$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/8a23443d-1ed8-3d80-ac02-bd3df3d8f1b7.roa File: 8a23443d-1ed8-3d80-ac02-bd3df3d8f1b7.roa (raw, json) Hash identifier: 2DLsIJ6hm69RH0Lqk/hx2VsAYCQlDivtji5dTNBrNFY= Subject key identifier: 2C:15:07:28:C2:88:E6:F3:A5:B5:49:A8:F2:E7:2F:86:4E:41:9B:58 Certificate issuer: /CN=1add3b23-5fb0-4412-be17-98450d352516 Certificate serial: 010D0C9F43285845304D3B48BA8EF26E71FF2C80 Authority key identifier: DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/8a23443d-1ed8-3d80-ac02-bd3df3d8f1b7.roa Signing time: Wed 13 Mar 2024 01:00:26 +0000 ROA not before: Wed 13 Mar 2024 01:00:26 +0000 ROA not after: Tue 11 Jun 2024 01:00:26 +0000 asID: 400209 IP address blocks: 209.143.96.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:30:4d:3b:48:ba:8e:f2:6e:71:ff:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1add3b23-5fb0-4412-be17-98450d352516 Validity Not Before: Mar 13 01:00:26 2024 GMT Not After : Jun 11 01:00:26 2024 GMT Subject: CN=57e6e7b9-d298-4aa6-8700-37da4f973963 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:8b:4c:82:51:19:ba:9c:5d:ef:6d:2c:75:f4: 7e:64:3e:0c:34:69:5a:a0:a2:51:58:23:2c:d5:7f: 51:9d:f1:f5:f3:ec:44:95:98:18:25:ed:71:95:0b: 70:2a:ed:21:96:67:99:6b:02:f7:dd:50:d4:70:99: 3b:3f:98:fb:c5:2a:90:d4:db:8f:c4:39:a9:3c:06: 2c:3d:1e:ae:7d:29:bd:e9:aa:c2:31:e3:84:27:6f: 1c:29:70:89:06:17:8a:a9:0d:0f:44:eb:d0:11:ac: d6:50:34:da:85:68:e2:dc:85:2b:7d:92:f2:3a:7f: e3:75:47:cd:9b:20:ed:19:d3:e1:aa:4a:e7:7a:65: 9e:fe:be:e7:fb:17:8e:24:1b:4a:a3:ab:cd:ea:bb: d1:a8:64:a7:02:55:17:af:c4:f2:c1:7d:9d:2a:a6: b2:a7:a4:0a:d5:37:3b:e4:1b:66:8c:5e:f4:ce:7a: 16:3d:fc:a8:48:fd:c6:35:e8:13:df:2c:44:88:85: 68:d6:0c:72:5d:b7:7d:47:01:74:98:50:d4:e7:32: 92:b4:13:27:85:ab:15:44:1f:29:91:49:a2:a6:f6: f2:fe:21:63:44:85:18:c4:c6:93:93:e3:b5:eb:17: 40:66:a7:49:82:7f:4e:cc:64:e2:f8:cc:1f:0e:bc: 28:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:15:07:28:C2:88:E6:F3:A5:B5:49:A8:F2:E7:2F:86:4E:41:9B:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/8a23443d-1ed8-3d80-ac02-bd3df3d8f1b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl X509v3 Authority Key Identifier: keyid:DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer sbgp-ipAddrBlock: critical IPv4: 209.143.96.