$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/3c61c44a-b3fc-304f-b232-cf0f14a43933.roa File: 3c61c44a-b3fc-304f-b232-cf0f14a43933.roa (raw, json) Hash identifier: /8VxLXdknDvyQEx7Sccg2FU22M7qtFYUef5lPcqRFMo= Subject key identifier: 23:FE:ED:DF:85:ED:45:F2:03:B3:90:CF:74:55:50:AA:1B:73:01:23 Certificate issuer: /CN=40b1aa57-bdb0-48a3-aa18-332e6bd9f295 Certificate serial: 010D0C9F43285845ADEDFF45E5675CDF43BFE680 Authority key identifier: 24:0B:25:77:25:9C:06:3A:46:02:3C:B6:45:87:EF:86:CD:7E:04:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/3c61c44a-b3fc-304f-b232-cf0f14a43933.roa Signing time: Sat 27 Apr 2024 01:00:26 +0000 ROA not before: Sat 27 Apr 2024 01:00:26 +0000 ROA not after: Fri 26 Jul 2024 01:00:26 +0000 asID: 53281 IP address blocks: 209.209.3.0/24 maxlen: 24 192.122.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Jun 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:ad:ed:ff:45:e5:67:5c:df:43:bf:e6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40b1aa57-bdb0-48a3-aa18-332e6bd9f295 Validity Not Before: Apr 27 01:00:26 2024 GMT Not After : Jul 26 01:00:26 2024 GMT Subject: CN=9cc25597-3fba-4e03-96ba-78664b07dab8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:2f:7d:8a:f2:49:7f:41:8a:a4:83:61:5d:04: f1:15:3b:3f:7c:70:0f:b8:0a:2b:14:e5:d1:6a:b2: e9:86:a7:9f:18:cc:e8:03:c3:8e:b1:ff:b5:79:8c: a6:54:c5:99:9f:5d:4e:e6:71:7a:23:d0:71:b9:ed: 6a:11:e1:db:e8:59:6b:66:ab:6f:f7:41:a1:6f:6c: 29:ec:3b:76:c5:36:97:04:0e:1f:d6:b0:c6:f8:b8: 94:2c:62:ee:5d:17:0c:09:02:6b:44:3b:10:4c:1c: d0:49:19:39:22:6b:91:83:e3:0b:e4:97:4e:93:ed: 9a:9e:cf:e9:14:79:67:74:46:87:79:a8:c7:04:16: 82:c2:20:92:f8:24:df:8e:de:25:c0:50:b5:8a:c9: 50:38:58:01:42:cb:93:50:b8:48:8b:20:84:48:41: 07:4f:44:49:e5:db:3b:4d:7c:85:0f:81:9d:d6:96: db:f0:57:dc:ba:d3:11:be:98:d2:92:13:87:e7:d6: 24:5a:eb:df:b2:fc:d6:f7:c9:e7:99:67:1c:0c:04: b3:6d:f6:d5:a2:f4:50:8e:70:22:58:6e:63:9b:c6: ad:68:38:b3:5d:a2:9a:f2:fb:e9:c0:13:fd:0a:06: 85:83:d7:5d:a0:bd:bc:e8:ca:83:57:cc:e5:1f:45: a8:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:FE:ED:DF:85:ED:45:F2:03:B3:90:CF:74:55:50:AA:1B:73:01:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/3c61c44a-b3fc-304f-b232-cf0f14a43933.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.crl X509v3 Authority Key Identifier: keyid:24:0B:25:77:25:9C:06:3A:46:02:3C:B6:45:87:EF:86:CD:7E:04:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.cer sbgp-ipAddrBlock: critical IPv4: 192.122.149.0/24 209.209.