$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/1e1c3889-9a3b-32f7-a6f0-5bdcea194dfe.roa File: 1e1c3889-9a3b-32f7-a6f0-5bdcea194dfe.roa (raw, json) Hash identifier: 9ERX+6Q9sfsYspooyAeknLHUvxQZtaED0uK+dWJdzcw= Subject key identifier: 18:AE:F9:39:CD:88:50:53:E1:9D:F8:8A:C0:35:EA:63:7C:9E:F1:79 Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d Certificate serial: 010D0C9F432858452D82932ED6991445E0A71238 Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/1e1c3889-9a3b-32f7-a6f0-5bdcea194dfe.roa Signing time: Tue 12 Mar 2024 01:00:25 +0000 ROA not before: Tue 12 Mar 2024 01:00:25 +0000 ROA not after: Mon 10 Jun 2024 01:00:25 +0000 asID: 62929 IP address blocks: 216.234.138.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 May 2024 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:2d:82:93:2e:d6:99:14:45:e0:a7:12:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d Validity Not Before: Mar 12 01:00:25 2024 GMT Not After : Jun 10 01:00:25 2024 GMT Subject: CN=94fd7bae-7547-4588-ab25-da17e35d0900 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:a7:f1:c2:b0:99:49:ae:02:46:97:65:3f:57: ba:73:ec:99:53:3f:69:64:03:a9:04:08:ec:9c:b9: 6a:03:31:7d:99:f2:fa:88:de:c1:a2:ad:c4:9c:ce: 99:4d:eb:3b:df:3d:ae:28:9f:27:67:49:c1:0a:00: 66:52:69:8b:f6:58:45:1f:9c:0b:30:b2:fa:d4:0f: a3:04:99:ca:8c:cc:6f:cf:38:3a:5d:6c:22:22:71: 92:61:20:aa:e8:5c:2c:58:3d:37:1b:7c:00:75:b4: 7d:4d:dc:4b:18:7a:d6:11:40:05:17:ac:87:c8:af: 1c:82:f6:8c:bf:e8:c2:20:36:18:90:46:c6:d3:63: 1f:ce:3a:f3:89:a5:60:92:87:5d:b4:60:d6:e5:32: 97:90:88:13:48:77:33:44:0f:98:15:af:0a:2a:ab: 3d:43:61:29:4a:88:16:39:5f:78:bd:c9:91:14:fb: 04:b1:80:3e:09:75:fd:af:75:76:47:5b:08:99:29: 55:1b:85:cb:c0:60:d7:fb:c5:75:07:8d:8c:4b:8e: 7c:64:bb:c9:13:54:4a:73:12:e1:3e:df:b9:74:cd: 85:55:87:4d:9e:c4:96:19:c5:03:cc:65:96:44:0a: 97:8a:7a:a0:fe:b7:65:29:fb:28:26:57:bc:b7:8a: a7:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:AE:F9:39:CD:88:50:53:E1:9D:F8:8A:C0:35:EA:63:7C:9E:F1:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/1e1c3889-9a3b-32f7-a6f0-5bdcea194dfe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl X509v3 Authority Key Identifier: keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer sbgp-ipAddrBlock: critical IPv4: 216.234.138.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:1a:48:a1:86:cc:84:ad:2a:65:2f:2b:4a:eb:ee:4a:f9:0b: 8c:38:9e:99:ea:af:12:39:5f:f9:d6:96:62:f4:5f:f5:30:cf: 0d:3e:09:bf:47:95:8e:ec:30:d2:6e:2a:52:d9:af:45:70:45: 77:a0:f0:cc:62:64:cf:72:8e:e0:e6:6c:8d:f0:50:dd:6d:23: c7:3e:64:4e:3b:1d:2f:46:f2:92:69:91:94:9d:1b:48:7d:36: b0:61:2b:20:59:ec:8b:e9:b4:c0:3d:85:8d:45:df:81:ed:c8: d3:44:5a:3e:3a:fc:89:fd:f0:b8:6b:c4:27:79:18:ab:fd:1a: ec:31:92:ed:09:1c:91:dc:d5:ee:14:78:0c:45:2b:07:34:8c: 8e:6f:07:36:85:46:77:44:7e:5d:62:d9:7e:0c:29:b2:52:72: 87:ff:89:a9:38:00:4f:70:c1:62:95:9b:f6:1b:71:d6:a5:22: 97:f5:96:e2:64:2e:30:2b:18:8d:7c:dd:0a:41:14:51:4c:4a: 8e:38:50:73:cb:89:25:07:02:5d:e8:3d:4d:39:d2:03:1d:49: 34:1c:95:fc:2f:41:9b:48:06:bc:12:da:e0:49:d2:2a:39:30: 0f:69:f6:c8:5b:12:70:51:4d:d1:de:51:3b:a0:34:c3:e5:d9: 92:74:08:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUtgpMu1pkUReCnEjgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM5YTYyMDEtZmU4Yy00OWE0LTk4NWQtNTQ2MzA3NmIz OTdkMB4XDTI0MDMxMjAxMDAyNVoXDTI0MDYxMDAxMDAyNVowLzEtMCsGA1UEAxMk OTRmZDdiYWUtNzU0Ny00NTg4LWFiMjUtZGExN2UzNWQwOTAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqfxwrCZSa4CRpdlP1e6c+yZUz9pZAOpBAjs nLlqAzF9mfL6iN7Boq3EnM6ZTes73z2uKJ8nZ0nBCgBmUmmL9lhFH5wLMLL61A+j BJnKjMxvzzg6XWwiInGSYSCq6FwsWD03G3wAdbR9TdxLGHrWEUAFF6yHyK8cgvaM v+jCIDYYkEbG02MfzjrziaVgkoddtGDW5TKXkIgTSHczRA+YFa8KKqs9Q2EpSogW OV94vcmRFPsEsYA+CXX9r3V2R1sImSlVG4XLwGDX+8V1B42MS458ZLvJE1RKcxLh Pt+5dM2FVYdNnsSWGcUDzGWWRAqXinqg/rdlKfsoJle8t4qnEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBiu+TnNiFBT4Z34isA16mN8nvF5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlh NjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYzMDc2YjM5N2QvMWUxYzM4ODktOWEzYi0z MmY3LWE2ZjAtNWJkY2VhMTk0ZGZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWM5YTYyMDEtZmU4Yy00OWE0LTk4 NWQtNTQ2MzA3NmIzOTdkL2FjOWE2MjAxLWZlOGMtNDlhNC05ODVkLTU0NjMwNzZi Mzk3ZC5jcmwwHwYDVR0jBBgwFoAUv6Kzddwji/mK9k2cK6vYghgKdFQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlhNjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYz MDc2YjM5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2OqKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAEaSKGGzIStKmUvK0rr7kr5C4w4npnqrxI5X/nWlmL0X/Uwzw0+Cb9H lY7sMNJuKlLZr0VwRXeg8MxiZM9yjuDmbI3wUN1tI8c+ZE47HS9G8pJpkZSdG0h9 NrBhKyBZ7IvptMA9hY1F34HtyNNEWj46/In98LhrxCd5GKv9Guwxku0JHJHc1e4U eAxFKwc0jI5vBzaFRndEfl1i2X4MKbJScof/iak4AE9wwWKVm/YbcdalIpf1luJk LjArGI183QpBFFFMSo44UHPLiSUHAl3oPU050gMdSTQclfwvQZtIBrwS2uBJ0io5 MA9p9shbEnBRTdHeUTugNMPl2ZJ0CCI= -----END CERTIFICATE-----Generated at Thu May 23 02:55:29 2024 by rpki-client on console-ams.rpki-client.org