$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/6910e57a-19e1-35c1-a202-faf2127b1fe1.roa File: 6910e57a-19e1-35c1-a202-faf2127b1fe1.roa (raw, json) Hash identifier: aEv/x1C58OariyHvxGCxUxRvMA8j/M/Dcxo1jHslsEw= Subject key identifier: D5:06:DE:D6:F3:E9:F5:EF:6C:61:62:A4:FC:10:DD:F4:16:AF:51:74 Certificate issuer: /CN=8ad56193-8e33-4786-9a64-949338fc325a Certificate serial: 010D0C9F43285844E7D53EC89BA881FACDFF3680 Authority key identifier: 4A:6C:4F:37:D3:2A:B1:8E:70:1C:BD:06:EB:1B:C3:FB:6D:4E:57:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/6910e57a-19e1-35c1-a202-faf2127b1fe1.roa Signing time: Fri 16 Feb 2024 02:00:26 +0000 ROA not before: Fri 16 Feb 2024 02:00:26 +0000 ROA not after: Thu 16 May 2024 01:00:26 +0000 asID: 16509 IP address blocks: 209.114.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/8ad56193-8e33-4786-9a64-949338fc325a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/8ad56193-8e33-4786-9a64-949338fc325a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:e7:d5:3e:c8:9b:a8:81:fa:cd:ff:36:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ad56193-8e33-4786-9a64-949338fc325a Validity Not Before: Feb 16 02:00:26 2024 GMT Not After : May 16 01:00:26 2024 GMT Subject: CN=030b7c70-3ac0-4d09-99ec-f39650ba75fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:a8:90:c4:63:84:ea:3c:e2:35:27:37:59:cc: 3c:9b:56:c5:66:03:06:e7:d2:d8:ac:2b:ff:92:f7: 28:58:d4:d2:8d:0a:de:d4:07:45:6f:8c:d8:a4:0c: c5:8f:dd:ce:b2:26:3f:80:f8:e5:bd:d7:ab:57:ab: 75:78:24:f0:fa:1a:ca:bc:80:39:d0:69:bf:cb:cd: 9a:81:9a:73:9b:e5:a5:ba:37:2d:b0:3c:e5:26:22: df:54:b3:ec:fd:84:16:39:a6:99:a2:c1:8a:9b:df: 63:63:f6:1e:a7:38:3e:7b:b9:57:58:66:f7:1a:ad: be:7e:a7:da:52:77:c0:7d:9c:de:90:5b:63:da:78: 5c:b5:63:ee:a8:e0:6e:27:e0:07:5b:62:68:d3:5d: 1a:7f:58:9c:d4:68:8f:e1:43:4d:a9:71:f8:d8:ee: fe:af:ce:5b:27:e0:92:db:6d:24:8e:e4:cd:1a:0f: 76:ae:14:a1:59:fb:04:ee:f1:92:ef:18:e6:2d:7d: 41:81:b6:9e:41:a4:20:9d:3e:ae:c5:44:05:6f:8f: ad:58:ed:83:53:c8:65:d4:25:02:f0:fb:37:12:5d: 58:64:3e:bb:42:10:ec:6c:47:52:6a:d9:e8:3c:46: cc:0e:dc:14:1b:c5:52:3c:7f:fa:e3:87:ad:4a:c2: bd:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:06:DE:D6:F3:E9:F5:EF:6C:61:62:A4:FC:10:DD:F4:16:AF:51:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/6910e57a-19e1-35c1-a202-faf2127b1fe1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/8ad56193-8e33-4786-9a64-949338fc325a.crl X509v3 Authority Key Identifier: keyid:4A:6C:4F:37:D3:2A:B1:8E:70:1C:BD:06:EB:1B:C3:FB:6D:4E:57:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer sbgp-ipAddrBlock: critical IPv4: 209.114.