$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/43cff616-436a-30b8-bd98-b94373b4be05.roa File: 43cff616-436a-30b8-bd98-b94373b4be05.roa (raw, json) Hash identifier: oTKbalrp74ARvsZCwFXVFm5BJSj2PNKEeO+rDruzkvU= Subject key identifier: 87:5A:2F:77:09:9D:CF:CC:1E:B1:21:18:25:58:C1:8C:A4:8C:C3:59 Certificate issuer: /CN=f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae Certificate serial: 010D0C9F43285845E7292C42156FD15DCC7012D0 Authority key identifier: 0A:B0:34:57:51:4F:AC:C4:8B:11:7B:16:73:3E:CC:8E:F5:C6:6F:46 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/43cff616-436a-30b8-bd98-b94373b4be05.roa Signing time: Fri 17 May 2024 13:00:34 +0000 ROA not before: Fri 17 May 2024 13:00:34 +0000 ROA not after: Thu 15 Aug 2024 13:00:34 +0000 asID: 33146 IP address blocks: 209.222.240.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 May 2024 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:e7:29:2c:42:15:6f:d1:5d:cc:70:12:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae Validity Not Before: May 17 13:00:34 2024 GMT Not After : Aug 15 13:00:34 2024 GMT Subject: CN=a8cc2a97-eac6-4a8c-b6a5-59b6759f25a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:8a:8e:84:4f:ea:79:27:d1:76:8e:8e:79:d5: ec:ca:b6:af:30:e1:cb:9c:e5:cd:d6:f5:0d:67:fa: bc:c5:4c:62:da:d5:87:bd:b9:cb:2b:80:73:a7:02: a9:cb:c4:50:d1:bb:2e:66:8d:9d:e5:3f:65:25:4e: 17:fa:02:8c:a4:3d:d6:e3:f0:4e:82:69:c5:fa:da: 44:39:32:6b:fa:05:25:f5:2c:3c:f6:09:67:87:dc: f2:06:bc:f1:10:da:c3:fa:cd:77:ca:cd:6d:ae:ef: 3e:7d:d1:1c:1d:41:26:39:ce:4f:49:b9:44:45:80: a4:f6:08:80:15:ec:2d:40:36:e6:1c:92:63:ed:bc: 19:9c:7f:65:20:ff:07:43:d3:c5:a2:ed:b7:c5:f5: 2c:67:42:c8:50:7c:22:64:dc:9e:96:0a:a6:df:c6: af:9f:8c:9d:2b:e8:80:31:41:56:dd:e0:28:1d:f0: 15:ab:ea:09:a1:f6:28:f9:6c:d4:97:11:8e:9d:c7: df:6e:30:7d:60:2f:37:24:a2:2a:f0:7b:09:26:38: 31:35:bb:78:ae:17:0b:e4:aa:a7:38:1d:ba:80:88: b3:fd:b9:d8:3e:06:2c:e8:51:cd:50:18:19:cb:c7: 80:f7:8f:ad:56:31:88:65:eb:b4:d5:2e:22:dd:a5: f4:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:5A:2F:77:09:9D:CF:CC:1E:B1:21:18:25:58:C1:8C:A4:8C:C3:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/43cff616-436a-30b8-bd98-b94373b4be05.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.crl X509v3 Authority Key Identifier: keyid:0A:B0:34:57:51:4F:AC:C4:8B:11:7B:16:73:3E:CC:8E:F5:C6:6F:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.cer sbgp-ipAddrBlock: critical IPv4: 209.222.240.