$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2c57870d-1148-344a-840e-d0c0263d5867.roa File: 2c57870d-1148-344a-840e-d0c0263d5867.roa (raw, json) Hash identifier: AnIHh+UchVjAEMld8Dv7mQJxYnKVtNWJZwW/ESIvKXI= Subject key identifier: 2E:12:2D:D8:F1:DA:D3:E5:71:4F:F7:64:B9:9C:35:B9:9C:64:CC:06 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858456128485BDE6FF6D67D939600 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2c57870d-1148-344a-840e-d0c0263d5867.roa Signing time: Sat 30 Mar 2024 13:00:38 +0000 ROA not before: Sat 30 Mar 2024 13:00:38 +0000 ROA not after: Fri 28 Jun 2024 13:00:38 +0000 asID: 36183 IP address blocks: 172.225.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 May 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:61:28:48:5b:de:6f:f6:d6:7d:93:96:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 30 13:00:38 2024 GMT Not After : Jun 28 13:00:38 2024 GMT Subject: CN=9b3588f4-0ef8-4861-bd07-1a4181996c5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:0f:b0:8a:14:5f:27:26:d5:37:de:69:ae:49: 35:38:6e:c6:e5:c7:a5:9a:78:e9:af:dd:72:95:8d: 52:90:c9:df:fa:d9:38:44:fa:1a:5d:64:37:b3:d5: e9:e5:21:ab:d4:5f:d7:17:92:37:65:2f:dc:c5:25: a0:69:dd:42:7f:c6:03:6d:ea:c1:dd:6f:f4:09:02: 39:a4:80:de:bb:a5:1e:6a:99:f9:f2:41:82:3c:45: 75:48:a3:66:82:bc:e1:b0:67:83:4a:7c:a0:e0:4a: 8e:b4:8e:d1:96:ca:0d:51:58:34:b9:b9:b7:9f:c9: f2:92:3f:c3:99:a6:93:21:41:17:bf:b3:fe:39:8f: ef:d9:4d:91:d1:1c:91:5c:17:04:50:ba:2b:64:63: db:d7:a8:56:e6:1e:1e:77:e4:85:6c:c3:02:1c:67: 07:1b:0d:34:cb:b3:3a:ea:89:a6:9e:fb:91:b4:b5: 70:05:5c:c0:02:6b:82:cb:4a:83:a9:53:37:6e:7c: 14:1c:35:a9:a5:26:fb:cc:77:03:0b:5d:2c:aa:85: 7e:98:98:ac:f7:a4:8d:2b:b0:e2:3b:18:65:d8:55: c1:3f:7c:01:79:b9:73:f9:cd:36:49:f6:23:78:08: f9:19:fd:89:28:54:b2:a9:44:42:f7:da:5f:6d:df: ab:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:12:2D:D8:F1:DA:D3:E5:71:4F:F7:64:B9:9C:35:B9:9C:64:CC:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2c57870d-1148-344a-840e-d0c0263d5867.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:81:71:9a:00:e8:51:1a:a9:ec:78:42:be:d1:cc:02:8f:b1: 4c:97:5d:a5:09:b2:89:53:ae:cb:af:df:b2:8c:f4:39:64:10: 21:07:c4:85:37:ed:90:46:42:92:7c:73:47:4e:d7:17:d3:eb: 97:71:d0:48:14:5f:cf:d3:65:2b:1e:19:ef:f5:16:54:ae:44: ca:89:1f:d9:11:0d:a5:f8:ca:1b:74:b5:66:7c:a0:fc:27:2f: b6:58:2f:c3:6c:08:72:e2:39:ec:c0:49:a2:39:c3:a3:3e:9f: 4c:a2:77:15:63:2b:21:09:45:c9:5c:27:9c:a8:cb:06:cc:6a: 03:5a:05:9b:01:d4:7c:7a:70:87:e0:bb:54:f6:c1:69:25:cc: ef:ac:c7:5c:98:a6:17:54:da:91:71:df:e7:02:ed:7b:2f:93: e7:71:a6:72:c9:fc:35:0c:1d:16:88:63:9a:79:04:a4:8c:78: bd:ef:cd:a7:3f:f4:fa:d8:5a:14:13:61:41:8d:64:7f:ce:a8: b6:d7:f2:40:d6:1f:36:f8:c2:a2:bc:25:a2:2b:c2:eb:45:32: 05:1d:65:53:1b:fd:4e:92:c0:cf:7b:7e:4e:7d:85:36:42:26: 50:96:c2:c6:b3:a9:3b:58:06:2c:64:8a:66:95:6c:42:c4:85: 2c:93:ef:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVhKEhb3m/21n2TlgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MDMzMDEzMDAzOFoXDTI0MDYyODEzMDAzOFowLzEtMCsGA1UEAxMk OWIzNTg4ZjQtMGVmOC00ODYxLWJkMDctMWE0MTgxOTk2YzVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAog+wihRfJybVN95prkk1OG7G5celmnjpr91y lY1SkMnf+tk4RPoaXWQ3s9Xp5SGr1F/XF5I3ZS/cxSWgad1Cf8YDberB3W/0CQI5 pIDeu6Ueapn58kGCPEV1SKNmgrzhsGeDSnyg4EqOtI7RlsoNUVg0ubm3n8nykj/D maaTIUEXv7P+OY/v2U2R0RyRXBcEULorZGPb16hW5h4ed+SFbMMCHGcHGw00y7M6 6ommnvuRtLVwBVzAAmuCy0qDqVM3bnwUHDWppSb7zHcDC10sqoV+mJis96SNK7Di Oxhl2FXBP3wBeblz+c02SfYjeAj5Gf2JKFSyqURC99pfbd+rWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC4SLdjx2tPlcU/3ZLmcNbmcZMwGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMmM1Nzg3MGQtMTE0OC0z NDRhLTg0MGUtZDBjMDI2M2Q1ODY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOHRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHKBcZoA6FEaqex4Qr7RzAKPsUyXXaUJsolTrsuv37KM9DlkECEHxIU3 7ZBGQpJ8c0dO1xfT65dx0EgUX8/TZSseGe/1FlSuRMqJH9kRDaX4yht0tWZ8oPwn L7ZYL8NsCHLiOezASaI5w6M+n0yidxVjKyEJRclcJ5yoywbMagNaBZsB1Hx6cIfg u1T2wWklzO+sx1yYphdU2pFx3+cC7Xsvk+dxpnLJ/DUMHRaIY5p5BKSMeL3vzac/ 9PrYWhQTYUGNZH/OqLbX8kDWHzb4wqK8JaIrwutFMgUdZVMb/U6SwM97fk59hTZC JlCWwsazqTtYBixkimaVbELEhSyT71k= -----END CERTIFICATE-----Generated at Fri May 17 01:57:48 2024 by rpki-client on console-fra.rpki-client.org