8:fb:25: 47:38:de:c0:91:b4:5c:51:f5:66:10:e9:4e:da:0c:1f:10:69: c5:f0:52:ed:fb:2e:c0:f2:da:a4:78:85:1e:4d:c3:23:4a:a2: 34:0e:1c:80:d3:91:e5:49:63:f2:0d:64:4d:5d:d6:e5:cb:55: 3d:46:0b:59:68:5e:b9:17:c5:ec:a4:2c:4f:a3:42:1f:ca:f7: db:7f:35:c1:6f:16:d9:d2:f1:68:f0:6a:02:36:3d:3d:99:cb: 98:33:23:25:96:f2:14:52:71:9e:91:4f:79:83:a4:fd:3d:57: dc:1d:74:68:a7:dd:25:1b:fa:46:da:a6:f3:06:ad:ba:f4:69: fd:1d:51:0a:e9:86:b6:09:0c:f8:33:8f:88:ed:3d:4e:7e:ad: 90:ca:13:7b:26:9a:32:fc:b1:e3:6f:21:52:5f:e3:b8:c2:3f: 63:3f:41:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEZ7jHon116uga/Ug0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTA5YTFiYTQtZjAzMy00ZTliLTg5ZTEtOGRmMDczMzc1 YjE3MB4XDTI0MDcwOTE2NDAyOVoXDTI0MTAwNzE2NDAyOVowLzEtMCsGA1UEAxMk ZGUzYWNhZDUtYjRmOC00Mjg0LTk4ZmYtOWRiM2YyMzhkZjAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4maorOyektHSO+1wPxnIP13ayV9rv21SRCUz QyxPhyTzORz4rUc5HGIl/F5BwLIN/z2L/XT6u71qsv/UzyhUAKCjW05YGDn1TJFJ Vz+UB6LmPNz/CWpvO/A8DPloLX9s+1uW9jC1aFfgPU8g2fExPCvSUb788XV71CIq LpmSRDSfBr/ZL2ncFETIM98r4fvZGX4vfz3XYmRmTzj8sPODDatt3lW+oJCNowbR kbV64XFJgC2MHGoPEst2H1cDtZW6+a+iStfwvQ6yYZqwaSJmH2fLi6Xjvtn0aQdN Q/my3pSEb0q1ZEAHCvF146nS45MKsm43N1hCBRQ328Xhli+81QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIhy7IRdi65fKHxwMK/noxSj4XdtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81MDlh MWJhNC1mMDMzLTRlOWItODllMS04ZGYwNzMzNzViMTcvMTgzOWQ2ZWEtYmEyZi0z ZjAzLTg5ZGEtZDUwZGQ0ZWYwOGUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNTA5YTFiYTQtZjAzMy00ZTliLTg5 ZTEtOGRmMDczMzc1YjE3LzUwOWExYmE0LWYwMzMtNGU5Yi04OWUxLThkZjA3MzM3 NWIxNy5jcmwwHwYDVR0jBBgwFoAUfM1NY/lw+7+G/z74RQ5Pru6ZV4AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy81MDlhMWJhNC1mMDMzLTRlOWItODllMS04ZGYw NzMzNzViMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Ef0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEmDxe8os1MyA9UjlRRS4TMSymvJj9Wnp40sgbs0ikuqSq/Gcgx5Q5GS QkL0dEDAriZQvuSQqXLOKcIQgAjeZQsGrVqYB+AdPZwQYstXeK1N9w1K0mmeusj7 JUc43sCRtFxR9WYQ6U7aDB8QacXwUu37LsDy2qR4hR5NwyNKojQOHIDTkeVJY/IN ZE1d1uXLVT1GC1loXrkXxeykLE+jQh/K99t/NcFvFtnS8WjwagI2PT2Zy5gzIyWW 8hRScZ6RT3mDpP09V9wddGin3SUb+kbapvMGrbr0af0dUQrphrYJDPgzj4jtPU5+ rZDKE3smmjL8seNvIVJf47jCP2M/QYI= -----END CERTIFICATE-----Generated at Sat Sep 7 15:01:00 2024 by rpki-client on console-fra.rpki-client.org