$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/8d49b5f3-420f-3eb8-b537-40a6e2988035.roa File: 8d49b5f3-420f-3eb8-b537-40a6e2988035.roa (raw, json) Hash identifier: 9O9CMqknnSuCsQISsJgsKKL5whh8qNlAAsdkdeWQTk8= Subject key identifier: 88:EB:DC:86:41:7A:CB:62:15:80:9D:93:5C:1E:F9:0D:5B:9C:92:1E Certificate issuer: /CN=51407cd8-c830-49e6-9db4-7ddac75eb03f Certificate serial: 010D0C9F43285845B3836439A87B763884448D60 Authority key identifier: CB:B5:D5:82:48:AA:4D:D8:D6:8A:85:42:03:C4:A9:BB:89:C6:56:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/8d49b5f3-420f-3eb8-b537-40a6e2988035.roa Signing time: Mon 29 Apr 2024 01:00:25 +0000 ROA not before: Mon 29 Apr 2024 01:00:25 +0000 ROA not after: Sun 28 Jul 2024 01:00:25 +0000 asID: 13213 IP address blocks: 209.95.32.0/20 maxlen: 24 209.95.48.0/23 maxlen: 24 209.95.53.0/24 maxlen: 24 209.95.54.0/23 maxlen: 24 209.95.56.0/24 maxlen: 24 209.95.58.0/23 maxlen: 24 209.95.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 05 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:b3:83:64:39:a8:7b:76:38:84:44:8d:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51407cd8-c830-49e6-9db4-7ddac75eb03f Validity Not Before: Apr 29 01:00:25 2024 GMT Not After : Jul 28 01:00:25 2024 GMT Subject: CN=0793c2ed-56d3-49a7-b51c-20451f390c30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:b4:a3:5a:e2:5f:d6:09:84:cb:4d:9e:40:c9: 62:60:7c:4c:17:4f:67:74:8d:5e:b5:e3:2a:04:22: 04:0c:be:77:2a:c4:9d:17:8e:86:bc:d0:d9:0a:c5: dd:07:7d:f9:f2:d3:af:e5:e1:6c:0d:2a:69:2c:8d: b3:e4:c2:29:e3:11:07:a9:63:5d:d8:bd:d2:ca:02: 1a:68:b7:dd:70:19:6a:4c:15:ab:12:27:17:a4:7d: 17:12:40:c4:ac:03:fc:d9:4d:47:7d:1d:8e:e1:77: 56:ff:f9:b3:b7:81:ba:6e:d2:0b:fc:f8:f6:d5:10: 42:62:b2:88:a7:8b:4d:d4:94:20:66:e5:bc:db:87: 67:50:4a:90:db:24:ac:03:84:8c:a0:c8:02:d8:d4: 4a:6a:e8:84:8f:57:e0:a7:d4:99:b2:70:4e:53:be: dd:1f:a5:4b:6d:a1:0f:c8:77:5d:0e:4b:12:a5:a7: 28:61:c4:14:48:71:48:94:95:96:3e:4b:d8:97:21: 20:4b:74:03:6a:cd:5e:95:3f:ca:e2:7e:30:7f:76: 6d:bf:e5:71:3e:d4:d7:64:d2:99:b2:c3:4d:b2:e6: 23:11:1e:12:75:2e:e4:92:55:9b:17:75:21:b8:57: 2e:8a:40:af:fe:f6:27:06:4a:3f:ab:41:f7:9e:86: 3b:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:EB:DC:86:41:7A:CB:62:15:80:9D:93:5C:1E:F9:0D:5B:9C:92:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/8d49b5f3-420f-3eb8-b537-40a6e2988035.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.crl X509v3 Authority Key Identifier: keyid:CB:B5:D5:82:48:AA:4D:D8:D6:8A:85:42:03:C4:A9:BB:89:C6:56:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer sbgp-ipAddrBlock: critical IPv4: 209.95.32.0-209.95.49.255 209.95.53.0-209.95.56.255 209.95.58.0/23 209.95.61.