$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/38571c14-5975-3249-9151-857c5a59c9be.roa File: 38571c14-5975-3249-9151-857c5a59c9be.roa (raw, json) Hash identifier: 2tpXXfRZGqhhiHHM8O7kfHYv02AE+8EAtNzEN4wkI48= Subject key identifier: B1:65:6D:6E:AB:87:1B:99:7D:99:FC:A0:C5:CD:99:41:D7:A6:5C:85 Certificate issuer: /CN=75b9cb8e-7a77-408e-81d9-075f8ef7200e Certificate serial: 010D0C9F43285844F2FFF8501942572505F09000 Authority key identifier: 50:25:C9:E2:B0:7C:7B:65:5A:AA:42:E2:43:D8:EE:A0:FC:58:E4:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/38571c14-5975-3249-9151-857c5a59c9be.roa Signing time: Tue 20 Feb 2024 02:00:26 +0000 ROA not before: Tue 20 Feb 2024 02:00:26 +0000 ROA not after: Mon 20 May 2024 01:00:26 +0000 asID: 6939 IP address blocks: 209.142.71.0/24 maxlen: 31 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/75b9cb8e-7a77-408e-81d9-075f8ef7200e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/75b9cb8e-7a77-408e-81d9-075f8ef7200e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 27 Apr 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:f2:ff:f8:50:19:42:57:25:05:f0:90:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75b9cb8e-7a77-408e-81d9-075f8ef7200e Validity Not Before: Feb 20 02:00:26 2024 GMT Not After : May 20 01:00:26 2024 GMT Subject: CN=043bf5cb-54a3-4efd-8367-e3e6fe21ef73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:c1:b1:89:88:0a:f0:99:b9:e6:ac:b5:b3:73: f5:06:19:44:c3:b4:4a:f5:79:3d:cc:16:1b:9e:22: 13:43:cc:2c:36:3f:46:5b:52:21:28:c0:8e:2b:ed: ff:00:57:a3:03:26:d2:a8:cd:f1:f5:6b:6f:c7:68: 3b:a1:c5:21:bf:14:e2:97:de:60:c1:40:09:3d:fb: 17:11:94:00:9b:80:30:37:75:a6:22:b9:43:44:0e: a1:32:2f:be:78:7c:44:7d:74:b5:56:10:94:eb:05: 02:a2:cb:18:50:a7:f7:21:c9:20:70:f5:38:96:48: 0c:c3:c2:6c:51:95:be:a6:51:46:6b:2f:6b:51:70: 2d:6f:f7:46:bc:27:1b:d3:51:dc:1b:05:7a:1e:62: 87:8b:d4:a6:e0:dc:21:82:dc:18:a5:9b:a7:d2:54: a2:8f:0f:5f:58:c5:ef:65:dc:4b:4a:14:34:f5:06: ea:a0:51:ae:f6:66:30:cd:05:53:c2:a3:7e:0b:ae: 83:a9:0a:5e:d2:07:31:0a:dc:0e:82:30:45:7c:f1: 36:b7:48:40:4d:51:f2:7c:b5:89:6b:0e:ca:45:64: 6d:09:ff:ce:81:c4:87:a6:9b:d4:93:89:1f:f4:1e: da:81:61:62:d2:c0:e5:b3:8a:e7:40:3f:94:6b:98: b8:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:65:6D:6E:AB:87:1B:99:7D:99:FC:A0:C5:CD:99:41:D7:A6:5C:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/38571c14-5975-3249-9151-857c5a59c9be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/75b9cb8e-7a77-408e-81d9-075f8ef7200e.crl X509v3 Authority Key Identifier: keyid:50:25:C9:E2:B0:7C:7B:65:5A:AA:42:E2:43:D8:EE:A0:FC:58:E4:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e.cer sbgp-ipAddrBlock: critical IPv4: 209.142.