$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/973b87f5-9931-320b-9f50-5352dd3a2bb7.roa File: 973b87f5-9931-320b-9f50-5352dd3a2bb7.roa (raw, json) Hash identifier: 0/3SBGTm2c4qc1B1Y6Kzf7nuuW7NB7FvTlqhsPsFJ3M= Subject key identifier: 86:BB:48:7C:EC:36:3A:86:B2:F7:96:2D:0E:C4:BE:DD:36:B0:28:7E Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F43285844EED00B19853461E2897FB370 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/973b87f5-9931-320b-9f50-5352dd3a2bb7.roa Signing time: Sun 18 Feb 2024 14:00:30 +0000 ROA not before: Sun 18 Feb 2024 14:00:30 +0000 ROA not after: Sat 18 May 2024 13:00:30 +0000 asID: 54858 IP address blocks: 209.34.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 04 May 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:ee:d0:0b:19:85:34:61:e2:89:7f:b3:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Feb 18 14:00:30 2024 GMT Not After : May 18 13:00:30 2024 GMT Subject: CN=2935ffc7-c1b8-4be5-9cbf-5bdce1ec1bc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d3:d4:e4:15:3d:4b:b9:a9:57:18:41:04:63: 7d:af:f1:11:e1:5c:12:a4:57:0c:9b:39:43:1e:5a: ea:4b:a0:13:29:25:6c:af:a9:da:09:93:0e:80:e9: 46:43:98:b0:88:66:eb:9a:2d:d3:d0:49:0d:81:ca: d0:35:d0:a8:b4:90:d5:94:fc:5d:2b:a3:cf:56:f0: f5:c7:89:84:07:dd:51:f7:93:12:b8:79:c5:0b:98: b6:61:b2:34:e1:ba:c0:55:71:e3:f1:ab:66:93:67: fc:ed:be:97:ff:e1:b6:6b:13:1e:f6:0a:e1:1d:2f: 93:5c:2e:d8:ad:5c:e4:4e:e8:2b:2a:0b:b6:4b:f1: 9a:78:e9:2c:03:ef:47:9e:eb:9a:59:4c:55:f2:4f: e8:4e:87:bb:cb:13:12:44:9e:2b:61:1f:dc:46:3e: 7a:3e:5b:c3:4b:23:04:5b:d3:95:8f:85:7f:99:7b: 09:6b:c8:16:d1:e5:2c:af:b4:00:23:b7:ed:81:35: 8c:09:a8:35:52:40:bd:34:09:67:39:68:bb:de:4f: 49:df:14:2a:8c:50:65:14:94:24:1c:fe:bb:7c:3d: c0:09:8e:08:1a:18:51:26:d7:bf:94:20:1e:33:de: 81:88:00:f5:22:ef:47:44:d8:74:61:c6:2d:77:8a: 69:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:BB:48:7C:EC:36:3A:86:B2:F7:96:2D:0E:C4:BE:DD:36:B0:28:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/973b87f5-9931-320b-9f50-5352dd3a2bb7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 209.34.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:89:37:e3:34:6c:3e:d3:a3:6f:71:79:ea:52:6c:e0:71:47: a3:d2:8b:bb:15:eb:43:83:fa:e1:2c:ed:92:85:22:34:f4:77: f3:82:57:e6:d6:d4:e8:4f:cd:da:4e:30:73:c7:3c:e7:b7:84: 34:9c:63:bd:b5:2c:32:a1:8a:a3:3c:dc:73:1a:3d:21:19:89: dd:2e:d3:8d:6d:cd:0b:49:83:00:e8:8a:30:4e:7b:24:46:8d: 4d:1e:e5:3d:a1:5d:c6:9d:ed:7f:a1:f2:15:cb:f5:a6:fd:89: 2a:f9:7b:2c:8c:cd:59:c2:3c:dc:f7:31:d5:c4:ff:87:a2:8b: 46:71:6f:eb:2c:42:db:c9:78:6a:34:46:19:6f:fd:3a:43:61: e9:46:51:35:e2:67:04:9e:57:f7:84:b9:da:a2:63:5d:a0:49: 10:7e:2e:d7:7e:0c:e4:27:d0:47:fb:bb:eb:01:b1:de:9f:4c: 2f:bd:c2:23:14:0e:46:5d:8f:3d:eb:37:cc:4d:06:2b:e2:30: 39:37:3a:e8:2d:88:54:d0:37:06:71:af:c2:b6:c7:83:96:59: 08:e3:77:e2:77:98:6f:d9:16:77:d7:06:65:86:82:d0:1f:76: 2d:9b:5e:18:f6:ea:e1:ab:51:d1:d2:ba:f5:d0:83:4b:76:50: 59:df:fd:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWETu0AsZhTRh4ol/s3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI0MDIxODE0MDAzMFoXDTI0MDUxODEzMDAzMFowLzEtMCsGA1UEAxMk MjkzNWZmYzctYzFiOC00YmU1LTljYmYtNWJkY2UxZWMxYmMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNPU5BU9S7mpVxhBBGN9r/ER4VwSpFcMmzlD HlrqS6ATKSVsr6naCZMOgOlGQ5iwiGbrmi3T0EkNgcrQNdCotJDVlPxdK6PPVvD1 x4mEB91R95MSuHnFC5i2YbI04brAVXHj8atmk2f87b6X/+G2axMe9grhHS+TXC7Y rVzkTugrKgu2S/GaeOksA+9HnuuaWUxV8k/oToe7yxMSRJ4rYR/cRj56PlvDSyME W9OVj4V/mXsJa8gW0eUsr7QAI7ftgTWMCag1UkC9NAlnOWi73k9J3xQqjFBlFJQk HP67fD3ACY4IGhhRJte/lCAeM96BiAD1Iu9HRNh0YcYtd4pp0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIa7SHzsNjqGsveWLQ7Evt02sCh+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvOTczYjg3ZjUtOTkzMS0z MjBiLTlmNTAtNTM1MmRkM2EyYmI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0SKAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGOJN+M0bD7To29xeepSbOBxR6PSi7sV60OD+uEs7ZKFIjT0d/OCV+bW 1OhPzdpOMHPHPOe3hDScY721LDKhiqM83HMaPSEZid0u041tzQtJgwDoijBOeyRG jU0e5T2hXcad7X+h8hXL9ab9iSr5eyyMzVnCPNz3MdXE/4eii0Zxb+ssQtvJeGo0 Rhlv/TpDYelGUTXiZwSeV/eEudqiY12gSRB+Ltd+DOQn0Ef7u+sBsd6fTC+9wiMU DkZdjz3rN8xNBiviMDk3OugtiFTQNwZxr8K2x4OWWQjjd+J3mG/ZFnfXBmWGgtAf di2bXhj26uGrUdHSuvXQg0t2UFnf/aI= -----END CERTIFICATE-----Generated at Fri May 3 00:07:55 2024 by rpki-client on console-ams.rpki-client.org