$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/1a7758bd-319b-30e7-aaee-1b8878c6d78c.roa File: 1a7758bd-319b-30e7-aaee-1b8878c6d78c.roa (raw, json) Hash identifier: MgzrO3ez4hbGf2YPAgeN4+/uFpL9KydD+1pcpoLdnS4= Subject key identifier: 95:BB:94:B5:0F:76:86:D9:EB:B0:88:D7:98:77:1D:73:10:5C:9B:A7 Certificate issuer: /CN=6d91ccc1-4217-4cde-9687-260a5f00361b Certificate serial: 010D0C9F43285845B4E8D9DFDE59876C9BF43500 Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/1a7758bd-319b-30e7-aaee-1b8878c6d78c.roa Signing time: Mon 29 Apr 2024 13:00:33 +0000 ROA not before: Mon 29 Apr 2024 13:00:33 +0000 ROA not after: Sun 28 Jul 2024 13:00:33 +0000 asID: 1239 IP address blocks: 209.20.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 May 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:b4:e8:d9:df:de:59:87:6c:9b:f4:35:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b Validity Not Before: Apr 29 13:00:33 2024 GMT Not After : Jul 28 13:00:33 2024 GMT Subject: CN=908aaf79-eff5-4c60-849a-abc86b553c2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:45:ac:1e:99:40:69:57:aa:35:b0:dc:9c:37: d8:35:a5:e3:b9:a1:2c:fe:9d:e5:d3:8a:e4:9a:5c: 32:b8:60:41:08:31:53:33:3e:ce:6f:d8:ef:1f:74: 83:69:a3:64:dd:cf:5d:cf:36:4e:4e:24:99:4c:74: c9:8b:c2:9a:36:51:7a:06:c3:d9:cc:d8:87:68:d4: 0c:f5:2d:78:ed:c1:7f:9f:18:f8:c5:3e:03:ad:a4: 97:f9:64:34:52:f9:d6:10:9d:b0:4e:05:06:c0:b0: 9c:f3:fc:2e:db:f6:cb:87:c4:41:c7:4f:40:c8:b0: 8d:90:07:9d:30:bf:53:49:90:d5:a1:b5:e1:40:a8: 28:89:f1:19:c7:da:34:9e:b6:a7:78:fa:cc:f0:6f: 9a:d8:f5:cd:f2:09:3c:92:46:b9:44:ba:8b:0c:62: 62:23:47:35:10:2a:f4:9a:ae:a8:71:d9:5f:2e:88: a0:76:49:46:7f:3e:b5:2e:83:b7:f5:d6:08:1c:f5: a0:15:cd:cf:be:11:6c:11:5f:6d:b2:99:5f:50:27: 30:68:2e:e2:08:76:95:ec:f4:63:de:d2:d8:7c:8d: 01:dc:5f:a1:70:cc:e5:ec:6c:50:64:c3:b3:1c:f9: 6a:c4:35:86:55:8c:e4:84:e9:9f:75:06:07:cc:88: 9c:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:BB:94:B5:0F:76:86:D9:EB:B0:88:D7:98:77:1D:73:10:5C:9B:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/1a7758bd-319b-30e7-aaee-1b8878c6d78c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl X509v3 Authority Key Identifier: keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer sbgp-ipAddrBlock: critical IPv4: 209.20.192.