$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/a6ee2e1c-26d1-3a09-9706-396a7b477d5a.roa File: a6ee2e1c-26d1-3a09-9706-396a7b477d5a.roa (raw, json) Hash identifier: O8vAKD1RyvZESbDqwqiQin93xhvAABW85lkNoZ9Lfs0= Subject key identifier: C6:01:A5:BD:9C:D3:5E:E9:30:57:C2:50:48:75:C0:4C:F2:FB:DD:83 Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Certificate serial: 010D0C9F432858457D1326D16127E45230B99840 Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/a6ee2e1c-26d1-3a09-9706-396a7b477d5a.roa Signing time: Tue 09 Apr 2024 13:00:34 +0000 ROA not before: Tue 09 Apr 2024 13:00:34 +0000 ROA not after: Mon 08 Jul 2024 13:00:34 +0000 asID: 31713 IP address blocks: 209.9.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 May 2024 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:7d:13:26:d1:61:27:e4:52:30:b9:98:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Validity Not Before: Apr 9 13:00:34 2024 GMT Not After : Jul 8 13:00:34 2024 GMT Subject: CN=0584c829-2f41-4265-83a2-596d470cf904 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:57:28:cc:d7:98:69:6f:3a:07:71:d2:ea:8c: f2:41:77:e8:a2:04:8c:a1:a3:f1:2b:13:23:9a:2e: 23:52:5d:62:92:66:4e:d6:da:44:c7:9f:97:40:15: 04:3d:66:4b:77:e5:af:56:e6:34:c3:d9:95:ad:71: 1a:12:d2:e9:8c:1c:23:a7:74:e7:5b:0d:27:32:fa: 50:a8:11:3f:b9:af:44:a5:6a:9d:40:89:7f:a5:ec: ad:71:d5:c5:1c:e8:83:9b:41:aa:57:46:9f:6c:70: e1:52:c7:0b:ea:d2:dc:af:b2:31:aa:48:cc:d1:47: d6:b9:9d:d3:26:da:4f:d5:79:a6:4d:96:c5:c8:d8: a7:a0:10:76:a2:37:1f:e1:bb:6e:e9:08:3b:51:56: 3a:c7:fe:58:4c:09:2f:77:86:6d:0c:60:23:a4:03: 85:72:15:49:41:4f:8a:ee:f1:40:e4:8e:b9:30:92: 21:c0:82:18:88:45:0e:4f:2a:8f:96:f3:1f:a6:53: 06:f2:3d:f5:5d:5b:d2:2d:9b:1e:01:51:5b:08:da: 50:4c:64:b6:09:47:88:73:5b:c5:fd:bf:44:21:55: 80:45:f2:ac:1d:0d:60:c7:68:2a:fb:a4:0d:9a:ce: 97:9c:35:67:11:e5:71:d9:90:ae:e9:be:37:40:d0: 43:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:01:A5:BD:9C:D3:5E:E9:30:57:C2:50:48:75:C0:4C:F2:FB:DD:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/a6ee2e1c-26d1-3a09-9706-396a7b477d5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl X509v3 Authority Key Identifier: keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer sbgp-ipAddrBlock: critical IPv4: 209.9.