$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/639c1735-1cd0-355a-a116-4129dc8f68b1.roa File: 639c1735-1cd0-355a-a116-4129dc8f68b1.roa (raw, json) Hash identifier: YYEAtDclEI0gCedkTfCm6+bT3GfwIPM9Pn3CKizqqaU= Subject key identifier: 43:EC:95:CF:42:61:03:B2:20:52:2B:B4:AD:D0:BF:44:45:D0:22:A7 Certificate issuer: /CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de Certificate serial: 010D0C9F4328584598FE087EEA3D22CBDFCC3400 Authority key identifier: 50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/639c1735-1cd0-355a-a116-4129dc8f68b1.roa Signing time: Fri 19 Apr 2024 13:00:36 +0000 ROA not before: Fri 19 Apr 2024 13:00:36 +0000 ROA not after: Thu 18 Jul 2024 13:00:36 +0000 asID: 20471 IP address blocks: 209.124.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:98:fe:08:7e:ea:3d:22:cb:df:cc:34:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de Validity Not Before: Apr 19 13:00:36 2024 GMT Not After : Jul 18 13:00:36 2024 GMT Subject: CN=7abebaca-c560-46f0-a3ca-a655e165ada4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:82:aa:b0:b4:38:d8:47:eb:1c:6d:a4:97:c5: 10:ec:c2:04:4d:58:ad:79:bb:b1:3c:a1:54:f6:7e: eb:50:11:39:c5:06:03:1e:83:1c:1c:aa:a6:3e:06: 46:8d:11:08:e0:d1:67:02:18:4a:35:13:8f:c2:6d: 9e:21:6d:b9:a3:c8:77:14:bd:64:68:70:e1:f7:2c: 15:da:33:39:17:50:f3:6c:84:57:d9:02:1e:37:85: 6b:c1:2f:fa:45:40:5a:37:e8:71:00:c3:c6:73:30: 09:d0:4f:8d:dc:07:88:db:a7:a9:ec:f3:be:60:65: 6e:54:56:78:53:98:31:f0:d6:b8:c3:3e:ae:08:6c: 27:8e:49:7a:c0:84:43:40:29:d5:eb:69:36:55:88: 99:9d:cb:b4:4c:2a:4d:33:83:74:ee:14:a2:a2:91: 59:9c:6d:38:84:95:54:a1:06:6b:37:08:0e:92:58: 13:f7:f7:84:88:75:09:93:47:16:fc:72:91:67:6f: 8d:a6:5e:d9:4a:7c:70:b4:4e:f9:b9:0e:34:09:99: 60:12:5f:56:2f:8d:08:dc:65:f6:85:88:5c:5b:2b: 65:8b:2e:3b:f6:f6:8e:b1:07:ff:f8:b6:ba:97:0d: aa:a3:d9:fa:a8:c9:1e:00:88:1e:08:c2:c4:97:7b: 91:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:EC:95:CF:42:61:03:B2:20:52:2B:B4:AD:D0:BF:44:45:D0:22:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/639c1735-1cd0-355a-a116-4129dc8f68b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl X509v3 Authority Key Identifier: keyid:50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer sbgp-ipAddrBlock: critical IPv4: 209.124.