$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/25164ba1-f06b-347e-8764-cf13e4daaf78.roa File: 25164ba1-f06b-347e-8764-cf13e4daaf78.roa (raw, json) Hash identifier: Yjiktydpi5BtQNPio+WVZnB1HCI0BU+wiUcdGp0bBMQ= Subject key identifier: 85:AF:74:FA:6A:E2:89:9D:C1:90:43:CB:EF:8D:45:C6:66:09:B7:33 Certificate issuer: /CN=509a1ba4-f033-4e9b-89e1-8df073375b17 Certificate serial: 010D0C9F43285845CF6E3C6C2C21D8EAEFD92200 Authority key identifier: 7C:CD:4D:63:F9:70:FB:BF:86:FF:3E:F8:45:0E:4F:AE:EE:99:57:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/25164ba1-f06b-347e-8764-cf13e4daaf78.roa Signing time: Thu 09 May 2024 01:00:26 +0000 ROA not before: Thu 09 May 2024 01:00:26 +0000 ROA not after: Wed 07 Aug 2024 01:00:26 +0000 asID: 22157 IP address blocks: 208.71.240.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/509a1ba4-f033-4e9b-89e1-8df073375b17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/509a1ba4-f033-4e9b-89e1-8df073375b17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 May 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:cf:6e:3c:6c:2c:21:d8:ea:ef:d9:22:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=509a1ba4-f033-4e9b-89e1-8df073375b17 Validity Not Before: May 9 01:00:26 2024 GMT Not After : Aug 7 01:00:26 2024 GMT Subject: CN=4582479b-49df-44cf-99d5-665e062b5b5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c1:f3:be:44:84:cc:07:39:8a:cd:1d:f5:ef: 25:c9:02:90:3a:96:9a:dd:f6:c1:c9:19:b7:8c:ea: 4a:22:43:08:ed:be:29:90:0b:a3:33:8d:4d:33:1a: f7:ec:da:a1:3a:9b:b7:3d:37:be:c5:e4:8c:33:f5: 99:e4:cf:5d:c2:bd:72:4e:51:5c:fb:62:c4:21:b8: e6:63:aa:b4:8d:85:6f:58:da:1d:22:50:e8:8d:d5: 81:a4:8b:6e:73:06:4f:c3:d7:b6:60:d0:a5:51:47: 8a:0e:1a:a5:38:1b:d8:1c:8e:cf:55:80:1e:9c:dc: cf:48:7f:3e:7a:1c:a9:b8:03:94:94:72:c6:2d:a9: b0:21:7d:9d:2f:5f:e3:d6:d8:50:b4:f4:f2:db:e2: 0b:ff:7e:a6:90:d4:2f:b9:53:d4:44:7e:8d:fa:b6: 33:4c:f1:74:3d:ea:93:83:6d:f3:c1:0a:3f:a3:5f: 5a:74:4b:85:1d:0f:bc:42:56:76:0c:19:6e:c5:95: c7:b6:2f:fc:7b:0b:a2:9c:b3:2e:71:2e:84:d2:7b: e0:f6:4f:e9:32:bd:be:e3:08:d5:03:08:18:b6:a0: c6:7d:88:a0:1d:8d:2d:19:39:3f:a6:09:6d:7d:65: 4b:3d:c9:76:c5:36:62:4c:81:56:7a:ee:32:db:6d: 4d:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:AF:74:FA:6A:E2:89:9D:C1:90:43:CB:EF:8D:45:C6:66:09:B7:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/25164ba1-f06b-347e-8764-cf13e4daaf78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/509a1ba4-f033-4e9b-89e1-8df073375b17.crl X509v3 Authority Key Identifier: keyid:7C:CD:4D:63:F9:70:FB:BF:86:FF:3E:F8:45:0E:4F:AE:EE:99:57:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17.cer sbgp-ipAddrBlock: critical IPv4: 208.71.