$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/5fc1f543-5c6b-31d9-b4ec-b076efd518a4.roa File: 5fc1f543-5c6b-31d9-b4ec-b076efd518a4.roa (raw, json) Hash identifier: ACcBYVqSgZmE6ICYPtiLMiSh9DSyn/ytTvEXlB10ST0= Subject key identifier: 08:AC:AF:3C:B0:C9:16:A7:29:17:8C:31:52:11:49:02:E9:CC:74:30 Certificate issuer: /CN=eaf7df35-c67f-440d-9799-461e7a809ef3 Certificate serial: 010D0C9F43285845BD48D7D11630B6187AF29D00 Authority key identifier: D9:6C:E3:DD:BC:F0:06:54:CF:29:32:2A:23:2F:FC:E1:12:C2:5B:3A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/5fc1f543-5c6b-31d9-b4ec-b076efd518a4.roa Signing time: Thu 02 May 2024 13:00:34 +0000 ROA not before: Thu 02 May 2024 13:00:34 +0000 ROA not after: Wed 31 Jul 2024 13:00:34 +0000 asID: 62856 IP address blocks: 209.112.106.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/eaf7df35-c67f-440d-9799-461e7a809ef3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/eaf7df35-c67f-440d-9799-461e7a809ef3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 May 2024 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:bd:48:d7:d1:16:30:b6:18:7a:f2:9d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eaf7df35-c67f-440d-9799-461e7a809ef3 Validity Not Before: May 2 13:00:34 2024 GMT Not After : Jul 31 13:00:34 2024 GMT Subject: CN=81f0fdef-0d1a-4202-8923-336a4cb39863 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:3d:49:39:eb:2d:98:28:32:a9:e7:ca:1c:0a: 55:d7:f5:d6:b5:a9:52:0c:2c:d0:61:07:fb:92:52: 51:b5:cb:d2:bb:e4:e8:c0:95:1f:35:2b:98:2c:86: c6:9f:be:4b:b4:17:09:f4:dc:9a:5f:e6:7e:5b:0c: 85:64:55:81:95:58:26:a5:ae:4a:5f:72:a2:38:00: db:05:af:16:18:d4:c4:82:9a:8b:7f:47:ab:eb:fa: df:6f:05:36:59:47:06:e6:1c:93:e8:a0:44:71:24: d4:63:a7:1d:e1:98:7d:e5:7f:cc:74:32:e7:00:e6: dc:21:83:65:e3:b9:20:54:ca:9a:ee:a3:64:16:89: bc:e6:f1:8d:c5:68:74:3e:f7:41:9e:fe:ef:86:aa: 86:94:0e:5e:3f:9d:39:7b:0c:35:92:9e:6b:9d:93: 4c:03:2e:cd:28:b3:c5:b3:f8:6e:ca:ca:04:0d:f2: 5b:a5:cf:74:22:98:cc:ba:30:cb:ae:97:61:98:d1: a3:dc:e8:94:31:fc:6f:62:94:fc:d0:54:cc:d1:68: db:05:cf:82:1c:34:74:86:c4:d9:7d:5b:69:5e:e8: 46:6b:d8:b8:37:36:0f:3a:27:36:85:f6:f3:eb:5b: e0:69:be:01:a9:a7:92:8f:19:70:03:91:4a:5c:29: 49:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:AC:AF:3C:B0:C9:16:A7:29:17:8C:31:52:11:49:02:E9:CC:74:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/5fc1f543-5c6b-31d9-b4ec-b076efd518a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/eaf7df35-c67f-440d-9799-461e7a809ef3.crl X509v3 Authority Key Identifier: keyid:D9:6C:E3:DD:BC:F0:06:54:CF:29:32:2A:23:2F:FC:E1:12:C2:5B:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3.cer sbgp-ipAddrBlock: critical IPv4: 209.112.106.