$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3deaf821-f577-36c8-875c-5a1257a54372.roa File: 3deaf821-f577-36c8-875c-5a1257a54372.roa (raw, json) Hash identifier: wV3ckpMO6F2FH0KMhqVZxlCWixMSMwmq+Hp6eSEU5dg= Subject key identifier: CB:2F:FB:F7:7C:CE:9B:AB:5B:04:AE:56:19:D3:FE:2C:36:8D:55:51 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F43285845AADF8D81088B3878CD0E2C80 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3deaf821-f577-36c8-875c-5a1257a54372.roa Signing time: Thu 25 Apr 2024 22:43:56 +0000 ROA not before: Thu 25 Apr 2024 22:43:56 +0000 ROA not after: Wed 24 Jul 2024 22:43:56 +0000 asID: 5650 IP address blocks: 209.73.132.0/24 maxlen: 24 209.73.136.0/24 maxlen: 24 209.73.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 May 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:aa:df:8d:81:08:8b:38:78:cd:0e:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Apr 25 22:43:56 2024 GMT Not After : Jul 24 22:43:56 2024 GMT Subject: CN=c4095a07-84ec-4148-bf96-45629459fe8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:eb:09:bf:77:a3:2f:89:eb:d8:d2:c5:3b:b4: 39:b0:37:9b:8a:c3:3e:15:a8:5a:4d:8c:ef:54:78: db:ca:44:f1:e1:a1:9b:cf:3a:e4:41:e1:7d:f0:60: 61:d5:42:8b:54:46:52:7c:ac:64:d5:29:b6:82:87: b9:70:8b:f8:49:59:44:65:f9:fa:1b:2a:29:1f:62: 33:8a:6b:64:ec:5d:51:da:a2:97:4e:92:d0:9c:02: 0e:b1:d9:2d:d4:cc:37:6f:ff:8f:fc:9f:b3:fc:da: 9b:80:a4:7f:4a:89:a5:65:26:13:4c:52:a6:d0:40: 36:69:8f:d1:72:fb:8a:2b:57:ad:3a:46:c2:ac:e4: 2f:78:18:3d:03:56:58:29:53:4d:ed:25:8e:94:74: 48:e0:43:2a:56:66:bb:84:6c:e4:21:75:5a:37:bc: cf:1a:39:a4:a5:3b:96:9d:67:d3:ff:39:6e:35:d6: f7:49:9f:19:ee:9a:bb:5b:51:bb:98:10:53:f4:3f: 0b:d7:c6:69:48:7a:c9:63:59:db:91:aa:04:6b:9a: 4d:02:0a:98:53:99:9e:06:1b:9b:a3:d6:dd:4e:a9: e7:66:d4:ef:80:ac:e4:83:33:05:bc:04:ca:17:d9: a2:b6:4f:8f:44:b3:3e:45:44:37:74:39:15:9c:d6: fd:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:2F:FB:F7:7C:CE:9B:AB:5B:04:AE:56:19:D3:FE:2C:36:8D:55:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3deaf821-f577-36c8-875c-5a1257a54372.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 209.73.132.0/24 209.73.136.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:49:90:89:92:16:c1:d4:d3:7c:a7:aa:68:c7:7e:c6:f3:91: 74:f5:75:8f:e8:07:93:21:2e:fe:d6:ee:19:fb:70:22:0e:dc: 2e:a1:b2:8c:71:37:f6:42:7d:6b:61:d5:b7:3d:f9:1a:ed:40: 3d:31:b0:d5:d6:62:2b:3f:d2:81:6d:fa:2e:51:32:f4:85:aa: 2c:ce:b5:13:6a:61:9e:19:eb:e1:4e:a3:7a:2c:7f:6c:23:78: d1:ad:01:28:84:b7:98:02:50:f9:1c:a6:91:55:2b:bd:d2:af: 4b:03:06:ff:46:fe:13:14:6d:e1:af:e2:89:d6:7d:84:d5:6b: 2f:84:c0:9a:c5:fa:7a:cf:35:60:5d:3a:be:b7:a6:87:ab:12: 4e:ee:8e:d1:5b:c3:93:aa:99:9d:ce:ca:e2:f1:5c:42:02:11: 2b:e2:be:5e:4f:35:3c:c3:83:48:7b:54:7c:92:e5:f6:15:29: e3:31:46:42:90:49:9d:17:4b:27:d1:50:ad:4c:a0:18:bf:21: 4d:f3:88:20:31:a0:63:81:ce:0f:25:e4:80:d3:ff:ed:d3:72: 7e:d4:49:50:27:b0:59:9b:b3:51:99:2f:4a:60:d5:77:85:7e: 7c:ec:1e:a5:d3:59:22:b7:e5:b0:3d:9e:93:03:9f:9d:bb:8a: 71:cb:55:07 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEWq342BCIs4eM0OLIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI0MDQyNTIyNDM1NloXDTI0MDcyNDIyNDM1NlowLzEtMCsGA1UEAxMk YzQwOTVhMDctODRlYy00MTQ4LWJmOTYtNDU2Mjk0NTlmZThjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkesJv3ejL4nr2NLFO7Q5sDebisM+FahaTYzv VHjbykTx4aGbzzrkQeF98GBh1UKLVEZSfKxk1Sm2goe5cIv4SVlEZfn6GyopH2Iz imtk7F1R2qKXTpLQnAIOsdkt1Mw3b/+P/J+z/NqbgKR/SomlZSYTTFKm0EA2aY/R cvuKK1etOkbCrOQveBg9A1ZYKVNN7SWOlHRI4EMqVma7hGzkIXVaN7zPGjmkpTuW nWfT/zluNdb3SZ8Z7pq7W1G7mBBT9D8L18ZpSHrJY1nbkaoEa5pNAgqYU5meBhub o9bdTqnnZtTvgKzkgzMFvATKF9mitk+PRLM+RUQ3dDkVnNb91QIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFMsv+/d8zpurWwSuVhnT/iw2jVVRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvM2RlYWY4MjEtZjU3Ny0z NmM4LTg3NWMtNWExMjU3YTU0MzcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA0UmEAwQB 0UmIMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAD9JkImSFsHU03ynqmjHfsbzkXT1dY/oB5MhLv7W7hn7cCIO 3C6hsoxxN/ZCfWth1bc9+RrtQD0xsNXWYis/0oFt+i5RMvSFqizOtRNqYZ4Z6+FO o3osf2wjeNGtASiEt5gCUPkcppFVK73Sr0sDBv9G/hMUbeGv4onWfYTVay+EwJrF +nrPNWBdOr63poerEk7ujtFbw5OqmZ3OyuLxXEICESvivl5PNTzDg0h7VHyS5fYV KeMxRkKQSZ0XSyfRUK1MoBi/IU3ziCAxoGOBzg8l5IDT/+3Tcn7USVAnsFmbs1GZ L0pg1XeFfnzsHqXTWSK35bA9npMDn527inHLVQc= -----END CERTIFICATE-----Generated at Wed May 29 14:26:47 2024 by rpki-client on console-ams.rpki-client.org