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:c7:04:c0:9a:d5:08:66:70:ef:d5:d2:aa:25:9a:27:41:5b: 9f:4a:45:10:35:00:91:6c:9f:77:c9:51:38:a5:0f:4d:02:9a: fc:b7:79:d7:51:10:c1:95:4e:2d:cd:86:71:f1:17:5c:75:2a: 48:84:ef:55:e7:c7:a7:0b:c8:5d:6c:fc:50:3b:16:32:32:e3: 6c:30:13:0b:a5:24:98:92:6a:59:18:32:21:76:7e:3b:2d:4f: ab:f6:b9:ee:48:19:03:31:a0:b3:3e:bc:75:a1:aa:78:c6:1b: d8:ff:05:f4:2a:4f:93:1c:ce:08:33:4b:7f:92:26:c5:14:f1: cf:93:1c:27:5e:fb:87:f6:c5:3c:63:09:d1:9f:3f:f4:a1:fe: 9e:e8:1c:9b:1d:27:0b:e6:5e:7b:41:98:ba:38:7e:69:53:ca: 1c:11:01:3e:67:57:71:0e:43:1e:17:e2:ec:f9:f4:3e:54:1c: 24:62:c4:c8:55:38:2b:58:1b:11:50:2e:dd:dd:37:09:10:35: a9:51:ec:d3:6f:4b:a8:97:9d:61:a8:b7:93:fa:8f:72:4f:f8: 46:77:8b:c0:67:cb:9c:0c:d4:e2:41:05:80:29:0d:df:47:37: f8:1e:16:6e:ba:82:0a:01:d0:6e:48:ef:fe:bf:6d:c2:44:8c: ee:e9:77:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXPbjxsLCHY6u/ZIgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTA5YTFiYTQtZjAzMy00ZTliLTg5ZTEtOGRmMDczMzc1 YjE3MB4XDTI0MDUwOTAxMDAyNloXDTI0MDgwNzAxMDAyNlowLzEtMCsGA1UEAxMk NDU4MjQ3OWItNDlkZi00NGNmLTk5ZDUtNjY1ZTA2MmI1YjVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAusHzvkSEzAc5is0d9e8lyQKQOpaa3fbByRm3 jOpKIkMI7b4pkAujM41NMxr37NqhOpu3PTe+xeSMM/WZ5M9dwr1yTlFc+2LEIbjm Y6q0jYVvWNodIlDojdWBpItucwZPw9e2YNClUUeKDhqlOBvYHI7PVYAenNzPSH8+ ehypuAOUlHLGLamwIX2dL1/j1thQtPTy2+IL/36mkNQvuVPURH6N+rYzTPF0PeqT g23zwQo/o19adEuFHQ+8QlZ2DBluxZXHti/8ewuinLMucS6E0nvg9k/pMr2+4wjV AwgYtqDGfYigHY0tGTk/pgltfWVLPcl2xTZiTIFWeu4y221NLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIWvdPpq4omdwZBDy++NRcZmCbczMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81MDlh MWJhNC1mMDMzLTRlOWItODllMS04ZGYwNzMzNzViMTcvMjUxNjRiYTEtZjA2Yi0z NDdlLTg3NjQtY2YxM2U0ZGFhZjc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNTA5YTFiYTQtZjAzMy00ZTliLTg5 ZTEtOGRmMDczMzc1YjE3LzUwOWExYmE0LWYwMzMtNGU5Yi04OWUxLThkZjA3MzM3 NWIxNy5jcmwwHwYDVR0jBBgwFoAUfM1NY/lw+7+G/z74RQ5Pru6ZV4AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy81MDlhMWJhNC1mMDMzLTRlOWItODllMS04ZGYw NzMzNzViMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0EfwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEDHBMCa1QhmcO/V0qolmidBW59KRRA1AJFsn3fJUTilD00Cmvy3eddR EMGVTi3NhnHxF1x1KkiE71Xnx6cLyF1s/FA7FjIy42wwEwulJJiSalkYMiF2fjst T6v2ue5IGQMxoLM+vHWhqnjGG9j/BfQqT5MczggzS3+SJsUU8c+THCde+4f2xTxj CdGfP/Sh/p7oHJsdJwvmXntBmLo4fmlTyhwRAT5nV3EOQx4X4uz59D5UHCRixMhV OCtYGxFQLt3dNwkQNalR7NNvS6iXnWGot5P6j3JP+EZ3i8Bny5wM1OJBBYApDd9H N/geFm66ggoB0G5I7/6/bcJEjO7pdys= -----END CERTIFICATE-----Generated at Mon May 13 03:38:00 2024 by rpki-client on console-ams.rpki-client.org