$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/6ef1585a-bcdb-3b3f-9114-d20e6eefbe68.roa File: 6ef1585a-bcdb-3b3f-9114-d20e6eefbe68.roa (raw, json) Hash identifier: pNJTC9r7sSRYcFzG8M1oNXgoopUWg2XUa+mF/sK0xIs= Subject key identifier: C4:FE:B3:BF:FB:B8:EA:0A:B1:AD:F7:E3:70:F9:EE:E0:E4:AD:F6:7D Certificate issuer: /CN=239e2a72-9347-4316-9be7-20bdf6512711 Certificate serial: 010D0C9F43285845D933AF2D7D8651ABC7C9A580 Authority key identifier: C7:00:5A:76:42:60:11:9F:ED:7A:6F:7F:67:94:62:64:EC:2D:6B:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/6ef1585a-bcdb-3b3f-9114-d20e6eefbe68.roa Signing time: Sun 12 May 2024 13:00:34 +0000 ROA not before: Sun 12 May 2024 13:00:34 +0000 ROA not after: Sat 10 Aug 2024 13:00:34 +0000 asID: 203098 IP address blocks: 208.70.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/239e2a72-9347-4316-9be7-20bdf6512711.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/239e2a72-9347-4316-9be7-20bdf6512711.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 May 2024 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:d9:33:af:2d:7d:86:51:ab:c7:c9:a5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=239e2a72-9347-4316-9be7-20bdf6512711 Validity Not Before: May 12 13:00:34 2024 GMT Not After : Aug 10 13:00:34 2024 GMT Subject: CN=f2538edf-361e-4ae1-b196-2d7aff7cef95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:ca:62:ff:61:89:bb:61:19:11:4e:60:17:55: 88:c6:ab:32:95:0b:be:30:63:0f:7b:7b:90:79:4e: 6f:d8:52:c6:a2:c2:ba:7e:a1:46:9f:6f:4b:20:1b: 3e:77:8e:0b:0c:eb:a4:29:45:91:6a:72:bb:97:05: 58:cd:8f:15:b0:e7:53:06:4a:b5:0f:8b:f7:c9:f6: 92:48:94:73:98:53:2c:d0:8e:dd:ab:53:18:17:89: 7b:0b:7b:38:e8:f7:46:f6:fa:b3:3c:a3:7c:06:9c: 0f:a1:5f:f1:af:c5:7b:ac:f5:e9:dc:ea:f4:45:7b: 64:7f:18:ac:af:f0:81:5e:dd:b5:60:cf:05:c6:5f: ca:bf:b3:76:02:f7:65:71:0f:9b:58:2e:16:8b:ca: cf:66:ee:2f:17:82:2a:85:6f:3d:c7:64:cb:84:29: d0:26:71:4d:9e:6e:29:b8:8e:f0:5d:30:1b:e6:6c: 91:24:39:69:81:ea:3a:64:c0:b8:02:eb:21:28:b4: 7c:dc:f3:0f:bd:f1:ee:40:eb:83:9e:32:c9:45:2c: 78:b3:08:49:47:07:9b:47:a8:32:41:9f:94:d8:a6: 00:e2:13:e2:60:91:b4:44:d6:de:39:2f:fa:07:00: a5:52:bb:32:38:44:60:60:30:09:a1:43:20:74:e4: 03:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:FE:B3:BF:FB:B8:EA:0A:B1:AD:F7:E3:70:F9:EE:E0:E4:AD:F6:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/6ef1585a-bcdb-3b3f-9114-d20e6eefbe68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/239e2a72-9347-4316-9be7-20bdf6512711.crl X509v3 Authority Key Identifier: keyid:C7:00:5A:76:42:60:11:9F:ED:7A:6F:7F:67:94:62:64:EC:2D:6B:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711.cer sbgp-ipAddrBlock: critical IPv4: 208.70.