$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/24ee7603-c18e-3075-87a3-2e79abe90370.roa File: 24ee7603-c18e-3075-87a3-2e79abe90370.roa (raw, json) Hash identifier: m1UeWEOlfzBQYVwBKOi7K4dyludQaTaB9LXVFXKb6s8= Subject key identifier: 11:7E:D5:E9:B3:09:71:2D:F6:28:51:F8:D2:86:B3:59:06:4B:F5:BF Certificate issuer: /CN=8ad56193-8e33-4786-9a64-949338fc325a Certificate serial: 010D0C9F43285844E7D53EB02E352E9622388380 Authority key identifier: 4A:6C:4F:37:D3:2A:B1:8E:70:1C:BD:06:EB:1B:C3:FB:6D:4E:57:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/24ee7603-c18e-3075-87a3-2e79abe90370.roa Signing time: Fri 16 Feb 2024 02:00:26 +0000 ROA not before: Fri 16 Feb 2024 02:00:26 +0000 ROA not after: Thu 16 May 2024 01:00:26 +0000 asID: 14618 IP address blocks: 209.114.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/8ad56193-8e33-4786-9a64-949338fc325a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/8ad56193-8e33-4786-9a64-949338fc325a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:e7:d5:3e:b0:2e:35:2e:96:22:38:83:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ad56193-8e33-4786-9a64-949338fc325a Validity Not Before: Feb 16 02:00:26 2024 GMT Not After : May 16 01:00:26 2024 GMT Subject: CN=996e005e-a957-4a9d-b72e-e10ee0e97ebb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:1e:59:f1:d0:83:8b:41:de:b9:02:76:40:0f: c6:6c:e3:11:14:58:6c:dc:a4:4b:da:b0:e0:3d:06: 33:fd:82:9c:00:e0:8b:e3:38:64:d4:05:dc:54:32: 55:d9:1c:98:47:4e:37:fa:21:b3:9d:2d:1b:9d:af: 72:54:69:11:b8:40:1a:63:37:87:33:55:e6:0d:25: 05:d3:b6:ae:aa:67:52:73:86:65:ef:ab:99:1c:0f: ae:19:ac:98:c2:51:3c:00:43:fc:ea:ff:9c:04:9b: 47:5f:4f:6b:61:0a:cf:e1:71:92:95:d2:c2:6e:03: d1:15:83:44:2f:6c:f9:de:01:7b:b4:ab:1c:ab:23: 98:c7:c3:c8:4a:55:2d:3b:3d:e3:35:73:e2:b0:d4: bf:eb:37:e9:9d:07:63:1b:d9:73:d6:5e:98:de:10: 0b:52:3d:0a:bc:c9:7f:30:68:42:f3:cc:5d:5e:2d: 38:33:69:86:e4:09:91:e0:fa:f5:1b:5b:62:70:19: 0a:18:21:23:55:64:ad:ff:44:0c:54:16:90:82:4f: cc:a4:80:9c:a2:62:2e:cf:fc:bf:0a:dc:d2:35:76: 3a:b3:7c:ed:3c:9f:bc:40:0f:3d:54:16:16:09:51: e5:05:5b:0b:b2:50:48:2a:1d:2e:ca:db:71:ca:61: 7b:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:7E:D5:E9:B3:09:71:2D:F6:28:51:F8:D2:86:B3:59:06:4B:F5:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/24ee7603-c18e-3075-87a3-2e79abe90370.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/8ad56193-8e33-4786-9a64-949338fc325a.crl X509v3 Authority Key Identifier: keyid:4A:6C:4F:37:D3:2A:B1:8E:70:1C:BD:06:EB:1B:C3:FB:6D:4E:57:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer sbgp-ipAddrBlock: critical IPv4: 209.114.