$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/d8aa1099-5a34-38c1-9b0e-befc0326ddc5.roa File: d8aa1099-5a34-38c1-9b0e-befc0326ddc5.roa (raw, json) Hash identifier: 7Z/J6o19esZPpuhZvOL4v7dG1Nd/y6i9rL1XDYqzxUo= Subject key identifier: 68:6F:7C:E4:F7:37:48:01:F1:89:71:B2:DA:70:9C:9F:5B:6A:1B:03 Certificate issuer: /CN=1c5af9e6-5009-44da-bd13-af5c8eb564c3 Certificate serial: 010D0C9F4328584523DAF9081A3C296E7636F480 Authority key identifier: 8A:9D:D2:46:92:3E:4B:35:C2:D0:95:26:1F:09:B1:45:5B:33:9D:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/d8aa1099-5a34-38c1-9b0e-befc0326ddc5.roa Signing time: Fri 08 Mar 2024 14:00:30 +0000 ROA not before: Fri 08 Mar 2024 14:00:30 +0000 ROA not after: Thu 06 Jun 2024 13:00:30 +0000 asID: 13984 IP address blocks: 209.151.196.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:23:da:f9:08:1a:3c:29:6e:76:36:f4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c5af9e6-5009-44da-bd13-af5c8eb564c3 Validity Not Before: Mar 8 14:00:30 2024 GMT Not After : Jun 6 13:00:30 2024 GMT Subject: CN=572f94af-8334-404c-a479-7218c21a8a69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:67:31:bd:91:8a:43:1c:2c:4f:b5:e7:d5:00: e0:c9:8f:38:1f:2a:99:3e:8f:fe:96:30:c0:4c:fa: 49:f0:43:c0:39:e7:03:33:e5:ad:69:9d:c7:40:bd: 25:38:43:00:f8:a9:3a:77:05:c9:6e:1a:b3:3f:e6: b5:fa:c0:32:28:17:a6:f9:9e:31:91:7c:fc:38:5b: fc:2d:bf:0d:11:e1:c8:ef:e0:10:b6:91:ba:50:03: b3:12:98:93:3c:43:0d:b6:bd:19:74:3b:fe:35:c7: 69:58:69:d8:58:e2:c3:18:77:b9:36:ca:a6:99:62: 4a:30:92:9f:8b:a0:dd:67:87:63:81:b7:d7:42:a4: 9c:8c:aa:82:a4:29:93:83:7a:39:68:9c:d2:88:c8: 2d:1e:74:da:4f:98:35:73:e9:60:b0:29:9c:2b:96: b5:01:10:93:02:96:a6:96:12:dd:4b:ea:75:84:60: 90:d9:a9:34:99:87:08:e4:f3:f0:a3:ef:ab:e7:55: dc:14:7a:3e:53:fb:3e:da:33:60:4a:73:e0:94:cf: 8a:44:d6:a9:76:c1:29:81:33:29:7f:14:ae:fb:ac: 27:55:8b:a0:b6:1f:99:ae:f0:9a:a5:0e:d7:c0:a7: 14:aa:73:94:ac:18:95:97:87:d9:fc:e2:40:4f:83: 91:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:6F:7C:E4:F7:37:48:01:F1:89:71:B2:DA:70:9C:9F:5B:6A:1B:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/d8aa1099-5a34-38c1-9b0e-befc0326ddc5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.crl X509v3 Authority Key Identifier: keyid:8A:9D:D2:46:92:3E:4B:35:C2:D0:95:26:1F:09:B1:45:5B:33:9D:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer sbgp-ipAddrBlock: critical IPv4: 209.151.196.