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:ea:60:f9:f4:97:6f:37:ad:0e:14:0d:fb:3e:12:51:e2:d4: 8d:34:ee:72:58:ba:36:09:25:ae:93:b4:23:bc:5a:31:c1:a9: db:85:b4:e2:07:f6:29:31:59:e1:02:06:ec:71:98:6b:b4:bd: 67:d3:2a:f4:ad:d2:24:40:6b:3f:55:a4:03:72:34:00:98:97: c8:23:a0:57:87:18:71:b5:5c:7a:46:8d:77:6a:54:d3:61:7b: c9:19:4f:1c:9b:49:1b:40:76:36:70:bb:eb:8a:97:68:eb:a1: 3c:a0:49:f2:17:e0:0c:c9:1d:41:04:4d:89:20:33:f4:dd:fb: d0:b6:ea:fa:36:7b:cd:0e:ea:7f:d0:0f:f8:f9:64:ee:6a:0e: 32:3e:ea:d9:4b:96:d1:2c:c0:87:6f:54:44:53:a0:84:77:5f: a4:17:d5:2f:fd:2e:01:6d:b7:a4:93:af:35:78:bb:38:40:d6: 19:34:2b:84:aa:f7:c3:da:04:d3:40:ff:a2:3c:fa:f5:18:e0: 84:4c:65:ee:2a:75:9e:f3:98:ed:a9:34:e2:a2:6b:6c:49:6f: d3:c0:5a:4a:aa:b1:b3:1b:e0:42:f9:e6:7b:20:7b:50:f1:ef: 9d:a8:d6:db:11:28:63:d0:bd:47:07:85:fc:43:02:4e:a2:9f: 53:32:68:ae -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEWt7f9F5Wdc30O/5oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBiMWFhNTctYmRiMC00OGEzLWFhMTgtMzMyZTZiZDlm Mjk1MB4XDTI0MDQyNzAxMDAyNloXDTI0MDcyNjAxMDAyNlowLzEtMCsGA1UEAxMk OWNjMjU1OTctM2ZiYS00ZTAzLTk2YmEtNzg2NjRiMDdkYWI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0S99ivJJf0GKpINhXQTxFTs/fHAPuAorFOXR arLphqefGMzoA8OOsf+1eYymVMWZn11O5nF6I9Bxue1qEeHb6FlrZqtv90Ghb2wp 7Dt2xTaXBA4f1rDG+LiULGLuXRcMCQJrRDsQTBzQSRk5ImuRg+ML5JdOk+2ans/p FHlndEaHeajHBBaCwiCS+CTfjt4lwFC1islQOFgBQsuTULhIiyCESEEHT0RJ5ds7 TXyFD4Gd1pbb8FfcutMRvpjSkhOH59YkWuvfsvzW98nnmWccDASzbfbVovRQjnAi WG5jm8ataDizXaKa8vvpwBP9CgaFg9ddoL286MqDV8zlH0WomQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFCP+7d+F7UXyA7OQz3RVUKobcwEjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGIx YWE1Ny1iZGIwLTQ4YTMtYWExOC0zMzJlNmJkOWYyOTUvM2M2MWM0NGEtYjNmYy0z MDRmLWIyMzItY2YwZjE0YTQzOTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBiMWFhNTctYmRiMC00OGEzLWFh MTgtMzMyZTZiZDlmMjk1LzQwYjFhYTU3LWJkYjAtNDhhMy1hYTE4LTMzMmU2YmQ5 ZjI5NS5jcmwwHwYDVR0jBBgwFoAUJAsldyWcBjpGAjy2RYfvhs1+BPMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGIxYWE1Ny1iZGIwLTQ4YTMtYWExOC0zMzJl NmJkOWYyOTUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwHqVAwQA 0dEDMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAA7qYPn0l283rQ4UDfs+ElHi1I007nJYujYJJa6TtCO8WjHB qduFtOIH9ikxWeECBuxxmGu0vWfTKvSt0iRAaz9VpANyNACYl8gjoFeHGHG1XHpG jXdqVNNhe8kZTxybSRtAdjZwu+uKl2jroTygSfIX4AzJHUEETYkgM/Td+9C26vo2 e80O6n/QD/j5ZO5qDjI+6tlLltEswIdvVERToIR3X6QX1S/9LgFtt6STrzV4uzhA 1hk0K4Sq98PaBNNA/6I8+vUY4IRMZe4qdZ7zmO2pNOKia2xJb9PAWkqqsbMb4EL5 5nsge1Dx752o1tsRKGPQvUcHhfxDAk6in1MyaK4= -----END CERTIFICATE-----Generated at Sun Jun 2 19:27:02 2024 by rpki-client on console-ams.rpki-client.org