$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/32ebdaf3-b2d3-3bc7-8097-fa9b4364d7e5.roa File: 32ebdaf3-b2d3-3bc7-8097-fa9b4364d7e5.roa (raw, json) Hash identifier: sMUbwPX7/H/UBMQDhumxWb7VfNXYPwMIlhw+QE1IqTM= Subject key identifier: 48:F2:21:E3:94:44:6C:C2:C8:2D:CF:B6:99:7E:DA:B9:9F:11:FF:08 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328583DB5CDC7225768615998111680 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/32ebdaf3-b2d3-3bc7-8097-fa9b4364d7e5.roa Signing time: Tue 26 Apr 2022 12:00:00 +0000 ROA not before: Tue 26 Apr 2022 12:00:00 +0000 ROA not after: Tue 27 Apr 2027 04:00:00 +0000 asID: 18709 IP address blocks: 209.34.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 27 Apr 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:3d:b5:cd:c7:22:57:68:61:59:98:11:16:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Apr 26 12:00:00 2022 GMT Not After : Apr 27 04:00:00 2027 GMT Subject: CN=8119f25a-b02f-49da-adc6-6f2b17a3029b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:61:bb:c5:c3:0a:8e:4f:04:c0:a6:90:78:2a: 9e:11:22:c4:23:4a:b2:0e:d7:2f:3f:56:84:9f:ab: 67:5b:71:9b:56:78:19:17:7c:96:d0:7e:8f:c5:a1: bf:07:62:fb:b3:6d:8d:92:a5:13:09:07:6e:a2:a8: b5:98:86:57:d3:8d:28:af:b9:e4:77:10:48:cc:96: 42:95:64:0b:c8:74:b2:81:74:fe:24:cc:9e:43:56: 91:33:cd:c7:0d:a4:fb:22:a0:b2:2e:9e:bb:dc:2b: 32:b5:11:7a:21:5c:88:e4:50:96:8b:dc:54:d4:27: e1:8f:ce:bc:ca:36:f7:10:1e:e7:75:7a:2e:86:bb: e0:e0:2f:6e:df:dc:f9:ef:04:d9:a4:e8:ff:84:59: da:78:d3:82:96:6f:10:4a:4e:9e:1f:22:b5:57:d8: 36:7e:6a:2b:a7:8d:6f:42:4d:12:6f:d3:e3:5c:88: e2:ac:69:d9:63:e2:f7:43:88:aa:76:a2:1a:05:17: 02:1b:79:35:06:ec:92:64:78:d3:d0:29:b6:7d:48: 5d:98:21:11:ea:e0:b8:15:0c:8e:f0:fa:12:f2:de: 0a:32:92:2e:aa:59:fb:2a:35:0c:c0:41:00:c3:ba: 79:3d:fd:12:1a:3a:5f:ec:d0:0c:db:dd:1a:85:3e: 6d:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:F2:21:E3:94:44:6C:C2:C8:2D:CF:B6:99:7E:DA:B9:9F:11:FF:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/32ebdaf3-b2d3-3bc7-8097-fa9b4364d7e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 209.34.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:02:9a:6d:ca:8b:5b:d0:cb:3e:a9:fc:41:59:dd:fb:b4:95: f3:f8:c1:cf:e2:a4:56:fe:4e:16:0d:19:55:e1:3a:ac:1d:bb: e7:07:4f:d4:c1:db:ac:94:2e:78:87:0d:1e:b4:26:9a:91:e8: 93:91:46:4a:7f:22:fa:e0:9f:26:17:b7:f4:e4:ac:ca:6f:d0: 1f:e5:e4:2f:34:78:7d:cc:4f:1b:60:50:0f:1a:0e:ef:69:f8: ce:38:b0:ba:99:f8:26:7f:b1:86:61:c7:66:03:ac:72:43:5e: 23:f0:5f:c3:b6:30:8b:e5:6f:c3:8e:2c:3d:df:54:2b:e1:1c: d2:69:ee:61:1d:1b:1b:ca:64:fa:45:0b:08:16:8b:3c:76:81: 61:e5:4b:ef:ba:09:ec:40:31:76:de:46:c8:73:b6:80:b8:5c: eb:6d:c4:2c:91:1c:8b:85:16:bc:61:e0:2d:db:48:d4:6d:0f: a8:c0:86:6e:0a:24:77:08:18:4d:fb:be:1e:db:9e:55:2f:32: 07:31:59:d3:eb:d0:ef:36:a5:a2:e4:e8:91:d8:35:fc:4c:c8: a8:45:42:8f:2a:2c:44:c6:9e:2f:2c:88:3f:2b:12:0d:d5:4b: c1:39:82:da:db:5d:72:59:27:2d:15:47:bd:1e:c5:e7:4f:13: a6:55:5c:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD21zcciV2hhWZgRFoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTIyMDQyNjEyMDAwMFoXDTI3MDQyNzA0MDAwMFowLzEtMCsGA1UEAxMk ODExOWYyNWEtYjAyZi00OWRhLWFkYzYtNmYyYjE3YTMwMjliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGG7xcMKjk8EwKaQeCqeESLEI0qyDtcvP1aE n6tnW3GbVngZF3yW0H6PxaG/B2L7s22NkqUTCQduoqi1mIZX040or7nkdxBIzJZC lWQLyHSygXT+JMyeQ1aRM83HDaT7IqCyLp673CsytRF6IVyI5FCWi9xU1Cfhj868 yjb3EB7ndXouhrvg4C9u39z57wTZpOj/hFnaeNOClm8QSk6eHyK1V9g2fmorp41v Qk0Sb9PjXIjirGnZY+L3Q4iqdqIaBRcCG3k1BuySZHjT0Cm2fUhdmCER6uC4FQyO 8PoS8t4KMpIuqln7KjUMwEEAw7p5Pf0SGjpf7NAM290ahT5tDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEjyIeOURGzCyC3Ptpl+2rmfEf8IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzJlYmRhZjMtYjJkMy0z YmM3LTgwOTctZmE5YjQzNjRkN2U1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0SLPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABoCmm3Ki1vQyz6p/EFZ3fu0lfP4wc/ipFb+ThYNGVXhOqwdu+cHT9TB 26yULniHDR60JpqR6JORRkp/IvrgnyYXt/TkrMpv0B/l5C80eH3MTxtgUA8aDu9p +M44sLqZ+CZ/sYZhx2YDrHJDXiPwX8O2MIvlb8OOLD3fVCvhHNJp7mEdGxvKZPpF CwgWizx2gWHlS++6CexAMXbeRshztoC4XOttxCyRHIuFFrxh4C3bSNRtD6jAhm4K JHcIGE37vh7bnlUvMgcxWdPr0O82paLk6JHYNfxMyKhFQo8qLETGni8siD8rEg3V S8E5gtrbXXJZJy0VR70exedPE6ZVXLE= -----END CERTIFICATE-----Generated at Fri Apr 26 08:38:58 2024 by rpki-client on console-ams.rpki-client.org