$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/829d195a-d541-4371-970d-5be56cd489a8/02a7113f-414f-366e-ba5e-590e520c170c.roa File: 02a7113f-414f-366e-ba5e-590e520c170c.roa (raw, json) Hash identifier: iZH9FXqIoXiCfEYgG9BboD6y0Z7r+cVYF2KwZ6vKYuk= Subject key identifier: 7E:B1:37:5E:94:A4:24:DF:BB:EA:56:29:86:53:8C:A3:1F:8A:CB:59 Certificate issuer: /CN=829d195a-d541-4371-970d-5be56cd489a8 Certificate serial: 010D0C9F4328584511B590A3BA8B377A5D769500 Authority key identifier: C7:71:2A:18:24:84:EF:6E:8E:F0:83:87:1C:48:6E:34:B1:E9:98:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/829d195a-d541-4371-970d-5be56cd489a8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/829d195a-d541-4371-970d-5be56cd489a8/02a7113f-414f-366e-ba5e-590e520c170c.roa Signing time: Sat 02 Mar 2024 02:00:26 +0000 ROA not before: Sat 02 Mar 2024 02:00:26 +0000 ROA not after: Fri 31 May 2024 01:00:26 +0000 asID: 46892 IP address blocks: 209.127.248.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/829d195a-d541-4371-970d-5be56cd489a8/829d195a-d541-4371-970d-5be56cd489a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/829d195a-d541-4371-970d-5be56cd489a8/829d195a-d541-4371-970d-5be56cd489a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/829d195a-d541-4371-970d-5be56cd489a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:11:b5:90:a3:ba:8b:37:7a:5d:76:95:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=829d195a-d541-4371-970d-5be56cd489a8 Validity Not Before: Mar 2 02:00:26 2024 GMT Not After : May 31 01:00:26 2024 GMT Subject: CN=1e8c9851-e6a0-47e7-857e-285155230f4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:78:e6:c3:6e:ba:dc:59:63:c7:88:06:fd:5f: 14:e9:a0:c3:d7:43:57:a5:ad:e5:0c:58:45:a1:60: 9b:b0:43:64:7c:af:07:5d:bf:cc:f0:37:8f:bf:35: f1:25:54:f2:0c:b2:13:06:44:88:8d:a8:f8:92:51: ef:3f:a9:28:d1:be:04:02:53:d4:a3:e8:4c:ec:f0: d4:f9:84:3f:1c:7f:62:96:01:47:9d:0a:e9:46:e3: 0f:70:dc:e0:01:d9:3a:4d:4c:f3:36:df:95:f2:95: 8c:b2:7d:6a:56:a7:6b:97:a4:c6:5f:15:93:bf:33: f2:84:d4:d2:23:e4:df:1c:f9:20:15:c3:e3:d1:5f: f7:53:b3:85:44:0f:00:92:a3:31:79:4b:e8:af:60: 48:57:e8:c1:49:4b:9a:9e:bc:c5:92:47:89:ad:75: 2c:92:92:d7:d7:9c:80:37:30:68:7b:45:d4:a7:f0: f4:95:5d:8f:23:01:c9:72:33:8d:dc:15:da:f1:2d: 79:02:45:d4:7a:5d:a4:8d:48:6a:7e:5a:50:4f:91: 95:be:56:08:9c:d0:4d:d7:91:e6:47:10:20:60:98: f4:2d:99:87:05:38:92:26:6f:09:d8:da:d6:6a:f1: a5:c0:7a:6e:a1:99:e4:ca:2d:5e:50:b2:48:41:c0: ef:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:B1:37:5E:94:A4:24:DF:BB:EA:56:29:86:53:8C:A3:1F:8A:CB:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/829d195a-d541-4371-970d-5be56cd489a8/02a7113f-414f-366e-ba5e-590e520c170c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/829d195a-d541-4371-970d-5be56cd489a8/829d195a-d541-4371-970d-5be56cd489a8.crl X509v3 Authority Key Identifier: keyid:C7:71:2A:18:24:84:EF:6E:8E:F0:83:87:1C:48:6E:34:B1:E9:98:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/829d195a-d541-4371-970d-5be56cd489a8.cer sbgp-ipAddrBlock: critical IPv4: 209.127.248.