$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2baa63e3-2bdd-397e-83e3-1a73a6edbebd.roa File: 2baa63e3-2bdd-397e-83e3-1a73a6edbebd.roa (raw, json) Hash identifier: zovUEvKYXBVrM6JYca+fypiTqrUPt36DL6fl8dg4vsY= Subject key identifier: AE:2F:68:EC:16:4F:29:C5:70:02:24:12:76:F8:F3:3E:D1:6C:1E:45 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F432858453317E8065BA147A577CB2600 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2baa63e3-2bdd-397e-83e3-1a73a6edbebd.roa Signing time: Thu 14 Mar 2024 01:00:25 +0000 ROA not before: Thu 14 Mar 2024 01:00:25 +0000 ROA not after: Wed 12 Jun 2024 01:00:25 +0000 asID: 7861 IP address blocks: 209.29.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:33:17:e8:06:5b:a1:47:a5:77:cb:26:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Mar 14 01:00:25 2024 GMT Not After : Jun 12 01:00:25 2024 GMT Subject: CN=9caa25dc-3132-4d18-b9a5-2e72a502a085 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:c7:40:73:27:ce:ac:f6:68:af:17:25:4d:53: 5f:d4:73:4c:03:5f:af:96:63:02:19:10:c1:9d:0d: ed:fc:fe:60:40:e7:2c:9e:ce:aa:48:fe:52:fb:e0: a7:64:b5:35:99:32:62:2e:ad:67:6a:74:a3:2c:50: fc:cb:2f:2b:83:99:5a:83:5f:7b:a3:df:a4:c7:c0: 7b:fa:52:32:f1:c3:14:ac:20:65:92:30:1d:2c:a0: 73:df:b8:1d:fc:95:c6:3d:3f:70:a2:f3:ec:9a:2a: 75:29:34:1d:e6:47:db:62:60:78:27:d8:29:e0:f3: 51:97:ad:8b:40:61:c9:7d:86:e4:20:3f:bb:cc:14: 8f:fb:d6:54:5b:79:0d:14:4e:d3:8c:89:ac:8c:9a: f9:af:18:5f:e9:45:5d:ae:42:20:89:e1:56:ee:67: c0:f8:a3:10:71:3d:ea:cb:dd:f4:d8:61:db:9f:16: ef:5d:92:57:6f:82:aa:ba:e6:13:6f:b7:d5:4c:bc: 80:a2:ac:33:f9:d4:30:81:c6:51:7f:b5:2f:c8:af: ba:f1:bc:ec:79:88:bd:f6:45:fb:53:d5:df:e0:d9: 13:7d:2b:1b:33:da:a3:0b:bb:89:cb:c4:f3:9c:54: db:1d:88:dc:35:d1:0c:89:4a:72:ca:e0:e8:52:64: 90:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:2F:68:EC:16:4F:29:C5:70:02:24:12:76:F8:F3:3E:D1:6C:1E:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2baa63e3-2bdd-397e-83e3-1a73a6edbebd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.29.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:15:e9:80:25:b9:d5:ba:81:a2:3f:1d:95:ad:0f:30:18:7e: 61:13:c7:75:07:a6:a3:04:9d:d3:20:9a:81:79:67:ba:ae:7c: 0a:63:3e:f6:a0:46:c9:27:93:cb:8b:25:03:12:ef:9e:a3:00: e0:0f:80:93:b1:4b:0d:50:16:70:44:8b:a2:a8:db:5e:b0:e6: c5:96:03:61:a9:66:bb:e3:71:8e:86:6b:f9:33:31:a8:14:b7: 2e:60:f8:5b:17:d5:35:2a:a5:21:9a:bc:24:db:4d:b5:d7:1d: 4b:31:32:6c:8a:c8:c7:62:32:86:2a:4d:8a:ac:c6:fb:59:76: f0:99:c3:d2:5c:17:c1:05:35:39:f3:fe:a8:62:f4:a1:a7:9a: c0:90:91:4c:e3:fe:1e:c0:44:ec:6b:40:1f:8d:09:7a:18:96: 90:a3:21:f2:17:35:04:bd:91:38:65:c3:b7:29:0c:69:fc:b3: 3e:24:70:0e:65:ea:c1:7a:09:6c:74:0e:91:11:be:69:a8:53: f6:8a:50:84:d1:5a:fb:27:6e:bf:8a:78:58:0c:93:0f:73:b2: 8f:68:15:a9:8d:57:0c:bd:fd:2a:5a:c9:68:a8:37:3e:10:11: 40:f7:42:db:bc:59:11:5d:7e:e7:8c:22:66:04:f8:e5:6e:6b: 77:f0:7a:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUzF+gGW6FHpXfLJgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI0MDMxNDAxMDAyNVoXDTI0MDYxMjAxMDAyNVowLzEtMCsGA1UEAxMk OWNhYTI1ZGMtMzEzMi00ZDE4LWI5YTUtMmU3MmE1MDJhMDg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA38dAcyfOrPZorxclTVNf1HNMA1+vlmMCGRDB nQ3t/P5gQOcsns6qSP5S++CnZLU1mTJiLq1nanSjLFD8yy8rg5lag197o9+kx8B7 +lIy8cMUrCBlkjAdLKBz37gd/JXGPT9wovPsmip1KTQd5kfbYmB4J9gp4PNRl62L QGHJfYbkID+7zBSP+9ZUW3kNFE7TjImsjJr5rxhf6UVdrkIgieFW7mfA+KMQcT3q y9302GHbnxbvXZJXb4KquuYTb7fVTLyAoqwz+dQwgcZRf7UvyK+68bzseYi99kX7 U9Xf4NkTfSsbM9qjC7uJy8TznFTbHYjcNdEMiUpyyuDoUmSQIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK4vaOwWTynFcAIkEnb48z7RbB5FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMmJhYTYzZTMtMmJkZC0z OTdlLTgzZTMtMWE3M2E2ZWRiZWJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0R2NMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALMV6YAludW6gaI/HZWtDzAYfmETx3UHpqMEndMgmoF5Z7qufApjPvag Rsknk8uLJQMS756jAOAPgJOxSw1QFnBEi6Ko216w5sWWA2GpZrvjcY6Ga/kzMagU ty5g+FsX1TUqpSGavCTbTbXXHUsxMmyKyMdiMoYqTYqsxvtZdvCZw9JcF8EFNTnz /qhi9KGnmsCQkUzj/h7AROxrQB+NCXoYlpCjIfIXNQS9kThlw7cpDGn8sz4kcA5l 6sF6CWx0DpERvmmoU/aKUITRWvsnbr+KeFgMkw9zso9oFamNVwy9/SpayWioNz4Q EUD3Qtu8WRFdfueMImYE+OVua3fwes0= -----END CERTIFICATE-----Generated at Sat May 18 15:36:27 2024 by rpki-client on console-fra.rpki-client.org