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bc:87:50:fe:9d:22:1a:ec:f7:ab:e1:37:78:83:37:df:9e:74: 47:60:84:55:8e:67:cc:76:95:2f:0f:a9:e4:6a:44:9d:7c:f2: de:ca:b1:5e:ee:ed:32:cb:58:19:d6:5d:fb:3a:ac:86:66:c9: c1:75:ec:36:db:31:33:03:e4:e9:e3:3b:d6:5e:d3:cb:cd:54: 71:82:91:56:9b:ec:ae:60:78:6d:fe:73:69:d0:1f:8b:a6:96: 41:f7:be:b4:96:0e:47:db:db:e4:e5:84:b4:a2:c2:66:d3:9f: 52:99:65:d1:f6:00:38:63:3c:23:6f:c3:16:ba:b9:a1:39:42: 40:c0:0c:e9:94:c3:ce:01:86:11:43:e0:c6:76:8a:60:4e:a8: ee:b1:c2:9a:6c:12:41:97:45:1e:cd:6a:c8:ac:3f:2e:3f:7d: 8a:6e:f4:30:88:82:b8:c2:33:e4:22:13:53:63:f2:62:ff:42: e9:40:50:23:e0:ee:ff:58:e8:1b:cf:e3:ff:4c:cf:8c:ec:e3: 77:60:5b:70:12:a1:8d:08:7b:ee:fa:bf:81:af:6b:6a:30:37: 52:3d:9f:94:4f:79:2d:34:25:01:1f:a5:8b:a8:16:27:f1:ba: fb:2e:a3:39:e7:2d:74:24:a5:a3:1e:03:d9:d5:1b:25:17:00: 67:aa:7b:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEW06Nnf3lmHbJv0NQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmQ5MWNjYzEtNDIxNy00Y2RlLTk2ODctMjYwYTVmMDAz NjFiMB4XDTI0MDQyOTEzMDAzM1oXDTI0MDcyODEzMDAzM1owLzEtMCsGA1UEAxMk OTA4YWFmNzktZWZmNS00YzYwLTg0OWEtYWJjODZiNTUzYzJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhUWsHplAaVeqNbDcnDfYNaXjuaEs/p3l04rk mlwyuGBBCDFTMz7Ob9jvH3SDaaNk3c9dzzZOTiSZTHTJi8KaNlF6BsPZzNiHaNQM 9S147cF/nxj4xT4DraSX+WQ0UvnWEJ2wTgUGwLCc8/wu2/bLh8RBx09AyLCNkAed ML9TSZDVobXhQKgoifEZx9o0nranePrM8G+a2PXN8gk8kka5RLqLDGJiI0c1ECr0 mq6ocdlfLoigdklGfz61LoO39dYIHPWgFc3PvhFsEV9tsplfUCcwaC7iCHaV7PRj 3tLYfI0B3F+hcMzl7GxQZMOzHPlqxDWGVYzkhOmfdQYHzIicmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJW7lLUPdobZ67CI15h3HXMQXJunMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkx Y2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBhNWYwMDM2MWIvMWE3NzU4YmQtMzE5Yi0z MGU3LWFhZWUtMWI4ODc4YzZkNzhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmQ5MWNjYzEtNDIxNy00Y2RlLTk2 ODctMjYwYTVmMDAzNjFiLzZkOTFjY2MxLTQyMTctNGNkZS05Njg3LTI2MGE1ZjAw MzYxYi5jcmwwHwYDVR0jBBgwFoAUdmxvfCjsNiaUUb/Sen6ZVikimvwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkxY2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBh NWYwMDM2MWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG0RTAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALyHUP6dIhrs96vhN3iDN9+edEdghFWOZ8x2lS8PqeRqRJ188t7KsV7u 7TLLWBnWXfs6rIZmycF17DbbMTMD5OnjO9Ze08vNVHGCkVab7K5geG3+c2nQH4um lkH3vrSWDkfb2+TlhLSiwmbTn1KZZdH2ADhjPCNvwxa6uaE5QkDADOmUw84BhhFD 4MZ2imBOqO6xwppsEkGXRR7NasisPy4/fYpu9DCIgrjCM+QiE1Nj8mL/QulAUCPg 7v9Y6BvP4/9Mz4zs43dgW3ASoY0Ie+76v4Gva2owN1I9n5RPeS00JQEfpYuoFifx uvsuoznnLXQkpaMeA9nVGyUXAGeqe1I= -----END CERTIFICATE-----Generated at Mon May 6 22:49:06 2024 by rpki-client on console-ams.rpki-client.org