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:62:cf:a6:9b:f8:24:9e:dc:ab:a8:f4:c6:55:9d:d6:a2:74: 9e:19:89:bb:4a:e2:18:5e:fe:15:ed:05:d9:36:2d:4a:25:68: a9:f3:f6:15:06:37:e9:ee:f0:d8:d8:ef:cb:1a:ae:7e:01:c0: cd:0d:ba:d9:95:64:b3:80:d9:39:0b:d9:a1:11:9f:9f:f6:97: ad:2b:cd:88:62:33:6f:f7:9b:b5:27:24:82:2d:5e:87:6d:5f: 98:ea:19:21:a7:d1:73:0d:bb:02:8b:af:bc:24:31:aa:e3:ae: 0a:d2:80:18:19:ce:4b:c8:f6:d4:23:9b:56:1a:4f:c4:ff:21: 18:32:40:ef:9d:5f:80:5e:26:b6:dc:88:1e:f4:34:68:44:c7: f6:c0:49:2f:b5:f8:76:81:22:aa:34:9b:c8:81:8f:10:1b:bf: b8:21:f1:ea:42:32:76:51:d2:23:89:e3:a7:2d:9c:a9:7a:a4: a7:e7:74:9d:38:a0:67:ce:d2:ee:e7:fb:64:33:cb:58:9e:8e: 7f:54:a7:dd:6d:a6:45:06:1a:d9:eb:2b:f9:47:8a:74:ac:12: 66:c7:02:9b:c0:79:4b:ff:df:78:0a:33:16:ba:fc:75:18:ae: df:1d:21:00:47:cb:fd:eb:68:62:a8:ad:55:31:d4:39:f3:8c: 2c:fd:f1:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXZM68tfYZRq8fJpYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjM5ZTJhNzItOTM0Ny00MzE2LTliZTctMjBiZGY2NTEy NzExMB4XDTI0MDUxMjEzMDAzNFoXDTI0MDgxMDEzMDAzNFowLzEtMCsGA1UEAxMk ZjI1MzhlZGYtMzYxZS00YWUxLWIxOTYtMmQ3YWZmN2NlZjk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhMpi/2GJu2EZEU5gF1WIxqsylQu+MGMPe3uQ eU5v2FLGosK6fqFGn29LIBs+d44LDOukKUWRanK7lwVYzY8VsOdTBkq1D4v3yfaS SJRzmFMs0I7dq1MYF4l7C3s46PdG9vqzPKN8BpwPoV/xr8V7rPXp3Or0RXtkfxis r/CBXt21YM8Fxl/Kv7N2AvdlcQ+bWC4Wi8rPZu4vF4IqhW89x2TLhCnQJnFNnm4p uI7wXTAb5myRJDlpgeo6ZMC4AushKLR83PMPvfHuQOuDnjLJRSx4swhJRwebR6gy QZ+U2KYA4hPiYJG0RNbeOS/6BwClUrsyOERgYDAJoUMgdOQD3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMT+s7/7uOoKsa3343D57uDkrfZ9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yMzll MmE3Mi05MzQ3LTQzMTYtOWJlNy0yMGJkZjY1MTI3MTEvNmVmMTU4NWEtYmNkYi0z YjNmLTkxMTQtZDIwZTZlZWZiZTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjM5ZTJhNzItOTM0Ny00MzE2LTli ZTctMjBiZGY2NTEyNzExLzIzOWUyYTcyLTkzNDctNDMxNi05YmU3LTIwYmRmNjUx MjcxMS5jcmwwHwYDVR0jBBgwFoAUxwBadkJgEZ/tem9/Z5RiZOwta1QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yMzllMmE3Mi05MzQ3LTQzMTYtOWJlNy0yMGJk ZjY1MTI3MTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0EYIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFZiz6ab+CSe3Kuo9MZVndaidJ4ZibtK4hhe/hXtBdk2LUolaKnz9hUG N+nu8NjY78sarn4BwM0NutmVZLOA2TkL2aERn5/2l60rzYhiM2/3m7UnJIItXodt X5jqGSGn0XMNuwKLr7wkMarjrgrSgBgZzkvI9tQjm1YaT8T/IRgyQO+dX4BeJrbc iB70NGhEx/bASS+1+HaBIqo0m8iBjxAbv7gh8epCMnZR0iOJ46ctnKl6pKfndJ04 oGfO0u7n+2Qzy1iejn9Up91tpkUGGtnrK/lHinSsEmbHApvAeUv/33gKMxa6/HUY rt8dIQBHy/3raGKorVUx1DnzjCz98Rk= -----END CERTIFICATE-----Generated at Sat May 18 19:15:33 2024 by rpki-client on console-ams.rpki-client.org