$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/db217113-71ef-38b5-af31-294e93f3a772.roa File: db217113-71ef-38b5-af31-294e93f3a772.roa (raw, json) Hash identifier: G6mdMYZXy2AOcpgLP5OTHXUulVDwIyI4zSAn6ff/ovM= Subject key identifier: E4:43:6E:BD:26:34:9F:80:A3:5A:50:42:06:F3:E1:EA:A7:CF:FF:2D Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285844FE2AD97DECDE27F282F4ED80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/db217113-71ef-38b5-af31-294e93f3a772.roa Signing time: Sat 24 Feb 2024 02:00:26 +0000 ROA not before: Sat 24 Feb 2024 02:00:26 +0000 ROA not after: Fri 24 May 2024 01:00:26 +0000 asID: 701 IP address blocks: 209.158.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:fe:2a:d9:7d:ec:de:27:f2:82:f4:ed:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Feb 24 02:00:26 2024 GMT Not After : May 24 01:00:26 2024 GMT Subject: CN=ef67b489-9fbc-455c-8ea0-e17c778740fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:6f:72:13:ae:48:08:6d:b9:c7:f7:97:56:f1: 80:fd:53:26:73:16:67:38:9e:cf:b4:88:9d:cc:df: 19:1e:f7:a2:d4:ad:2d:13:5a:c7:88:f3:8a:bf:ba: 26:f1:e9:15:3c:46:b0:1a:2d:0f:91:02:7d:fd:6b: 1f:ea:66:2b:53:dd:b6:63:b2:f5:a4:76:eb:88:59: 6f:03:63:28:6c:48:5e:d6:d1:f6:9f:55:3a:fe:2f: dc:13:75:06:fd:82:3b:bd:75:e8:74:ff:12:ce:d1: 25:4e:b4:66:39:f6:6e:66:68:84:82:e3:07:df:d7: aa:04:1c:99:7e:9b:0a:9e:3d:97:22:51:64:a8:35: 30:c5:d7:5a:e7:0c:34:bb:87:e1:0d:32:ce:5f:da: 61:ca:99:ee:38:a4:08:53:1f:b1:d7:ed:8f:ed:d6: 33:27:c0:2e:ba:09:fa:bf:a6:de:85:58:84:e4:42: 7b:e8:5c:6c:9f:de:05:b7:f9:0f:fb:c7:66:06:ff: a2:e9:c0:88:f7:16:bb:0e:91:51:26:dd:5a:8e:b5: 71:26:1a:7a:e0:77:b3:ce:b4:f0:bc:ef:e1:d0:09: d6:42:79:7b:b8:3b:48:6a:60:a0:23:4f:bc:62:a1: e9:bc:80:4b:55:46:4c:ed:01:a6:78:51:f7:8e:14: 07:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:43:6E:BD:26:34:9F:80:A3:5A:50:42:06:F3:E1:EA:A7:CF:FF:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/db217113-71ef-38b5-af31-294e93f3a772.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 209.158.206.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:55:c1:14:80:5f:64:ca:04:72:ba:59:69:2f:8f:26:b6:53: 01:89:93:d8:3e:a1:8d:bc:79:a7:d8:bf:d3:c3:fa:37:2b:bb: b5:0b:db:96:7d:2c:82:d4:bb:ad:a3:ce:36:95:fb:10:36:c0: e2:c3:2e:97:40:e5:25:ae:f7:78:fd:d7:e9:64:6e:f7:85:8c: ce:1d:df:07:4f:85:c6:b1:b6:64:77:8f:66:54:fb:b2:93:1f: ff:ab:47:63:8b:07:d3:fe:21:f6:d8:53:ae:23:d0:db:f3:89: 68:cf:c5:8f:90:36:cd:15:02:1a:ef:16:ad:b2:d2:aa:71:40: b1:f0:e6:b0:80:b8:06:13:1b:e4:6c:10:e4:c5:9d:1f:fe:3e: 38:00:5b:88:55:e4:fd:af:af:ff:c8:5d:db:ec:6d:a1:c5:f7: ba:f8:b2:c1:7c:ac:04:48:73:4b:a6:2c:30:dc:f6:7f:d9:4d: 9f:f7:32:99:ee:a2:18:5e:91:4c:e8:1d:39:50:29:45:07:35: 23:d2:85:21:2f:b3:65:5f:61:54:a1:84:e2:cd:c9:ff:47:3b: ea:a4:fa:86:ba:f6:72:f5:aa:35:5c:ff:37:b3:9a:a4:77:15: 19:cd:71:06:ea:60:9c:31:9b:5c:64:8b:38:73:2d:14:9f:f7: 47:40:d8:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWET+Ktl97N4n8oL07YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI0MDIyNDAyMDAyNloXDTI0MDUyNDAxMDAyNlowLzEtMCsGA1UEAxMk ZWY2N2I0ODktOWZiYy00NTVjLThlYTAtZTE3Yzc3ODc0MGZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjG9yE65ICG25x/eXVvGA/VMmcxZnOJ7PtIid zN8ZHvei1K0tE1rHiPOKv7om8ekVPEawGi0PkQJ9/Wsf6mYrU922Y7L1pHbriFlv A2MobEhe1tH2n1U6/i/cE3UG/YI7vXXodP8SztElTrRmOfZuZmiEguMH39eqBByZ fpsKnj2XIlFkqDUwxdda5ww0u4fhDTLOX9phypnuOKQIUx+x1+2P7dYzJ8Auugn6 v6behViE5EJ76Fxsn94Ft/kP+8dmBv+i6cCI9xa7DpFRJt1ajrVxJhp64HezzrTw vO/h0AnWQnl7uDtIamCgI0+8YqHpvIBLVUZM7QGmeFH3jhQHbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFORDbr0mNJ+Ao1pQQgbz4eqnz/8tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZGIyMTcxMTMtNzFlZi0z OGI1LWFmMzEtMjk0ZTkzZjNhNzcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Z7OMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK5VwRSAX2TKBHK6WWkvjya2UwGJk9g+oY28eafYv9PD+jcru7UL25Z9 LILUu62jzjaV+xA2wOLDLpdA5SWu93j91+lkbveFjM4d3wdPhcaxtmR3j2ZU+7KT H/+rR2OLB9P+IfbYU64j0NvziWjPxY+QNs0VAhrvFq2y0qpxQLHw5rCAuAYTG+Rs EOTFnR/+PjgAW4hV5P2vr//IXdvsbaHF97r4ssF8rARIc0umLDDc9n/ZTZ/3Mpnu ohhekUzoHTlQKUUHNSPShSEvs2VfYVShhOLNyf9HO+qk+oa69nL1qjVc/zezmqR3 FRnNcQbqYJwxm1xkizhzLRSf90dA2N0= -----END CERTIFICATE-----Generated at Thu May 9 15:25:06 2024 by rpki-client on console-ams.rpki-client.org