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:9b:69:67:8c:e0:84:32:d7:b7:c0:09:98:d9:ac:98:de:48: b9:86:6b:39:57:87:50:3a:10:85:4b:a0:c4:dd:3d:1c:06:5c: 65:46:6b:5f:f9:87:ae:44:1f:56:0d:bc:fc:8e:eb:a4:81:23: 8a:18:10:04:43:95:1c:f5:68:76:34:24:99:01:39:d8:fc:4a: 49:be:4c:d6:49:ee:2f:a8:1d:8d:ca:f6:1c:3f:25:5d:1a:34: e4:94:41:8f:4c:f4:65:70:a0:46:6d:a8:01:65:ff:a6:c7:3f: 14:6b:38:39:f7:c4:bc:d2:ea:1b:51:1a:df:52:58:11:9e:4f: e7:f0:8e:af:77:26:2c:41:c4:08:2f:82:91:86:24:b0:b1:80: dc:c2:8e:91:fc:4d:c4:27:7f:44:78:f7:03:4b:3f:77:e3:7c: 96:7f:1c:be:6b:76:ca:5e:2d:f3:7f:57:23:28:90:a5:9a:a1: 4c:d8:fe:f7:48:35:92:aa:12:b1:5f:87:13:88:de:1d:14:06: 25:5e:d0:31:bf:53:2d:3c:d6:d0:f6:5f:49:52:c1:a7:22:72: f4:ef:58:46:c5:7c:45:f3:98:82:bb:97:19:be:03:9f:64:9e: 5c:21:59:8e:a8:39:a1:5b:b2:3f:49:df:86:1b:d0:91:ac:24: c5:3e:3c:af -----BEGIN CERTIFICATE----- MIIGZTCCBU2gAwIBAgIUAQ0Mn0MoWEWzg2Q5qHt2OIREjWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTE0MDdjZDgtYzgzMC00OWU2LTlkYjQtN2RkYWM3NWVi MDNmMB4XDTI0MDQyOTAxMDAyNVoXDTI0MDcyODAxMDAyNVowLzEtMCsGA1UEAxMk MDc5M2MyZWQtNTZkMy00OWE3LWI1MWMtMjA0NTFmMzkwYzMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkLSjWuJf1gmEy02eQMliYHxMF09ndI1eteMq BCIEDL53KsSdF46GvNDZCsXdB3358tOv5eFsDSppLI2z5MIp4xEHqWNd2L3SygIa aLfdcBlqTBWrEicXpH0XEkDErAP82U1HfR2O4XdW//mzt4G6btIL/Pj21RBCYrKI p4tN1JQgZuW824dnUEqQ2ySsA4SMoMgC2NRKauiEj1fgp9SZsnBOU77dH6VLbaEP yHddDksSpacoYcQUSHFIlJWWPkvYlyEgS3QDas1elT/K4n4wf3Ztv+VxPtTXZNKZ ssNNsuYjER4SdS7kklWbF3UhuFcuikCv/vYnBko/q0H3noY7QQIDAQABo4IDdzCC A3MwHQYDVR0OBBYEFIjr3IZBestiFYCdk1we+Q1bnJIeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81MTQw N2NkOC1jODMwLTQ5ZTYtOWRiNC03ZGRhYzc1ZWIwM2YvOGQ0OWI1ZjMtNDIwZi0z ZWI4LWI1MzctNDBhNmUyOTg4MDM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNTE0MDdjZDgtYzgzMC00OWU2LTlk YjQtN2RkYWM3NWViMDNmLzUxNDA3Y2Q4LWM4MzAtNDllNi05ZGI0LTdkZGFjNzVl YjAzZi5jcmwwHwYDVR0jBBgwFoAUy7XVgkiqTdjWioVCA8Spu4nGVq4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC81MTQwN2NkOC1jODMwLTQ5ZTYtOWRiNC03ZGRh Yzc1ZWIwM2YuY2VyMEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAATAoMAwDBAXRXyAD BAHRXzAwDAMEANFfNQMEANFfOAMEAdFfOgMEANFfPTBUBgNVHSABAf8ESjBIMEYG CCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jl c291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAnm2lnjOCE Mte3wAmY2ayY3ki5hms5V4dQOhCFS6DE3T0cBlxlRmtf+YeuRB9WDbz8juukgSOK GBAEQ5Uc9Wh2NCSZATnY/EpJvkzWSe4vqB2NyvYcPyVdGjTklEGPTPRlcKBGbagB Zf+mxz8Uazg598S80uobURrfUlgRnk/n8I6vdyYsQcQIL4KRhiSwsYDcwo6R/E3E J39EePcDSz9343yWfxy+a3bKXi3zf1cjKJClmqFM2P73SDWSqhKxX4cTiN4dFAYl XtAxv1MtPNbQ9l9JUsGnInL071hGxXxF85iCu5cZvgOfZJ5cIVmOqDmhW7I/Sd+G G9CRrCTFPjyv -----END CERTIFICATE-----Generated at Thu May 2 14:57:41 2024 by rpki-client on console-ams.rpki-client.org