$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/67ef0949-c298-330b-aabd-6a4c950d7ad6.roa File: 67ef0949-c298-330b-aabd-6a4c950d7ad6.roa (raw, json) Hash identifier: acEr3xm1JkK7UnWDcfFy0imHZ/1P4WfnWRn4Sr+XrRI= Subject key identifier: 8A:1E:33:E2:8E:AE:B6:34:18:57:69:0F:76:B7:37:E6:D7:31:38:CF Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F4328584585B2BFDEA5E11F50B36CA880 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/67ef0949-c298-330b-aabd-6a4c950d7ad6.roa Signing time: Fri 12 Apr 2024 15:08:45 +0000 ROA not before: Fri 12 Apr 2024 15:08:45 +0000 ROA not after: Thu 11 Jul 2024 15:08:45 +0000 asID: 16696 IP address blocks: 209.20.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:85:b2:bf:de:a5:e1:1f:50:b3:6c:a8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: Apr 12 15:08:45 2024 GMT Not After : Jul 11 15:08:45 2024 GMT Subject: CN=63faea3c-fd19-4fa6-907e-4507a6215ed2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:fb:01:dc:ac:bf:b8:93:35:31:3b:80:9c:5a: be:94:c9:31:2a:5c:83:73:73:ef:87:a3:44:bd:62: ed:16:6a:27:62:3a:a6:e4:f2:bd:7b:83:48:c4:de: 9d:92:d9:cd:94:0b:0d:37:1d:a8:29:75:87:15:28: 89:f3:65:56:5f:7a:0a:3d:c2:c9:19:20:62:75:82: 2a:4a:d2:ae:f2:66:ea:fe:2c:1e:30:1b:eb:b7:e3: 4d:74:fc:17:73:d6:52:d7:69:ca:ab:a3:be:9b:60: dd:93:4a:9c:30:69:bb:69:bf:6a:e3:5b:e0:f8:d5: e8:a3:7d:84:39:35:93:67:33:0a:c4:1a:74:ee:9b: 43:6e:e9:09:42:a5:8d:9e:88:fe:15:d6:66:b6:b1: ef:64:4e:12:09:13:28:34:f1:1d:92:21:f6:d4:3b: e9:43:0b:74:42:b0:6e:35:29:6e:85:97:12:03:ad: 71:e2:73:a8:c1:e4:0f:23:62:13:d4:44:9d:f3:88: bd:35:1b:42:0b:8b:96:62:93:96:6c:46:df:b0:f2: 21:23:d2:20:93:cd:19:f9:83:38:8e:09:81:ad:4f: a2:83:d3:48:52:a5:16:3b:b0:15:9d:56:f1:9a:8f: 29:d8:af:ed:4b:ea:d2:64:86:8d:16:9a:b1:c2:b0: a7:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:1E:33:E2:8E:AE:B6:34:18:57:69:0F:76:B7:37:E6:D7:31:38:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/67ef0949-c298-330b-aabd-6a4c950d7ad6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 209.20.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:75:b0:33:ad:a8:a1:1f:45:80:94:61:28:ba:b9:07:d4:01: af:c5:2b:b3:50:9f:0a:c3:68:ec:57:3c:d4:27:3f:46:7e:6a: e0:fe:3f:6b:1b:27:9a:99:5b:d5:af:6a:30:3a:01:80:ef:63: 90:7c:e4:6d:6d:91:c4:02:74:ce:dc:d1:79:1b:5e:80:1a:be: fb:44:a2:50:18:1f:80:b2:3b:fa:44:aa:88:9a:57:f1:2a:a2: 92:c6:78:4f:be:9b:25:d1:17:60:34:81:89:b5:6e:a8:94:ed: 74:d9:b5:f6:3b:61:61:c8:45:a4:23:c3:24:1a:df:7f:25:f7: dd:b1:94:2b:f9:12:34:74:3b:45:9d:7a:31:4e:03:04:be:c2: f6:b5:60:95:0f:08:38:1f:15:3a:09:ba:8e:da:8c:e6:85:ec: 85:fd:c8:f0:2f:70:b5:ac:c5:f4:94:21:60:32:78:d9:8c:9a: 6f:38:54:a8:ca:b6:95:97:50:0e:1d:d2:44:91:9e:3e:a7:36: 47:f9:bc:1d:73:4a:8d:37:ee:8a:7d:3c:ec:cc:30:ad:5f:af: 10:f6:1f:d6:d1:58:09:36:74:69:6e:9d:d7:95:e2:ee:da:00: 2a:7a:84:aa:2d:46:9e:4d:24:48:36:e5:0a:da:bf:ed:f1:1a: cc:82:38:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWFsr/epeEfULNsqIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI0MDQxMjE1MDg0NVoXDTI0MDcxMTE1MDg0NVowLzEtMCsGA1UEAxMk NjNmYWVhM2MtZmQxOS00ZmE2LTkwN2UtNDUwN2E2MjE1ZWQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/sB3Ky/uJM1MTuAnFq+lMkxKlyDc3Pvh6NE vWLtFmonYjqm5PK9e4NIxN6dktnNlAsNNx2oKXWHFSiJ82VWX3oKPcLJGSBidYIq StKu8mbq/iweMBvrt+NNdPwXc9ZS12nKq6O+m2Ddk0qcMGm7ab9q41vg+NXoo32E OTWTZzMKxBp07ptDbukJQqWNnoj+FdZmtrHvZE4SCRMoNPEdkiH21DvpQwt0QrBu NSluhZcSA61x4nOoweQPI2IT1ESd84i9NRtCC4uWYpOWbEbfsPIhI9Igk80Z+YM4 jgmBrU+ig9NIUqUWO7AVnVbxmo8p2K/tS+rSZIaNFpqxwrCnAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIoeM+KOrrY0GFdpD3a3N+bXMTjPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvNjdlZjA5NDktYzI5OC0z MzBiLWFhYmQtNmE0Yzk1MGQ3YWQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0RSDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHx1sDOtqKEfRYCUYSi6uQfUAa/FK7NQnwrDaOxXPNQnP0Z+auD+P2sb J5qZW9WvajA6AYDvY5B85G1tkcQCdM7c0XkbXoAavvtEolAYH4CyO/pEqoiaV/Eq opLGeE++myXRF2A0gYm1bqiU7XTZtfY7YWHIRaQjwyQa338l992xlCv5EjR0O0Wd ejFOAwS+wva1YJUPCDgfFToJuo7ajOaF7IX9yPAvcLWsxfSUIWAyeNmMmm84VKjK tpWXUA4d0kSRnj6nNkf5vB1zSo037op9POzMMK1frxD2H9bRWAk2dGlundeV4u7a ACp6hKotRp5NJEg25Qrav+3xGsyCOLI= -----END CERTIFICATE-----Generated at Wed May 22 20:43:36 2024 by rpki-client on console-fra.rpki-client.org