$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/0baf61e0-eead-323c-b72c-efaab2756610.roa File: 0baf61e0-eead-323c-b72c-efaab2756610.roa (raw, json) Hash identifier: QNtUoBgETNzgaUB80DzcdxOh9ikRPsY+f55qB0idOAs= Subject key identifier: 8F:A3:BB:0E:A5:4C:A3:A4:AC:F2:FD:B4:5A:D6:F3:07:E0:70:DA:54 Certificate issuer: /CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Certificate serial: 010D0C9F432858454808200BFCA11A28D18C1A80 Authority key identifier: 9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/0baf61e0-eead-323c-b72c-efaab2756610.roa Signing time: Thu 21 Mar 2024 13:00:33 +0000 ROA not before: Thu 21 Mar 2024 13:00:33 +0000 ROA not after: Wed 19 Jun 2024 13:00:33 +0000 asID: 16433 IP address blocks: 216.20.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:48:08:20:0b:fc:a1:1a:28:d1:8c:1a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Validity Not Before: Mar 21 13:00:33 2024 GMT Not After : Jun 19 13:00:33 2024 GMT Subject: CN=11ecccbe-eb68-4d9d-bd68-9f81bd9ebfd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:07:b6:2c:a5:8a:7c:3c:64:4c:6c:38:6d:c0: 4a:f3:2c:d4:34:60:e3:d7:ff:19:93:41:a4:fb:23: 44:17:8c:23:f5:0f:dc:c5:83:3c:e1:92:35:e3:ea: 33:3a:00:8e:1c:29:59:ba:db:ed:db:c7:6a:b8:a7: 8d:61:df:57:38:a6:3b:be:2a:f3:50:3f:de:83:ad: 8e:a1:4f:84:ed:7f:dd:40:2c:e6:6d:6e:8c:ac:92: 6a:33:77:23:e8:ef:17:6d:63:05:f1:fb:23:99:d4: 04:07:dd:a2:c3:6f:2b:ab:59:57:14:d5:f5:8f:e0: 9f:18:fb:a3:5a:b1:12:59:e7:dc:af:d4:47:d2:68: 97:92:b4:c6:76:95:cd:19:75:81:63:76:45:90:58: 71:13:5a:87:29:74:18:8f:99:20:9a:3f:03:fc:9f: ad:cf:80:e0:3c:07:d4:e0:5a:7d:99:07:00:32:05: ff:fd:4e:7f:f7:7b:9a:cb:94:4a:15:81:41:93:5a: 60:eb:4f:03:8d:43:94:83:f5:f5:e1:d6:e1:fb:58: 92:fe:26:66:50:03:5f:aa:a5:a2:cd:46:16:98:8e: 40:7f:8c:0e:c9:1a:4f:30:83:5e:fd:d1:c2:6e:66: 18:67:fe:3f:cd:05:c6:3f:f5:e1:e4:74:7c:a1:1c: c8:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:A3:BB:0E:A5:4C:A3:A4:AC:F2:FD:B4:5A:D6:F3:07:E0:70:DA:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/0baf61e0-eead-323c-b72c-efaab2756610.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl X509v3 Authority Key Identifier: keyid:9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer sbgp-ipAddrBlock: critical IPv4: 216.20.