$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/afba9dd7-b04e-3852-a6c5-e769bd5515c2.roa File: afba9dd7-b04e-3852-a6c5-e769bd5515c2.roa (raw, json) Hash identifier: VbXwKmZrqIjDuM0OZ0I1SVdSQiBxfGhzD3ODubI8sK4= Subject key identifier: 4D:BE:75:68:40:F4:E0:83:8D:59:41:60:15:49:05:F3:16:40:F8:D9 Certificate issuer: /CN=6d91ccc1-4217-4cde-9687-260a5f00361b Certificate serial: 010D0C9F43285845A428D49565C5E76E773B0600 Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/afba9dd7-b04e-3852-a6c5-e769bd5515c2.roa Signing time: Tue 23 Apr 2024 13:00:34 +0000 ROA not before: Tue 23 Apr 2024 13:00:34 +0000 ROA not after: Mon 22 Jul 2024 13:00:34 +0000 asID: 174 IP address blocks: 209.20.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 29 Apr 2024 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:a4:28:d4:95:65:c5:e7:6e:77:3b:06:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b Validity Not Before: Apr 23 13:00:34 2024 GMT Not After : Jul 22 13:00:34 2024 GMT Subject: CN=31a336c9-671e-485a-873e-4ff6694fbb84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:c6:30:71:5b:08:f5:a5:f0:e8:9d:b9:28:de: d5:6c:20:4a:71:5f:94:60:7f:c0:d9:62:d1:6b:76: e9:e2:7c:27:c1:d4:ac:87:c8:af:95:4e:bc:00:2d: e3:e1:e7:4a:8c:52:0f:27:14:9d:c9:86:2b:ca:51: 0a:b2:4d:ac:4d:7d:41:b2:6c:17:c5:31:29:54:64: cf:8a:a5:c9:11:a3:5e:6b:2b:08:49:e6:a9:75:b6: 72:02:29:54:f9:6d:5a:bd:63:18:06:ad:2c:7c:32: c3:97:01:29:33:00:d4:a3:81:42:01:73:4c:79:e4: 26:aa:88:96:e9:b6:1f:29:ac:f4:2b:23:49:43:54: 2c:c7:7f:5b:69:d3:60:0f:ae:43:a2:cf:3a:5f:a7: 87:3e:2a:ef:1f:b5:e6:9c:d7:e4:01:e4:69:0c:31: 50:b4:76:bf:04:ac:ae:1a:c2:8b:a0:fa:8b:ee:46: c5:41:33:b8:f5:79:bc:04:08:0f:ea:90:6e:42:9e: 0e:cf:d4:54:28:e2:96:cf:a7:be:2b:f9:24:e6:79: d9:7d:90:1b:a9:f8:0e:d4:6e:6e:87:06:18:f1:24: 08:e6:e8:4f:32:8d:8d:a0:33:1a:15:58:0a:ed:e9: b0:07:a7:48:6b:83:7b:e6:3f:bf:6f:91:a4:9b:8d: 61:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:BE:75:68:40:F4:E0:83:8D:59:41:60:15:49:05:F3:16:40:F8:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/afba9dd7-b04e-3852-a6c5-e769bd5515c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl X509v3 Authority Key Identifier: keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer sbgp-ipAddrBlock: critical IPv4: 209.20.192.