$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/0475b828-a277-3eeb-8b05-22e0f1e69824.roa File: 0475b828-a277-3eeb-8b05-22e0f1e69824.roa (raw, json) Hash identifier: SL3YjwwDn1MrQEHAIQF3T17O0QOzsx5zuBiniQilRm4= Subject key identifier: 08:13:4D:64:BD:28:E4:D2:FE:FE:19:7B:D4:68:32:43:0F:2E:ED:BB Certificate issuer: /CN=6d91ccc1-4217-4cde-9687-260a5f00361b Certificate serial: 010D0C9F43285841E46CAF4B21D63B15BD2F9B40 Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/0475b828-a277-3eeb-8b05-22e0f1e69824.roa Signing time: Mon 15 May 2023 18:21:01 +0000 ROA not before: Mon 15 May 2023 18:21:01 +0000 ROA not after: Tue 01 Aug 2023 10:36:46 +0000 asID: 8100 IP address blocks: 209.20.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 May 2023 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:41:e4:6c:af:4b:21:d6:3b:15:bd:2f:9b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b Validity Not Before: May 15 18:21:01 2023 GMT Not After : Aug 1 10:36:46 2023 GMT Subject: CN=543117ac-98af-4379-a761-d125a53a12d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:31:8a:fa:7d:f3:83:b2:4a:7d:e9:aa:b6:78: 78:e3:4a:af:b9:b4:cb:e5:f5:b5:24:9d:81:db:67: 37:9f:47:00:0e:8a:16:72:cf:65:9a:3a:b6:4f:33: 6f:31:7f:24:2c:20:1e:e1:c6:69:6a:53:2d:ed:89: 0f:28:25:06:d5:98:6e:d6:22:89:f7:93:b0:7d:b8: 58:cf:82:bb:cf:5d:ec:2a:70:39:eb:b7:2f:11:8c: 4b:2f:f2:91:a2:e6:15:af:49:d9:31:fe:9a:b0:ca: 65:f1:fe:72:7d:fe:c4:df:8b:80:bd:05:d8:80:77: 86:60:5c:7b:70:7c:9a:8d:94:45:bf:51:09:be:6e: 08:4d:aa:6b:c7:d5:07:78:28:71:cc:93:0b:d4:15: e5:b9:7f:af:b8:17:84:03:62:e8:45:3d:6d:b6:a9: 4a:37:78:59:67:59:f7:8e:c6:3c:4d:d4:cd:a8:f2: 73:2b:b7:bd:e5:bf:cc:b9:ba:3f:eb:b2:2f:43:18: 39:bc:9f:0d:66:d4:b0:41:b7:8a:9f:d6:69:2a:72: 77:74:48:b3:a0:a4:5e:fc:16:fe:c8:81:79:25:1e: 13:ce:1a:f9:1d:51:99:48:b9:c1:f8:07:f6:18:dd: ad:99:70:3c:88:4f:dc:5d:cf:74:85:ed:ca:e0:b8: 7d:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:13:4D:64:BD:28:E4:D2:FE:FE:19:7B:D4:68:32:43:0F:2E:ED:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/0475b828-a277-3eeb-8b05-22e0f1e69824.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl X509v3 Authority Key Identifier: keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer sbgp-ipAddrBlock: critical IPv4: 209.20.