$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/28cbed49-e939-45fa-95d9-3bb13f35a47e/963657c3-f92c-3597-b882-8f25fd75265b.roa File: 963657c3-f92c-3597-b882-8f25fd75265b.roa (raw, json) Hash identifier: OyhFdISCelWpCalin5K4gx6uIl4tixs93Iv0jcz2yok= Subject key identifier: 2C:A3:34:E2:54:F4:34:3D:AF:29:A2:3A:11:CA:9A:9D:5C:F0:24:33 Certificate issuer: /CN=28cbed49-e939-45fa-95d9-3bb13f35a47e Certificate serial: 010D0C9F4328584576015B3050FA4FC8D5B3B700 Authority key identifier: 1E:15:DF:79:45:AC:BA:E8:B2:49:FB:8C:DD:85:42:DD:0D:AF:E8:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/28cbed49-e939-45fa-95d9-3bb13f35a47e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/28cbed49-e939-45fa-95d9-3bb13f35a47e/963657c3-f92c-3597-b882-8f25fd75265b.roa Signing time: Sun 07 Apr 2024 00:14:12 +0000 ROA not before: Sun 07 Apr 2024 00:14:12 +0000 ROA not after: Sat 06 Jul 2024 00:14:12 +0000 asID: 26930 IP address blocks: 209.151.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/28cbed49-e939-45fa-95d9-3bb13f35a47e/28cbed49-e939-45fa-95d9-3bb13f35a47e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/28cbed49-e939-45fa-95d9-3bb13f35a47e/28cbed49-e939-45fa-95d9-3bb13f35a47e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/28cbed49-e939-45fa-95d9-3bb13f35a47e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 May 2024 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:76:01:5b:30:50:fa:4f:c8:d5:b3:b7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28cbed49-e939-45fa-95d9-3bb13f35a47e Validity Not Before: Apr 7 00:14:12 2024 GMT Not After : Jul 6 00:14:12 2024 GMT Subject: CN=0cd6d4d1-0a37-4881-84c4-99cbe9a16454 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:4d:02:08:3c:91:03:67:e3:70:0d:3b:09:db: 88:22:1c:b4:40:80:5a:5f:7b:d9:50:2a:71:59:6c: 1d:78:87:ca:94:9f:26:8e:7c:e9:e5:6c:1d:0b:1e: 84:b8:26:5c:e1:20:db:c1:e5:05:1c:38:31:ec:40: 79:a2:21:1f:73:a1:2e:ec:ca:e6:4d:16:33:05:12: fa:4e:71:d1:1b:95:9d:38:bf:7a:8f:96:7b:12:8a: 09:0e:91:a8:00:a3:24:68:d5:9a:86:6c:3e:62:df: 15:09:81:cc:2e:31:94:07:6f:5c:18:dc:69:a7:90: 3b:5d:55:1a:a2:d8:07:42:50:d9:39:82:05:c1:3e: ee:d2:fb:92:9f:f8:51:94:6b:3c:28:bd:63:fa:91: 19:97:83:7a:b1:2c:1d:da:e5:b7:f0:d6:3d:f1:5b: f2:ef:7c:75:a5:6f:46:a8:53:15:43:5c:37:65:d8: 71:2d:65:66:2e:61:61:c9:31:f3:2c:1c:6e:27:d6: 08:21:64:c2:77:3d:74:7f:06:d2:40:c6:53:b0:a0: c2:7b:3e:a3:11:91:02:44:55:8a:66:7f:08:6b:be: bc:00:cd:fa:8e:cd:79:8d:e5:57:ec:7b:01:f3:61: 0b:8d:38:ca:a7:04:e3:fb:ea:96:5e:fd:66:ff:27: 9d:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:A3:34:E2:54:F4:34:3D:AF:29:A2:3A:11:CA:9A:9D:5C:F0:24:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/28cbed49-e939-45fa-95d9-3bb13f35a47e/963657c3-f92c-3597-b882-8f25fd75265b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/28cbed49-e939-45fa-95d9-3bb13f35a47e/28cbed49-e939-45fa-95d9-3bb13f35a47e.crl X509v3 Authority Key Identifier: keyid:1E:15:DF:79:45:AC:BA:E8:B2:49:FB:8C:DD:85:42:DD:0D:AF:E8:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/28cbed49-e939-45fa-95d9-3bb13f35a47e.cer sbgp-ipAddrBlock: critical IPv4: 209.151.