$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/fb97fe62-d69c-303f-82f4-0933263566b8.roa File: fb97fe62-d69c-303f-82f4-0933263566b8.roa (raw, json) Hash identifier: FiWycL9D+p1M23mERPHaGYlhEZqJH4pX4Aex3MYvhHc= Subject key identifier: 56:39:27:94:E0:A4:1B:E9:A3:61:6B:C2:47:DB:E8:8D:30:3B:1E:02 Certificate issuer: /CN=cc3ad4cd-0893-42fc-a743-e36058983069 Certificate serial: 010D0C9F43285845A2C342BDA4C759A6BDBAA0A4 Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/fb97fe62-d69c-303f-82f4-0933263566b8.roa Signing time: Tue 23 Apr 2024 01:00:25 +0000 ROA not before: Tue 23 Apr 2024 01:00:25 +0000 ROA not after: Mon 22 Jul 2024 01:00:25 +0000 asID: 6461 IP address blocks: 209.112.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 06 May 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:a2:c3:42:bd:a4:c7:59:a6:bd:ba:a0:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069 Validity Not Before: Apr 23 01:00:25 2024 GMT Not After : Jul 22 01:00:25 2024 GMT Subject: CN=4c22abcb-6cd0-40e0-b586-9de8839dd8d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:dc:94:72:de:49:62:ca:87:be:ba:48:59:4d: 8d:33:0c:70:61:44:5c:37:00:51:90:ec:74:fa:54: 15:bc:89:7d:1f:df:76:10:73:b1:65:ad:7b:ba:31: 31:2d:22:c1:38:8d:85:c8:a9:f2:e6:23:f5:47:ba: 57:1f:d4:07:6f:91:1a:b8:75:0e:59:d9:a2:d4:3b: 3d:4e:75:c0:17:30:6f:03:cf:44:bc:5b:6d:fb:a2: 2f:6e:69:76:b5:f3:da:37:58:51:76:32:1c:5e:40: 0b:42:59:a5:14:76:52:0c:89:da:f5:d7:5a:cc:aa: d9:db:a2:c1:95:03:12:87:29:b8:ad:57:1a:f1:8c: 71:a6:b7:a9:fa:5d:2b:f9:fb:d2:0f:ca:68:87:87: 18:40:ea:a9:b9:b8:74:53:f4:d4:e8:20:be:be:24: 60:bc:ba:0d:1f:2d:ab:da:f4:c7:a7:8f:ca:ba:db: 86:b8:33:2a:7b:b0:a7:fb:e8:cc:94:8f:5b:c7:85: fa:97:98:0f:84:bb:bd:e3:cc:b4:47:7e:c7:0e:a8: d4:e1:2f:7b:15:f9:b7:c3:65:b7:8f:8f:07:8a:21: ed:d6:ea:41:45:2b:ff:f4:da:eb:5a:a5:73:46:d8: f2:85:50:5f:8c:17:15:77:43:b9:82:c6:7f:e6:ce: e0:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:39:27:94:E0:A4:1B:E9:A3:61:6B:C2:47:DB:E8:8D:30:3B:1E:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/fb97fe62-d69c-303f-82f4-0933263566b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl X509v3 Authority Key Identifier: keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer sbgp-ipAddrBlock: critical IPv4: 209.112.