$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/ba968438-1dc4-3db1-a0a1-e4360c977088.roa File: ba968438-1dc4-3db1-a0a1-e4360c977088.roa (raw, json) Hash identifier: qJcTGCYOnUhwk+4V8mJQofhpvA1XNeBFutMs/Vnx3lo= Subject key identifier: 42:D7:DC:17:13:67:74:A7:3F:68:7D:23:12:A1:FD:92:8C:11:35:2F Certificate issuer: /CN=6e9c5894-f794-4209-a00d-cf232363d7c6 Certificate serial: 010D0C9F43285845612869B117BC86BE787334C0 Authority key identifier: EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/ba968438-1dc4-3db1-a0a1-e4360c977088.roa Signing time: Sat 30 Mar 2024 13:00:38 +0000 ROA not before: Sat 30 Mar 2024 13:00:38 +0000 ROA not after: Fri 28 Jun 2024 13:00:38 +0000 asID: 52129 IP address blocks: 208.86.200.0/24 maxlen: 24 208.84.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 May 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:61:28:69:b1:17:bc:86:be:78:73:34:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e9c5894-f794-4209-a00d-cf232363d7c6 Validity Not Before: Mar 30 13:00:38 2024 GMT Not After : Jun 28 13:00:38 2024 GMT Subject: CN=5caf0a16-6b83-441a-8d6e-30a919cf7118 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:0e:e3:4f:c9:39:b7:de:c3:01:e6:2e:27:72: c1:01:1c:d6:28:fd:d5:18:09:5d:40:c6:37:fe:cd: 2c:fe:1c:16:f5:a1:a5:75:41:67:7b:8a:f0:dd:e6: d9:0f:9b:1e:24:4f:ee:b0:3e:d5:09:5b:1e:13:8b: 24:69:3f:a0:dd:37:36:6a:18:10:61:02:3b:d6:6e: c4:33:15:0f:aa:72:d1:c0:98:64:d8:1b:37:16:60: 59:0e:23:77:e9:87:22:2e:80:dc:b5:46:2b:1d:4d: 1e:26:81:6f:4f:53:a8:9e:57:d6:40:a4:53:e8:2c: d0:3e:d7:63:4d:8d:15:70:d7:34:e9:77:ec:3b:da: e9:b2:e9:75:5b:7e:63:1f:8c:47:10:d5:1c:86:87: 82:9b:70:0a:8c:18:10:4d:e7:10:2c:3f:f9:36:ea: 4e:25:b3:a9:63:2f:4c:8d:36:41:ef:11:a7:b7:b4: cb:9d:c2:1c:a7:b6:6e:e2:74:c7:16:35:f9:41:93: 97:3f:c2:bf:a9:12:8e:78:51:1e:b1:27:56:70:e5: 27:f9:7f:d3:b7:b6:b5:eb:91:a6:7b:93:c5:5b:a9: 08:ea:c4:2b:13:a6:9e:34:36:0d:e4:07:be:ee:57: 2a:51:b2:72:1c:ce:ba:96:1b:28:90:a6:a6:26:98: 6a:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:D7:DC:17:13:67:74:A7:3F:68:7D:23:12:A1:FD:92:8C:11:35:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/ba968438-1dc4-3db1-a0a1-e4360c977088.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl X509v3 Authority Key Identifier: keyid:EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer sbgp-ipAddrBlock: critical IPv4: 208.84.64.0/24 208.86.