$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/f7690f1e-c39d-30e1-9d78-56741c6780a0.roa File: f7690f1e-c39d-30e1-9d78-56741c6780a0.roa (raw, json) Hash identifier: 5eUnGF6O5Bq5bYPTlaBWAMKplrw9pJ8eoFX9kv1VbWE= Subject key identifier: AE:54:DF:52:2F:E2:AF:98:43:96:FA:C5:32:1A:B4:69:DB:CB:03:C6 Certificate issuer: /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Certificate serial: 010D0C9F43285845DA98EFD72D30F1FC3D64D1C0 Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/f7690f1e-c39d-30e1-9d78-56741c6780a0.roa Signing time: Mon 13 May 2024 01:00:25 +0000 ROA not before: Mon 13 May 2024 01:00:25 +0000 ROA not after: Sun 11 Aug 2024 01:00:25 +0000 asID: 11232 IP address blocks: 209.169.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:da:98:ef:d7:2d:30:f1:fc:3d:64:d1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Validity Not Before: May 13 01:00:25 2024 GMT Not After : Aug 11 01:00:25 2024 GMT Subject: CN=c446b50f-6652-4fc7-a241-d04155996237 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:2c:92:bd:ba:c3:d7:38:e0:c0:1a:69:ae:e8: d1:13:0b:e9:7d:e7:be:34:5c:ae:48:eb:ae:c1:bf: aa:99:0a:06:03:24:5e:c6:3d:0f:47:b7:38:83:15: 03:07:5e:47:1b:c8:18:f8:d3:f0:84:fe:02:e8:7e: 61:f1:fe:00:8f:20:70:f9:58:01:37:b9:03:75:fe: a1:69:c6:a2:0a:8e:2f:79:8f:96:ab:f8:63:57:8e: 31:77:9c:f0:26:d7:f7:35:15:72:73:1b:2e:b9:19: be:f3:f4:fb:bb:65:66:aa:b4:29:52:8b:5f:56:86: a8:24:cc:86:83:6c:b4:24:e9:89:f8:f6:73:3b:6d: 4f:1e:98:23:43:46:64:d5:37:31:b4:45:2c:eb:ab: ed:69:e8:66:d8:36:03:6a:78:13:65:13:c5:5e:44: a6:96:31:52:21:21:b2:7a:6a:e2:a3:a8:0c:f5:b2: ef:b0:83:1a:79:14:43:39:b4:f2:e5:1c:0f:52:9d: 2b:ae:49:b2:77:4a:c5:00:ee:9b:e2:ef:59:53:72: ac:f6:f9:de:2d:66:2e:27:51:d4:4d:d1:6f:b9:b6: 6a:d7:8b:86:50:17:26:f5:b9:73:a0:1d:fe:54:b7: 65:2c:82:e8:f3:82:4d:b0:01:e8:7a:3b:aa:ba:a4: 2f:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:54:DF:52:2F:E2:AF:98:43:96:FA:C5:32:1A:B4:69:DB:CB:03:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/f7690f1e-c39d-30e1-9d78-56741c6780a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl X509v3 Authority Key Identifier: keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer sbgp-ipAddrBlock: critical IPv4: 209.169.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:43:36:12:d3:cd:0b:ca:f0:46:bc:15:9e:22:28:58:30:15: 8a:25:cf:5b:d0:2b:59:0b:35:4a:f0:66:ee:d1:07:01:9e:c5: ee:94:40:3b:d6:de:f9:0d:2f:27:9a:c3:d9:cc:7a:f0:f4:38: b2:51:fa:12:80:1f:53:7d:4f:8b:a9:8b:db:61:16:e5:5c:a9: 0f:5b:f2:82:c3:8c:f6:c8:c9:c0:00:01:cd:9d:c0:aa:47:e6: e1:a9:69:4b:c0:ba:b1:c9:41:be:93:a6:1b:7e:cc:cf:14:4a: e7:38:95:45:7a:8b:ec:58:d2:75:7b:d3:c5:29:31:27:ce:52: ac:98:60:94:4b:e0:16:c8:55:8d:68:11:af:0d:6d:8a:25:d9: ff:5e:87:3f:4e:79:5b:b7:98:5f:c0:db:3f:f4:f6:a1:f8:8f: 01:f5:af:30:92:f7:53:14:40:0f:f3:3d:8d:5a:d4:fa:73:bd: 6c:c0:e4:1f:3f:10:ca:23:6f:0d:d1:9a:a3:93:48:a3:95:78: df:69:d7:03:10:22:2d:ed:79:7f:f5:be:18:1d:8b:bc:a5:d5: b6:41:2f:78:ab:f5:0f:8e:de:6c:c4:61:9d:f1:33:45:15:65: f5:50:cb:b3:a6:76:7f:22:52:63:71:db:40:1a:a3:4c:f7:3a: bd:35:ed:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXamO/XLTDx/D1k0cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0NjNiMmMtNTM4YS00ZjkzLWJmYTMtZmUxNjQzYTc3 MDg1MB4XDTI0MDUxMzAxMDAyNVoXDTI0MDgxMTAxMDAyNVowLzEtMCsGA1UEAxMk YzQ0NmI1MGYtNjY1Mi00ZmM3LWEyNDEtZDA0MTU1OTk2MjM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsiySvbrD1zjgwBpprujREwvpfee+NFyuSOuu wb+qmQoGAyRexj0PR7c4gxUDB15HG8gY+NPwhP4C6H5h8f4AjyBw+VgBN7kDdf6h acaiCo4veY+Wq/hjV44xd5zwJtf3NRVycxsuuRm+8/T7u2VmqrQpUotfVoaoJMyG g2y0JOmJ+PZzO21PHpgjQ0Zk1TcxtEUs66vtaehm2DYDangTZRPFXkSmljFSISGy emrio6gM9bLvsIMaeRRDObTy5RwPUp0rrkmyd0rFAO6b4u9ZU3Ks9vneLWYuJ1HU TdFvubZq14uGUBcm9blzoB3+VLdlLILo84JNsAHoejuquqQv9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK5U31Iv4q+YQ5b6xTIatGnbywPGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2 M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2NDNhNzcwODUvZjc2OTBmMWUtYzM5ZC0z MGUxLTlkNzgtNTY3NDFjNjc4MGEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2U0NjNiMmMtNTM4YS00ZjkzLWJm YTMtZmUxNjQzYTc3MDg1LzdlNDYzYjJjLTUzOGEtNGY5My1iZmEzLWZlMTY0M2E3 NzA4NS5jcmwwHwYDVR0jBBgwFoAUKTDtD4WmAXovQr1AnODHkJQUF0IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2 NDNhNzcwODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0anQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADFDNhLTzQvK8Ea8FZ4iKFgwFYolz1vQK1kLNUrwZu7RBwGexe6UQDvW 3vkNLyeaw9nMevD0OLJR+hKAH1N9T4upi9thFuVcqQ9b8oLDjPbIycAAAc2dwKpH 5uGpaUvAurHJQb6Tpht+zM8USuc4lUV6i+xY0nV708UpMSfOUqyYYJRL4BbIVY1o Ea8NbYol2f9ehz9OeVu3mF/A2z/09qH4jwH1rzCS91MUQA/zPY1a1PpzvWzA5B8/ EMojbw3RmqOTSKOVeN9p1wMQIi3teX/1vhgdi7yl1bZBL3ir9Q+O3mzEYZ3xM0UV ZfVQy7Omdn8iUmNx20Aao0z3Or017QU= -----END CERTIFICATE-----Generated at Fri May 17 16:13:40 2024 by rpki-client on console-fra.rpki-client.org