$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e36a683-142b-41cd-932c-e115603de431/17ca897d-f383-3f1b-bf22-e3cd1afc8618.roa File: 17ca897d-f383-3f1b-bf22-e3cd1afc8618.roa (raw, json) Hash identifier: NvUQYRjqIPma9nWmXyonwE+YtGVvk6kYLwDLkzoh7gQ= Subject key identifier: AD:C1:B6:9C:96:0F:46:82:95:82:67:CD:E1:32:A5:3D:5A:A8:97:22 Certificate issuer: /CN=9e36a683-142b-41cd-932c-e115603de431 Certificate serial: 010D0C9F4328584566BDB6D3534E0EDB99B93020 Authority key identifier: 5B:80:E2:B1:A5:A1:53:32:EC:8B:61:F2:F9:99:5D:66:E3:D0:02:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e36a683-142b-41cd-932c-e115603de431.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e36a683-142b-41cd-932c-e115603de431/17ca897d-f383-3f1b-bf22-e3cd1afc8618.roa Signing time: Mon 01 Apr 2024 13:00:36 +0000 ROA not before: Mon 01 Apr 2024 13:00:36 +0000 ROA not after: Sun 30 Jun 2024 13:00:36 +0000 asID: 16509 IP address blocks: 209.163.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e36a683-142b-41cd-932c-e115603de431/9e36a683-142b-41cd-932c-e115603de431.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e36a683-142b-41cd-932c-e115603de431/9e36a683-142b-41cd-932c-e115603de431.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e36a683-142b-41cd-932c-e115603de431.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 04 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:66:bd:b6:d3:53:4e:0e:db:99:b9:30:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e36a683-142b-41cd-932c-e115603de431 Validity Not Before: Apr 1 13:00:36 2024 GMT Not After : Jun 30 13:00:36 2024 GMT Subject: CN=a1347dc4-b31c-4b25-91bc-3ff822ca301e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:b4:8a:1c:27:77:bd:79:fd:df:0c:97:af:60: ae:5a:d8:c0:02:37:0a:0d:f4:7e:9d:d3:6f:53:bf: 41:7a:22:c0:13:7d:ae:4f:6d:42:a9:fe:e4:73:0f: 8a:45:4e:74:92:47:85:0c:29:0a:c8:9b:c1:5e:84: 9e:f5:cb:bd:da:28:27:d6:14:0b:29:50:96:06:4f: ee:be:ad:15:dd:bd:54:38:8a:8c:60:bd:b2:f2:a7: ee:79:ca:63:be:f1:b5:72:8a:c7:6b:cd:83:55:a7: 2b:e3:f9:2c:05:97:5b:6b:20:a1:4e:16:9c:04:c4: 10:51:6b:a4:92:b9:d6:c4:50:16:26:8f:8b:fa:80: 8e:c9:d4:e3:19:fb:72:92:44:b2:e0:c7:5c:6f:aa: 9c:07:96:05:82:88:b4:e1:d8:d5:98:26:8c:4b:32: 78:9f:2f:d5:bd:67:a9:56:e1:cc:17:ca:73:c1:4d: ec:72:ea:83:91:18:db:84:db:ad:36:71:4e:ba:88: 70:6b:ac:09:e2:b7:26:07:2c:a7:d3:2c:44:e4:b8: 30:86:05:98:62:5b:aa:ff:48:2e:ef:55:56:a0:74: e7:b6:b5:40:87:58:56:61:4b:e3:62:ce:fa:f4:11: a4:39:55:3b:5f:83:4e:eb:cf:00:45:8a:ec:02:ce: 32:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:C1:B6:9C:96:0F:46:82:95:82:67:CD:E1:32:A5:3D:5A:A8:97:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e36a683-142b-41cd-932c-e115603de431/17ca897d-f383-3f1b-bf22-e3cd1afc8618.