$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0f378a39-4023-3648-9f61-a25869e51bfd.roa File: 0f378a39-4023-3648-9f61-a25869e51bfd.roa (raw, json) Hash identifier: vAOPN0q/MPXiuA7zV4jwPFE0jKlG/eU9wXohN5ZBzEQ= Subject key identifier: B6:C7:7B:1C:50:D8:C0:25:6E:49:3A:65:7A:90:A4:EA:8F:21:68:6B Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285844F5CAAFF0A0253DA58313EB68 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0f378a39-4023-3648-9f61-a25869e51bfd.roa Signing time: Wed 21 Feb 2024 02:00:25 +0000 ROA not before: Wed 21 Feb 2024 02:00:25 +0000 ROA not after: Tue 21 May 2024 01:00:25 +0000 asID: 28317 IP address blocks: 209.51.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:f5:ca:af:f0:a0:25:3d:a5:83:13:eb:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Feb 21 02:00:25 2024 GMT Not After : May 21 01:00:25 2024 GMT Subject: CN=1d0b7864-25ae-4ed3-9461-aa9146a740ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:e7:82:30:57:43:ed:eb:15:27:bf:19:25:e4: d0:e1:70:b1:2a:ea:21:3c:ef:25:c7:1f:82:1c:54: fd:85:5b:4e:f5:38:fd:ad:6a:1b:2d:a4:63:9e:03: ec:e5:f4:93:6d:5b:13:8d:f5:59:9c:a0:a2:6f:28: df:e2:a8:5b:c0:74:6c:8e:e3:04:bb:a0:02:30:5c: 40:1a:fe:47:91:46:01:e7:39:43:06:76:a7:f6:6b: 9d:9c:5f:6c:70:9f:e5:3b:92:b6:3e:f4:8b:e5:fe: d5:02:91:9a:44:8e:41:54:aa:fb:ba:e3:9e:9e:5f: 5e:9c:ce:6e:19:b0:d4:8b:52:c4:7d:89:b5:51:ee: 9f:26:57:75:42:c0:7b:00:f6:65:b8:8f:d3:e1:6c: 39:0a:d6:ff:a2:4e:f6:a9:bc:48:51:23:b4:3f:49: 14:c0:9c:a4:7a:3b:aa:ad:eb:5c:56:b0:f0:df:99: 1f:5e:35:37:d2:ac:03:9b:dd:fe:7e:4f:51:ce:cf: 49:8a:d4:16:9a:c9:77:96:1a:3d:b7:de:09:55:ec: f9:75:fa:48:56:7a:60:27:7c:6a:59:f8:be:b6:f7: 6e:fa:76:8b:5a:50:4d:4c:08:01:3b:9d:0f:aa:c8: 17:b0:5c:ce:2b:b5:c5:2d:dd:22:f4:e2:fa:9f:da: b4:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:C7:7B:1C:50:D8:C0:25:6E:49:3A:65:7A:90:A4:EA:8F:21:68:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0f378a39-4023-3648-9f61-a25869e51bfd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv4: 209.51.185.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:81:19:58:c7:72:0f:b1:95:5d:a2:c5:84:85:08:e0:b2:df: 05:58:f6:e3:f7:53:76:71:e4:f6:78:18:22:62:82:c6:3c:00: cc:86:ea:e2:b3:67:97:fe:46:09:b9:9d:df:35:a3:36:79:53: d7:74:3a:40:49:64:be:26:ae:dd:ea:b1:1b:62:b8:82:a0:b6: 10:dc:0c:c6:ee:31:ec:ac:87:5d:31:76:e1:08:d3:e8:dc:7f: 71:78:12:8c:0b:15:30:0b:c0:01:8d:1e:14:39:56:11:1b:1f: 57:0c:19:fd:12:1a:d9:f1:56:60:5c:45:dd:58:ef:2c:11:8a: d8:3b:e2:3e:36:88:8c:70:82:98:32:b5:0b:a7:17:c2:bd:ed: 77:ab:dd:21:81:9c:c9:e8:01:7a:d6:57:e8:5e:a3:9a:bb:83: 24:4b:71:8c:8d:84:b1:cc:f6:17:37:5a:db:a5:a0:f4:80:8a: 0f:28:c3:fd:2d:31:b3:8c:dc:b5:ab:f0:a5:77:6a:30:52:68: 41:38:51:d0:64:d5:e1:41:e7:4f:4b:e3:cc:33:13:eb:a4:a1: 55:ac:95:4d:86:b2:f9:cb:df:40:34:5d:95:4e:e0:28:2c:20: f3:7c:33:8a:b6:f8:30:e6:78:c8:4f:8e:cf:d6:c3:44:34:6d: 75:e9:da:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWET1yq/woCU9pYMT62gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI0MDIyMTAyMDAyNVoXDTI0MDUyMTAxMDAyNVowLzEtMCsGA1UEAxMk MWQwYjc4NjQtMjVhZS00ZWQzLTk0NjEtYWE5MTQ2YTc0MGFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOeCMFdD7esVJ78ZJeTQ4XCxKuohPO8lxx+C HFT9hVtO9Tj9rWobLaRjngPs5fSTbVsTjfVZnKCibyjf4qhbwHRsjuMEu6ACMFxA Gv5HkUYB5zlDBnan9mudnF9scJ/lO5K2PvSL5f7VApGaRI5BVKr7uuOenl9enM5u GbDUi1LEfYm1Ue6fJld1QsB7APZluI/T4Ww5Ctb/ok72qbxIUSO0P0kUwJykejuq retcVrDw35kfXjU30qwDm93+fk9Rzs9JitQWmsl3lho9t94JVez5dfpIVnpgJ3xq Wfi+tvdu+naLWlBNTAgBO50PqsgXsFzOK7XFLd0i9OL6n9q0hQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLbHexxQ2MAlbkk6ZXqQpOqPIWhrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMGYzNzhhMzktNDAyMy0z NjQ4LTlmNjEtYTI1ODY5ZTUxYmZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TO5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEyBGVjHcg+xlV2ixYSFCOCy3wVY9uP3U3Zx5PZ4GCJigsY8AMyG6uKz Z5f+Rgm5nd81ozZ5U9d0OkBJZL4mrt3qsRtiuIKgthDcDMbuMeysh10xduEI0+jc f3F4EowLFTALwAGNHhQ5VhEbH1cMGf0SGtnxVmBcRd1Y7ywRitg74j42iIxwgpgy tQunF8K97Xer3SGBnMnoAXrWV+heo5q7gyRLcYyNhLHM9hc3WtuloPSAig8ow/0t MbOM3LWr8KV3ajBSaEE4UdBk1eFB509L48wzE+ukoVWslU2GsvnL30A0XZVO4Cgs IPN8M4q2+DDmeMhPjs/Ww0Q0bXXp2is= -----END CERTIFICATE-----Generated at Mon May 6 12:47:25 2024 by rpki-client on console-ams.rpki-client.org