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:ee:f0:3e:4b:c0:bd:d0:55:eb:ba:9b:32:1c:b8:fb:1c:83: 11:81:f1:dd:3f:9d:a3:23:47:51:d1:e9:bc:e5:c4:55:e1:72: 5e:79:4b:e1:e5:2c:67:3b:7f:50:dc:9d:8b:8f:ce:e0:75:b2: 16:32:b9:46:0a:06:7c:f8:b7:05:89:fd:4e:36:69:0c:e1:62: d6:ca:fb:48:84:60:3a:ce:c9:67:89:7c:a5:2c:29:90:8c:9b: 7a:07:ee:f5:84:82:dd:b0:54:07:eb:d3:0c:e6:ee:0c:e4:72: 9f:f2:db:60:97:2e:ad:41:78:82:80:5a:e0:fb:52:c2:ea:d0: c3:ba:9a:cc:7b:26:d6:1a:2d:75:56:aa:69:3b:91:0b:2a:5d: 08:cc:1b:7b:78:38:5c:21:2b:30:1e:57:54:1a:66:34:d1:cc: f1:c1:cf:86:ac:e5:0c:0c:c0:1d:66:95:40:48:c8:29:a2:31: db:fc:de:1a:a7:06:70:01:34:ef:bf:3b:01:d9:e8:7c:bd:e4: f2:8b:0b:03:c0:d3:19:82:d2:d7:f1:16:54:cc:d9:52:d0:f9: 5f:5b:42:25:ca:5e:e6:69:b2:13:50:fa:72:7b:2f:a3:76:5b: 12:77:13:72:1e:21:a8:c1:1a:f8:01:72:c4:7d:48:3e:15:ee: 0f:62:b4:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWkKNSVZcXnbnc7BgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmQ5MWNjYzEtNDIxNy00Y2RlLTk2ODctMjYwYTVmMDAz NjFiMB4XDTI0MDQyMzEzMDAzNFoXDTI0MDcyMjEzMDAzNFowLzEtMCsGA1UEAxMk MzFhMzM2YzktNjcxZS00ODVhLTg3M2UtNGZmNjY5NGZiYjg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsYwcVsI9aXw6J25KN7VbCBKcV+UYH/A2WLR a3bp4nwnwdSsh8ivlU68AC3j4edKjFIPJxSdyYYrylEKsk2sTX1BsmwXxTEpVGTP iqXJEaNeaysISeapdbZyAilU+W1avWMYBq0sfDLDlwEpMwDUo4FCAXNMeeQmqoiW 6bYfKaz0KyNJQ1Qsx39badNgD65Dos86X6eHPirvH7XmnNfkAeRpDDFQtHa/BKyu GsKLoPqL7kbFQTO49Xm8BAgP6pBuQp4Oz9RUKOKWz6e+K/kk5nnZfZAbqfgO1G5u hwYY8SQI5uhPMo2NoDMaFVgK7emwB6dIa4N75j+/b5Gkm41hrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE2+dWhA9OCDjVlBYBVJBfMWQPjZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkx Y2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBhNWYwMDM2MWIvYWZiYTlkZDctYjA0ZS0z ODUyLWE2YzUtZTc2OWJkNTUxNWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmQ5MWNjYzEtNDIxNy00Y2RlLTk2 ODctMjYwYTVmMDAzNjFiLzZkOTFjY2MxLTQyMTctNGNkZS05Njg3LTI2MGE1ZjAw MzYxYi5jcmwwHwYDVR0jBBgwFoAUdmxvfCjsNiaUUb/Sen6ZVikimvwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkxY2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBh NWYwMDM2MWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG0RTAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABju8D5LwL3QVeu6mzIcuPscgxGB8d0/naMjR1HR6bzlxFXhcl55S+Hl LGc7f1DcnYuPzuB1shYyuUYKBnz4twWJ/U42aQzhYtbK+0iEYDrOyWeJfKUsKZCM m3oH7vWEgt2wVAfr0wzm7gzkcp/y22CXLq1BeIKAWuD7UsLq0MO6msx7JtYaLXVW qmk7kQsqXQjMG3t4OFwhKzAeV1QaZjTRzPHBz4as5QwMwB1mlUBIyCmiMdv83hqn BnABNO+/OwHZ6Hy95PKLCwPA0xmC0tfxFlTM2VLQ+V9bQiXKXuZpshNQ+nJ7L6N2 WxJ3E3IeIajBGvgBcsR9SD4V7g9itH8= -----END CERTIFICATE-----Generated at Sat Apr 27 21:42:57 2024 by rpki-client on console-ams.rpki-client.org