$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/83d5df07-0cc4-3b16-a5e7-a8cb9d01490d.roa File: 83d5df07-0cc4-3b16-a5e7-a8cb9d01490d.roa (raw, json) Hash identifier: Gdxp2sDkbo8unXvNclrla5DK266p1HUiVfoxHOUOlFg= Subject key identifier: F0:06:A8:6F:FB:AE:48:77:F6:E8:0B:12:0D:BF:CD:37:C5:18:DF:88 Certificate issuer: /CN=40b1aa57-bdb0-48a3-aa18-332e6bd9f295 Certificate serial: 010D0C9F4328584589A3264F878489C9A2B56100 Authority key identifier: 24:0B:25:77:25:9C:06:3A:46:02:3C:B6:45:87:EF:86:CD:7E:04:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/83d5df07-0cc4-3b16-a5e7-a8cb9d01490d.roa Signing time: Sun 14 Apr 2024 01:00:24 +0000 ROA not before: Sun 14 Apr 2024 01:00:24 +0000 ROA not after: Sat 13 Jul 2024 01:00:24 +0000 asID: 63456 IP address blocks: 192.122.149.0/24 maxlen: 24 209.209.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Jun 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:89:a3:26:4f:87:84:89:c9:a2:b5:61:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40b1aa57-bdb0-48a3-aa18-332e6bd9f295 Validity Not Before: Apr 14 01:00:24 2024 GMT Not After : Jul 13 01:00:24 2024 GMT Subject: CN=6ddb7dcf-d819-498e-a089-83cf1bcc5f34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:24:b4:f8:13:89:43:44:df:ee:29:85:71:dd: c4:e4:7d:67:85:9d:36:35:38:d0:9a:5f:75:53:a0: d0:7a:04:d2:5b:fc:35:1c:9d:f2:a9:8b:31:99:52: b3:82:80:b1:c5:76:92:ee:3e:12:cb:6a:c4:ad:d0: a4:e1:06:11:2c:7a:da:dd:da:bf:a3:35:0f:41:cd: 58:e8:8e:c7:05:01:87:40:db:67:87:45:76:dd:a5: 68:7f:c2:b3:b4:f8:d2:c0:71:28:c0:ea:b8:77:a8: e0:26:ca:94:d7:e1:af:ce:bb:da:73:67:bc:e7:a9: d3:d2:7d:ab:c0:b6:bc:1d:27:50:1e:4a:4e:0d:dc: 63:66:6b:79:f4:81:af:69:5a:92:98:34:b4:76:e4: 2b:0c:f4:c2:51:b8:a1:4f:96:00:dc:6e:16:40:36: 5f:6c:1f:0e:48:83:3a:4d:ef:8f:b2:59:af:bf:d7: 39:80:a2:b5:a9:02:45:e7:3b:51:76:3b:ac:d9:57: 96:d6:4e:01:59:53:60:3b:20:d7:5b:76:f8:ac:fb: 3a:a1:8d:4e:77:e7:53:a8:f7:5d:e9:c2:ab:39:f5: b7:31:3d:75:94:5d:a2:a4:6d:a9:ab:1c:30:ee:1c: 30:37:00:c4:be:54:fe:b1:8e:c1:f4:ab:09:a2:34: 45:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:06:A8:6F:FB:AE:48:77:F6:E8:0B:12:0D:BF:CD:37:C5:18:DF:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/83d5df07-0cc4-3b16-a5e7-a8cb9d01490d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.crl X509v3 Authority Key Identifier: keyid:24:0B:25:77:25:9C:06:3A:46:02:3C:B6:45:87:EF:86:CD:7E:04:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.cer sbgp-ipAddrBlock: critical IPv4: 192.122.149.0/24 209.209.