$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/3a315f55-20c2-37ff-b50f-af30c5811ce0.roa File: 3a315f55-20c2-37ff-b50f-af30c5811ce0.roa (raw, json) Hash identifier: jtUY5fUJZ15k8I94Hky5N9Ibqtvbncu+Ba3tdaqeDvg= Subject key identifier: 38:A3:3B:12:77:CE:78:D9:A4:D5:CE:3F:92:4F:3D:02:52:C5:F4:C7 Certificate issuer: /CN=8ad56193-8e33-4786-9a64-949338fc325a Certificate serial: 010D0C9F432858453E42A4EDF1426949AF073A40 Authority key identifier: 4A:6C:4F:37:D3:2A:B1:8E:70:1C:BD:06:EB:1B:C3:FB:6D:4E:57:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/3a315f55-20c2-37ff-b50f-af30c5811ce0.roa Signing time: Mon 18 Mar 2024 01:00:25 +0000 ROA not before: Mon 18 Mar 2024 01:00:25 +0000 ROA not after: Sun 16 Jun 2024 01:00:25 +0000 asID: 7018 IP address blocks: 209.114.16.0/20 maxlen: 24 209.114.8.0/21 maxlen: 24 209.114.4.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/8ad56193-8e33-4786-9a64-949338fc325a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/8ad56193-8e33-4786-9a64-949338fc325a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 05 May 2024 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:3e:42:a4:ed:f1:42:69:49:af:07:3a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ad56193-8e33-4786-9a64-949338fc325a Validity Not Before: Mar 18 01:00:25 2024 GMT Not After : Jun 16 01:00:25 2024 GMT Subject: CN=c4b82430-cfbb-4840-9d92-46cdb3c4f7e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:70:a8:bf:80:2a:58:6c:ab:b1:47:df:f1:b1: 16:e5:38:9d:c6:e8:7f:7c:59:29:94:46:80:1e:b7: a9:ce:33:6f:ec:f5:c9:a9:7d:61:2a:de:e4:d3:f1: 40:bb:0e:5a:87:95:f4:c5:50:6d:c7:31:18:53:98: d8:8a:70:35:30:52:84:50:da:23:25:91:28:d2:04: 8a:3e:e0:95:8a:df:54:c2:9e:6a:8f:9d:78:94:5d: 3c:a0:08:d8:68:48:ab:87:c3:1e:30:4c:d8:7e:dd: ac:62:88:fd:35:31:f6:03:c9:65:d3:43:73:4e:f6: 96:e3:56:c8:9c:fd:45:08:1d:e3:4b:fa:d6:53:f8: da:0a:0c:ee:ae:1f:75:eb:72:40:2f:34:14:2e:99: ff:c5:40:64:1e:df:a5:5a:89:76:63:6e:ea:e3:85: 8e:67:80:cc:95:ef:6f:1a:a4:9f:43:29:22:e7:69: 81:3b:1e:63:a6:9e:24:e5:36:67:58:58:49:a9:d6: bb:24:f2:0d:99:69:2d:08:24:94:d9:31:dc:eb:be: 71:a4:94:db:7c:d7:b7:84:9e:18:39:07:7b:e4:c9: 2e:62:5b:7e:cc:54:24:69:a7:13:19:69:58:81:37: ea:76:72:b0:d0:7f:d7:38:99:be:6b:17:29:ba:af: ea:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:A3:3B:12:77:CE:78:D9:A4:D5:CE:3F:92:4F:3D:02:52:C5:F4:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/3a315f55-20c2-37ff-b50f-af30c5811ce0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/8ad56193-8e33-4786-9a64-949338fc325a.crl X509v3 Authority Key Identifier: keyid:4A:6C:4F:37:D3:2A:B1:8E:70:1C:BD:06:EB:1B:C3:FB:6D:4E:57:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer sbgp-ipAddrBlock: critical IPv4: 209.114.4.0-209.114.31.