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:f6:f1:66:7e:c0:2f:47:f1:85:d8:f8:61:04:0b:36:36:61: a1:55:56:ba:97:e3:f9:22:7e:44:72:00:0e:22:b1:49:40:d2: cd:fc:ca:38:eb:86:7c:85:11:1e:8b:a6:00:c7:23:28:34:55: 10:68:77:a2:ea:a3:0d:11:cf:4f:bd:5a:76:c5:a7:32:d5:90: e7:d4:94:d8:cb:45:57:9e:89:84:01:67:fa:82:79:ee:b3:b1: 9d:15:a2:66:18:46:8b:99:c5:c7:1a:0a:17:d6:26:83:1b:e0: 77:b4:48:cd:9e:aa:26:ae:6c:e9:ca:76:c2:05:e4:ed:e3:a4: 41:7f:a3:fb:30:e7:63:0e:41:fd:62:22:40:ad:0c:4e:13:18: 80:18:bc:c5:e4:82:d9:61:b7:15:25:5d:57:dc:c0:38:86:24: c9:1d:76:58:ea:d5:99:c9:9d:b8:65:38:e9:d4:a9:a3:cd:6e: 3b:0f:5d:83:30:95:08:d4:13:75:57:2b:4e:79:77:98:44:d7: a9:42:6c:b8:e1:42:23:96:8e:49:2c:ce:98:08:82:dc:32:87: e1:8a:c0:cd:6f:13:bd:7d:70:15:c7:53:bf:58:0c:06:9c:5d: ef:a9:a1:de:9a:99:94:72:28:34:9d:fe:ae:88:d9:32:5b:37: ee:dd:d9:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVICCAL/KEaKNGMGoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmRiZjYwNGYtMjRiMC00MjZlLTgwOWQtZTY1YjA4YmU1 ZDUwMB4XDTI0MDMyMTEzMDAzM1oXDTI0MDYxOTEzMDAzM1owLzEtMCsGA1UEAxMk MTFlY2NjYmUtZWI2OC00ZDlkLWJkNjgtOWY4MWJkOWViZmQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwe2LKWKfDxkTGw4bcBK8yzUNGDj1/8Zk0Gk +yNEF4wj9Q/cxYM84ZI14+ozOgCOHClZutvt28dquKeNYd9XOKY7virzUD/eg62O oU+E7X/dQCzmbW6MrJJqM3cj6O8XbWMF8fsjmdQEB92iw28rq1lXFNX1j+CfGPuj WrESWefcr9RH0miXkrTGdpXNGXWBY3ZFkFhxE1qHKXQYj5kgmj8D/J+tz4DgPAfU 4Fp9mQcAMgX//U5/93uay5RKFYFBk1pg608DjUOUg/X14dbh+1iS/iZmUANfqqWi zUYWmI5Af4wOyRpPMINe/dHCbmYYZ/4/zQXGP/Xh5HR8oRzIuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI+juw6lTKOkrPL9tFrW8wfgcNpUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yZGJm NjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjViMDhiZTVkNTAvMGJhZjYxZTAtZWVhZC0z MjNjLWI3MmMtZWZhYWIyNzU2NjEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMmRiZjYwNGYtMjRiMC00MjZlLTgw OWQtZTY1YjA4YmU1ZDUwLzJkYmY2MDRmLTI0YjAtNDI2ZS04MDlkLWU2NWIwOGJl NWQ1MC5jcmwwHwYDVR0jBBgwFoAUnwuW5LWIWZ7uukF5kcCTydHD9UIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yZGJmNjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjVi MDhiZTVkNTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2BSQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAn28WZ+wC9H8YXY+GEECzY2YaFVVrqX4/kifkRyAA4isUlA0s38yjjr hnyFER6LpgDHIyg0VRBod6Lqow0Rz0+9WnbFpzLVkOfUlNjLRVeeiYQBZ/qCee6z sZ0VomYYRouZxccaChfWJoMb4He0SM2eqiaubOnKdsIF5O3jpEF/o/sw52MOQf1i IkCtDE4TGIAYvMXkgtlhtxUlXVfcwDiGJMkddljq1ZnJnbhlOOnUqaPNbjsPXYMw lQjUE3VXK055d5hE16lCbLjhQiOWjkkszpgIgtwyh+GKwM1vE719cBXHU79YDAac Xe+pod6amZRyKDSd/q6I2TJbN+7d2Qg= -----END CERTIFICATE-----Generated at Wed May 15 15:09:00 2024 by rpki-client on console-fra.rpki-client.org