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:5a:05:1a:96:06:e1:06:e9:21:7c:f1:f6:61:83:f3:70:12: 45:db:e5:a9:6d:2f:49:6c:89:11:9a:55:b6:b9:e3:37:09:0f: 57:40:38:9f:34:67:5f:e2:c6:3e:e3:ca:de:95:7c:3a:7a:4d: f1:7a:b2:f6:85:40:bb:31:15:61:f3:88:c7:78:86:b2:d9:93: e8:8f:cf:a3:be:d2:4b:6c:13:0e:c9:09:1e:10:7a:7c:dd:6b: 67:75:90:71:4d:88:9f:32:3b:46:06:70:7c:13:69:b7:22:4e: 4d:06:8e:5b:9d:be:5d:f2:fb:67:b2:05:b1:6a:92:ae:d0:7c: f9:05:8d:7d:8e:09:48:0f:72:9b:63:78:09:a9:61:5a:47:40: 36:99:cf:4e:ba:24:60:3a:9c:b2:54:76:f7:eb:74:ca:f5:00: 3d:f2:67:48:ac:d5:cb:d5:6c:9f:85:21:3c:2e:b5:14:61:6d: 4d:3d:ee:7c:f5:c3:90:c1:55:88:47:fb:ce:14:02:2f:f7:d8: 43:19:30:8d:86:4e:56:83:f6:f1:ed:9b:b9:4c:f1:4d:55:37: 78:bc:40:48:c9:5a:70:d6:48:d8:46:5b:0d:24:89:9a:db:4a: 68:35:a2:f9:22:f4:3b:ea:97:92:f0:ad:dc:a6:d9:8b:15:65: 03:f3:f7:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWETn1T7Im6iB+s3/NoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGFkNTYxOTMtOGUzMy00Nzg2LTlhNjQtOTQ5MzM4ZmMz MjVhMB4XDTI0MDIxNjAyMDAyNloXDTI0MDUxNjAxMDAyNlowLzEtMCsGA1UEAxMk MDMwYjdjNzAtM2FjMC00ZDA5LTk5ZWMtZjM5NjUwYmE3NWZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8aiQxGOE6jziNSc3Wcw8m1bFZgMG59LYrCv/ kvcoWNTSjQre1AdFb4zYpAzFj93OsiY/gPjlvderV6t1eCTw+hrKvIA50Gm/y82a gZpzm+WlujctsDzlJiLfVLPs/YQWOaaZosGKm99jY/Yepzg+e7lXWGb3Gq2+fqfa UnfAfZzekFtj2nhctWPuqOBuJ+AHW2Jo010af1ic1GiP4UNNqXH42O7+r85bJ+CS 220kjuTNGg92rhShWfsE7vGS7xjmLX1BgbaeQaQgnT6uxUQFb4+tWO2DU8hl1CUC 8Ps3El1YZD67QhDsbEdSatnoPEbMDtwUG8VSPH/644etSsK9VQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNUG3tbz6fXvbGFipPwQ3fQWr1F0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84YWQ1 NjE5My04ZTMzLTQ3ODYtOWE2NC05NDkzMzhmYzMyNWEvNjkxMGU1N2EtMTllMS0z NWMxLWEyMDItZmFmMjEyN2IxZmUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGFkNTYxOTMtOGUzMy00Nzg2LTlh NjQtOTQ5MzM4ZmMzMjVhLzhhZDU2MTkzLThlMzMtNDc4Ni05YTY0LTk0OTMzOGZj MzI1YS5jcmwwHwYDVR0jBBgwFoAUSmxPN9MqsY5wHL0G6xvD+21OV+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84YWQ1NjE5My04ZTMzLTQ3ODYtOWE2NC05NDkz MzhmYzMyNWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XIAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJZaBRqWBuEG6SF88fZhg/NwEkXb5altL0lsiRGaVba54zcJD1dAOJ80 Z1/ixj7jyt6VfDp6TfF6svaFQLsxFWHziMd4hrLZk+iPz6O+0ktsEw7JCR4Qenzd a2d1kHFNiJ8yO0YGcHwTabciTk0Gjludvl3y+2eyBbFqkq7QfPkFjX2OCUgPcptj eAmpYVpHQDaZz066JGA6nLJUdvfrdMr1AD3yZ0is1cvVbJ+FITwutRRhbU097nz1 w5DBVYhH+84UAi/32EMZMI2GTlaD9vHtm7lM8U1VN3i8QEjJWnDWSNhGWw0kiZrb Smg1ovki9Dvql5Lwrdym2YsVZQPz998= -----END CERTIFICATE-----Generated at Thu May 2 15:00:17 2024 by rpki-client on console-ams.rpki-client.org