$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/904d8b40-9ccb-4af8-bb7d-f36a96a343c8/5bc53f1b-becc-3c12-ba26-a5810462a8f0.roa File: 5bc53f1b-becc-3c12-ba26-a5810462a8f0.roa (raw, json) Hash identifier: m5rdDvsH/mvMbZQctiSsTgiVGYfji1RUXjq/lRN5UMQ= Subject key identifier: 42:FD:66:10:55:3B:05:DF:33:7F:49:DB:E4:69:86:06:6B:EE:AF:E6 Certificate issuer: /CN=904d8b40-9ccb-4af8-bb7d-f36a96a343c8 Certificate serial: 010D0C9F4328584515E58FA360233EDACFD27280 Authority key identifier: 45:EB:72:23:96:2A:E5:43:8C:E4:23:D5:E6:58:4C:3E:D2:9E:7F:34 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/904d8b40-9ccb-4af8-bb7d-f36a96a343c8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/904d8b40-9ccb-4af8-bb7d-f36a96a343c8/5bc53f1b-becc-3c12-ba26-a5810462a8f0.roa Signing time: Sun 03 Mar 2024 14:00:31 +0000 ROA not before: Sun 03 Mar 2024 14:00:31 +0000 ROA not after: Sat 01 Jun 2024 13:00:31 +0000 asID: 400362 IP address blocks: 216.181.108.0/24 maxlen: 24 2606:a5c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/904d8b40-9ccb-4af8-bb7d-f36a96a343c8/904d8b40-9ccb-4af8-bb7d-f36a96a343c8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/904d8b40-9ccb-4af8-bb7d-f36a96a343c8/904d8b40-9ccb-4af8-bb7d-f36a96a343c8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/904d8b40-9ccb-4af8-bb7d-f36a96a343c8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 16 May 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:15:e5:8f:a3:60:23:3e:da:cf:d2:72:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=904d8b40-9ccb-4af8-bb7d-f36a96a343c8 Validity Not Before: Mar 3 14:00:31 2024 GMT Not After : Jun 1 13:00:31 2024 GMT Subject: CN=cb4edb23-4af6-4ed7-b4ce-628081ff2f36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:44:d0:ce:fa:6e:23:c5:1e:9c:82:c8:bc:f0: 04:29:b6:27:01:18:be:fa:d7:68:d9:ac:40:c7:be: 67:8f:32:83:1e:f0:c3:4a:14:09:17:e2:fe:ab:48: a8:bb:20:4f:9c:5b:bb:d4:a8:3c:ff:01:28:0e:2e: 7a:1d:96:e0:cf:80:33:3d:4c:ea:f3:dc:fe:1a:7a: 0b:50:a3:9a:fc:04:b5:d0:7d:5b:bb:95:09:d9:90: 7c:08:bb:ed:81:21:29:7a:1b:b1:b7:7d:00:e2:b6: b0:86:16:fb:53:4e:63:a5:b7:f1:31:93:4f:0c:d8: ef:02:3e:3d:c8:aa:09:bb:98:54:ed:9d:38:2c:52: 3c:49:a6:ea:6c:b4:ef:9e:20:87:c5:37:1c:71:14: a2:ea:03:7c:87:e8:de:66:24:15:a4:fc:7a:d9:88: 69:21:39:3f:d5:13:43:af:42:58:ff:12:46:6a:71: 31:db:f7:c1:b3:70:c2:75:23:7b:e6:f8:6c:a9:d8: 7a:83:82:49:64:45:6b:0e:bd:bd:f7:a6:f8:66:21: 81:aa:20:db:eb:3c:3f:de:a0:26:ff:84:9c:d0:c8: e2:b2:4c:69:25:9e:b0:37:5b:61:25:6a:17:9d:c3: 55:f0:c1:88:f0:6d:3b:dc:5a:5d:34:38:13:ee:fd: cf:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:FD:66:10:55:3B:05:DF:33:7F:49:DB:E4:69:86:06:6B:EE:AF:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/904d8b40-9ccb-4af8-bb7d-f36a96a343c8/5bc53f1b-becc-3c12-ba26-a5810462a8f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/904d8b40-9ccb-4af8-bb7d-f36a96a343c8/904d8b40-9ccb-4af8-bb7d-f36a96a343c8.crl X509v3 