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:b0:37:16:6f:0d:3d:79:7b:3a:71:43:0d:72:0d:e5:32:80: 7b:8b:f6:a2:85:91:89:fe:43:a1:5e:4a:15:81:02:48:c4:7b: 5e:2c:d6:2f:1a:6c:88:2b:f4:9f:25:c2:04:0e:30:17:7f:d3: 41:29:21:02:bf:b4:81:5b:be:cb:ed:b2:54:58:62:e4:92:06: 3f:22:7a:05:fd:91:12:de:a5:4e:a3:c0:70:ec:9d:8f:d3:01: 70:c3:54:43:79:e5:54:15:34:15:72:12:42:07:99:23:0c:9b: d8:ef:47:18:6b:db:70:27:b4:f6:1e:d9:49:57:3f:a9:3d:aa: 07:87:c5:79:21:8e:52:3b:97:af:83:55:73:0b:91:4a:62:19: c7:26:a6:07:91:31:81:bb:35:d0:64:6c:d3:b2:1b:8d:57:e1: e1:e8:a0:be:7a:8e:91:4d:8c:4d:45:14:e9:be:00:1b:e9:79: b8:9d:75:f7:4f:93:2b:c1:f6:d9:16:ef:59:f3:c3:7f:26:5c: 00:23:06:8e:c9:df:14:bb:78:7c:97:57:7f:8d:b2:d1:5f:f9: 0b:19:a5:ff:70:d1:3f:b5:b4:29:33:e6:61:1a:6e:68:42:b8: 47:d5:7f:8f:f3:66:33:9a:d7:51:02:13:59:ea:9a:b1:2c:ee: 20:98:ac:72 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEVhKGmxF7yGvnhzNMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmU5YzU4OTQtZjc5NC00MjA5LWEwMGQtY2YyMzIzNjNk N2M2MB4XDTI0MDMzMDEzMDAzOFoXDTI0MDYyODEzMDAzOFowLzEtMCsGA1UEAxMk NWNhZjBhMTYtNmI4My00NDFhLThkNmUtMzBhOTE5Y2Y3MTE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQ7jT8k5t97DAeYuJ3LBARzWKP3VGAldQMY3 /s0s/hwW9aGldUFne4rw3ebZD5seJE/usD7VCVseE4skaT+g3Tc2ahgQYQI71m7E MxUPqnLRwJhk2Bs3FmBZDiN36YciLoDctUYrHU0eJoFvT1OonlfWQKRT6CzQPtdj TY0VcNc06XfsO9rpsul1W35jH4xHENUchoeCm3AKjBgQTecQLD/5NupOJbOpYy9M jTZB7xGnt7TLncIcp7Zu4nTHFjX5QZOXP8K/qRKOeFEesSdWcOUn+X/Tt7a165Gm e5PFW6kI6sQrE6aeNDYN5Ae+7lcqUbJyHM66lhsokKamJphqMQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFELX3BcTZ3SnP2h9IxKh/ZKMETUvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82ZTlj NTg5NC1mNzk0LTQyMDktYTAwZC1jZjIzMjM2M2Q3YzYvYmE5Njg0MzgtMWRjNC0z ZGIxLWEwYTEtZTQzNjBjOTc3MDg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNmU5YzU4OTQtZjc5NC00MjA5LWEw MGQtY2YyMzIzNjNkN2M2LzZlOWM1ODk0LWY3OTQtNDIwOS1hMDBkLWNmMjMyMzYz ZDdjNi5jcmwwHwYDVR0jBBgwFoAU620+1MghuZYRngwJ/123iIBSlIUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82ZTljNTg5NC1mNzk0LTQyMDktYTAwZC1jZjIz MjM2M2Q3YzYuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA0FRAAwQA 0FbIMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAAOwNxZvDT15ezpxQw1yDeUygHuL9qKFkYn+Q6FeShWBAkjE e14s1i8abIgr9J8lwgQOMBd/00EpIQK/tIFbvsvtslRYYuSSBj8iegX9kRLepU6j wHDsnY/TAXDDVEN55VQVNBVyEkIHmSMMm9jvRxhr23AntPYe2UlXP6k9qgeHxXkh jlI7l6+DVXMLkUpiGccmpgeRMYG7NdBkbNOyG41X4eHooL56jpFNjE1FFOm+ABvp ebiddfdPkyvB9tkW71nzw38mXAAjBo7J3xS7eHyXV3+NstFf+QsZpf9w0T+1tCkz 5mEabmhCuEfVf4/zZjOa11ECE1nqmrEs7iCYrHI= -----END CERTIFICATE-----Generated at Sat May 11 02:51:02 2024 by rpki-client on console-ams.rpki-client.org