$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/6ef91c64-5a2a-31c1-8050-b72ae2dcd793.roa File: 6ef91c64-5a2a-31c1-8050-b72ae2dcd793.roa (raw, json) Hash identifier: myhI8zCNGzsKlcg/bVjXT9rzaJ4ijyYqMled6q1ErNk= Subject key identifier: 3A:85:AC:46:3B:12:F1:5E:94:35:28:EF:61:B5:C9:36:90:8E:F4:0E Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b Certificate serial: 010D0C9F43285845AC8A18C5EF54714A0A00A0D0 Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/6ef91c64-5a2a-31c1-8050-b72ae2dcd793.roa Signing time: Fri 26 Apr 2024 13:00:35 +0000 ROA not before: Fri 26 Apr 2024 13:00:35 +0000 ROA not after: Thu 25 Jul 2024 13:00:35 +0000 asID: 21949 IP address blocks: 209.195.248.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 May 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:ac:8a:18:c5:ef:54:71:4a:0a:00:a0:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b Validity Not Before: Apr 26 13:00:35 2024 GMT Not After : Jul 25 13:00:35 2024 GMT Subject: CN=b60920b1-6042-40f3-964e-24fec8948c2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:de:1a:bc:fa:47:de:51:ce:ae:0c:56:b7:95: 5e:64:71:4e:d2:bb:a6:bc:61:16:29:aa:f0:b0:d8: 41:48:45:cf:3a:08:5c:ac:17:9b:65:47:b3:4b:2a: 91:3d:fb:46:ce:af:03:31:a8:fc:e1:18:37:83:04: 9d:6b:32:21:82:77:43:71:12:53:b2:7b:8c:c9:8c: 80:5b:77:83:ea:82:e7:aa:85:cb:c2:26:50:c2:60: e6:2f:23:bd:39:5c:8e:c8:16:fc:ee:92:40:00:e5: 32:7b:e5:f1:6b:2e:97:6a:ad:9b:ec:58:53:2a:ed: d8:39:5b:2b:ef:b5:b9:81:cb:0a:05:52:90:47:af: 30:de:1d:bb:8c:88:b0:97:41:ed:2c:8a:d1:ff:dc: 5d:87:e3:38:b9:6e:93:11:dd:02:5b:e8:3d:fb:fb: 25:ed:8d:ac:93:05:48:5b:68:13:fd:d9:0c:15:8d: df:8e:9a:90:fb:26:cc:ae:cc:0c:8b:6e:a1:df:dd: 32:1b:f1:dd:47:34:05:89:4f:4a:5a:c6:35:71:6a: 4c:20:fb:0d:eb:08:6d:1a:43:34:48:c0:00:da:55: 2f:1f:e4:b4:f1:f1:1d:12:33:34:d1:79:b6:ea:f7: 14:1c:e2:33:8b:1e:1d:5e:02:ad:c5:bc:84:a2:2e: d7:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:85:AC:46:3B:12:F1:5E:94:35:28:EF:61:B5:C9:36:90:8E:F4:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/6ef91c64-5a2a-31c1-8050-b72ae2dcd793.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl X509v3 Authority Key Identifier: keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer sbgp-ipAddrBlock: critical IPv4: 209.195.248.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:88:a1:bd:d0:bf:a1:82:42:14:59:91:cb:13:4e:b1:a9:18: 33:b7:2c:9f:60:1e:49:0a:a6:ae:60:6e:fe:91:9c:f2:aa:05: a3:81:94:66:90:2f:ec:f3:57:37:5c:d3:5f:37:92:6e:ad:68: b5:9b:48:6f:21:fd:79:af:b7:ae:83:f7:e9:f0:cc:0a:32:c0: c4:2f:29:8a:57:c3:61:ba:98:89:4c:12:27:2e:41:2f:c5:d9: 89:97:20:fa:2b:35:a9:77:a9:33:1d:ec:fe:5f:97:c3:46:95: 99:5a:22:c9:79:0b:16:bc:aa:93:39:57:19:58:b2:d2:8b:81: 15:ca:84:09:e6:0f:89:fc:02:14:03:27:4e:85:3b:84:75:57: a0:4a:79:a4:8e:2b:31:45:cf:78:18:d6:43:07:7d:bb:ce:67: c1:57:16:13:4e:c8:de:93:23:70:e7:96:ff:71:e2:16:48:d5: 84:38:18:f1:4c:51:24:3e:b1:cb:62:ee:e5:d1:67:8a:38:56: 24:e2:0e:b1:f8:66:83:f3:78:6f:7a:b4:4c:e1:2d:6f:f6:eb: 60:ee:22:1c:03:21:82:93:26:e4:dd:53:85:4c:91:4d:e7:74: 7e:1b:ff:d2:71:75:00:a8:de:cb:a1:80:cf:18:58:b3:9b:f9: 30:be:d8:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWsihjF71RxSgoAoNAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx YzViMB4XDTI0MDQyNjEzMDAzNVoXDTI0MDcyNTEzMDAzNVowLzEtMCsGA1UEAxMk YjYwOTIwYjEtNjA0Mi00MGYzLTk2NGUtMjRmZWM4OTQ4YzJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw94avPpH3lHOrgxWt5VeZHFO0rumvGEWKarw sNhBSEXPOghcrBebZUezSyqRPftGzq8DMaj84Rg3gwSdazIhgndDcRJTsnuMyYyA W3eD6oLnqoXLwiZQwmDmLyO9OVyOyBb87pJAAOUye+Xxay6Xaq2b7FhTKu3YOVsr 77W5gcsKBVKQR68w3h27jIiwl0HtLIrR/9xdh+M4uW6TEd0CW+g9+/sl7Y2skwVI W2gT/dkMFY3fjpqQ+ybMrswMi26h390yG/HdRzQFiU9KWsY1cWpMIPsN6whtGkM0 SMAA2lUvH+S08fEdEjM00Xm26vcUHOIzix4dXgKtxbyEoi7XLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDqFrEY7EvFelDUo72G1yTaQjvQOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvNmVmOTFjNjQtNWEyYS0z MWMxLTgwNTAtYjcyYWUyZGNkNzkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk MDY2ZDFjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0cP4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACaIob3Qv6GCQhRZkcsTTrGpGDO3LJ9gHkkKpq5gbv6RnPKqBaOBlGaQ L+zzVzdc0183km6taLWbSG8h/Xmvt66D9+nwzAoywMQvKYpXw2G6mIlMEicuQS/F 2YmXIPorNal3qTMd7P5fl8NGlZlaIsl5Cxa8qpM5VxlYstKLgRXKhAnmD4n8AhQD J06FO4R1V6BKeaSOKzFFz3gY1kMHfbvOZ8FXFhNOyN6TI3Dnlv9x4hZI1YQ4GPFM USQ+scti7uXRZ4o4ViTiDrH4ZoPzeG96tEzhLW/262DuIhwDIYKTJuTdU4VMkU3n dH4b/9JxdQCo3suhgM8YWLOb+TC+2OY= -----END CERTIFICATE-----Generated at Thu May 23 01:44:06 2024 by rpki-client on console-fra.rpki-client.org