$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651/595f8af2-e8d7-3e25-814e-3372d4edac5e.roa File: 595f8af2-e8d7-3e25-814e-3372d4edac5e.roa (raw, json) Hash identifier: D2+eYnJFNXs6UtD+O796bm5w/o6qZJc+vOJ7aD0MPcg= Subject key identifier: 77:59:B2:49:CA:66:8E:9B:48:3F:CF:B8:E7:5F:EF:39:A7:85:DB:12 Certificate issuer: /CN=a278da28-82b3-48fe-bc76-7859a82f5651 Certificate serial: 010D0C9F4328584589E9076AF0AEFDED2F0AFB80 Authority key identifier: F6:2A:63:3E:5D:7E:81:0B:03:E4:5F:CF:7F:24:96:AE:EF:A3:59:19 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651/595f8af2-e8d7-3e25-814e-3372d4edac5e.roa Signing time: Sun 14 Apr 2024 03:21:21 +0000 ROA not before: Sun 14 Apr 2024 03:21:21 +0000 ROA not after: Sat 13 Jul 2024 03:21:21 +0000 asID: 38082 IP address blocks: 209.209.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651/a278da28-82b3-48fe-bc76-7859a82f5651.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651/a278da28-82b3-48fe-bc76-7859a82f5651.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:89:e9:07:6a:f0:ae:fd:ed:2f:0a:fb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a278da28-82b3-48fe-bc76-7859a82f5651 Validity Not Before: Apr 14 03:21:21 2024 GMT Not After : Jul 13 03:21:21 2024 GMT Subject: CN=29715465-3b35-425b-b5d9-f12000808c55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:a2:fb:4e:52:15:d0:70:73:28:97:14:30:99: 30:ef:c3:6c:50:9c:f5:5e:c9:5b:ae:81:b0:38:81: f3:e8:de:b9:48:07:c1:f0:c1:3d:f5:b1:30:9d:2b: b2:eb:92:57:da:97:8e:eb:db:e1:bd:32:ce:33:d5: 55:48:71:1b:a4:42:80:92:d5:e9:3b:8a:30:e2:59: 6f:47:f6:ce:10:32:95:52:ca:b1:15:5b:08:49:fc: c6:5d:47:a5:c2:b6:29:6b:28:df:18:75:e8:3a:f8: cd:45:bc:19:79:58:80:5e:be:0f:3e:13:5d:60:71: fb:cf:eb:b1:27:3e:57:b2:cd:e0:93:c6:dc:d6:93: 77:61:17:25:d8:43:53:9c:01:da:94:90:a3:b0:61: 13:70:2e:18:1b:94:0a:cd:16:5f:af:f7:9f:6d:0b: b3:f0:6f:22:5e:cb:2c:84:91:7f:91:a8:af:a5:4a: 48:b9:ed:f5:0f:0d:bb:b0:28:44:02:6b:c8:c3:47: 8f:dc:3e:25:aa:e6:56:23:53:e1:f7:19:f9:ab:46: b4:88:36:d6:72:6f:fb:52:3b:cd:f2:3a:ba:3c:d7: 5f:33:79:97:d9:10:45:f1:65:68:10:22:c1:4b:da: a6:0b:b6:c9:8b:b2:83:eb:3d:b2:58:0a:b8:70:14: e5:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:59:B2:49:CA:66:8E:9B:48:3F:CF:B8:E7:5F:EF:39:A7:85:DB:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651/595f8af2-e8d7-3e25-814e-3372d4edac5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651/a278da28-82b3-48fe-bc76-7859a82f5651.crl X509v3 Authority Key Identifier: keyid:F6:2A:63:3E:5D:7E:81:0B:03:E4:5F:CF:7F:24:96:AE:EF:A3:59:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651.cer sbgp-ipAddrBlock: critical IPv4: 209.209.