$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/402d1434-f06e-3831-9fd6-20002d1cb7ab.roa File: 402d1434-f06e-3831-9fd6-20002d1cb7ab.roa (raw, json) Hash identifier: x3gzyxBb/x2IEt045+HN2nQjPLQ1yeF8WXeiGSk9o7E= Subject key identifier: 4B:8F:49:82:B3:57:B9:45:46:D0:3B:DE:44:4B:DA:C1:7D:D7:48:31 Certificate issuer: /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Certificate serial: 010D0C9F43285845DEC94898556430038FB188C0 Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/402d1434-f06e-3831-9fd6-20002d1cb7ab.roa Signing time: Tue 14 May 2024 13:00:34 +0000 ROA not before: Tue 14 May 2024 13:00:34 +0000 ROA not after: Mon 12 Aug 2024 13:00:34 +0000 asID: 393249 IP address blocks: 206.87.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:de:c9:48:98:55:64:30:03:8f:b1:88:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Validity Not Before: May 14 13:00:34 2024 GMT Not After : Aug 12 13:00:34 2024 GMT Subject: CN=82562dcd-a65d-4d4b-a57f-e56894c902b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f2:3d:b1:6f:38:f3:c3:c8:ce:73:33:40:8c: 2b:5c:96:6e:58:56:9e:60:e9:c3:2e:ea:99:d4:5e: 4d:c1:c6:bd:6a:a9:ab:f0:b5:4b:a0:53:ef:a2:e7: dc:71:49:3f:4e:58:c5:ca:59:bc:0b:80:45:1e:9c: 07:9b:67:5b:8b:95:50:dc:a8:43:f0:1b:66:0d:bd: b9:66:e8:0f:a0:74:a9:cf:71:c4:70:cd:9e:f4:4d: 45:e9:57:1f:a5:f3:0b:3d:ca:ed:9d:64:2b:7b:a7: f8:d3:d0:ab:62:92:f9:3f:b1:b3:dc:58:36:95:a0: 4f:91:8b:4c:65:fb:39:80:d0:7a:b3:ed:f3:02:07: 55:db:d2:9c:2a:8e:93:c2:7e:1d:5b:d8:d7:b1:b8: 42:87:d6:a4:8c:3d:67:d8:ed:0d:b0:5c:6d:dd:61: e4:5a:c7:bb:8e:8c:26:b8:b4:99:14:bf:6f:0e:95: 2e:91:c7:af:04:d8:13:c9:db:64:5c:2e:4e:e6:5e: 9a:b6:c9:bb:ee:9a:f4:3b:3d:15:98:ed:69:68:d3: 66:69:4c:71:8a:3a:3a:2d:7e:30:20:81:b1:6a:4e: e8:3a:c8:e5:41:8f:b1:f6:67:5e:39:a2:db:c9:e3: 5a:88:f3:36:89:9c:1b:17:85:f9:2f:33:43:10:67: 63:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:8F:49:82:B3:57:B9:45:46:D0:3B:DE:44:4B:DA:C1:7D:D7:48:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/402d1434-f06e-3831-9fd6-20002d1cb7ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl X509v3 Authority Key Identifier: keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer sbgp-ipAddrBlock: critical IPv4: 206.87.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:83:13:43:f7:64:de:c4:a2:a8:e1:66:4f:74:b4:2a:3b:23: 4b:f2:7f:c0:e1:94:53:7f:38:23:e4:42:17:09:94:d2:54:95: 31:ce:fe:b5:11:ba:3f:3e:c1:ad:9f:12:a9:51:e4:d7:a5:4a: 95:33:42:1d:49:ba:d3:15:52:4c:3e:ec:40:5a:7e:70:83:78: e1:81:f7:cc:11:78:48:cb:86:b0:85:85:6f:2d:d6:79:6a:5f: df:34:eb:12:07:36:94:bc:cc:80:2b:9a:d7:0c:5c:d9:74:0f: ca:f3:63:ef:9a:03:49:0c:43:3e:19:1f:72:a0:88:26:1d:17: 55:0e:59:0f:1b:8c:99:62:3c:e9:96:73:3b:f4:b8:52:9a:ee: 5d:7a:03:7a:c9:ec:83:76:9d:13:e1:7f:cd:2f:fe:08:1e:45: f6:8d:cd:b2:cd:de:d5:a9:2f:e3:8a:bd:1e:19:a3:63:c9:80: 3c:5a:de:ec:7e:e7:45:3a:62:d2:18:13:8e:03:6c:4f:d2:12: 57:09:62:81:36:7f:58:28:2f:4f:eb:2e:9b:cc:83:af:16:56: a1:db:c3:bb:dd:b5:ba:29:a9:b2:2e:f7:48:6b:a0:1b:d0:29: 94:2d:54:41:c3:7f:fb:12:39:0f:83:9e:84:ad:67:ae:b0:a7: 45:73:b1:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXeyUiYVWQwA4+xiMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2 OTZjMB4XDTI0MDUxNDEzMDAzNFoXDTI0MDgxMjEzMDAzNFowLzEtMCsGA1UEAxMk ODI1NjJkY2QtYTY1ZC00ZDRiLWE1N2YtZTU2ODk0YzkwMmIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/I9sW8488PIznMzQIwrXJZuWFaeYOnDLuqZ 1F5Nwca9aqmr8LVLoFPvoufccUk/TljFylm8C4BFHpwHm2dbi5VQ3KhD8BtmDb25 ZugPoHSpz3HEcM2e9E1F6VcfpfMLPcrtnWQre6f409CrYpL5P7Gz3Fg2laBPkYtM Zfs5gNB6s+3zAgdV29KcKo6Twn4dW9jXsbhCh9akjD1n2O0NsFxt3WHkWse7jowm uLSZFL9vDpUukcevBNgTydtkXC5O5l6atsm77pr0Oz0VmO1paNNmaUxxijo6LX4w IIGxak7oOsjlQY+x9mdeOaLbyeNaiPM2iZwbF4X5LzNDEGdj2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEuPSYKzV7lFRtA73kRL2sF910gxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvNDAyZDE0MzQtZjA2ZS0z ODMxLTlmZDYtMjAwMDJkMWNiN2FiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFzleAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALCDE0P3ZN7EoqjhZk90tCo7I0vyf8DhlFN/OCPkQhcJlNJUlTHO/rUR uj8+wa2fEqlR5NelSpUzQh1JutMVUkw+7EBafnCDeOGB98wReEjLhrCFhW8t1nlq X9806xIHNpS8zIArmtcMXNl0D8rzY++aA0kMQz4ZH3KgiCYdF1UOWQ8bjJliPOmW czv0uFKa7l16A3rJ7IN2nRPhf80v/ggeRfaNzbLN3tWpL+OKvR4Zo2PJgDxa3ux+ 50U6YtIYE44DbE/SElcJYoE2f1goL0/rLpvMg68WVqHbw7vdtbopqbIu90hroBvQ KZQtVEHDf/sSOQ+DnoStZ66wp0VzsU8= -----END CERTIFICATE-----Generated at Thu May 23 01:46:59 2024 by rpki-client on console-fra.rpki-client.org