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:d5:7c:c7:9d:ef:f8:5f:bc:18:f9:c3:68:32:ef:0d:2d:17: 60:72:0d:d4:d6:46:25:11:af:65:37:af:c9:3f:14:1c:8a:3a: fa:c6:52:11:63:a7:98:8f:66:85:71:bb:2c:00:ef:54:4e:dd: f1:6d:bb:77:03:22:f6:d0:c4:49:fe:01:82:14:aa:6e:f5:7b: 74:14:b5:25:6c:89:d3:fa:c1:f2:62:95:c0:2a:00:a5:71:6c: 05:27:e5:0e:15:a1:74:79:75:06:4b:11:e5:a2:41:7d:9b:9a: ff:d9:e9:fa:4a:f7:ba:4d:1d:36:af:52:18:ff:34:95:71:d5: b1:62:e5:d6:8e:e2:b7:8b:8e:67:05:fb:b8:2d:62:8b:c3:bc: 29:88:f9:31:36:76:dd:06:19:35:9d:2f:a0:74:41:c3:28:42: ab:0a:62:90:74:0f:74:91:73:cf:6f:fd:9d:b9:90:5e:b2:80: 68:3f:9c:7e:dd:d2:17:c9:2f:50:d0:aa:51:46:31:8c:06:ad: 98:ef:7f:c7:25:1b:65:d4:aa:ff:14:5b:0e:59:65:44:65:3c: 42:c1:83:bc:ac:3e:78:60:b0:ad:29:25:66:97:20:60:b7:e3: 84:94:22:10:62:86:1c:05:f0:92:c3:f6:e9:8c:3f:53:ff:40: d5:6c:e5:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWY/gh+6j0iy9/MNAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQyNjk3NmUtZmJmYi00YWQ4LWEyOGEtYTI1ZjViMDY3 MWRlMB4XDTI0MDQxOTEzMDAzNloXDTI0MDcxODEzMDAzNlowLzEtMCsGA1UEAxMk N2FiZWJhY2EtYzU2MC00NmYwLWEzY2EtYTY1NWUxNjVhZGE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7oKqsLQ42EfrHG2kl8UQ7MIETVitebuxPKFU 9n7rUBE5xQYDHoMcHKqmPgZGjREI4NFnAhhKNROPwm2eIW25o8h3FL1kaHDh9ywV 2jM5F1DzbIRX2QIeN4VrwS/6RUBaN+hxAMPGczAJ0E+N3AeI26ep7PO+YGVuVFZ4 U5gx8Na4wz6uCGwnjkl6wIRDQCnV62k2VYiZncu0TCpNM4N07hSiopFZnG04hJVU oQZrNwgOklgT9/eEiHUJk0cW/HKRZ2+Npl7ZSnxwtE75uQ40CZlgEl9WL40I3GX2 hYhcWytliy479vaOsQf/+La6lw2qo9n6qMkeAIgeCMLEl3uRfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEPslc9CYQOyIFIrtK3Qv0RF0CKnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jNDI2 OTc2ZS1mYmZiLTRhZDgtYTI4YS1hMjVmNWIwNjcxZGUvNjM5YzE3MzUtMWNkMC0z NTVhLWExMTYtNDEyOWRjOGY2OGIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzQyNjk3NmUtZmJmYi00YWQ4LWEy OGEtYTI1ZjViMDY3MWRlL2M0MjY5NzZlLWZiZmItNGFkOC1hMjhhLWEyNWY1YjA2 NzFkZS5jcmwwHwYDVR0jBBgwFoAUUDCuGBTUosBlcB/1dCB21IYNZG8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jNDI2OTc2ZS1mYmZiLTRhZDgtYTI4YS1hMjVm NWIwNjcxZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XwmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALrVfMed7/hfvBj5w2gy7w0tF2ByDdTWRiURr2U3r8k/FByKOvrGUhFj p5iPZoVxuywA71RO3fFtu3cDIvbQxEn+AYIUqm71e3QUtSVsidP6wfJilcAqAKVx bAUn5Q4VoXR5dQZLEeWiQX2bmv/Z6fpK97pNHTavUhj/NJVx1bFi5daO4reLjmcF +7gtYovDvCmI+TE2dt0GGTWdL6B0QcMoQqsKYpB0D3SRc89v/Z25kF6ygGg/nH7d 0hfJL1DQqlFGMYwGrZjvf8clG2XUqv8UWw5ZZURlPELBg7ysPnhgsK0pJWaXIGC3 44SUIhBihhwF8JLD9umMP1P/QNVs5cs= -----END CERTIFICATE-----Generated at Tue May 7 17:04:50 2024 by rpki-client on console-ams.rpki-client.org