$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/4a7c1d4e-a494-3dad-add8-04d5a361ba46.roa File: 4a7c1d4e-a494-3dad-add8-04d5a361ba46.roa (raw, json) Hash identifier: wSC6v21AYfAsD1LoQTEvaolkCVAHiH6rVTxJw0s4z6c= Subject key identifier: BF:AB:08:04:98:A2:64:9E:B7:E9:DA:24:28:CC:8C:71:DE:78:69:E4 Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Certificate serial: 010D0C9F43285845CE08F37FBEF3D43F3EF8F980 Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/4a7c1d4e-a494-3dad-add8-04d5a361ba46.roa Signing time: Wed 08 May 2024 13:00:34 +0000 ROA not before: Wed 08 May 2024 13:00:34 +0000 ROA not after: Tue 06 Aug 2024 13:00:34 +0000 asID: 13414 IP address blocks: 209.237.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 May 2024 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:ce:08:f3:7f:be:f3:d4:3f:3e:f8:f9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Validity Not Before: May 8 13:00:34 2024 GMT Not After : Aug 6 13:00:34 2024 GMT Subject: CN=78e3aa90-ad65-4976-ba30-f307d5bbd71b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:12:03:f0:fc:11:46:00:be:cf:2e:b1:f5:77: 46:bc:f8:92:42:a9:2d:40:9c:15:b9:7c:7c:35:de: e5:08:51:2b:07:99:e7:05:68:50:44:ab:f4:92:80: e4:74:81:c1:ba:c6:6d:ec:97:77:f4:f9:64:2f:1b: f2:8d:04:4d:88:99:bc:92:bd:0d:39:b7:69:43:9b: 67:e8:a4:1e:58:a1:50:ce:3d:46:e1:98:90:f7:b2: da:78:e3:31:54:20:7b:85:02:72:9e:90:52:df:10: bf:db:c5:b3:f6:32:2e:bb:db:6f:67:53:69:13:f8: 2c:96:a0:ce:74:e3:45:49:d5:e0:06:be:0b:d2:09: ea:88:43:9a:dc:56:92:55:0d:9c:5d:46:f3:8d:aa: e5:7d:8f:68:84:3e:58:57:7a:05:91:69:05:f7:3f: 3d:e4:48:00:7b:71:96:51:b2:a6:a1:62:c9:ca:87: ce:9d:24:cd:d8:c4:09:0d:c2:c2:e5:55:4f:a2:2b: 05:c2:4f:8e:09:3a:0a:e4:c3:16:8b:eb:13:33:e2: da:a8:94:72:ba:ad:46:46:c9:a1:f7:12:fb:16:0d: 7e:69:0e:71:5b:74:d9:6e:9c:35:36:e1:b5:c8:41: a3:f7:05:55:3f:97:de:3f:ae:fa:8c:53:1d:eb:ae: 4d:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:AB:08:04:98:A2:64:9E:B7:E9:DA:24:28:CC:8C:71:DE:78:69:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/4a7c1d4e-a494-3dad-add8-04d5a361ba46.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl X509v3 Authority Key Identifier: keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer sbgp-ipAddrBlock: critical IPv4: 209.237.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:64:95:c4:c3:74:84:8c:0f:3b:f5:10:e5:08:16:a2:fc:e8: 59:aa:39:c8:40:e0:63:7f:56:8a:bb:25:cc:4b:00:23:b6:3e: 4e:d2:0a:a3:1d:1f:06:d9:ea:02:92:e4:17:c2:cd:3c:7e:64: 49:d2:fc:de:d8:5a:bc:5c:b1:e8:ad:c8:6e:2d:5d:41:de:14: 9f:b0:ac:f2:7a:e0:0b:3c:62:13:92:84:2d:14:0f:f7:85:f7: 99:74:83:e8:5c:2c:d0:5c:af:71:81:cd:27:83:0f:5e:61:24: 62:95:80:fe:21:a7:5a:65:2e:06:df:e2:da:b3:41:65:bd:e4: 48:ef:80:7e:a1:8f:19:b2:27:7b:2c:ee:c2:27:36:73:25:18: f1:29:e2:39:ac:c6:87:8a:6b:d1:5f:c8:61:83:a7:91:29:2b: dc:39:30:ff:27:d6:30:e7:04:11:0e:6a:d5:22:ae:c4:5a:5a: 75:a2:d7:57:38:00:03:dc:6b:80:d2:bc:e8:c0:a9:5c:5f:84: 19:57:4e:2e:81:bf:67:aa:4f:00:6c:dc:40:3c:80:f6:e0:fe: f6:4b:fd:99:2b:e6:7e:f9:01:6c:38:d9:fc:41:09:87:48:f1: 66:61:ca:8f:81:cf:98:6f:13:95:a0:fd:33:d2:55:03:78:91: 56:4e:5a:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXOCPN/vvPUPz74+YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy NTc2MB4XDTI0MDUwODEzMDAzNFoXDTI0MDgwNjEzMDAzNFowLzEtMCsGA1UEAxMk NzhlM2FhOTAtYWQ2NS00OTc2LWJhMzAtZjMwN2Q1YmJkNzFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRID8PwRRgC+zy6x9XdGvPiSQqktQJwVuXx8 Nd7lCFErB5nnBWhQRKv0koDkdIHBusZt7Jd39PlkLxvyjQRNiJm8kr0NObdpQ5tn 6KQeWKFQzj1G4ZiQ97LaeOMxVCB7hQJynpBS3xC/28Wz9jIuu9tvZ1NpE/gslqDO dONFSdXgBr4L0gnqiEOa3FaSVQ2cXUbzjarlfY9ohD5YV3oFkWkF9z895EgAe3GW UbKmoWLJyofOnSTN2MQJDcLC5VVPoisFwk+OCToK5MMWi+sTM+LaqJRyuq1GRsmh 9xL7Fg1+aQ5xW3TZbpw1NuG1yEGj9wVVP5feP676jFMd665NpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL+rCASYomSet+naJCjMjHHeeGnkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3 YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvNGE3YzFkNGUtYTQ5NC0z ZGFkLWFkZDgtMDRkNWEzNjFiYTQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3 YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0e3EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALRklcTDdISMDzv1EOUIFqL86FmqOchA4GN/Voq7JcxLACO2Pk7SCqMd HwbZ6gKS5BfCzTx+ZEnS/N7YWrxcseityG4tXUHeFJ+wrPJ64As8YhOShC0UD/eF 95l0g+hcLNBcr3GBzSeDD15hJGKVgP4hp1plLgbf4tqzQWW95EjvgH6hjxmyJ3ss 7sInNnMlGPEp4jmsxoeKa9FfyGGDp5EpK9w5MP8n1jDnBBEOatUirsRaWnWi11c4 AAPca4DSvOjAqVxfhBlXTi6Bv2eqTwBs3EA8gPbg/vZL/Zkr5n75AWw42fxBCYdI 8WZhyo+Bz5hvE5Wg/TPSVQN4kVZOWrc= -----END CERTIFICATE-----Generated at Thu May 23 04:27:41 2024 by rpki-client on console-fra.rpki-client.org