$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5/8224a7d5-4b3b-3daa-8e24-fb36d7355ee4.roa File: 8224a7d5-4b3b-3daa-8e24-fb36d7355ee4.roa (raw, json) Hash identifier: 9KVEq8Zg74Nz6CGrQMWfUMmk0f0WJpBNTBpbb2Jmbv8= Subject key identifier: F9:61:E2:72:92:83:08:3C:3E:0B:05:83:B9:9A:CB:FB:C8:F7:46:F1 Certificate issuer: /CN=8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5 Certificate serial: 010D0C9F43285845BD48E7D94CAB8ED098CE52AC Authority key identifier: 92:04:3A:A3:CA:F8:0F:3C:8D:45:A1:49:B5:5F:4B:AD:F5:C3:D9:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5/8224a7d5-4b3b-3daa-8e24-fb36d7355ee4.roa Signing time: Thu 02 May 2024 13:00:34 +0000 ROA not before: Thu 02 May 2024 13:00:34 +0000 ROA not after: Wed 31 Jul 2024 13:00:34 +0000 asID: 6509 IP address blocks: 199.212.24.0/24 maxlen: 24 205.189.32.0/24 maxlen: 24 2001:410:10a::/48 maxlen: 48 2001:410:101::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:bd:48:e7:d9:4c:ab:8e:d0:98:ce:52:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5 Validity Not Before: May 2 13:00:34 2024 GMT Not After : Jul 31 13:00:34 2024 GMT Subject: CN=6e0b09a6-0436-4195-8ffa-b6755c5e4e99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:65:da:78:3a:da:8e:d2:97:58:7c:02:a3:68: e8:a7:4d:6d:a4:2b:f5:42:ad:69:2a:4d:f4:f3:98: 18:fc:50:03:69:4b:f5:1e:a3:8a:12:04:34:b1:a2: c0:95:c2:68:04:5e:7d:6b:dd:62:36:68:f1:83:67: 53:22:64:52:6f:b0:99:70:ca:65:ab:3c:eb:a8:75: fc:4f:57:47:5d:83:1e:9b:e2:e0:79:76:2c:a1:9d: a5:9a:16:60:0d:f3:96:3d:3d:b9:a8:51:10:fb:cb: 22:ae:99:b9:bb:2c:28:01:10:de:31:5c:11:b0:fb: 67:b0:a0:24:3d:9f:5c:d4:39:c5:ba:5b:11:a0:b1: 3d:92:d6:90:b8:25:3e:d7:99:04:e1:49:5c:e7:7c: 2f:00:d4:75:c5:99:bd:dd:2a:08:90:3c:e1:e4:d8: d0:56:c7:50:65:79:5d:45:81:76:df:03:61:01:c6: 30:73:60:75:b7:e0:11:1b:8b:bb:96:37:90:21:36: 66:53:0e:6b:c3:a3:05:fb:f7:4a:82:83:fa:3a:48: fc:bb:f5:6d:c9:08:d9:37:35:47:f7:d5:0a:24:c3: 50:89:13:b4:a3:25:c9:e3:42:07:d1:ac:6f:47:a7: 56:1d:6a:ba:3b:ad:55:1e:78:5d:13:86:2d:21:2f: 1f:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:61:E2:72:92:83:08:3C:3E:0B:05:83:B9:9A:CB:FB:C8:F7:46:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5/8224a7d5-4b3b-3daa-8e24-fb36d7355ee4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5.crl X509v3 Authority Key Identifier: keyid:92:04:3A:A3:CA:F8:0F:3C:8D:45:A1:49:B5:5F:4B:AD:F5:C3:D9:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5.cer sbgp-ipAddrBlock: critical IPv4: 199.212.24.0/24 205.189.32.0/24 IPv6: 2001:410:101::/48 2001:410:10a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:c3:eb:13:71:60:fd:8e:e9:99:73:86:d0:8d:ca:fa:8b:11: 