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:41:38:71:aa:f5:0c:a0:b7:bf:27:c0:32:37:40:31:92:e1: 54:76:e9:e0:05:e1:3c:61:d0:69:a9:aa:48:b6:16:8e:5a:59: 3f:b5:f9:e5:0c:13:9c:0a:80:f1:c2:e5:14:cb:5b:df:bd:7f: 02:67:22:47:82:36:a1:0e:8b:60:69:3d:af:5d:04:5f:e5:5e: b1:06:8b:1e:96:39:2a:6f:30:c1:91:08:06:77:1e:4c:37:58: e4:80:ea:c0:01:9b:d7:20:e9:ea:0e:07:dd:71:49:48:3b:08: 1e:de:1b:0a:b0:04:6b:6f:ec:8b:cf:7f:c6:17:e3:86:59:59: ca:5f:79:da:c9:68:d9:79:76:8e:86:03:59:8d:2b:65:4e:e7: a1:a6:12:91:b3:9d:35:65:e1:35:12:46:06:d6:4c:ca:d0:5b: e6:ef:6d:dc:05:15:0a:c2:52:5a:aa:80:87:1c:17:46:d1:f8: 0b:d3:75:37:60:8d:e1:17:c8:f1:94:c7:99:be:32:de:2e:eb: f7:a3:f3:c4:2c:86:56:c4:f3:1c:d5:27:fa:df:3d:56:87:a9: 2d:54:93:00:57:a6:20:92:e0:0b:65:a0:aa:93:1e:0a:61:b7: 13:fa:44:7d:9c:25:07:e3:38:22:60:8d:5f:55:36:84:92:e6: f6:0e:ed:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEV2AVswUPpPyNWztwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjhjYmVkNDktZTkzOS00NWZhLTk1ZDktM2JiMTNmMzVh NDdlMB4XDTI0MDQwNzAwMTQxMloXDTI0MDcwNjAwMTQxMlowLzEtMCsGA1UEAxMk MGNkNmQ0ZDEtMGEzNy00ODgxLTg0YzQtOTljYmU5YTE2NDU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsk0CCDyRA2fjcA07CduIIhy0QIBaX3vZUCpx WWwdeIfKlJ8mjnzp5WwdCx6EuCZc4SDbweUFHDgx7EB5oiEfc6Eu7MrmTRYzBRL6 TnHRG5WdOL96j5Z7EooJDpGoAKMkaNWahmw+Yt8VCYHMLjGUB29cGNxpp5A7XVUa otgHQlDZOYIFwT7u0vuSn/hRlGs8KL1j+pEZl4N6sSwd2uW38NY98Vvy73x1pW9G qFMVQ1w3ZdhxLWVmLmFhyTHzLBxuJ9YIIWTCdz10fwbSQMZTsKDCez6jEZECRFWK Zn8Ia768AM36js15jeVX7HsB82ELjTjKpwTj++qWXv1m/yediQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCyjNOJU9DQ9rymiOhHKmp1c8CQzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yOGNi ZWQ0OS1lOTM5LTQ1ZmEtOTVkOS0zYmIxM2YzNWE0N2UvOTYzNjU3YzMtZjkyYy0z NTk3LWI4ODItOGYyNWZkNzUyNjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjhjYmVkNDktZTkzOS00NWZhLTk1 ZDktM2JiMTNmMzVhNDdlLzI4Y2JlZDQ5LWU5MzktNDVmYS05NWQ5LTNiYjEzZjM1 YTQ3ZS5jcmwwHwYDVR0jBBgwFoAUHhXfeUWsuuiySfuM3YVC3Q2v6LswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yOGNiZWQ0OS1lOTM5LTQ1ZmEtOTVkOS0zYmIx M2YzNWE0N2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Zd9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHJBOHGq9Qygt78nwDI3QDGS4VR26eAF4Txh0Gmpqki2Fo5aWT+1+eUM E5wKgPHC5RTLW9+9fwJnIkeCNqEOi2BpPa9dBF/lXrEGix6WOSpvMMGRCAZ3Hkw3 WOSA6sABm9cg6eoOB91xSUg7CB7eGwqwBGtv7IvPf8YX44ZZWcpfedrJaNl5do6G A1mNK2VO56GmEpGznTVl4TUSRgbWTMrQW+bvbdwFFQrCUlqqgIccF0bR+AvTdTdg jeEXyPGUx5m+Mt4u6/ej88QshlbE8xzVJ/rfPVaHqS1UkwBXpiCS4AtloKqTHgph txP6RH2cJQfjOCJgjV9VNoSS5vYO7c4= -----END CERTIFICATE-----Generated at Wed May 22 16:50:24 2024 by rpki-client on console-fra.rpki-client.org