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:5b:1d:df:16:80:5e:8b:cd:fd:7f:15:99:5c:55:ce:98:20: 5a:35:4e:df:7d:0a:d6:55:3c:99:dc:cc:2a:a2:4d:67:3e:6f: 8b:9e:02:b8:ae:e6:89:69:be:dc:03:bc:52:35:67:23:0c:aa: c7:8b:ad:79:36:c2:65:36:2f:de:34:af:5a:1f:d4:08:44:2f: 50:83:87:e8:06:24:72:c4:37:30:30:f2:8e:7f:71:73:a3:67: 27:81:a6:5d:e1:a2:f9:4a:1b:7a:7b:cd:8c:83:78:a0:c5:82: 6d:4a:ed:1c:bb:1a:e3:ca:ad:fa:73:bf:a3:5a:6c:42:bf:dc: 35:97:44:e3:f0:b2:ac:47:9c:25:b9:fa:7d:13:83:db:45:1a: 29:38:fb:fa:e2:d0:86:da:e8:c2:f5:c1:a9:8c:79:79:73:85: e1:e1:b6:a3:33:b7:95:30:7c:cc:bc:97:b5:ee:e7:e6:0e:09: 7e:d3:a5:cd:5f:d4:eb:dc:0e:d7:f8:c0:d9:ed:7a:6a:36:7f: f3:d1:34:be:2b:a8:06:2d:35:a2:73:c5:14:99:45:29:2c:6a: b9:23:6f:b2:8d:c9:60:80:f5:94:48:54:ef:c3:9c:41:07:45: c6:3c:10:5f:e3:e8:c5:25:af:0c:04:44:93:67:c5:99:6a:3b: e0:0a:91:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEV9EybRYSfkUjC5mEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDUzOWU0OTAtZjYyYy00YmQzLThmMjgtYzg4ZWRhMjIw YzQ4MB4XDTI0MDQwOTEzMDAzNFoXDTI0MDcwODEzMDAzNFowLzEtMCsGA1UEAxMk MDU4NGM4MjktMmY0MS00MjY1LTgzYTItNTk2ZDQ3MGNmOTA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAilcozNeYaW86B3HS6ozyQXfoogSMoaPxKxMj mi4jUl1ikmZO1tpEx5+XQBUEPWZLd+WvVuY0w9mVrXEaEtLpjBwjp3TnWw0nMvpQ qBE/ua9EpWqdQIl/peytcdXFHOiDm0GqV0afbHDhUscL6tLcr7IxqkjM0UfWuZ3T JtpP1XmmTZbFyNinoBB2ojcf4btu6Qg7UVY6x/5YTAkvd4ZtDGAjpAOFchVJQU+K 7vFA5I65MJIhwIIYiEUOTyqPlvMfplMG8j31XVvSLZseAVFbCNpQTGS2CUeIc1vF /b9EIVWARfKsHQ1gx2gq+6QNms6XnDVnEeVx2ZCu6b43QNBDbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMYBpb2c017pMFfCUEh1wEzy+92DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5 ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhlZGEyMjBjNDgvYTZlZTJlMWMtMjZkMS0z YTA5LTk3MDYtMzk2YTdiNDc3ZDVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDUzOWU0OTAtZjYyYy00YmQzLThm MjgtYzg4ZWRhMjIwYzQ4LzA1MzllNDkwLWY2MmMtNGJkMy04ZjI4LWM4OGVkYTIy MGM0OC5jcmwwHwYDVR0jBBgwFoAU0ToQMzWxBhO5Z5LsPpF3qYEVn+cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhl ZGEyMjBjNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0QkUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJFbHd8WgF6Lzf1/FZlcVc6YIFo1Tt99CtZVPJnczCqiTWc+b4ueAriu 5olpvtwDvFI1ZyMMqseLrXk2wmU2L940r1of1AhEL1CDh+gGJHLENzAw8o5/cXOj ZyeBpl3hovlKG3p7zYyDeKDFgm1K7Ry7GuPKrfpzv6NabEK/3DWXROPwsqxHnCW5 +n0Tg9tFGik4+/ri0Iba6ML1wamMeXlzheHhtqMzt5UwfMy8l7Xu5+YOCX7Tpc1f 1OvcDtf4wNntemo2f/PRNL4rqAYtNaJzxRSZRSksarkjb7KNyWCA9ZRIVO/DnEEH RcY8EF/j6MUlrwwERJNnxZlqO+AKkZM= -----END CERTIFICATE-----Generated at Wed May 8 18:24:04 2024 by rpki-client on console-fra.rpki-client.org