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:fe:54:a9:e6:a7:29:3c:0e:26:2b:24:d3:3a:9f:f5:db:60: 49:ce:2b:3a:25:94:b1:55:99:15:fe:dc:79:fc:2f:23:57:31: f3:18:1e:7e:a2:21:53:a9:a1:f3:10:c2:0d:88:e3:ea:71:e7: 11:00:1d:09:15:a9:5b:9f:7d:d5:27:94:17:a0:d5:4a:57:94: 0c:fa:c0:92:fd:7f:79:53:5f:9f:9e:bb:cc:7c:8f:a2:b8:9c: 79:14:85:b5:50:84:2c:ef:4c:dc:98:b2:0f:33:f3:02:31:01: e3:d7:a2:73:6d:ce:e2:33:b0:d4:f3:96:76:2f:0b:15:7b:13: 14:a5:d4:2a:4a:5a:73:72:3d:3f:b4:fb:9d:29:e3:b7:f7:77: b0:8c:43:88:77:d0:85:9e:08:5a:69:db:ca:91:2d:14:22:89: 51:60:53:7e:f6:f5:a5:94:dc:ef:ef:be:bb:b7:d9:2d:6f:58: a4:46:d7:66:3b:5f:7f:7d:9d:a0:8c:24:89:cc:1b:63:de:cf: 12:f6:56:21:26:be:a6:36:d9:b3:a0:8d:3f:cf:a1:25:af:ef: c6:52:46:0d:c5:c5:41:fd:6b:6e:f5:ec:4a:15:52:a2:2f:10: 1b:a0:14:c6:64:ca:8b:06:49:e8:97:7a:a7:91:f7:29:7a:84: 90:11:f4:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWiw0K9pMdZpr26oKQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2MzYWQ0Y2QtMDg5My00MmZjLWE3NDMtZTM2MDU4OTgz MDY5MB4XDTI0MDQyMzAxMDAyNVoXDTI0MDcyMjAxMDAyNVowLzEtMCsGA1UEAxMk NGMyMmFiY2ItNmNkMC00MGUwLWI1ODYtOWRlODgzOWRkOGQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg9yUct5JYsqHvrpIWU2NMwxwYURcNwBRkOx0 +lQVvIl9H992EHOxZa17ujExLSLBOI2FyKny5iP1R7pXH9QHb5EauHUOWdmi1Ds9 TnXAFzBvA89EvFtt+6Ivbml2tfPaN1hRdjIcXkALQlmlFHZSDIna9ddazKrZ26LB lQMShym4rVca8Yxxprep+l0r+fvSD8poh4cYQOqpubh0U/TU6CC+viRgvLoNHy2r 2vTHp4/KutuGuDMqe7Cn++jMlI9bx4X6l5gPhLu948y0R37HDqjU4S97Ffm3w2W3 j48HiiHt1upBRSv/9NrrWqVzRtjyhVBfjBcVd0O5gsZ/5s7gaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFY5J5TgpBvpo2Frwkfb6I0wOx4CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jYzNh ZDRjZC0wODkzLTQyZmMtYTc0My1lMzYwNTg5ODMwNjkvZmI5N2ZlNjItZDY5Yy0z MDNmLTgyZjQtMDkzMzI2MzU2NmI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2MzYWQ0Y2QtMDg5My00MmZjLWE3 NDMtZTM2MDU4OTgzMDY5L2NjM2FkNGNkLTA4OTMtNDJmYy1hNzQzLWUzNjA1ODk4 MzA2OS5jcmwwHwYDVR0jBBgwFoAU0BkzYCA5uLEoc26e1umhhrVK+64wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jYzNhZDRjZC0wODkzLTQyZmMtYTc0My1lMzYw NTg5ODMwNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG0XAAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADr+VKnmpyk8DiYrJNM6n/XbYEnOKzollLFVmRX+3Hn8LyNXMfMYHn6i IVOpofMQwg2I4+px5xEAHQkVqVuffdUnlBeg1UpXlAz6wJL9f3lTX5+eu8x8j6K4 nHkUhbVQhCzvTNyYsg8z8wIxAePXonNtzuIzsNTzlnYvCxV7ExSl1CpKWnNyPT+0 +50p47f3d7CMQ4h30IWeCFpp28qRLRQiiVFgU3729aWU3O/vvru32S1vWKRG12Y7 X399naCMJInMG2PezxL2ViEmvqY22bOgjT/PoSWv78ZSRg3FxUH9a2717EoVUqIv EBugFMZkyosGSeiXeqeR9yl6hJAR9KI= -----END CERTIFICATE-----