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:fd:9d:d1:e5:43:38:be:52:49:97:78:6d:1b:a4:a1:f4:12: dc:00:e8:b4:1e:01:71:a8:74:c1:cc:16:a4:a9:a7:a0:52:32: 14:f9:48:ea:e7:7d:c7:eb:66:82:48:a7:3a:37:e8:81:ca:16: ab:b8:0a:67:ec:2e:87:4a:33:d8:54:bf:63:b7:fc:96:c2:8c: 7c:fb:09:72:81:1f:f7:8d:3e:bf:5f:e3:4c:97:fa:dd:96:8c: b4:03:d5:c5:a8:04:f3:aa:bc:9b:3d:95:ea:87:a8:a6:93:d4: 97:4d:94:74:40:6f:f6:49:83:01:b7:22:11:fe:18:28:e3:ac: c8:db:eb:b9:8a:29:be:07:d7:af:73:fa:07:9f:2f:26:d1:0d: c6:d5:70:b4:82:98:09:58:33:61:93:5f:e0:cd:7d:11:20:1a: 25:fd:c9:b7:25:10:76:cd:74:ce:83:45:ec:12:24:68:64:49: 21:9b:40:88:44:de:55:38:c5:e8:3d:4b:ff:35:33:08:01:1f: 3b:ba:a5:b5:2c:00:71:e6:33:d7:b3:2a:6a:c2:7a:7d:91:ad: f3:38:ce:c7:1c:ac:cf:bc:26:f4:00:62:b0:e9:41:e5:9a:d7: 3f:25:7e:f2:93:a2:93:30:08:6c:b2:02:eb:99:79:1d:c6:4f: 2d:e3:04:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUwTTtIuo7ybnH/LIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFkZDNiMjMtNWZiMC00NDEyLWJlMTctOTg0NTBkMzUy NTE2MB4XDTI0MDMxMzAxMDAyNloXDTI0MDYxMTAxMDAyNlowLzEtMCsGA1UEAxMk NTdlNmU3YjktZDI5OC00YWE2LTg3MDAtMzdkYTRmOTczOTYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxItMglEZupxd720sdfR+ZD4MNGlaoKJRWCMs 1X9RnfH18+xElZgYJe1xlQtwKu0hlmeZawL33VDUcJk7P5j7xSqQ1NuPxDmpPAYs PR6ufSm96arCMeOEJ28cKXCJBheKqQ0PROvQEazWUDTahWji3IUrfZLyOn/jdUfN myDtGdPhqkrnemWe/r7n+xeOJBtKo6vN6rvRqGSnAlUXr8TywX2dKqayp6QK1Tc7 5BtmjF70znoWPfyoSP3GNegT3yxEiIVo1gxyXbd9RwF0mFDU5zKStBMnhasVRB8p kUmipvby/iFjRIUYxMaTk+O16xdAZqdJgn9OzGTi+MwfDrwojwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCwVByjCiObzpbVJqPLnL4ZOQZtYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xYWRk M2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1MGQzNTI1MTYvOGEyMzQ0M2QtMWVkOC0z ZDgwLWFjMDItYmQzZGYzZDhmMWI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMWFkZDNiMjMtNWZiMC00NDEyLWJl MTctOTg0NTBkMzUyNTE2LzFhZGQzYjIzLTVmYjAtNDQxMi1iZTE3LTk4NDUwZDM1 MjUxNi5jcmwwHwYDVR0jBBgwFoAU39arNQjEZ6Npjktd6od4wHodjiYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xYWRkM2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1 MGQzNTI1MTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0Y9gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAT9ndHlQzi+UkmXeG0bpKH0EtwA6LQeAXGodMHMFqSpp6BSMhT5SOrn fcfrZoJIpzo36IHKFqu4CmfsLodKM9hUv2O3/JbCjHz7CXKBH/eNPr9f40yX+t2W jLQD1cWoBPOqvJs9leqHqKaT1JdNlHRAb/ZJgwG3IhH+GCjjrMjb67mKKb4H169z +gefLybRDcbVcLSCmAlYM2GTX+DNfREgGiX9ybclEHbNdM6DRewSJGhkSSGbQIhE 3lU4xeg9S/81MwgBHzu6pbUsAHHmM9ezKmrCen2RrfM4zsccrM+8JvQAYrDpQeWa 1z8lfvKTopMwCGyyAuuZeR3GTy3jBHM= -----END CERTIFICATE-----Generated at Tue May 7 21:40:26 2024 by rpki-client on console-ams.rpki-client.org