$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/f96003a4-5e6a-3408-ad84-035ada29fedc.roa File: f96003a4-5e6a-3408-ad84-035ada29fedc.roa (raw, json) Hash identifier: 8WyXgGLredGyaOymIbyDDFCX+PoSkkkCxm6PqA7xmB8= Subject key identifier: 23:85:27:D1:46:4A:2F:13:4F:74:E9:80:EA:9A:F1:CE:7C:2F:50:19 Certificate issuer: /CN=1add3b23-5fb0-4412-be17-98450d352516 Certificate serial: 010D0C9F432858452EE7EC06D78E96E25113F9C0 Authority key identifier: DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/f96003a4-5e6a-3408-ad84-035ada29fedc.roa Signing time: Tue 12 Mar 2024 13:00:28 +0000 ROA not before: Tue 12 Mar 2024 13:00:28 +0000 ROA not after: Mon 10 Jun 2024 13:00:28 +0000 asID: 399635 IP address blocks: 209.221.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:2e:e7:ec:06:d7:8e:96:e2:51:13:f9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1add3b23-5fb0-4412-be17-98450d352516 Validity Not Before: Mar 12 13:00:28 2024 GMT Not After : Jun 10 13:00:28 2024 GMT Subject: CN=c880feea-db70-49b3-ad41-f9040596edb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:21:06:86:df:bd:61:68:79:9b:ce:4f:10:40: 89:21:23:16:b5:26:c1:83:50:ce:fe:1f:a0:13:56: 4a:b8:71:1a:91:49:47:50:89:b7:80:84:f7:d2:ed: c0:62:c7:23:bb:2f:6a:d6:8c:b9:51:e0:de:e1:28: b3:97:79:bd:f6:87:39:0d:2f:66:6d:92:0b:88:15: fe:43:f7:3c:27:d0:80:c5:fe:b1:2e:9a:1c:26:f3: bf:f4:7a:e7:5b:d1:ff:de:83:bb:21:9d:c0:2e:a3: 92:d7:4a:29:cb:a9:36:a3:94:5f:16:f1:34:66:1b: ae:8d:19:8c:fd:8a:8d:d5:61:2d:45:4a:12:f3:c2: ea:1f:51:aa:32:84:ce:6e:95:1c:d9:b0:31:e0:74: de:ee:95:d0:df:27:d7:1e:a8:8a:47:24:c8:2f:d9: 31:91:f4:3d:bb:81:61:a0:0a:56:6d:2d:75:82:b1: 66:3a:8a:68:88:58:1c:3f:0f:b5:bf:58:da:c1:4e: 26:7e:6c:00:d9:f2:17:95:d7:28:47:aa:63:f0:01: 79:53:4c:af:02:37:27:9c:cc:fb:1f:78:fc:85:46: 0b:31:d6:0b:db:5a:0d:0a:45:7d:f9:46:5f:5f:82: 69:75:9d:04:59:fa:cb:79:bd:54:cc:eb:36:86:29: b9:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:85:27:D1:46:4A:2F:13:4F:74:E9:80:EA:9A:F1:CE:7C:2F:50:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/f96003a4-5e6a-3408-ad84-035ada29fedc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl X509v3 Authority Key Identifier: keyid:DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer sbgp-ipAddrBlock: critical IPv4: 209.221.