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:78:94:6e:51:2c:d8:63:39:46:19:1c:f6:2e:d2:3e:94:e8: af:49:bb:1d:ed:5c:74:22:d3:45:73:b5:65:1e:8b:49:50:63: a1:00:35:c5:11:df:09:ba:62:a1:1e:13:55:1b:d5:ae:38:23: 55:08:6c:de:b2:67:c4:b5:60:f2:e9:35:64:b0:a7:b1:a1:52: 2f:86:f3:be:22:55:10:6e:14:fc:c1:66:0f:29:8a:70:ca:29: 7e:ae:a0:87:2a:5f:ca:e9:b3:8f:70:92:f8:e4:8e:e7:85:79: 30:55:fe:5b:d7:58:4a:46:ba:88:21:38:24:85:6e:99:30:ef: ff:0d:78:42:39:21:06:fb:08:aa:e5:c3:99:38:13:79:9e:54: 5f:5a:5d:d1:38:66:89:fd:31:3a:58:d1:65:a1:cd:68:d5:79: 42:9d:01:d9:d0:c4:1e:13:8f:19:0b:0b:22:f3:7c:b4:9c:79: cb:5b:a4:ab:05:83:0e:d3:bf:bc:d6:c8:68:cb:d0:6f:38:02: 97:b4:ff:7e:a5:1d:f4:46:c7:6b:86:5f:24:ae:2a:4b:8c:af: 2a:6c:7f:4f:33:83:1d:55:c7:dd:84:a5:a3:94:18:e7:74:3b: cb:5f:a3:1b:5c:38:0f:09:0e:55:8c:b6:69:cc:1f:4a:8d:8e: 91:27:c8:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWJ6Qdq8K797S8K+4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTI3OGRhMjgtODJiMy00OGZlLWJjNzYtNzg1OWE4MmY1 NjUxMB4XDTI0MDQxNDAzMjEyMVoXDTI0MDcxMzAzMjEyMVowLzEtMCsGA1UEAxMk Mjk3MTU0NjUtM2IzNS00MjViLWI1ZDktZjEyMDAwODA4YzU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKL7TlIV0HBzKJcUMJkw78NsUJz1XslbroGw OIHz6N65SAfB8ME99bEwnSuy65JX2peO69vhvTLOM9VVSHEbpEKAktXpO4ow4llv R/bOEDKVUsqxFVsISfzGXUelwrYpayjfGHXoOvjNRbwZeViAXr4PPhNdYHH7z+ux Jz5Xss3gk8bc1pN3YRcl2ENTnAHalJCjsGETcC4YG5QKzRZfr/efbQuz8G8iXsss hJF/kaivpUpIue31Dw27sChEAmvIw0eP3D4lquZWI1Ph9xn5q0a0iDbWcm/7UjvN 8jq6PNdfM3mX2RBF8WVoECLBS9qmC7bJi7KD6z2yWAq4cBTliQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHdZsknKZo6bSD/PuOdf7zmnhdsSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMjc4 ZGEyOC04MmIzLTQ4ZmUtYmM3Ni03ODU5YTgyZjU2NTEvNTk1ZjhhZjItZThkNy0z ZTI1LTgxNGUtMzM3MmQ0ZWRhYzVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTI3OGRhMjgtODJiMy00OGZlLWJj NzYtNzg1OWE4MmY1NjUxL2EyNzhkYTI4LTgyYjMtNDhmZS1iYzc2LTc4NTlhODJm NTY1MS5jcmwwHwYDVR0jBBgwFoAU9ipjPl1+gQsD5F/PfySWru+jWRkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMjc4ZGEyOC04MmIzLTQ4ZmUtYmM3Ni03ODU5 YTgyZjU2NTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0dFVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADZ4lG5RLNhjOUYZHPYu0j6U6K9Jux3tXHQi00VztWUei0lQY6EANcUR 3wm6YqEeE1Ub1a44I1UIbN6yZ8S1YPLpNWSwp7GhUi+G874iVRBuFPzBZg8pinDK KX6uoIcqX8rps49wkvjkjueFeTBV/lvXWEpGuoghOCSFbpkw7/8NeEI5IQb7CKrl w5k4E3meVF9aXdE4Zon9MTpY0WWhzWjVeUKdAdnQxB4TjxkLCyLzfLScectbpKsF gw7Tv7zWyGjL0G84Ape0/36lHfRGx2uGXySuKkuMrypsf08zgx1Vx92EpaOUGOd0 O8tfoxtcOA8JDlWMtmnMH0qNjpEnyLk= -----END CERTIFICATE-----Generated at Wed May 1 20:51:46 2024 by rpki-client on console-ams.rpki-client.org