$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3a658369-32d1-3898-a51d-10f9d4e6f23d.roa File: 3a658369-32d1-3898-a51d-10f9d4e6f23d.roa (raw, json) Hash identifier: Ego2Uh+aTycoiTtp58dKi56nmYvEddurOgo2qnoik0s= Subject key identifier: D1:0A:89:96:E0:D3:F1:D5:E6:65:2E:C3:88:B6:97:F8:69:4E:C7:36 Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44 Certificate serial: 010D0C9F43285842AA14670031F898BE459050E0 Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3a658369-32d1-3898-a51d-10f9d4e6f23d.roa Signing time: Mon 24 Jul 2023 12:00:00 +0000 ROA not before: Mon 24 Jul 2023 12:00:00 +0000 ROA not after: Tue 24 Oct 2023 04:00:00 +0000 asID: 35911 IP address blocks: 209.226.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 24 Oct 2023 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:42:aa:14:67:00:31:f8:98:be:45:90:50:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44 Validity Not Before: Jul 24 12:00:00 2023 GMT Not After : Oct 24 04:00:00 2023 GMT Subject: CN=16a7321a-99ba-4534-883c-02c91cf3c017 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:70:94:d3:fb:e2:f8:6a:2f:20:cd:47:a8:33: 62:f5:91:1d:cb:fb:6a:f2:4b:85:8f:7c:b8:10:80: 6d:35:4f:cf:40:ab:96:69:d0:1a:e4:a1:34:ac:d3: 8a:bb:db:10:54:7c:e2:57:21:c1:23:83:c8:e6:23: 0b:87:1b:ee:78:4e:c9:07:03:d5:3e:3b:38:67:bc: 7b:a5:26:24:17:35:a1:8a:f3:f3:87:22:5f:7b:2d: ae:65:fc:5f:75:8d:42:7f:37:66:f4:dd:c9:aa:34: 20:46:c8:35:7b:41:5e:74:86:cf:6d:93:b3:20:fa: da:30:a1:d3:3c:67:d8:d1:23:0b:fb:3d:e6:20:08: 3d:53:8d:ca:00:76:7e:46:75:54:64:bb:6e:56:10: 1f:e8:7a:91:b2:d2:ec:61:cb:a4:35:21:fe:74:f0: 77:e2:8f:69:f7:4b:99:94:c0:73:cd:ac:b6:4a:29: 85:94:0f:31:aa:e8:27:37:aa:5f:85:18:88:16:23: 74:d2:89:c2:4b:45:9d:25:0c:4b:68:57:56:75:ec: 16:64:22:23:69:9e:27:4e:9b:2f:ef:66:05:17:98: 34:d9:fb:64:0f:99:35:da:4b:4b:d1:fd:c7:4b:30: 87:90:bd:ba:18:87:81:37:68:d5:e9:10:9a:3f:6d: fb:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:0A:89:96:E0:D3:F1:D5:E6:65:2E:C3:88:B6:97:F8:69:4E:C7:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3a658369-32d1-3898-a51d-10f9d4e6f23d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl X509v3 Authority Key Identifier: keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer sbgp-ipAddrBlock: critical IPv4: 209.226.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:b4:6f:3f:d6:8d:21:cc:5c:bc:7e:da:14:b5:9c:8b:f9:86: cd:59:99:8a:a8:b5:0d:06:4b:31:e2:8b:e2:10:b1:e3:23:5b: 10:8c:6a:d2:be:bb:c5:9e:71:0c:40:31:69:d9:a7:1c:30:09: 21:cd:dc:27:3a:74:f2:8c:d3:d9:d9:72:d8:a6:4f:38:42:ba: be:d0:39:51:ab:54:02:90:b1:13:9a:a2:0e:c7:98:e3:6f:f0: 50:e6:4d:04:93:91:b4:2f:e4:e2:e7:b1:60:93:02:26:53:f5: 40:58:11:41:23:66:51:14:50:0e:b0:3e:3f:20:1e:d1:99:58: b0:21:2a:e6:a9:9f:cf:41:c3:f8:a3:c3:95:97:e9:d7:a1:67: 22:bc:76:b5:7e:9a:b3:44:88:1a:f5:02:ad:dc:a7:9f:e2:3b: d0:81:fd:6f:1d:79:fd:db:e0:ef:34:c2:29:91:23:ae:ab:32: bd:58:9b:75:9f:46:05:84:c9:09:a4:3f:3c:e7:20:3c:0c:fa: 18:db:31:c1:1a:91:cd:fc:32:b5:bd:44:7e:55:b8:64:9b:94: ae:67:1a:41:c9:e7:7a:b3:3a:10:6e:9e:f7:ad:47:c5:10:cb: 04:cd:25:13:ed:84:64:84:cf:99:a3:55:ad:73:29:84:8c:08: 12:55:32:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEKqFGcAMfiYvkWQUOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0 YjQ0MB4XDTIzMDcyNDEyMDAwMFoXDTIzMTAyNDA0MDAwMFowLzEtMCsGA1UEAxMk MTZhNzMyMWEtOTliYS00NTM0LTg4M2MtMDJjOTFjZjNjMDE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3CU0/vi+GovIM1HqDNi9ZEdy/tq8kuFj3y4 EIBtNU/PQKuWadAa5KE0rNOKu9sQVHziVyHBI4PI5iMLhxvueE7JBwPVPjs4Z7x7 pSYkFzWhivPzhyJfey2uZfxfdY1Cfzdm9N3JqjQgRsg1e0FedIbPbZOzIPraMKHT PGfY0SML+z3mIAg9U43KAHZ+RnVUZLtuVhAf6HqRstLsYcukNSH+dPB34o9p90uZ lMBzzay2SimFlA8xqugnN6pfhRiIFiN00onCS0WdJQxLaFdWdewWZCIjaZ4nTpsv 72YFF5g02ftkD5k12ktL0f3HSzCHkL26GIeBN2jV6RCaP237swIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNEKiZbg0/HV5mUuw4i2l/hpTsc2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvM2E2NTgzNjktMzJkMS0z ODk4LWE1MWQtMTBmOWQ0ZTZmMjNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5 NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0eLhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHG0bz/WjSHMXLx+2hS1nIv5hs1ZmYqotQ0GSzHii+IQseMjWxCMatK+ u8WecQxAMWnZpxwwCSHN3Cc6dPKM09nZctimTzhCur7QOVGrVAKQsROaog7HmONv 8FDmTQSTkbQv5OLnsWCTAiZT9UBYEUEjZlEUUA6wPj8gHtGZWLAhKuapn89Bw/ij w5WX6dehZyK8drV+mrNEiBr1Aq3cp5/iO9CB/W8def3b4O80wimRI66rMr1Ym3Wf RgWEyQmkPzznIDwM+hjbMcEakc38MrW9RH5VuGSblK5nGkHJ53qzOhBunvetR8UQ ywTNJRPthGSEz5mjVa1zKYSMCBJVMiA= -----END CERTIFICATE-----Generated at Tue Oct 24 03:59:01 2023 by rpki-client on console-fra.rpki-client.org