$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/84d8ae1b-a2b3-35b1-a4e5-7546b59cc588.roa File: 84d8ae1b-a2b3-35b1-a4e5-7546b59cc588.roa (raw, json) Hash identifier: fTTbDZ5UxDE1Rw9xkfJg56pgnmoDrE5Cn/G2yeKCdYw= Subject key identifier: 29:ED:17:BD:D4:B4:A4:99:0E:F9:21:D3:A6:B3:6A:1D:9C:47:0A:1F Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285845347D4925EEBC3E3F880FA400 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/84d8ae1b-a2b3-35b1-a4e5-7546b59cc588.roa Signing time: Thu 14 Mar 2024 13:00:30 +0000 ROA not before: Thu 14 Mar 2024 13:00:30 +0000 ROA not after: Wed 12 Jun 2024 13:00:30 +0000 asID: 7861 IP address blocks: 209.29.242.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:34:7d:49:25:ee:bc:3e:3f:88:0f:a4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Mar 14 13:00:30 2024 GMT Not After : Jun 12 13:00:30 2024 GMT Subject: CN=30d7e2f8-9ed3-48e3-804d-bf3ad6f4651e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:dd:6d:2f:d8:fd:e9:65:67:7c:74:dc:0f:41: 9e:d4:99:8f:02:64:ed:b4:15:0d:ad:6d:95:55:93: 83:a0:c9:70:ad:2f:23:89:95:13:13:12:71:88:1a: 1a:82:f7:52:32:20:e4:d8:95:9b:fd:7e:e2:8b:b4: 0e:31:cb:46:ec:80:2f:5b:3a:60:fa:d4:aa:71:83: 2c:6d:ef:2f:d4:ee:62:58:f6:76:51:ad:f5:78:7a: 40:7e:ea:63:b6:1f:aa:80:a6:2d:d9:68:02:70:df: f6:6f:dd:2d:a1:68:05:db:96:54:69:f8:51:78:16: 40:ab:1c:d5:5b:fc:f4:8c:ae:1c:5d:71:f5:43:eb: 30:27:93:2b:1d:a6:73:27:e3:05:ec:f0:3c:8b:48: 70:9a:ed:00:64:83:f5:75:01:86:ea:8b:3e:c6:ce: 67:33:1f:f4:67:b6:23:44:ef:81:5b:34:77:d5:9e: b3:0e:67:de:55:08:ba:3b:cb:88:99:00:1e:ea:50: de:0f:b0:01:bf:da:a0:b6:83:22:4d:28:58:90:4c: 14:32:1e:e3:68:e1:b4:dd:b4:ae:26:24:69:e5:b2: ab:b2:0c:bf:92:43:e4:fb:c2:fc:3e:90:16:52:b7: 19:eb:e9:0f:ee:6d:34:84:6e:07:5b:f8:9f:49:bd: 37:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:ED:17:BD:D4:B4:A4:99:0E:F9:21:D3:A6:B3:6A:1D:9C:47:0A:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/84d8ae1b-a2b3-35b1-a4e5-7546b59cc588.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.29.242.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:c0:c1:38:e6:94:c6:fa:2b:ba:7d:dd:26:9a:42:d3:43:fc: 99:cd:fd:ca:6a:2e:63:84:fc:96:9c:cc:ae:16:06:9c:9b:78: 6f:58:b1:64:db:6e:74:a0:ab:d8:57:53:3a:00:0d:de:4a:fc: ae:12:47:33:11:14:1f:d8:bc:b3:b4:64:6b:5b:01:a1:f8:18: 82:6a:0d:14:28:78:2f:71:ce:26:b3:14:00:fc:a4:d5:32:b4: f9:08:57:4b:29:85:d7:de:28:33:38:c7:ba:6a:3a:bc:dc:5d: aa:0b:0c:ef:49:49:55:72:f0:76:a9:af:4c:e7:dc:63:d7:c2: 98:84:00:36:99:09:5e:9b:e0:7e:a3:a5:dc:89:17:ae:34:b2: 0e:62:2e:a1:4f:79:fe:c9:ba:1e:91:dc:82:ec:a1:51:35:d8: b4:c5:a1:3b:42:b5:1c:39:ef:7c:da:25:2f:69:4f:0d:c1:1c: 8e:c9:50:c4:7a:2b:84:34:da:af:b4:42:b2:7c:49:65:9f:c5: e1:43:75:ab:dd:32:7a:b9:70:d8:f7:f6:27:e4:2c:d3:9b:d4: 68:01:87:ca:f1:86:30:26:79:aa:21:d2:4f:05:1e:34:dd:bd: 7e:8d:21:49:b1:da:0e:eb:e3:56:c3:f4:34:04:21:cb:8d:ae: 93:30:ea:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEU0fUkl7rw+P4gPpAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI0MDMxNDEzMDAzMFoXDTI0MDYxMjEzMDAzMFowLzEtMCsGA1UEAxMk MzBkN2UyZjgtOWVkMy00OGUzLTgwNGQtYmYzYWQ2ZjQ2NTFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnN1tL9j96WVnfHTcD0Ge1JmPAmTttBUNrW2V VZODoMlwrS8jiZUTExJxiBoagvdSMiDk2JWb/X7ii7QOMctG7IAvWzpg+tSqcYMs be8v1O5iWPZ2Ua31eHpAfupjth+qgKYt2WgCcN/2b90toWgF25ZUafhReBZAqxzV W/z0jK4cXXH1Q+swJ5MrHaZzJ+MF7PA8i0hwmu0AZIP1dQGG6os+xs5nMx/0Z7Yj RO+BWzR31Z6zDmfeVQi6O8uImQAe6lDeD7ABv9qgtoMiTShYkEwUMh7jaOG03bSu JiRp5bKrsgy/kkPk+8L8PpAWUrcZ6+kP7m00hG4HW/ifSb03bwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCntF73UtKSZDvkh06azah2cRwofMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvODRkOGFlMWItYTJiMy0z NWIxLWE0ZTUtNzU0NmI1OWNjNTg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0R3yMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKzAwTjmlMb6K7p93SaaQtND/JnN/cpqLmOE/JaczK4WBpybeG9YsWTb bnSgq9hXUzoADd5K/K4SRzMRFB/YvLO0ZGtbAaH4GIJqDRQoeC9xziazFAD8pNUy tPkIV0sphdfeKDM4x7pqOrzcXaoLDO9JSVVy8Hapr0zn3GPXwpiEADaZCV6b4H6j pdyJF640sg5iLqFPef7Juh6R3ILsoVE12LTFoTtCtRw573zaJS9pTw3BHI7JUMR6 K4Q02q+0QrJ8SWWfxeFDdavdMnq5cNj39ifkLNOb1GgBh8rxhjAmeaoh0k8FHjTd vX6NIUmx2g7r41bD9DQEIcuNrpMw6qo= -----END CERTIFICATE-----Generated at Sat May 18 16:11:00 2024 by rpki-client on console-ams.rpki-client.org