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:cf:2c:2e:37:34:cf:60:24:21:9b:76:75:0b:cc:75:68:b1: 7d:00:36:f2:71:85:cc:15:5e:1e:6f:50:0e:60:dc:20:40:79: 62:6e:42:51:36:e8:db:a2:cf:4f:80:9a:96:41:d9:33:25:93: fa:ca:1d:6f:33:97:2c:34:9e:fb:36:56:ad:de:30:5c:26:7d: d4:80:cb:a5:af:5d:fa:7f:b0:8c:84:bc:4c:1d:8d:10:3a:f6: 2d:b5:06:25:11:68:8c:2a:fd:c1:56:b8:90:53:71:15:26:aa: be:4e:b4:f6:e7:fd:ce:56:c9:da:ca:ba:d3:5a:d8:c2:9f:8a: d0:b4:0b:41:dd:17:84:72:6b:24:bf:46:1f:df:27:0d:8c:41: 69:ea:90:9b:c0:78:35:ca:db:10:0a:53:ac:93:08:23:de:82: 6b:d5:ce:47:b7:7a:11:1d:b9:b1:e7:ce:8f:e8:ef:b1:a1:38: 7d:2c:fe:4d:f0:42:83:09:70:49:57:f7:6a:3b:df:d2:ef:01: b3:3f:c2:de:7e:68:4f:55:32:1b:33:37:75:ac:fa:3b:3f:96: 16:66:7b:dc:92:92:f3:a9:74:49:d7:c7:0d:34:cd:42:87:0e: 91:1a:2f:90:02:48:a7:8d:c4:2a:ae:39:92:3b:79:45:29:fd: 80:00:d4:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEURtZCjuos3el12lQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODI5ZDE5NWEtZDU0MS00MzcxLTk3MGQtNWJlNTZjZDQ4 OWE4MB4XDTI0MDMwMjAyMDAyNloXDTI0MDUzMTAxMDAyNlowLzEtMCsGA1UEAxMk MWU4Yzk4NTEtZTZhMC00N2U3LTg1N2UtMjg1MTU1MjMwZjRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHjmw2663Fljx4gG/V8U6aDD10NXpa3lDFhF oWCbsENkfK8HXb/M8DePvzXxJVTyDLITBkSIjaj4klHvP6ko0b4EAlPUo+hM7PDU +YQ/HH9ilgFHnQrpRuMPcNzgAdk6TUzzNt+V8pWMsn1qVqdrl6TGXxWTvzPyhNTS I+TfHPkgFcPj0V/3U7OFRA8AkqMxeUvor2BIV+jBSUuanrzFkkeJrXUskpLX15yA NzBoe0XUp/D0lV2PIwHJcjON3BXa8S15AkXUel2kjUhqflpQT5GVvlYInNBN15Hm RxAgYJj0LZmHBTiSJm8J2NrWavGlwHpuoZnkyi1eULJIQcDvuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH6xN16UpCTfu+pWKYZTjKMfistZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84Mjlk MTk1YS1kNTQxLTQzNzEtOTcwZC01YmU1NmNkNDg5YTgvMDJhNzExM2YtNDE0Zi0z NjZlLWJhNWUtNTkwZTUyMGMxNzBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODI5ZDE5NWEtZDU0MS00MzcxLTk3 MGQtNWJlNTZjZDQ4OWE4LzgyOWQxOTVhLWQ1NDEtNDM3MS05NzBkLTViZTU2Y2Q0 ODlhOC5jcmwwHwYDVR0jBBgwFoAUx3EqGCSE726O8IOHHEhuNLHpmBIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MjlkMTk1YS1kNTQxLTQzNzEtOTcwZC01YmU1 NmNkNDg5YTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0X/4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD/PLC43NM9gJCGbdnULzHVosX0ANvJxhcwVXh5vUA5g3CBAeWJuQlE2 6Nuiz0+AmpZB2TMlk/rKHW8zlyw0nvs2Vq3eMFwmfdSAy6WvXfp/sIyEvEwdjRA6 9i21BiURaIwq/cFWuJBTcRUmqr5OtPbn/c5WydrKutNa2MKfitC0C0HdF4RyayS/ Rh/fJw2MQWnqkJvAeDXK2xAKU6yTCCPegmvVzke3ehEdubHnzo/o77GhOH0s/k3w QoMJcElX92o739LvAbM/wt5+aE9VMhszN3Ws+js/lhZme9ySkvOpdEnXxw00zUKH DpEaL5ACSKeNxCquOZI7eUUp/YAA1JE= -----END CERTIFICATE-----Generated at Mon May 13 14:39:00 2024 by rpki-client on console-ams.rpki-client.org