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:32:70:94:82:89:49:8c:6e:ef:47:72:62:6e:5e:5e:7f:2d: 94:6d:db:c5:cb:11:b6:94:d5:25:05:6c:14:15:0c:54:82:9c: 5f:42:c3:78:e0:58:b8:65:bc:63:57:5c:35:a6:f4:83:65:54: 9a:ae:1e:97:aa:ca:6a:8a:9d:92:49:47:f4:ca:fa:64:58:4c: 15:de:99:1b:d9:2a:1e:66:52:cb:00:e0:1d:d0:4f:67:e9:14: 53:9c:5b:1e:28:6c:86:c9:f2:e5:60:36:a1:36:52:55:c6:39: 23:53:12:4a:d5:f7:b9:9d:38:f4:b3:69:62:8b:3c:dd:71:28: 2c:1d:79:7a:21:53:92:da:0b:c1:b4:0a:a7:ef:ea:91:54:38: 58:b9:07:4a:dd:ea:4b:82:c7:a7:fc:fb:b3:0e:d0:90:27:f8: 8d:ba:ae:cb:53:67:44:58:86:cf:82:a1:05:2f:89:a6:37:27: c9:30:b4:cb:f4:df:38:5c:11:e7:45:b2:24:82:04:10:0d:86: 2c:51:6f:c5:63:a2:71:f2:e3:fa:03:6c:69:0c:f9:13:be:fc: b3:e8:1f:d2:4a:46:da:8d:35:b6:58:22:95:7e:b1:98:af:38: af:76:4c:7e:90:b3:9c:de:d9:00:e9:2b:ea:1b:ca:04:0f:13: 59:26:ca:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXnKSxCFW/RXcxwEtAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjFhYzgzYjUtNGNmZC00YjM4LWIxYmItNDUwMDBlZWJh NmFlMB4XDTI0MDUxNzEzMDAzNFoXDTI0MDgxNTEzMDAzNFowLzEtMCsGA1UEAxMk YThjYzJhOTctZWFjNi00YThjLWI2YTUtNTliNjc1OWYyNWEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0oqOhE/qeSfRdo6OedXsyravMOHLnOXN1vUN Z/q8xUxi2tWHvbnLK4BzpwKpy8RQ0bsuZo2d5T9lJU4X+gKMpD3W4/BOgmnF+tpE OTJr+gUl9Sw89glnh9zyBrzxENrD+s13ys1tru8+fdEcHUEmOc5PSblERYCk9giA FewtQDbmHJJj7bwZnH9lIP8HQ9PFou23xfUsZ0LIUHwiZNyelgqm38avn4ydK+iA MUFW3eAoHfAVq+oJofYo+WzUlxGOncffbjB9YC83JKIq8HsJJjgxNbt4rhcL5Kqn OB26gIiz/bnYPgYs6FHNUBgZy8eA94+tVjGIZeu01S4i3aX0LwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIdaL3cJnc/MHrEhGCVYwYykjMNZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9mMWFj ODNiNS00Y2ZkLTRiMzgtYjFiYi00NTAwMGVlYmE2YWUvNDNjZmY2MTYtNDM2YS0z MGI4LWJkOTgtYjk0MzczYjRiZTA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZjFhYzgzYjUtNGNmZC00YjM4LWIx YmItNDUwMDBlZWJhNmFlL2YxYWM4M2I1LTRjZmQtNGIzOC1iMWJiLTQ1MDAwZWVi YTZhZS5jcmwwHwYDVR0jBBgwFoAUCrA0V1FPrMSLEXsWcz7MjvXGb0YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9mMWFjODNiNS00Y2ZkLTRiMzgtYjFiYi00NTAw MGVlYmE2YWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0d7wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGoycJSCiUmMbu9HcmJuXl5/LZRt28XLEbaU1SUFbBQVDFSCnF9Cw3jg WLhlvGNXXDWm9INlVJquHpeqymqKnZJJR/TK+mRYTBXemRvZKh5mUssA4B3QT2fp FFOcWx4obIbJ8uVgNqE2UlXGOSNTEkrV97mdOPSzaWKLPN1xKCwdeXohU5LaC8G0 Cqfv6pFUOFi5B0rd6kuCx6f8+7MO0JAn+I26rstTZ0RYhs+CoQUviaY3J8kwtMv0 3zhcEedFsiSCBBANhixRb8VjonHy4/oDbGkM+RO+/LPoH9JKRtqNNbZYIpV+sZiv OK92TH6Qs5ze2QDpK+obygQPE1kmyoA= -----END CERTIFICATE-----Generated at Fri May 17 15:24:07 2024 by rpki-client on console-ams.rpki-client.org