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:98:74:c6:de:db:28:74:4a:67:fd:3c:bd:4f:bb:06:43:c4: d5:8f:4b:5c:8c:46:b7:74:74:9f:1a:77:7d:39:e6:87:e7:c5: 83:cf:6d:99:7e:ba:56:30:12:23:a6:a9:1f:cc:5b:28:24:90: e7:4c:60:e5:1d:a2:55:c5:18:f3:5a:65:78:a4:bf:a0:37:5e: 3d:da:29:58:4a:da:24:bc:c3:3f:5a:9d:65:43:d8:13:9e:b3: 82:cc:5d:b5:db:09:3d:a5:90:13:07:a7:aa:38:38:93:e1:09: 95:c3:f5:3b:5e:01:27:d2:ef:c8:0f:b4:b7:ae:9d:28:be:c6: 6d:d2:3b:4f:bf:81:6e:38:28:4f:1e:58:a7:dc:4b:af:89:bc: 53:89:b5:14:99:2f:05:8f:22:62:eb:4e:06:01:c1:df:d4:74: 4a:4b:81:c8:15:01:32:d9:7f:76:3b:26:9f:79:bf:96:f9:0f: 39:a2:bf:08:27:f3:01:d3:b6:aa:62:73:37:a3:a7:96:2a:2c: 29:b4:aa:89:c3:24:06:f1:67:f8:cc:b0:b0:20:5b:dd:d5:11: 71:b6:04:3c:b2:50:73:ea:cb:1f:1b:f4:d3:22:76:94:0e:d5: ef:30:1e:3b:0a:c2:fc:1e:21:26:4f:c6:eb:2a:7c:3c:38:ea: bc:dc:97:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWETy//hQGUJXJQXwkAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzViOWNiOGUtN2E3Ny00MDhlLTgxZDktMDc1ZjhlZjcy MDBlMB4XDTI0MDIyMDAyMDAyNloXDTI0MDUyMDAxMDAyNlowLzEtMCsGA1UEAxMk MDQzYmY1Y2ItNTRhMy00ZWZkLTgzNjctZTNlNmZlMjFlZjczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg8GxiYgK8Jm55qy1s3P1BhlEw7RK9Xk9zBYb niITQ8wsNj9GW1IhKMCOK+3/AFejAybSqM3x9Wtvx2g7ocUhvxTil95gwUAJPfsX EZQAm4AwN3WmIrlDRA6hMi++eHxEfXS1VhCU6wUCossYUKf3IckgcPU4lkgMw8Js UZW+plFGay9rUXAtb/dGvCcb01HcGwV6HmKHi9Sm4NwhgtwYpZun0lSijw9fWMXv ZdxLShQ09QbqoFGu9mYwzQVTwqN+C66DqQpe0gcxCtwOgjBFfPE2t0hATVHyfLWJ aw7KRWRtCf/OgcSHppvUk4kf9B7agWFi0sDls4rnQD+Ua5i42wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLFlbW6rhxuZfZn8oMXNmUHXplyFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NWI5 Y2I4ZS03YTc3LTQwOGUtODFkOS0wNzVmOGVmNzIwMGUvMzg1NzFjMTQtNTk3NS0z MjQ5LTkxNTEtODU3YzVhNTljOWJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzViOWNiOGUtN2E3Ny00MDhlLTgx ZDktMDc1ZjhlZjcyMDBlLzc1YjljYjhlLTdhNzctNDA4ZS04MWQ5LTA3NWY4ZWY3 MjAwZS5jcmwwHwYDVR0jBBgwFoAUUCXJ4rB8e2VaqkLiQ9juoPxY5KIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NWI5Y2I4ZS03YTc3LTQwOGUtODFkOS0wNzVm OGVmNzIwMGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Y5HMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF2YdMbe2yh0Smf9PL1PuwZDxNWPS1yMRrd0dJ8ad3055ofnxYPPbZl+ ulYwEiOmqR/MWygkkOdMYOUdolXFGPNaZXikv6A3Xj3aKVhK2iS8wz9anWVD2BOe s4LMXbXbCT2lkBMHp6o4OJPhCZXD9TteASfS78gPtLeunSi+xm3SO0+/gW44KE8e WKfcS6+JvFOJtRSZLwWPImLrTgYBwd/UdEpLgcgVATLZf3Y7Jp95v5b5Dzmivwgn 8wHTtqpiczejp5YqLCm0qonDJAbxZ/jMsLAgW93VEXG2BDyyUHPqyx8b9NMidpQO 1e8wHjsKwvweISZPxusqfDw46rzcl1k= -----END CERTIFICATE-----Generated at Fri Apr 26 11:17:58 2024 by rpki-client on console-ams.rpki-client.org