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:d9:bc:09:8b:5b:66:7e:f1:d3:92:13:89:27:29:9f:92:4a: 02:56:a1:dc:84:e0:44:64:62:39:0d:6d:63:b6:a2:08:04:a0: 25:a4:5d:ee:5f:97:a9:c3:d3:52:01:a3:9b:e6:6d:b6:f3:a5: 2e:f7:48:e0:ff:46:61:74:4c:34:0c:3f:ed:77:85:cf:d7:c6: f2:bd:85:fe:4e:29:da:54:e9:39:3d:df:3f:98:0b:2e:03:40: 1b:52:ac:24:6d:91:83:25:bd:85:5d:c1:74:b1:58:c2:ba:4d: 29:c5:c2:04:42:46:52:dc:07:cd:c4:ef:88:2e:66:07:4c:75: 15:fe:ce:fc:2f:ce:76:e2:7d:b6:21:37:f4:a3:bd:a7:e1:8e: 38:72:fc:ca:84:bc:56:0a:1f:e4:ed:eb:d0:77:d6:57:40:e9: 15:46:8c:d2:3e:1a:12:f2:31:97:95:04:7f:76:1b:fb:c9:93: 73:de:d6:77:5d:fa:e5:a1:29:3d:51:ae:b2:f0:d5:7f:28:dd: c4:50:14:8a:c3:c8:33:ce:6c:ef:fa:11:49:1d:d6:ca:6d:01: 7b:a6:58:3b:64:c6:2d:a1:ba:1c:ad:c6:6f:15:49:be:e4:26: bf:04:38:cb:12:23:e6:64:37:df:ab:d3:a7:46:c4:3b:70:e1: 39:1a:52:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEW9SNfRFjC2GHrynQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWFmN2RmMzUtYzY3Zi00NDBkLTk3OTktNDYxZTdhODA5 ZWYzMB4XDTI0MDUwMjEzMDAzNFoXDTI0MDczMTEzMDAzNFowLzEtMCsGA1UEAxMk ODFmMGZkZWYtMGQxYS00MjAyLTg5MjMtMzM2YTRjYjM5ODYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzT1JOestmCgyqefKHApV1/XWtalSDCzQYQf7 klJRtcvSu+TowJUfNSuYLIbGn75LtBcJ9NyaX+Z+WwyFZFWBlVgmpa5KX3KiOADb Ba8WGNTEgpqLf0er6/rfbwU2WUcG5hyT6KBEcSTUY6cd4Zh95X/MdDLnAObcIYNl 47kgVMqa7qNkFom85vGNxWh0PvdBnv7vhqqGlA5eP505eww1kp5rnZNMAy7NKLPF s/huysoEDfJbpc90IpjMujDLrpdhmNGj3OiUMfxvYpT80FTM0WjbBc+CHDR0hsTZ fVtpXuhGa9i4NzYPOic2hfbz61vgab4BqaeSjxlwA5FKXClJHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAisrzywyRanKReMMVIRSQLpzHQwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lYWY3 ZGYzNS1jNjdmLTQ0MGQtOTc5OS00NjFlN2E4MDllZjMvNWZjMWY1NDMtNWM2Yi0z MWQ5LWI0ZWMtYjA3NmVmZDUxOGE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZWFmN2RmMzUtYzY3Zi00NDBkLTk3 OTktNDYxZTdhODA5ZWYzL2VhZjdkZjM1LWM2N2YtNDQwZC05Nzk5LTQ2MWU3YTgw OWVmMy5jcmwwHwYDVR0jBBgwFoAU2Wzj3bzwBlTPKTIqIy/84RLCWzowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lYWY3ZGYzNS1jNjdmLTQ0MGQtOTc5OS00NjFl N2E4MDllZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0XBqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB7ZvAmLW2Z+8dOSE4knKZ+SSgJWodyE4ERkYjkNbWO2oggEoCWkXe5f l6nD01IBo5vmbbbzpS73SOD/RmF0TDQMP+13hc/XxvK9hf5OKdpU6Tk93z+YCy4D QBtSrCRtkYMlvYVdwXSxWMK6TSnFwgRCRlLcB83E74guZgdMdRX+zvwvznbifbYh N/Sjvafhjjhy/MqEvFYKH+Tt69B31ldA6RVGjNI+GhLyMZeVBH92G/vJk3Pe1ndd +uWhKT1RrrLw1X8o3cRQFIrDyDPObO/6EUkd1sptAXumWDtkxi2huhytxm8VSb7k Jr8EOMsSI+ZkN9+r06dGxDtw4TkaUjY= -----END CERTIFICATE-----Generated at Fri May 17 02:12:07 2024 by rpki-client on console-ams.rpki-client.org