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:eb:57:2f:92:39:9c:9c:d8:2b:45:08:43:6a:ee:b0:b0:55: cb:0d:db:5b:f6:df:96:c4:56:07:29:b5:cb:bb:04:e1:c2:fb: 79:1f:ce:80:bd:03:15:3a:46:71:a7:57:e4:05:6f:f9:a4:70: e0:a7:3c:e2:6d:23:ec:86:b1:bf:7f:17:ff:43:f1:4b:dc:ab: 33:c6:2c:31:90:52:09:55:49:3a:9e:90:be:f8:6a:c6:bb:9c: 65:be:b3:fb:25:25:d3:28:a7:76:f9:01:15:db:e9:28:83:27: 66:ac:4b:5b:9a:4e:71:54:7b:e4:3f:52:af:3c:2b:67:ed:cb: 8d:5b:00:7f:4c:fc:00:4d:6c:d8:d8:0b:af:0f:78:dd:3d:9c: 98:e7:c7:7e:a3:54:c3:23:dd:11:bb:76:3e:69:23:ab:0b:f5: 25:0b:8b:32:f1:1b:a1:76:0f:4c:f5:41:de:38:a5:fd:88:05: 4a:a5:bf:05:ef:c6:1b:b5:4e:69:55:75:9a:d2:c6:87:c7:84: 77:50:7c:b7:51:b0:f0:67:48:d4:69:61:5b:b5:71:67:59:41: 1a:36:cc:19:c3:7e:6c:ae:7f:d2:3e:85:66:85:1a:b9:6e:a5: 50:39:59:30:c2:d7:c1:e1:fe:5a:0e:76:83:84:e0:b8:14:ab: 59:1c:bc:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUj2vkIGjwpbnY29IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWM1YWY5ZTYtNTAwOS00NGRhLWJkMTMtYWY1YzhlYjU2 NGMzMB4XDTI0MDMwODE0MDAzMFoXDTI0MDYwNjEzMDAzMFowLzEtMCsGA1UEAxMk NTcyZjk0YWYtODMzNC00MDRjLWE0NzktNzIxOGMyMWE4YTY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlmcxvZGKQxwsT7Xn1QDgyY84HyqZPo/+ljDA TPpJ8EPAOecDM+WtaZ3HQL0lOEMA+Kk6dwXJbhqzP+a1+sAyKBem+Z4xkXz8OFv8 Lb8NEeHI7+AQtpG6UAOzEpiTPEMNtr0ZdDv+NcdpWGnYWOLDGHe5NsqmmWJKMJKf i6DdZ4djgbfXQqScjKqCpCmTg3o5aJzSiMgtHnTaT5g1c+lgsCmcK5a1ARCTApam lhLdS+p1hGCQ2ak0mYcI5PPwo++r51XcFHo+U/s+2jNgSnPglM+KRNapdsEpgTMp fxSu+6wnVYugth+ZrvCapQ7XwKcUqnOUrBiVl4fZ/OJAT4ORCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGhvfOT3N0gB8YlxstpwnJ9bahsDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYzVh ZjllNi01MDA5LTQ0ZGEtYmQxMy1hZjVjOGViNTY0YzMvZDhhYTEwOTktNWEzNC0z OGMxLTliMGUtYmVmYzAzMjZkZGM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWM1YWY5ZTYtNTAwOS00NGRhLWJk MTMtYWY1YzhlYjU2NGMzLzFjNWFmOWU2LTUwMDktNDRkYS1iZDEzLWFmNWM4ZWI1 NjRjMy5jcmwwHwYDVR0jBBgwFoAUip3SRpI+SzXC0JUmHwmxRVsznagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYzVhZjllNi01MDA5LTQ0ZGEtYmQxMy1hZjVj OGViNTY0YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0ZfEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHnrVy+SOZyc2CtFCENq7rCwVcsN21v235bEVgcptcu7BOHC+3kfzoC9 AxU6RnGnV+QFb/mkcOCnPOJtI+yGsb9/F/9D8UvcqzPGLDGQUglVSTqekL74asa7 nGW+s/slJdMop3b5ARXb6SiDJ2asS1uaTnFUe+Q/Uq88K2fty41bAH9M/ABNbNjY C68PeN09nJjnx36jVMMj3RG7dj5pI6sL9SULizLxG6F2D0z1Qd44pf2IBUqlvwXv xhu1TmlVdZrSxofHhHdQfLdRsPBnSNRpYVu1cWdZQRo2zBnDfmyuf9I+hWaFGrlu pVA5WTDC18Hh/loOdoOE4LgUq1kcvAM= -----END CERTIFICATE-----Generated at Mon May 6 01:58:40 2024 by rpki-client on console-ams.rpki-client.org