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:57:60:4c:2c:2c:bb:b9:0f:b1:3c:14:be:8a:1e:ab:83:73: 53:99:45:bc:38:14:97:4a:7a:66:2e:98:d0:28:8a:96:3b:7f: 2f:5d:b4:76:9f:c6:12:f2:17:ed:5e:8c:55:88:25:12:a8:9b: c4:8c:d9:26:68:08:53:e0:c3:00:97:a8:31:70:e4:c0:48:f1: d2:0c:95:ea:3f:e4:0a:af:0c:b8:a5:bd:44:69:41:67:70:3c: 10:72:4f:c3:9e:b2:37:c7:10:05:77:2b:52:eb:5d:66:0a:04: 54:4b:0f:fe:fb:4c:17:03:f1:dc:b4:b8:cc:48:9c:cd:dc:0e: 22:ef:43:8f:9d:7a:bb:a2:3f:6c:80:31:27:ba:d1:32:a6:e7: c0:e4:e7:60:3a:ff:7c:34:8a:2a:a5:87:15:0a:b1:ad:12:d9: 57:09:24:fe:52:12:d4:75:81:81:7c:0b:5c:62:b1:7f:08:83: 70:b8:6e:ea:d0:4b:b3:93:fb:d1:3b:c2:af:8a:42:f2:98:cf: 12:76:f1:fc:70:f0:6a:a1:0b:8a:c7:c6:65:3c:db:6e:f3:bf: 30:c0:8a:7f:cf:3c:17:f9:86:10:e3:6f:39:1f:a2:33:ef:31: d4:b7:14:0a:77:84:39:37:fd:a1:f1:4c:0a:67:7c:a9:09:2b: 92:f5:76:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWETn1T6wLjUuliI4g4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGFkNTYxOTMtOGUzMy00Nzg2LTlhNjQtOTQ5MzM4ZmMz MjVhMB4XDTI0MDIxNjAyMDAyNloXDTI0MDUxNjAxMDAyNlowLzEtMCsGA1UEAxMk OTk2ZTAwNWUtYTk1Ny00YTlkLWI3MmUtZTEwZWUwZTk3ZWJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiR5Z8dCDi0HeuQJ2QA/GbOMRFFhs3KRL2rDg PQYz/YKcAOCL4zhk1AXcVDJV2RyYR043+iGznS0bna9yVGkRuEAaYzeHM1XmDSUF 07auqmdSc4Zl76uZHA+uGayYwlE8AEP86v+cBJtHX09rYQrP4XGSldLCbgPRFYNE L2z53gF7tKscqyOYx8PISlUtOz3jNXPisNS/6zfpnQdjG9lz1l6Y3hALUj0KvMl/ MGhC88xdXi04M2mG5AmR4Pr1G1ticBkKGCEjVWSt/0QMVBaQgk/MpICcomIuz/y/ CtzSNXY6s3ztPJ+8QA89VBYWCVHlBVsLslBIKh0uyttxymF7tQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBF+1emzCXEt9ihR+NKGs1kGS/W/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84YWQ1 NjE5My04ZTMzLTQ3ODYtOWE2NC05NDkzMzhmYzMyNWEvMjRlZTc2MDMtYzE4ZS0z MDc1LTg3YTMtMmU3OWFiZTkwMzcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGFkNTYxOTMtOGUzMy00Nzg2LTlh NjQtOTQ5MzM4ZmMzMjVhLzhhZDU2MTkzLThlMzMtNDc4Ni05YTY0LTk0OTMzOGZj MzI1YS5jcmwwHwYDVR0jBBgwFoAUSmxPN9MqsY5wHL0G6xvD+21OV+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84YWQ1NjE5My04ZTMzLTQ3ODYtOWE2NC05NDkz MzhmYzMyNWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XIAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIVXYEwsLLu5D7E8FL6KHquDc1OZRbw4FJdKemYumNAoipY7fy9dtHaf xhLyF+1ejFWIJRKom8SM2SZoCFPgwwCXqDFw5MBI8dIMleo/5AqvDLilvURpQWdw PBByT8OesjfHEAV3K1LrXWYKBFRLD/77TBcD8dy0uMxInM3cDiLvQ4+deruiP2yA MSe60TKm58Dk52A6/3w0iiqlhxUKsa0S2VcJJP5SEtR1gYF8C1xisX8Ig3C4burQ S7OT+9E7wq+KQvKYzxJ28fxw8GqhC4rHxmU8227zvzDAin/PPBf5hhDjbzkfojPv MdS3FAp3hDk3/aHxTApnfKkJK5L1dsA= -----END CERTIFICATE-----Generated at Wed May 1 19:31:54 2024 by rpki-client on console-fra.rpki-client.org