Authority Key Identifier: keyid:45:EB:72:23:96:2A:E5:43:8C:E4:23:D5:E6:58:4C:3E:D2:9E:7F:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/904d8b40-9ccb-4af8-bb7d-f36a96a343c8.cer sbgp-ipAddrBlock: critical IPv4: 216.181.108.0/24 IPv6: 2606:a5c0::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:a2:37:99:08:bc:13:1a:e5:ef:a8:80:a1:e4:2a:2a:98:f8: 85:c4:77:4c:2d:75:8e:b5:95:72:e6:0a:b8:fc:2c:11:cd:7a: 99:35:87:98:78:94:76:76:23:07:cd:f1:7f:1e:4d:95:64:01: 01:84:73:f3:2b:37:fa:c1:25:2b:e7:80:d2:f1:48:79:a4:60: 5b:5a:7d:d5:75:fb:ac:e9:a2:10:e9:1e:84:4b:cc:e4:57:80: 2f:7a:78:ac:97:fb:78:c5:26:4c:be:9d:ae:84:70:6b:47:81: 11:bb:ab:66:58:19:24:04:ff:0d:a6:7a:4f:29:42:5c:95:dc: 01:7f:c2:7b:2a:a7:c9:47:4b:0e:47:ad:7a:07:a8:29:24:7f: ca:dc:23:8e:86:d4:c7:b2:2e:99:cd:64:96:0a:af:72:39:d1: bb:f1:29:13:79:cf:98:68:e8:2f:52:7b:ab:dc:36:0c:3b:aa: 85:cf:1d:38:10:0b:62:65:fe:0c:df:29:6b:5d:f4:2f:ec:52: 45:97:60:e7:29:04:52:66:32:d3:46:24:b0:40:ca:08:16:16: 77:7e:d6:5d:52:8e:66:30:ec:b7:bb:43:c5:aa:52:39:76:1e: 10:89:f5:a3:ce:ba:df:42:6f:cb:78:ea:b8:b8:bc:7c:78:6e: 70:43:ed:b2 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEUV5Y+jYCM+2s/ScoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTA0ZDhiNDAtOWNjYi00YWY4LWJiN2QtZjM2YTk2YTM0 M2M4MB4XDTI0MDMwMzE0MDAzMVoXDTI0MDYwMTEzMDAzMVowLzEtMCsGA1UEAxMk Y2I0ZWRiMjMtNGFmNi00ZWQ3LWI0Y2UtNjI4MDgxZmYyZjM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA30TQzvpuI8UenILIvPAEKbYnARi++tdo2axA x75njzKDHvDDShQJF+L+q0iouyBPnFu71Kg8/wEoDi56HZbgz4AzPUzq89z+GnoL UKOa/AS10H1bu5UJ2ZB8CLvtgSEpehuxt30A4rawhhb7U05jpbfxMZNPDNjvAj49 yKoJu5hU7Z04LFI8SabqbLTvniCHxTcccRSi6gN8h+jeZiQVpPx62YhpITk/1RND r0JY/xJGanEx2/fBs3DCdSN75vhsqdh6g4JJZEVrDr2996b4ZiGBqiDb6zw/3qAm /4Sc0MjiskxpJZ6wN1thJWoXncNV8MGI8G073FpdNDgT7v3PGQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFEL9ZhBVOwXfM39J2+RphgZr7q/mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85MDRk OGI0MC05Y2NiLTRhZjgtYmI3ZC1mMzZhOTZhMzQzYzgvNWJjNTNmMWItYmVjYy0z YzEyLWJhMjYtYTU4MTA0NjJhOGYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOTA0ZDhiNDAtOWNjYi00YWY4LWJi N2QtZjM2YTk2YTM0M2M4LzkwNGQ4YjQwLTljY2ItNGFmOC1iYjdkLWYzNmE5NmEz NDNjOC5jcmwwHwYDVR0jBBgwFoAURetyI5Yq5UOM5CPV5lhMPtKefzQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85MDRkOGI0MC05Y2NiLTRhZjgtYmI3ZC1mMzZh OTZhMzQzYzguY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQA2LVsMA8E AgACMAkDBwAmBqXAAAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAQKI3mQi8Exrl76iAoeQqKpj4hcR3TC11 jrWVcuYKuPwsEc16mTWHmHiUdnYjB83xfx5NlWQBAYRz8ys3+sElK+eA0vFIeaRg W1p91XX7rOmiEOkehEvM5FeAL3p4rJf7eMUmTL6droRwa0eBEburZlgZJAT/DaZ6 TylCXJXcAX/CeyqnyUdLDketegeoKSR/ytwjjobUx7Iumc1klgqvcjnRu/EpE3nP mGjoL1J7q9w2DDuqhc8dOBALYmX+DN8pa130L+xSRZdg5ykEUmYy00YksEDKCBYW d37WXVKOZjDst7tDxapSOXYeEIn1o86630Jvy3jquLi8fHhucEPtsg== -----END CERTIFICATE-----Generated at Wed May 15 16:06:08 2024 by rpki-client on console-ams.rpki-client.org