$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/3495d15c-fa42-330f-b8d8-37281c835c5c.roa File: 3495d15c-fa42-330f-b8d8-37281c835c5c.roa (raw, json) Hash identifier: EeVTtN7cWrS/siOn5TvOyRTBDbeXXXKGfTPUs0KoG4M= Subject key identifier: 1A:25:2E:44:25:1D:21:ED:8A:B4:3B:47:77:4A:5B:8B:DC:E1:8C:62 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F43285845883DDF025022F7A34CD4AE00 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/3495d15c-fa42-330f-b8d8-37281c835c5c.roa Signing time: Sat 13 Apr 2024 13:00:34 +0000 ROA not before: Sat 13 Apr 2024 13:00:34 +0000 ROA not after: Fri 12 Jul 2024 13:00:34 +0000 asID: 22612 IP address blocks: 209.188.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 29 Apr 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:88:3d:df:02:50:22:f7:a3:4c:d4:ae:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Apr 13 13:00:34 2024 GMT Not After : Jul 12 13:00:34 2024 GMT Subject: CN=dd463be5-aa64-42cc-84fc-99360c737a66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:de:b4:97:f5:f0:a0:39:1f:e5:3a:cc:4f:12: ce:f6:f3:88:d2:d9:dd:47:a4:79:e0:91:71:0a:7b: 67:d9:c5:29:b6:f9:ab:7a:4c:80:79:a5:30:5f:eb: 4e:01:09:b1:03:8d:92:eb:9a:da:a2:f1:0d:2e:3d: 3d:03:30:ac:50:17:2a:f8:f0:bb:5d:e8:09:58:c3: c3:94:a9:0c:38:14:22:be:fb:92:f7:13:d9:5e:a3: a8:a0:73:0c:ff:a9:ac:cf:90:41:32:2a:b8:d3:c4: fa:84:d8:83:28:ca:8d:6c:cf:49:c9:d7:6a:e7:ac: 0c:38:ca:de:e1:b2:4a:05:88:f1:41:c1:5b:f8:9d: 87:a5:ae:2d:9e:94:d6:86:99:e4:2a:68:ab:92:bd: 27:1b:e6:b8:d5:af:5f:fd:ef:10:42:ef:89:c4:72: 39:65:34:35:fa:5e:66:1d:83:bc:6b:ce:70:6d:cc: f3:81:98:e1:24:e5:ae:57:b8:40:b3:88:cd:78:ef: b2:cd:9e:43:d4:42:67:4a:9e:38:6c:56:02:7c:6c: 5d:89:3f:5c:ec:68:e6:ca:38:35:13:89:ba:d0:43: dc:8d:cd:ae:f2:64:eb:45:75:e7:55:d4:09:49:96: c9:3c:20:3c:b0:24:4b:d6:44:fd:19:cd:49:a1:70: 3b:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:25:2E:44:25:1D:21:ED:8A:B4:3B:47:77:4A:5B:8B:DC:E1:8C:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/3495d15c-fa42-330f-b8d8-37281c835c5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 209.188.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:06:48:e3:f8:a8:12:87:87:0c:92:73:75:df:c3:ad:df:a6: 66:03:67:b4:94:8e:4c:17:8c:65:82:b5:83:5a:51:75:c2:c7: c4:7f:34:83:82:8f:7a:66:b3:af:1f:d2:dd:40:bc:10:23:a2: 29:93:f1:86:8a:98:e9:dc:44:9c:b8:94:35:0d:88:40:e8:85: 5d:35:a5:9e:62:59:a5:2d:72:7f:5c:a0:cf:d2:fc:1b:19:4c: b5:af:23:13:0a:65:bf:b4:1f:20:a1:b4:24:f0:c2:10:35:f7: c9:30:49:0d:1e:23:65:d4:c1:23:1b:9b:0a:dd:cb:88:49:f1: 3b:2b:2e:de:d5:e1:da:ec:5f:9e:18:c1:d8:65:04:a0:a0:ae: 03:97:92:cb:1e:9b:59:08:7c:1f:de:57:51:f1:7c:65:48:a5: 5f:d0:8a:8e:e6:85:e4:5b:10:6e:2a:fa:87:6b:bd:06:bf:88: dd:4f:20:d9:aa:f3:6a:23:d1:71:55:50:fa:0d:39:a9:f0:0d: 7e:ae:98:ee:bd:41:07:e3:6b:2e:f4:8d:33:d6:c5:1d:d6:e5: d6:bc:00:a2:d4:d2:de:e6:d9:df:cb:40:9b:54:02:2a:10:02: c0:3e:13:62:50:9b:e2:03:12:52:46:15:95:5e:bd:31:9f:33: 9f:d5:f7:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWIPd8CUCL3o0zUrgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI0MDQxMzEzMDAzNFoXDTI0MDcxMjEzMDAzNFowLzEtMCsGA1UEAxMk ZGQ0NjNiZTUtYWE2NC00MmNjLTg0ZmMtOTkzNjBjNzM3YTY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwt60l/XwoDkf5TrMTxLO9vOI0tndR6R54JFx Cntn2cUptvmrekyAeaUwX+tOAQmxA42S65raovENLj09AzCsUBcq+PC7XegJWMPD lKkMOBQivvuS9xPZXqOooHMM/6msz5BBMiq408T6hNiDKMqNbM9Jyddq56wMOMre 4bJKBYjxQcFb+J2Hpa4tnpTWhpnkKmirkr0nG+a41a9f/e8QQu+JxHI5ZTQ1+l5m HYO8a85wbczzgZjhJOWuV7hAs4jNeO+yzZ5D1EJnSp44bFYCfGxdiT9c7Gjmyjg1 E4m60EPcjc2u8mTrRXXnVdQJSZbJPCA8sCRL1kT9Gc1JoXA7tQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBolLkQlHSHtirQ7R3dKW4vc4YxiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvMzQ5NWQxNWMtZmE0Mi0z MzBmLWI4ZDgtMzcyODFjODM1YzVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0bwVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJcGSOP4qBKHhwySc3Xfw63fpmYDZ7SUjkwXjGWCtYNaUXXCx8R/NIOC j3pms68f0t1AvBAjoimT8YaKmOncRJy4lDUNiEDohV01pZ5iWaUtcn9coM/S/BsZ TLWvIxMKZb+0HyChtCTwwhA198kwSQ0eI2XUwSMbmwrdy4hJ8TsrLt7V4drsX54Y wdhlBKCgrgOXkssem1kIfB/eV1HxfGVIpV/Qio7mheRbEG4q+odrvQa/iN1PINmq 82oj0XFVUPoNOanwDX6umO69QQfjay70jTPWxR3W5da8AKLU0t7m2d/LQJtUAioQ AsA+E2JQm+IDElJGFZVevTGfM5/V9/g= -----END CERTIFICATE-----Generated at Sun Apr 28 03:26:33 2024 by rpki-client on console-ams.rpki-client.org