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:56:a1:dc:56:9f:b2:80:e4:a3:e7:11:4a:94:c7:9e:28:d9: 0d:9a:4f:67:27:04:d2:b7:95:11:d6:88:1f:f0:21:0a:a7:01: b8:4d:3d:bb:fd:ff:05:f6:0b:1c:b7:62:88:cf:c2:78:20:5c: 98:21:f2:2f:7c:61:05:d0:2f:ac:64:53:cb:98:c6:89:f2:eb: 6b:f2:7c:0e:92:80:fe:82:6c:97:1d:0b:13:52:17:5f:d7:b0: d0:71:60:fc:90:41:19:fb:3f:b0:73:a2:ff:b7:02:7e:94:28: 23:b6:c6:94:b1:0e:7a:7f:6f:22:6b:f2:84:0c:d8:fc:31:1f: f6:97:9e:75:23:8c:40:49:0d:34:85:de:a2:3f:40:2d:57:c3: ee:e9:d8:76:ec:f9:15:ad:cb:f8:6e:2b:2d:c5:3a:da:6b:35: 77:be:b1:01:d7:ea:41:14:24:08:0d:7d:9d:84:13:a8:5a:11: 9d:d0:dc:a9:1c:99:7f:b0:7f:c4:ec:b3:5b:f2:18:ad:9e:d9: 64:26:23:dd:fe:41:46:fa:a5:e8:8a:82:05:89:67:51:4f:c4: 07:5d:a9:df:24:15:95:a8:65:df:e4:ad:75:fd:60:b6:09:83: eb:7a:91:4b:2c:69:39:1b:d7:64:ed:06:e1:b0:ac:df:b3:46: a4:96:68:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEHkbK9LIdY7Fb0vm0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmQ5MWNjYzEtNDIxNy00Y2RlLTk2ODctMjYwYTVmMDAz NjFiMB4XDTIzMDUxNTE4MjEwMVoXDTIzMDgwMTEwMzY0NlowLzEtMCsGA1UEAxMk NTQzMTE3YWMtOThhZi00Mzc5LWE3NjEtZDEyNWE1M2ExMmQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijGK+n3zg7JKfemqtnh440qvubTL5fW1JJ2B 22c3n0cADooWcs9lmjq2TzNvMX8kLCAe4cZpalMt7YkPKCUG1Zhu1iKJ95OwfbhY z4K7z13sKnA567cvEYxLL/KRouYVr0nZMf6asMpl8f5yff7E34uAvQXYgHeGYFx7 cHyajZRFv1EJvm4ITaprx9UHeChxzJML1BXluX+vuBeEA2LoRT1ttqlKN3hZZ1n3 jsY8TdTNqPJzK7e95b/Mubo/67IvQxg5vJ8NZtSwQbeKn9ZpKnJ3dEizoKRe/Bb+ yIF5JR4Tzhr5HVGZSLnB+Af2GN2tmXA8iE/cXc90he3K4Lh9GwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAgTTWS9KOTS/v4Ze9RoMkMPLu27MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkx Y2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBhNWYwMDM2MWIvMDQ3NWI4MjgtYTI3Ny0z ZWViLThiMDUtMjJlMGYxZTY5ODI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmQ5MWNjYzEtNDIxNy00Y2RlLTk2 ODctMjYwYTVmMDAzNjFiLzZkOTFjY2MxLTQyMTctNGNkZS05Njg3LTI2MGE1ZjAw MzYxYi5jcmwwHwYDVR0jBBgwFoAUdmxvfCjsNiaUUb/Sen6ZVikimvwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkxY2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBh NWYwMDM2MWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0RSEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKtWodxWn7KA5KPnEUqUx54o2Q2aT2cnBNK3lRHWiB/wIQqnAbhNPbv9 /wX2Cxy3YojPwnggXJgh8i98YQXQL6xkU8uYxony62vyfA6SgP6CbJcdCxNSF1/X sNBxYPyQQRn7P7Bzov+3An6UKCO2xpSxDnp/byJr8oQM2PwxH/aXnnUjjEBJDTSF 3qI/QC1Xw+7p2Hbs+RWty/huKy3FOtprNXe+sQHX6kEUJAgNfZ2EE6haEZ3Q3Kkc mX+wf8Tss1vyGK2e2WQmI93+QUb6peiKggWJZ1FPxAddqd8kFZWoZd/krXX9YLYJ g+t6kUssaTkb12TtBuGwrN+zRqSWaH0= -----END CERTIFICATE-----Generated at Mon May 15 18:57:13 2023 by rpki-client on console-ams.rpki-client.org