$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/86e89e9e-9f96-3bd0-b941-f47f1e4bba82.roa File: 86e89e9e-9f96-3bd0-b941-f47f1e4bba82.roa (raw, json) Hash identifier: mgG1REjhZ91VeHYcjce7gDAFA9tFtJp5PFEkwG/94zU= Subject key identifier: E8:F9:57:84:6A:A1:DE:A3:60:F4:DC:E6:F8:17:DA:3A:28:46:59:E4 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F432858452EE7E88DD1637E2BC3022200 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/86e89e9e-9f96-3bd0-b941-f47f1e4bba82.roa Signing time: Tue 12 Mar 2024 13:00:28 +0000 ROA not before: Tue 12 Mar 2024 13:00:28 +0000 ROA not after: Mon 10 Jun 2024 13:00:28 +0000 asID: 15247 IP address blocks: 209.53.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 27 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:2e:e7:e8:8d:d1:63:7e:2b:c3:02:22:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Mar 12 13:00:28 2024 GMT Not After : Jun 10 13:00:28 2024 GMT Subject: CN=75d9af77-a218-4459-934a-e9adf8270b9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:dc:77:05:04:f6:67:2c:bb:43:e6:c4:5a:ba: 61:43:30:05:cd:bf:55:b2:6d:f6:e2:a4:48:73:f2: 7b:b7:86:4b:84:84:75:a7:97:b9:88:a5:0c:d2:65: b1:81:3a:69:f0:18:fd:5f:81:0f:eb:81:0e:59:bc: b6:bc:26:f5:7d:d7:ff:2f:7b:49:fd:25:40:7d:d4: 70:71:e0:11:87:04:50:27:11:32:f6:d4:72:f3:20: 8a:c2:ee:31:5f:35:43:a9:45:a1:03:64:c1:08:55: 24:95:1e:e3:a0:d1:ef:36:7b:4c:99:60:32:cf:16: cd:a1:9d:7f:4f:40:6d:cd:fc:db:9b:06:a2:ee:7d: 85:fe:2f:a4:01:ed:bf:41:08:0d:33:93:8c:17:d1: 0f:13:2b:79:21:13:d9:d3:38:00:3b:a4:02:22:04: 7e:ed:e8:11:18:90:68:50:21:d8:f3:20:d9:f4:7e: 01:51:a8:d7:82:b1:6b:55:7e:bf:dc:7f:f0:21:09: d1:9f:88:1d:41:af:54:60:df:d7:11:b5:38:2e:d7: 9d:3f:83:05:cf:72:84:85:a8:de:26:75:ce:89:0f: e8:57:5f:9f:48:f1:88:f9:42:7d:97:0e:59:78:9c: 58:d1:a1:86:0d:67:92:13:b7:b8:c9:b8:ef:32:4b: b9:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:F9:57:84:6A:A1:DE:A3:60:F4:DC:E6:F8:17:DA:3A:28:46:59:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/86e89e9e-9f96-3bd0-b941-f47f1e4bba82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.53.169.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bb:a1:df:72:e2:1d:f8:5e:79:bb:ba:eb:ff:1a:55:df:46:1a: b4:0f:a9:dd:f8:56:f7:f6:55:4c:e8:6b:51:44:19:79:10:d9: ff:47:29:cd:24:45:b1:7c:82:a7:ba:ef:1f:1c:c8:fd:a9:96: eb:78:c7:31:eb:02:aa:86:c8:dc:b0:41:64:c0:0c:b5:a3:47: 2e:7d:5c:d4:0d:06:50:7f:9e:81:a8:b1:ac:f7:b6:30:8c:11: 3d:65:80:32:70:55:84:0c:b3:ff:43:10:fd:7b:db:a4:3f:0d: 6f:00:80:2b:82:f0:7a:e8:de:53:0f:cd:b6:8d:89:d5:93:40: cb:58:2c:db:ee:25:39:f6:ce:41:6d:59:82:8a:52:ac:ea:83: e1:48:b0:c3:69:d0:c9:60:2a:57:dd:ad:30:92:b5:a8:23:2b: 26:dc:18:96:30:e4:0d:77:ed:a5:5e:76:b2:64:86:26:24:1e: a0:cb:7e:02:c0:17:08:03:01:c1:60:23:f9:a7:f9:b2:83:cd: 03:24:1d:f8:d8:bd:27:26:fd:a2:95:b7:4e:d2:75:88:cb:9f: e1:73:e5:12:6e:7a:58:38:e8:3c:53:67:21:7b:4d:b7:aa:3c: ed:f7:94:c8:81:d6:19:60:3b:df:de:45:fb:dc:c9:e4:09:78: 70:a8:48:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUu5+iN0WN+K8MCIgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI0MDMxMjEzMDAyOFoXDTI0MDYxMDEzMDAyOFowLzEtMCsGA1UEAxMk NzVkOWFmNzctYTIxOC00NDU5LTkzNGEtZTlhZGY4MjcwYjlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9x3BQT2Zyy7Q+bEWrphQzAFzb9Vsm324qRI c/J7t4ZLhIR1p5e5iKUM0mWxgTpp8Bj9X4EP64EOWby2vCb1fdf/L3tJ/SVAfdRw ceARhwRQJxEy9tRy8yCKwu4xXzVDqUWhA2TBCFUklR7joNHvNntMmWAyzxbNoZ1/ T0Btzfzbmwai7n2F/i+kAe2/QQgNM5OMF9EPEyt5IRPZ0zgAO6QCIgR+7egRGJBo UCHY8yDZ9H4BUajXgrFrVX6/3H/wIQnRn4gdQa9UYN/XEbU4LtedP4MFz3KEhaje JnXOiQ/oV1+fSPGI+UJ9lw5ZeJxY0aGGDWeSE7e4ybjvMku5+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOj5V4Rqod6jYPTc5vgX2jooRlnkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvODZlODllOWUtOWY5Ni0z YmQwLWI5NDEtZjQ3ZjFlNGJiYTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TWpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALuh33LiHfheebu66/8aVd9GGrQPqd34Vvf2VUzoa1FEGXkQ2f9HKc0k RbF8gqe67x8cyP2plut4xzHrAqqGyNywQWTADLWjRy59XNQNBlB/noGosaz3tjCM ET1lgDJwVYQMs/9DEP1726Q/DW8AgCuC8Hro3lMPzbaNidWTQMtYLNvuJTn2zkFt WYKKUqzqg+FIsMNp0MlgKlfdrTCStagjKybcGJYw5A137aVedrJkhiYkHqDLfgLA FwgDAcFgI/mn+bKDzQMkHfjYvScm/aKVt07SdYjLn+Fz5RJuelg46DxTZyF7Tbeq PO33lMiB1hlgO9/eRfvcyeQJeHCoSOc= -----END CERTIFICATE-----Generated at Sun May 26 01:35:32 2024 by rpki-client on console-fra.rpki-client.org