$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0670fa0c-1c69-3756-85a2-81fa79b0198b.roa File: 0670fa0c-1c69-3756-85a2-81fa79b0198b.roa (raw, json) Hash identifier: 6YK+U1yQ2zfcx3TSfcGm+ZVQeJfV1QeMBm4EGaAhLxU= Subject key identifier: 6B:11:1B:CE:89:49:7C:90:73:D7:17:EA:21:7C:64:1E:7C:EC:A8:14 Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F43285845D933AEA223D48705CDEAED40 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0670fa0c-1c69-3756-85a2-81fa79b0198b.roa Signing time: Sun 12 May 2024 13:00:34 +0000 ROA not before: Sun 12 May 2024 13:00:34 +0000 ROA not after: Sat 10 Aug 2024 13:00:34 +0000 asID: 22781 IP address blocks: 207.204.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 May 2024 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:d9:33:ae:a2:23:d4:87:05:cd:ea:ed:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: May 12 13:00:34 2024 GMT Not After : Aug 10 13:00:34 2024 GMT Subject: CN=7a3935ee-9df6-4120-83f3-5159fb3883c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:0d:a3:a1:32:e9:fa:14:58:16:da:1e:03:38: 5c:1c:f3:8f:fb:66:12:93:d9:23:55:a0:3f:c2:cb: 51:4f:4a:16:44:90:e8:06:e9:42:b5:ab:56:6c:a5: 60:18:3b:8f:3a:06:57:18:0b:2c:06:14:8f:7d:ae: de:43:c3:7b:00:cb:e8:c5:97:ce:f6:4e:41:24:2a: 8e:eb:10:65:ea:cf:30:87:6b:43:f6:85:bc:34:1a: 4e:13:b6:be:91:dc:04:3e:0b:65:be:69:86:66:aa: 34:a8:3e:80:11:67:6e:06:64:5a:75:43:17:a9:85: 2e:64:57:3c:a7:60:a6:c1:f2:41:b5:77:f2:8a:8b: a8:18:d0:8a:e3:7c:9b:a0:85:45:06:9f:fb:52:32: 9e:b3:64:26:0e:85:7a:8d:ed:6a:6f:42:19:47:d7: 1e:ed:73:de:f8:1f:ca:34:f1:71:d9:87:88:8d:27: 5b:22:6c:36:57:fa:68:fa:eb:3c:5e:6f:d2:dc:f1: c7:9a:85:9a:4c:0c:ed:d9:52:5f:db:2e:cc:b0:a4: f2:ba:21:4b:0f:8d:b5:b3:7e:fa:af:c1:7e:d6:aa: 47:96:ee:ef:ae:08:32:a1:dd:4d:03:f8:3d:d3:9d: 6c:ce:d9:bc:5b:50:42:7a:af:e1:20:82:04:37:2f: cd:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:11:1B:CE:89:49:7C:90:73:D7:17:EA:21:7C:64:1E:7C:EC:A8:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0670fa0c-1c69-3756-85a2-81fa79b0198b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 207.204.224.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:5c:4e:5b:31:91:71:25:81:4d:df:53:ed:30:08:f8:87:c1: 8a:16:d5:a6:11:2b:bc:9f:fd:04:0b:5c:69:d4:50:57:2e:a8: e9:1a:d8:e6:98:47:c5:d4:74:07:26:d0:96:a2:04:d0:2e:18: fc:6f:ac:1d:38:3f:99:e8:75:1b:0f:21:28:7b:ba:45:68:de: bd:7e:16:f7:49:22:ec:14:78:2a:0c:1d:45:38:b3:40:bd:fa: 97:c7:5e:cc:dd:c2:88:bd:95:15:fd:0e:25:f8:3c:1b:97:7d: fe:c8:24:c1:a2:51:48:ba:4e:cc:86:16:2f:a9:06:f7:6d:fa: b6:18:7c:e8:8a:2f:71:36:ce:90:e1:ba:c8:01:d9:b9:4d:49: c5:58:46:89:91:ad:9c:96:d1:76:91:13:3c:72:20:6f:53:4b: 7b:c1:b5:21:4e:b4:ff:56:92:44:a7:35:85:d2:4a:cf:3e:54: 33:ee:77:cf:a6:ae:99:78:c1:6f:91:af:4d:fc:f9:bc:6b:44: a9:6a:ec:76:52:3f:2c:fc:2a:5d:c7:35:e9:64:7b:4e:b7:39: cf:49:3a:4b:6c:45:76:ee:3e:7e:5c:ae:25:05:cd:42:fb:11: 5f:c1:18:62:a1:f3:97:30:ce:6b:cb:a2:cb:6a:f4:db:28:15: 64:17:88:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXZM66iI9SHBc3q7UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI0MDUxMjEzMDAzNFoXDTI0MDgxMDEzMDAzNFowLzEtMCsGA1UEAxMk N2EzOTM1ZWUtOWRmNi00MTIwLTgzZjMtNTE1OWZiMzg4M2M1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsA2joTLp+hRYFtoeAzhcHPOP+2YSk9kjVaA/ wstRT0oWRJDoBulCtatWbKVgGDuPOgZXGAssBhSPfa7eQ8N7AMvoxZfO9k5BJCqO 6xBl6s8wh2tD9oW8NBpOE7a+kdwEPgtlvmmGZqo0qD6AEWduBmRadUMXqYUuZFc8 p2CmwfJBtXfyiouoGNCK43yboIVFBp/7UjKes2QmDoV6je1qb0IZR9ce7XPe+B/K NPFx2YeIjSdbImw2V/po+us8Xm/S3PHHmoWaTAzt2VJf2y7MsKTyuiFLD421s376 r8F+1qpHlu7vrggyod1NA/g9051sztm8W1BCeq/hIIIENy/NlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGsRG86JSXyQc9cX6iF8ZB587KgUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvMDY3MGZhMGMtMWM2OS0z NzU2LTg1YTItODFmYTc5YjAxOThiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCz8zgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB1cTlsxkXElgU3fU+0wCPiHwYoW1aYRK7yf/QQLXGnUUFcuqOka2OaY R8XUdAcm0JaiBNAuGPxvrB04P5nodRsPISh7ukVo3r1+FvdJIuwUeCoMHUU4s0C9 +pfHXszdwoi9lRX9DiX4PBuXff7IJMGiUUi6TsyGFi+pBvdt+rYYfOiKL3E2zpDh usgB2blNScVYRomRrZyW0XaREzxyIG9TS3vBtSFOtP9WkkSnNYXSSs8+VDPud8+m rpl4wW+Rr038+bxrRKlq7HZSPyz8Kl3HNelke063Oc9JOktsRXbuPn5criUFzUL7 EV/BGGKh85cwzmvLostq9NsoFWQXiGg= -----END CERTIFICATE-----Generated at Sat May 18 16:09:06 2024 by rpki-client on console-ams.rpki-client.org