14:a7:90:26:20:64:70:86:fa:50:ec:c3:62:87:3a:d5:f3:42: 5e:26:c4:d0:b3:a9:ec:8b:e2:04:ee:56:9d:4d:7f:be:6d:d8: aa:9e:c4:c7:2e:0b:ec:df:49:9d:6a:72:dd:1b:bb:c8:d3:ce: 53:be:30:76:15:a6:53:c0:c9:3b:36:20:98:e5:a6:0c:1f:a8: bf:4d:93:6c:ef:a8:ce:9f:70:98:97:20:6b:06:9d:65:d6:85: 69:2c:57:49:1a:c1:8c:ce:83:7a:99:df:da:6e:4f:49:32:30: a2:d3:2f:91:c7:2f:7b:74:59:89:bc:65:63:33:a8:17:9c:25: f4:b9:39:dd:79:d4:9c:88:0e:fb:88:21:03:ac:5f:53:7c:4f: df:19:13:99:2e:39:6f:5b:99:d0:db:00:25:1a:5d:dd:c0:e8: 4c:02:96:6d:b9:25:5d:2a:12:5f:55:dd:ab:28:76:fe:d0:dc: 13:d3:e7:7d:5e:1e:f2:e6:3d:de:0b:75:f1:5b:8b:eb:f9:06: 15:89:10:04:ea:eb:7f:19:fa:4c:23:f8:41:b0:ed:94:cb:30: 97:45:8a:e0:fd:83:93:a3:7a:b8:48:91:1e:05:70:65:ae:89: 4b:0c:f2:f4 -----BEGIN CERTIFICATE----- MIIGYzCCBUugAwIBAgIUAQ0Mn0MoWEW9SOfZTKuO0JjOUqwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGM5ZjUzYzctZTY0ZC00ZjE0LWE1ZTEtYzE0ZThiMWUz OGI1MB4XDTI0MDUwMjEzMDAzNFoXDTI0MDczMTEzMDAzNFowLzEtMCsGA1UEAxMk NmUwYjA5YTYtMDQzNi00MTk1LThmZmEtYjY3NTVjNWU0ZTk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzmXaeDrajtKXWHwCo2jop01tpCv1Qq1pKk30 85gY/FADaUv1HqOKEgQ0saLAlcJoBF59a91iNmjxg2dTImRSb7CZcMplqzzrqHX8 T1dHXYMem+LgeXYsoZ2lmhZgDfOWPT25qFEQ+8sirpm5uywoARDeMVwRsPtnsKAk PZ9c1DnFulsRoLE9ktaQuCU+15kE4Ulc53wvANR1xZm93SoIkDzh5NjQVsdQZXld RYF23wNhAcYwc2B1t+ARG4u7ljeQITZmUw5rw6MF+/dKgoP6Okj8u/VtyQjZNzVH 99UKJMNQiRO0oyXJ40IH0axvR6dWHWq6O61VHnhdE4YtIS8f6QIDAQABo4IDdTCC A3EwHQYDVR0OBBYEFPlh4nKSgwg8PgsFg7may/vI90bxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84Yzlm NTNjNy1lNjRkLTRmMTQtYTVlMS1jMTRlOGIxZTM4YjUvODIyNGE3ZDUtNGIzYi0z ZGFhLThlMjQtZmIzNmQ3MzU1ZWU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGM5ZjUzYzctZTY0ZC00ZjE0LWE1 ZTEtYzE0ZThiMWUzOGI1LzhjOWY1M2M3LWU2NGQtNGYxNC1hNWUxLWMxNGU4YjFl MzhiNS5jcmwwHwYDVR0jBBgwFoAUkgQ6o8r4DzyNRaFJtV9LrfXD2Q4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84YzlmNTNjNy1lNjRkLTRmMTQtYTVlMS1jMTRl OGIxZTM4YjUuY2VyMD8GCCsGAQUFBwEHAQH/BDAwLjASBAIAATAMAwQAx9QYAwQA zb0gMBgEAgACMBIDBwAgAQQQAQEDBwAgAQQQAQowVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAbMPrE3Fg/Y7p mXOG0I3K+osRFKeQJiBkcIb6UOzDYoc61fNCXibE0LOp7IviBO5WnU1/vm3Yqp7E xy4L7N9JnWpy3Ru7yNPOU74wdhWmU8DJOzYgmOWmDB+ov02TbO+ozp9wmJcgawad ZdaFaSxXSRrBjM6Depnf2m5PSTIwotMvkccve3RZibxlYzOoF5wl9Lk53XnUnIgO +4ghA6xfU3xP3xkTmS45b1uZ0NsAJRpd3cDoTAKWbbklXSoSX1Xdqyh2/tDcE9Pn fV4e8uY93gt18VuL6/kGFYkQBOrrfxn6TCP4QbDtlMswl0WK4P2Dk6N6uEiRHgVw Za6JSwzy9A== -----END CERTIFICATE-----Generated at Thu May 9 00:45:40 2024 by rpki-client on console-fra.rpki-client.org