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:28:6e:e8:39:c6:04:83:84:5c:d5:1c:42:fa:25:b6:45:8b: 90:4d:f1:b8:e4:cb:ad:b7:a4:3a:81:38:ca:e4:01:42:06:a8: 95:13:ed:69:b8:a2:1e:31:f1:12:26:36:dd:62:83:aa:8e:d8: b7:f8:eb:42:4e:4e:a1:f0:cf:3c:f4:23:44:bd:8d:05:58:2f: 01:d5:ca:f7:63:f6:d0:b5:8c:2d:ef:8d:a8:55:e5:c1:85:ec: 42:0a:d5:45:bc:a3:b5:9f:a4:06:5f:ef:c9:59:24:a5:4a:d0: ec:3c:99:38:a8:db:11:59:e5:2b:ee:49:00:40:16:5d:1c:e4: 51:52:0c:30:15:53:83:81:7d:08:65:93:87:45:f1:f7:7a:82: ea:8f:fa:44:91:fb:97:92:55:45:46:99:f3:ad:d5:70:0f:24: c2:29:ed:70:dd:30:2e:3b:7d:0d:44:c2:09:4b:91:48:a5:45: b9:02:9a:f5:a0:7d:d3:5d:25:77:cc:2b:62:14:62:30:8a:e2: ad:46:8f:b2:a6:44:a4:0d:40:92:4c:e1:8e:4b:08:38:81:b0: d9:45:3f:9d:81:9b:e4:82:8f:45:7f:d1:70:d0:49:cf:f4:9e: d4:a2:1e:a0:f4:05:05:1c:3c:98:e2:aa:3f:86:27:bc:19:66: 5e:ba:bf:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUu5+wG146W4lET+cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFkZDNiMjMtNWZiMC00NDEyLWJlMTctOTg0NTBkMzUy NTE2MB4XDTI0MDMxMjEzMDAyOFoXDTI0MDYxMDEzMDAyOFowLzEtMCsGA1UEAxMk Yzg4MGZlZWEtZGI3MC00OWIzLWFkNDEtZjkwNDA1OTZlZGI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6CEGht+9YWh5m85PEECJISMWtSbBg1DO/h+g E1ZKuHEakUlHUIm3gIT30u3AYscjuy9q1oy5UeDe4Sizl3m99oc5DS9mbZILiBX+ Q/c8J9CAxf6xLpocJvO/9HrnW9H/3oO7IZ3ALqOS10opy6k2o5RfFvE0ZhuujRmM /YqN1WEtRUoS88LqH1GqMoTObpUc2bAx4HTe7pXQ3yfXHqiKRyTIL9kxkfQ9u4Fh oApWbS11grFmOopoiFgcPw+1v1jawU4mfmwA2fIXldcoR6pj8AF5U0yvAjcnnMz7 H3j8hUYLMdYL21oNCkV9+UZfX4JpdZ0EWfrLeb1UzOs2him5EwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCOFJ9FGSi8TT3TpgOqa8c58L1AZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xYWRk M2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1MGQzNTI1MTYvZjk2MDAzYTQtNWU2YS0z NDA4LWFkODQtMDM1YWRhMjlmZWRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMWFkZDNiMjMtNWZiMC00NDEyLWJl MTctOTg0NTBkMzUyNTE2LzFhZGQzYjIzLTVmYjAtNDQxMi1iZTE3LTk4NDUwZDM1 MjUxNi5jcmwwHwYDVR0jBBgwFoAU39arNQjEZ6Npjktd6od4wHodjiYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xYWRkM2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1 MGQzNTI1MTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0d0dMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFkobug5xgSDhFzVHEL6JbZFi5BN8bjky623pDqBOMrkAUIGqJUT7Wm4 oh4x8RImNt1ig6qO2Lf460JOTqHwzzz0I0S9jQVYLwHVyvdj9tC1jC3vjahV5cGF 7EIK1UW8o7WfpAZf78lZJKVK0Ow8mTio2xFZ5SvuSQBAFl0c5FFSDDAVU4OBfQhl k4dF8fd6guqP+kSR+5eSVUVGmfOt1XAPJMIp7XDdMC47fQ1EwglLkUilRbkCmvWg fdNdJXfMK2IUYjCK4q1Gj7KmRKQNQJJM4Y5LCDiBsNlFP52Bm+SCj0V/0XDQSc/0 ntSiHqD0BQUcPJjiqj+GJ7wZZl66v4k= -----END CERTIFICATE-----Generated at Thu May 23 06:39:39 2024 by rpki-client on console-ams.rpki-client.org