$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5806912f-7430-335a-8f79-f53379f2f2e3.roa File: 5806912f-7430-335a-8f79-f53379f2f2e3.roa (raw, json) Hash identifier: SVUD0u+RXk+PhM7vHUZxZCNjX8XcMCeHi82gQSl75+g= Subject key identifier: BB:CD:C7:86:63:A5:E2:91:75:DB:8F:33:DC:7A:5A:C0:01:38:83:82 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858451FAC60E41DD55681FABA4060 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5806912f-7430-335a-8f79-f53379f2f2e3.roa Signing time: Thu 07 Mar 2024 02:00:25 +0000 ROA not before: Thu 07 Mar 2024 02:00:25 +0000 ROA not after: Wed 05 Jun 2024 01:00:25 +0000 asID: 33659 IP address blocks: 209.23.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:1f:ac:60:e4:1d:d5:56:81:fa:ba:40:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 7 02:00:25 2024 GMT Not After : Jun 5 01:00:25 2024 GMT Subject: CN=9d9c461b-8acc-45e4-8735-483c86914a74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:19:0f:67:e7:02:d4:cb:7e:98:2a:96:35:13: 08:ab:a2:3f:f2:17:3d:b7:05:88:eb:00:ae:c7:e5: 1a:db:91:ce:ad:6f:1e:d8:ae:e6:7e:48:82:e5:02: 12:45:f9:87:14:2f:08:c2:a3:a8:94:4a:db:a0:2f: 82:98:dd:5d:43:82:f6:49:fe:f6:1e:c4:d7:3a:15: 12:87:d6:da:11:02:c8:d7:c2:bb:73:be:6b:09:a1: 39:50:31:90:d8:34:69:86:9d:e6:43:75:0d:97:a1: ae:80:1a:4c:91:ec:3e:60:ae:91:47:95:3c:ea:79: 5b:a9:a9:d7:02:11:85:ee:df:e4:81:10:e2:83:cc: af:84:ce:0b:29:a1:aa:b0:73:b8:3e:55:04:a3:22: ae:55:d9:e0:70:c9:16:7d:f4:28:69:b0:62:72:de: 1d:ae:05:5b:84:b0:1b:db:5f:7a:e3:a7:49:d7:c6: a5:4b:81:51:31:e7:fc:4a:85:46:d4:4f:85:01:43: 83:1e:fe:d8:5f:45:b1:d9:ad:6f:05:10:e6:b2:09: 4d:2f:6a:e7:5f:a8:b2:de:f8:a3:48:e9:5a:83:84: 24:7c:24:46:63:dc:f7:26:ba:0c:57:86:76:03:95: e5:3f:31:c2:63:88:36:b7:8c:86:4d:42:8b:4f:a4: b7:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:CD:C7:86:63:A5:E2:91:75:DB:8F:33:DC:7A:5A:C0:01:38:83:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5806912f-7430-335a-8f79-f53379f2f2e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 209.23.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:0b:a0:f8:77:f2:1a:a4:e0:89:fc:2b:50:e6:47:54:54:92: 0f:ba:bc:2b:03:29:95:7d:f1:60:f1:c1:68:16:33:c8:94:42: 7d:b9:66:da:5c:9d:97:fb:6d:05:09:8f:80:6c:d9:e2:de:29: 0f:c8:53:71:32:9a:01:18:f1:76:ab:8b:08:fc:0f:ac:6f:62: 74:73:ff:fe:d4:ac:d6:24:69:e7:56:44:4d:d6:2c:c3:f8:a7: b5:82:b4:6f:3e:6b:41:b1:c8:25:f7:38:32:d5:9d:d6:ef:17: ac:10:85:3e:5d:53:ce:50:e1:c9:b3:33:da:6c:eb:06:c3:3b: e5:25:5c:36:d9:4a:cc:0e:01:53:8a:6d:ae:5a:8e:bc:08:64: aa:70:83:f1:7c:12:02:16:f7:61:4d:12:53:80:2c:98:53:67: 6c:f7:cc:53:02:5b:da:fb:70:ef:25:0b:62:4b:d6:63:fe:cd: ae:48:0e:34:98:93:f0:b4:51:c2:96:59:e8:ca:b3:04:dc:c8: 26:20:97:83:72:e1:28:d2:a1:7e:be:c5:24:25:e4:c8:ab:a0: 3c:74:13:de:af:35:9a:06:be:71:ee:7a:d7:0d:5f:4c:c5:a1: a9:d9:7d:62:82:d5:fd:b3:28:49:68:98:2b:00:19:a2:be:4f: 08:a4:87:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUfrGDkHdVWgfq6QGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MDMwNzAyMDAyNVoXDTI0MDYwNTAxMDAyNVowLzEtMCsGA1UEAxMk OWQ5YzQ2MWItOGFjYy00NWU0LTg3MzUtNDgzYzg2OTE0YTc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0BkPZ+cC1Mt+mCqWNRMIq6I/8hc9twWI6wCu x+Ua25HOrW8e2K7mfkiC5QISRfmHFC8IwqOolErboC+CmN1dQ4L2Sf72HsTXOhUS h9baEQLI18K7c75rCaE5UDGQ2DRphp3mQ3UNl6GugBpMkew+YK6RR5U86nlbqanX AhGF7t/kgRDig8yvhM4LKaGqsHO4PlUEoyKuVdngcMkWffQoabBict4drgVbhLAb 219646dJ18alS4FRMef8SoVG1E+FAUODHv7YX0Wx2a1vBRDmsglNL2rnX6iy3vij SOlag4QkfCRGY9z3JroMV4Z2A5XlPzHCY4g2t4yGTUKLT6S3JQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLvNx4ZjpeKRdduPM9x6WsABOIOCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTgwNjkxMmYtNzQzMC0z MzVhLThmNzktZjUzMzc5ZjJmMmUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0RfZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFILoPh38hqk4In8K1DmR1RUkg+6vCsDKZV98WDxwWgWM8iUQn25Ztpc nZf7bQUJj4Bs2eLeKQ/IU3EymgEY8Xariwj8D6xvYnRz//7UrNYkaedWRE3WLMP4 p7WCtG8+a0GxyCX3ODLVndbvF6wQhT5dU85Q4cmzM9ps6wbDO+UlXDbZSswOAVOK ba5ajrwIZKpwg/F8EgIW92FNElOALJhTZ2z3zFMCW9r7cO8lC2JL1mP+za5IDjSY k/C0UcKWWejKswTcyCYgl4Ny4SjSoX6+xSQl5MiroDx0E96vNZoGvnHuetcNX0zF oanZfWKC1f2zKElomCsAGaK+TwikhyA= -----END CERTIFICATE-----Generated at Sat May 4 14:51:24 2024 by rpki-client on console-ams.rpki-client.org