$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/7375064a-0ebd-30f8-a5a1-a95e6e1ca63e.roa File: 7375064a-0ebd-30f8-a5a1-a95e6e1ca63e.roa (raw, json) Hash identifier: k8N8VnVDdX1UCewVAEqxtA8kJhHxxdqPCrB23A1DnfU= Subject key identifier: 69:31:CF:50:81:59:56:CA:4C:AA:00:B6:42:81:B9:27:5B:A8:71:55 Certificate issuer: /CN=dfe98912-51fc-490e-b52f-0f6db9a2847e Certificate serial: 010D0C9F43285844F7713E592E7AA5F5B318CB00 Authority key identifier: EC:81:53:34:C0:5B:18:F9:7E:DF:43:4A:6F:1A:97:CF:A0:AF:57:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/7375064a-0ebd-30f8-a5a1-a95e6e1ca63e.roa Signing time: Wed 21 Feb 2024 16:11:58 +0000 ROA not before: Wed 21 Feb 2024 16:11:58 +0000 ROA not after: Tue 21 May 2024 15:11:58 +0000 asID: 16509 IP address blocks: 209.240.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/dfe98912-51fc-490e-b52f-0f6db9a2847e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/dfe98912-51fc-490e-b52f-0f6db9a2847e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 05 May 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:f7:71:3e:59:2e:7a:a5:f5:b3:18:cb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfe98912-51fc-490e-b52f-0f6db9a2847e Validity Not Before: Feb 21 16:11:58 2024 GMT Not After : May 21 15:11:58 2024 GMT Subject: CN=ad677749-3ed8-4b77-afcb-129c45ad3d76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:90:94:d5:80:9b:3e:00:6a:14:34:ab:dd:33: 96:9e:6f:ec:eb:0e:fb:ac:0e:88:c6:42:f9:25:51: c8:2b:31:dc:e5:93:34:d1:b4:56:10:a8:e7:1a:7f: 47:c6:b0:42:59:44:e6:99:d8:15:c1:8e:2e:7b:14: 27:e3:67:c0:72:5c:a4:4a:d9:ba:fc:a5:f2:bc:1c: 1e:09:9d:9b:3a:bf:20:33:2b:a1:5d:06:5d:ee:40: eb:4b:9d:c3:6f:57:e4:99:a6:97:ab:fb:64:5c:c5: 63:67:85:e6:08:44:ca:0b:af:3a:af:ba:fd:e3:36: b3:4d:93:16:c1:d1:0b:ab:c6:d7:15:f7:94:e8:25: cc:06:bb:cd:f2:2b:e7:87:ef:70:59:cc:14:6e:b8: 15:03:61:81:90:2b:c5:78:0e:a1:33:0f:57:60:3f: a2:e1:85:90:a7:4d:9f:87:ed:b3:33:71:b0:c4:d2: b7:40:ff:b0:26:ea:b9:f8:fd:db:f4:61:e4:e2:e1: 09:c3:ab:58:a9:ab:54:dd:4f:1f:77:93:f7:93:46: d3:9b:64:34:43:4c:b4:1a:84:12:4c:32:ee:a2:93: 5c:69:1f:af:90:b4:d8:5d:39:2f:3b:a4:8a:b3:7e: 2e:90:ca:dd:10:ff:36:cd:ff:b6:a4:b2:e9:37:50: 36:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:31:CF:50:81:59:56:CA:4C:AA:00:B6:42:81:B9:27:5B:A8:71:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/7375064a-0ebd-30f8-a5a1-a95e6e1ca63e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/dfe98912-51fc-490e-b52f-0f6db9a2847e.crl X509v3 Authority Key Identifier: keyid:EC:81:53:34:C0:5B:18:F9:7E:DF:43:4A:6F:1A:97:CF:A0:AF:57:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e.cer sbgp-ipAddrBlock: critical IPv4: 209.240.