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e36a683-142b-41cd-932c-e115603de431/9e36a683-142b-41cd-932c-e115603de431.crl X509v3 Authority Key Identifier: keyid:5B:80:E2:B1:A5:A1:53:32:EC:8B:61:F2:F9:99:5D:66:E3:D0:02:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e36a683-142b-41cd-932c-e115603de431.cer sbgp-ipAddrBlock: critical IPv4: 209.163.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:d7:82:ca:6d:05:55:30:d7:48:4b:ac:10:6f:0e:00:33:f5: 2d:73:a4:db:c6:ce:cc:09:f1:2a:dd:b3:34:fb:b1:86:15:f3: 0e:80:7e:f4:b1:c1:ac:6c:5b:73:8f:ec:e3:dd:04:ad:b6:aa: 66:c2:26:3f:2d:83:1c:84:bd:11:6e:35:72:dc:9f:90:4a:3b: e5:29:52:f0:aa:2c:b3:b4:43:e4:fa:f4:42:f8:67:64:20:37: b2:90:08:97:5b:62:f8:6d:c9:d9:20:3e:21:08:47:74:ad:89: a2:8d:fe:f0:9f:b0:ba:f4:b3:1e:06:52:7e:6b:2f:45:93:5f: 73:2b:7e:40:9f:f7:aa:29:99:60:ad:9c:ef:5e:bb:f4:49:2d: 40:bb:2a:8d:8b:eb:9f:39:63:df:52:12:be:96:f6:54:b4:e8: ba:df:11:a4:13:70:e4:ae:e9:2c:8b:99:98:58:0a:6a:9a:d3: 49:72:0a:02:93:95:bf:83:21:4b:24:c1:98:46:08:ad:5c:87: 57:9c:bd:e2:80:3e:c2:44:9f:c1:7e:36:a4:33:aa:6a:49:88: 9a:37:20:01:33:f5:fa:59:3c:63:d9:84:d8:bf:d4:b2:6c:60: e6:73:cc:d5:7c:f7:9e:64:9f:00:24:dd:c3:04:39:c1:77:7c: 95:0c:72:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVmvbbTU04O25m5MCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWUzNmE2ODMtMTQyYi00MWNkLTkzMmMtZTExNTYwM2Rl NDMxMB4XDTI0MDQwMTEzMDAzNloXDTI0MDYzMDEzMDAzNlowLzEtMCsGA1UEAxMk YTEzNDdkYzQtYjMxYy00YjI1LTkxYmMtM2ZmODIyY2EzMDFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg7SKHCd3vXn93wyXr2CuWtjAAjcKDfR+ndNv U79BeiLAE32uT21Cqf7kcw+KRU50kkeFDCkKyJvBXoSe9cu92ign1hQLKVCWBk/u vq0V3b1UOIqMYL2y8qfuecpjvvG1corHa82DVacr4/ksBZdbayChThacBMQQUWuk krnWxFAWJo+L+oCOydTjGftykkSy4Mdcb6qcB5YFgoi04djVmCaMSzJ4ny/VvWep VuHMF8pzwU3scuqDkRjbhNutNnFOuohwa6wJ4rcmByyn0yxE5LgwhgWYYluq/0gu 71VWoHTntrVAh1hWYUvjYs769BGkOVU7X4NO688ARYrsAs4y2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK3BtpyWD0aClYJnzeEypT1aqJciMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85ZTM2 YTY4My0xNDJiLTQxY2QtOTMyYy1lMTE1NjAzZGU0MzEvMTdjYTg5N2QtZjM4My0z ZjFiLWJmMjItZTNjZDFhZmM4NjE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOWUzNmE2ODMtMTQyYi00MWNkLTkz MmMtZTExNTYwM2RlNDMxLzllMzZhNjgzLTE0MmItNDFjZC05MzJjLWUxMTU2MDNk ZTQzMS5jcmwwHwYDVR0jBBgwFoAUW4DisaWhUzLsi2Hy+ZldZuPQAiUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85ZTM2YTY4My0xNDJiLTQxY2QtOTMyYy1lMTE1 NjAzZGU0MzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0aNgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH/XgsptBVUw10hLrBBvDgAz9S1zpNvGzswJ8SrdszT7sYYV8w6AfvSx waxsW3OP7OPdBK22qmbCJj8tgxyEvRFuNXLcn5BKO+UpUvCqLLO0Q+T69EL4Z2Qg N7KQCJdbYvhtydkgPiEIR3StiaKN/vCfsLr0sx4GUn5rL0WTX3MrfkCf96opmWCt nO9eu/RJLUC7Ko2L6585Y99SEr6W9lS06LrfEaQTcOSu6SyLmZhYCmqa00lyCgKT lb+DIUskwZhGCK1ch1ecveKAPsJEn8F+NqQzqmpJiJo3IAEz9fpZPGPZhNi/1LJs YOZzzNV8955knwAk3cMEOcF3fJUMclw= -----END CERTIFICATE-----Generated at Thu May 2 14:59:59 2024 by rpki-client on console-fra.rpki-client.org