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:61:37:1f:ac:ea:87:15:5a:d7:88:2b:e2:5e:a5:42:00:70: 35:c0:41:c9:53:68:b7:cf:eb:a4:6a:b7:c8:6e:b2:6e:44:51: a6:9d:0a:36:f5:ec:0a:db:b1:3a:20:17:ab:9a:4a:78:2e:70: 4b:7b:fa:ce:bf:86:24:76:bb:ba:fb:ab:d2:e5:09:5a:3a:6b: c7:14:ac:f3:90:3f:57:e5:18:38:6a:13:1e:98:f4:fa:98:f5: 10:40:ef:20:02:00:20:f7:2d:01:a8:2d:8d:a3:79:a6:a4:b2: 7f:f7:e7:ff:7f:74:ba:32:a3:99:eb:cf:fe:4a:c4:fc:ab:eb: 76:e2:3e:49:19:29:60:1a:a8:3e:55:34:06:3a:a1:78:c7:ce: 29:19:0f:ae:e3:c0:13:6b:cc:62:f0:92:a3:11:c4:7f:ef:73: 0c:1c:f2:35:f6:7a:49:bb:50:67:28:56:b5:be:fe:0c:82:09: 68:47:24:9a:77:8b:ac:5e:00:24:3d:e6:5e:06:b8:63:30:21: 20:c2:da:f0:d0:77:2e:4c:46:ac:96:9f:09:20:71:21:44:33: 89:4e:49:ad:35:c8:e9:ea:f5:61:e9:2d:1f:bf:f8:a4:2c:47: ba:0c:ae:b5:a0:72:cb:c4:5f:e4:b7:50:ab:fb:47:d5:ef:91: e8:0d:64:f2 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEU+QqTt8UJpSa8HOkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGFkNTYxOTMtOGUzMy00Nzg2LTlhNjQtOTQ5MzM4ZmMz MjVhMB4XDTI0MDMxODAxMDAyNVoXDTI0MDYxNjAxMDAyNVowLzEtMCsGA1UEAxMk YzRiODI0MzAtY2ZiYi00ODQwLTlkOTItNDZjZGIzYzRmN2U3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3Cov4AqWGyrsUff8bEW5Tidxuh/fFkplEaA HrepzjNv7PXJqX1hKt7k0/FAuw5ah5X0xVBtxzEYU5jYinA1MFKEUNojJZEo0gSK PuCVit9Uwp5qj514lF08oAjYaEirh8MeMEzYft2sYoj9NTH2A8ll00NzTvaW41bI nP1FCB3jS/rWU/jaCgzurh9163JALzQULpn/xUBkHt+lWol2Y27q44WOZ4DMle9v GqSfQyki52mBOx5jpp4k5TZnWFhJqda7JPINmWktCCSU2THc675xpJTbfNe3hJ4Y OQd75MkuYlt+zFQkaacTGWlYgTfqdnKw0H/XOJm+axcpuq/q5QIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFDijOxJ3znjZpNXOP5JPPQJSxfTHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84YWQ1 NjE5My04ZTMzLTQ3ODYtOWE2NC05NDkzMzhmYzMyNWEvM2EzMTVmNTUtMjBjMi0z N2ZmLWI1MGYtYWYzMGM1ODExY2UwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGFkNTYxOTMtOGUzMy00Nzg2LTlh NjQtOTQ5MzM4ZmMzMjVhLzhhZDU2MTkzLThlMzMtNDc4Ni05YTY0LTk0OTMzOGZj MzI1YS5jcmwwHwYDVR0jBBgwFoAUSmxPN9MqsY5wHL0G6xvD+21OV+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84YWQ1NjE5My04ZTMzLTQ3ODYtOWE2NC05NDkz MzhmYzMyNWEuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBALRcgQD BAXRcgAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAhWE3H6zqhxVa14gr4l6lQgBwNcBByVNot8/rpGq3yG6y bkRRpp0KNvXsCtuxOiAXq5pKeC5wS3v6zr+GJHa7uvur0uUJWjprxxSs85A/V+UY OGoTHpj0+pj1EEDvIAIAIPctAagtjaN5pqSyf/fn/390ujKjmevP/krE/KvrduI+ SRkpYBqoPlU0BjqheMfOKRkPruPAE2vMYvCSoxHEf+9zDBzyNfZ6SbtQZyhWtb7+ DIIJaEckmneLrF4AJD3mXga4YzAhIMLa8NB3LkxGrJafCSBxIUQziU5JrTXI6er1 YektH7/4pCxHugyutaByy8Rf5LdQq/tH1e+R6A1k8g== -----END CERTIFICATE-----Generated at Sat May 4 15:06:00 2024 by rpki-client on console-ams.rpki-client.org