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:c7:60:8f:5c:0a:63:e5:eb:73:50:0f:71:4d:fc:ce:e1:12: 53:ab:e5:b6:25:53:49:c9:c6:ae:c8:dd:b8:96:96:71:5a:72: e1:03:30:c1:f4:ca:3f:a7:58:f8:a4:7b:8b:02:84:fd:df:dd: c5:6e:5a:ea:49:1f:31:e7:de:98:b1:e9:1a:e7:cd:fa:44:d4: f0:8a:2e:b4:0c:f7:7b:bb:82:79:43:17:5c:f9:0d:ab:00:92: 13:2c:6e:25:05:78:b5:5e:67:3c:b3:c8:ca:3d:0f:a4:b4:ac: f9:09:b6:a1:7b:60:e7:53:ee:06:a7:0d:da:22:f5:bd:9b:13: 15:99:88:b1:95:6e:ea:da:21:b0:2f:02:d7:70:7f:0f:6e:81: 6f:12:c2:cd:a0:9b:e9:b0:0b:70:4a:d7:3e:45:63:c3:df:ef: 2c:66:02:40:1b:4b:8e:65:10:38:38:1e:d7:e9:eb:6b:9c:68: 59:36:15:b4:a5:40:79:d1:1c:83:2f:13:8b:f5:9f:19:22:96: e6:15:e1:36:e0:e5:7d:44:d6:2b:31:4f:5a:f6:55:0a:3a:00: 2f:ba:8a:8b:ab:87:05:d4:28:0a:8b:16:2c:90:47:9b:c4:1a: 04:ff:e2:26:6f:4a:2c:a1:96:3b:50:07:9d:4b:dd:3e:fe:e4: f0:49:7c:04 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEWJoyZPh4SJyaK1YQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBiMWFhNTctYmRiMC00OGEzLWFhMTgtMzMyZTZiZDlm Mjk1MB4XDTI0MDQxNDAxMDAyNFoXDTI0MDcxMzAxMDAyNFowLzEtMCsGA1UEAxMk NmRkYjdkY2YtZDgxOS00OThlLWEwODktODNjZjFiY2M1ZjM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSS0+BOJQ0Tf7imFcd3E5H1nhZ02NTjQml91 U6DQegTSW/w1HJ3yqYsxmVKzgoCxxXaS7j4Sy2rErdCk4QYRLHra3dq/ozUPQc1Y 6I7HBQGHQNtnh0V23aVof8KztPjSwHEowOq4d6jgJsqU1+Gvzrvac2e856nT0n2r wLa8HSdQHkpODdxjZmt59IGvaVqSmDS0duQrDPTCUbihT5YA3G4WQDZfbB8OSIM6 Te+Pslmvv9c5gKK1qQJF5ztRdjus2VeW1k4BWVNgOyDXW3b4rPs6oY1Od+dTqPdd 6cKrOfW3MT11lF2ipG2pqxww7hwwNwDEvlT+sY7B9KsJojRFvwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFPAGqG/7rkh39ugLEg2/zTfFGN+IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGIx YWE1Ny1iZGIwLTQ4YTMtYWExOC0zMzJlNmJkOWYyOTUvODNkNWRmMDctMGNjNC0z YjE2LWE1ZTctYThjYjlkMDE0OTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBiMWFhNTctYmRiMC00OGEzLWFh MTgtMzMyZTZiZDlmMjk1LzQwYjFhYTU3LWJkYjAtNDhhMy1hYTE4LTMzMmU2YmQ5 ZjI5NS5jcmwwHwYDVR0jBBgwFoAUJAsldyWcBjpGAjy2RYfvhs1+BPMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGIxYWE1Ny1iZGIwLTQ4YTMtYWExOC0zMzJl NmJkOWYyOTUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwHqVAwQA 0dEDMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAKjHYI9cCmPl63NQD3FN/M7hElOr5bYlU0nJxq7I3biWlnFa cuEDMMH0yj+nWPike4sChP3f3cVuWupJHzHn3pix6RrnzfpE1PCKLrQM93u7gnlD F1z5DasAkhMsbiUFeLVeZzyzyMo9D6S0rPkJtqF7YOdT7ganDdoi9b2bExWZiLGV buraIbAvAtdwfw9ugW8Sws2gm+mwC3BK1z5FY8Pf7yxmAkAbS45lEDg4Htfp62uc aFk2FbSlQHnRHIMvE4v1nxkiluYV4Tbg5X1E1isxT1r2VQo6AC+6iourhwXUKAqL FiyQR5vEGgT/4iZvSiyhljtQB51L3T7+5PBJfAQ= -----END CERTIFICATE-----Generated at Sun Jun 2 19:27:02 2024 by rpki-client on console-ams.rpki-client.org