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:d3:21:f8:70:96:4d:29:77:78:7f:ea:07:d0:f5:c9:a8:01: d6:5a:6b:9a:a5:36:a2:01:ab:04:28:b2:84:5e:45:2b:f0:eb: b4:a1:89:74:33:26:87:2d:97:46:32:b0:ce:25:c8:65:20:f6: e0:66:b0:58:46:91:22:4e:22:4b:10:01:06:6e:1d:58:93:cb: ee:93:07:54:c5:c2:2a:ba:35:40:65:97:14:3c:5b:c9:09:72: 56:2a:dd:3d:72:ef:b8:a7:35:1c:58:d4:85:28:c8:f5:41:cc: de:ce:13:e3:e1:89:ec:2c:54:21:e1:c1:1e:e6:65:27:69:38: 38:69:be:3f:03:b9:2a:38:8c:9a:3b:62:d1:e9:f5:fd:9c:7c: fe:9e:8c:06:62:92:66:4e:7f:31:3c:5e:cd:aa:2c:57:a3:17: 8d:30:c9:4a:ed:74:45:28:cc:aa:74:59:a3:0e:51:74:9f:f6: 85:4d:44:7f:11:e4:08:db:34:46:87:79:d7:16:fb:b1:b7:7b: 08:f7:15:aa:60:70:c8:9e:7e:db:89:74:fa:55:dd:bd:ce:6f: 9b:58:3f:bc:af:a7:71:29:63:2d:33:59:5f:65:fb:7f:cd:16: 3d:1f:a1:87:d6:16:bb:77:a5:52:e1:76:ce:32:76:25:33:96: c3:16:cd:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWET3cT5ZLnql9bMYywAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGZlOTg5MTItNTFmYy00OTBlLWI1MmYtMGY2ZGI5YTI4 NDdlMB4XDTI0MDIyMTE2MTE1OFoXDTI0MDUyMTE1MTE1OFowLzEtMCsGA1UEAxMk YWQ2Nzc3NDktM2VkOC00Yjc3LWFmY2ItMTI5YzQ1YWQzZDc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJCU1YCbPgBqFDSr3TOWnm/s6w77rA6IxkL5 JVHIKzHc5ZM00bRWEKjnGn9HxrBCWUTmmdgVwY4uexQn42fAclykStm6/KXyvBwe CZ2bOr8gMyuhXQZd7kDrS53Db1fkmaaXq/tkXMVjZ4XmCETKC686r7r94zazTZMW wdELq8bXFfeU6CXMBrvN8ivnh+9wWcwUbrgVA2GBkCvFeA6hMw9XYD+i4YWQp02f h+2zM3GwxNK3QP+wJuq5+P3b9GHk4uEJw6tYqatU3U8fd5P3k0bTm2Q0Q0y0GoQS TDLuopNcaR+vkLTYXTkvO6SKs34ukMrdEP82zf+2pLLpN1A2xwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGkxz1CBWVbKTKoAtkKBuSdbqHFVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kZmU5 ODkxMi01MWZjLTQ5MGUtYjUyZi0wZjZkYjlhMjg0N2UvNzM3NTA2NGEtMGViZC0z MGY4LWE1YTEtYTk1ZTZlMWNhNjNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGZlOTg5MTItNTFmYy00OTBlLWI1 MmYtMGY2ZGI5YTI4NDdlL2RmZTk4OTEyLTUxZmMtNDkwZS1iNTJmLTBmNmRiOWEy ODQ3ZS5jcmwwHwYDVR0jBBgwFoAU7IFTNMBbGPl+30NKbxqXz6CvV2kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kZmU5ODkxMi01MWZjLTQ5MGUtYjUyZi0wZjZk YjlhMjg0N2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0fAcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHbTIfhwlk0pd3h/6gfQ9cmoAdZaa5qlNqIBqwQosoReRSvw67ShiXQz Joctl0YysM4lyGUg9uBmsFhGkSJOIksQAQZuHViTy+6TB1TFwiq6NUBllxQ8W8kJ clYq3T1y77inNRxY1IUoyPVBzN7OE+PhiewsVCHhwR7mZSdpODhpvj8DuSo4jJo7 YtHp9f2cfP6ejAZikmZOfzE8Xs2qLFejF40wyUrtdEUozKp0WaMOUXSf9oVNRH8R 5AjbNEaHedcW+7G3ewj3FapgcMieftuJdPpV3b3Ob5tYP7yvp3EpYy0zWV9l+3/N Fj0foYfWFrt3pVLhds4ydiUzlsMWzXI= -----END CERTIFICATE-----Generated at Thu May 2 14:42:21 2024 by rpki-client on console-ams.rpki-client.org