$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d34bfd9d-57a4-3452-aad3-b812c11a1320.roa File: d34bfd9d-57a4-3452-aad3-b812c11a1320.roa (raw, json) Hash identifier: aHZVUArpp7gjfNn56WdUgRu/Ue5i0FSllE4deyTe01E= Subject key identifier: F8:CF:E7:3B:BA:69:32:D1:CF:70:B6:31:61:AB:5F:56:72:1D:01:BD Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F432858459091FE952BFA1CD368BBAA00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d34bfd9d-57a4-3452-aad3-b812c11a1320.roa Signing time: Tue 16 Apr 2024 12:36:38 +0000 ROA not before: Tue 16 Apr 2024 12:36:38 +0000 ROA not after: Mon 15 Jul 2024 12:36:38 +0000 asID: 7342 IP address blocks: 209.131.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:90:91:fe:95:2b:fa:1c:d3:68:bb:aa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 16 12:36:38 2024 GMT Not After : Jul 15 12:36:38 2024 GMT Subject: CN=a8b28b71-3d42-4930-a29d-295a3e441169 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:23:76:13:68:34:a8:db:7b:f1:4d:64:9f:60: fa:f9:bc:e7:c5:c2:20:13:de:f3:d5:8d:cf:3e:78: f8:bb:f7:fe:11:c9:7e:90:18:d3:e9:3e:fb:68:68: 49:76:e7:51:04:b4:d3:7d:a3:33:58:97:7a:26:c8: fd:52:17:af:3b:c6:d3:da:41:22:b9:62:3b:f0:a0: fc:4a:50:2d:45:60:68:30:3f:3b:b8:bf:a0:29:0e: f2:a2:e6:da:57:15:7a:e6:3d:a0:26:8c:9f:86:50: 1f:88:ac:1b:8f:22:b9:4a:dc:f4:da:d8:68:f2:b3: 48:96:d6:9d:4f:cd:6e:26:23:e8:87:3c:95:b4:e2: f7:18:86:2c:59:f5:a5:03:ec:a4:26:ad:8b:e3:fc: 65:b5:4d:ee:10:f3:35:45:2f:72:f3:87:af:9f:8c: 45:f4:0a:cd:d5:11:78:76:14:ca:a0:c0:49:2b:cc: fc:2c:4b:ae:d9:50:ba:c7:83:fc:ac:e5:71:2c:eb: 21:f2:c6:60:22:7d:1b:82:6e:37:cb:a2:af:6b:1d: f7:a1:d7:56:f5:b7:b9:88:e5:57:29:c7:75:06:6a: 30:6f:2c:b3:7b:d2:6d:ea:18:d2:e3:53:cc:d3:cd: bd:d6:87:0e:6a:97:e0:76:c3:56:3d:e0:84:b1:0e: d5:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:CF:E7:3B:BA:69:32:D1:CF:70:B6:31:61:AB:5F:56:72:1D:01:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d34bfd9d-57a4-3452-aad3-b812c11a1320.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 209.131.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:96:3d:92:d0:f5:ba:0a:0c:d9:e3:0b:de:f1:62:c8:f8:da: 2c:3c:55:d0:5e:fa:73:6a:5e:74:14:4c:e6:20:ee:de:f7:47: 80:a0:52:c7:1c:bd:f2:49:4b:23:23:69:bd:40:8c:f2:cc:70: 31:bd:ee:c1:19:a4:7e:f9:78:70:3f:fb:98:c9:a8:e7:25:56: d9:24:74:7a:45:bb:6d:1b:f3:80:3b:33:40:61:fa:c7:c6:c2: 59:c3:2e:ba:cf:52:82:ff:23:01:ac:18:ed:8a:79:75:9d:38: df:6a:dc:66:d9:e6:30:fa:74:1d:5f:b1:2d:94:14:74:3f:a9: af:a0:4c:31:8d:73:05:67:35:f3:0d:4e:70:3f:43:f3:c9:9b: 5d:bf:ab:d0:ac:37:74:9b:c8:b9:49:bf:01:55:ea:ea:0e:7f: bf:89:5d:65:17:7e:72:ef:03:cc:a8:b6:e0:ed:1e:75:a1:8a: e9:cb:87:04:d6:44:d2:70:9c:8b:ef:35:13:f7:31:de:ba:c1: 3c:94:2a:62:15:dc:12:9b:96:f3:2c:65:e2:91:89:60:3d:c8: 43:6e:1e:d5:74:20:88:e7:eb:2c:10:d3:8b:0a:3b:18:6d:2b: 41:b3:cf:0b:e3:c8:c9:1e:eb:3a:a8:ab:9e:f4:8a:17:8e:b5: e2:dc:6d:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWQkf6VK/oc02i7qgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI0MDQxNjEyMzYzOFoXDTI0MDcxNTEyMzYzOFowLzEtMCsGA1UEAxMk YThiMjhiNzEtM2Q0Mi00OTMwLWEyOWQtMjk1YTNlNDQxMTY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSN2E2g0qNt78U1kn2D6+bznxcIgE97z1Y3P Pnj4u/f+Ecl+kBjT6T77aGhJdudRBLTTfaMzWJd6Jsj9UhevO8bT2kEiuWI78KD8 SlAtRWBoMD87uL+gKQ7youbaVxV65j2gJoyfhlAfiKwbjyK5Stz02tho8rNIltad T81uJiPohzyVtOL3GIYsWfWlA+ykJq2L4/xltU3uEPM1RS9y84evn4xF9ArN1RF4 dhTKoMBJK8z8LEuu2VC6x4P8rOVxLOsh8sZgIn0bgm43y6Kvax33oddW9be5iOVX Kcd1Bmowbyyze9Jt6hjS41PM08291ocOapfgdsNWPeCEsQ7V7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPjP5zu6aTLRz3C2MWGrX1ZyHQG9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDM0YmZkOWQtNTdhNC0z NDUyLWFhZDMtYjgxMmMxMWExMzIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0YOFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALqWPZLQ9boKDNnjC97xYsj42iw8VdBe+nNqXnQUTOYg7t73R4CgUscc vfJJSyMjab1AjPLMcDG97sEZpH75eHA/+5jJqOclVtkkdHpFu20b84A7M0Bh+sfG wlnDLrrPUoL/IwGsGO2KeXWdON9q3GbZ5jD6dB1fsS2UFHQ/qa+gTDGNcwVnNfMN TnA/Q/PJm12/q9CsN3SbyLlJvwFV6uoOf7+JXWUXfnLvA8yotuDtHnWhiunLhwTW RNJwnIvvNRP3Md66wTyUKmIV3BKblvMsZeKRiWA9yENuHtV0IIjn6ywQ04sKOxht K0GzzwvjyMke6zqoq570iheOteLcbVA= -----END CERTIFICATE-----Generated at Thu May 9 20:33:09 2024 by rpki-client on console-ams.rpki-client.org