$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/870da1df-3763-33fe-b843-1fd222d18b61.roa File: 870da1df-3763-33fe-b843-1fd222d18b61.roa (raw, json) Hash identifier: fN3DmyADsPIBCl2hGw6jfZMsQbs2T2yDzmkyo1ij7VU= Subject key identifier: 58:2D:0E:FF:76:F4:58:0D:7B:F9:26:01:6E:A4:D4:0C:7C:69:58:D5 Certificate issuer: /CN=b0d6fd50-b543-4e97-a7f3-0d6a5908ca38 Certificate serial: 010D0C9F432858451BCD91DE421CA60422914E80 Authority key identifier: B8:2D:73:8E:4B:5A:99:ED:25:54:55:58:EF:D1:33:51:15:68:F4:FF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/870da1df-3763-33fe-b843-1fd222d18b61.roa Signing time: Tue 05 Mar 2024 16:47:06 +0000 ROA not before: Tue 05 Mar 2024 16:47:06 +0000 ROA not after: Mon 03 Jun 2024 15:47:06 +0000 asID: 20473 IP address blocks: 64.130.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:1b:cd:91:de:42:1c:a6:04:22:91:4e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0d6fd50-b543-4e97-a7f3-0d6a5908ca38 Validity Not Before: Mar 5 16:47:06 2024 GMT Not After : Jun 3 15:47:06 2024 GMT Subject: CN=250ce8fe-4e21-4af2-bed6-47b18b8eb9d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:b0:4d:fe:83:9f:8c:a2:44:2c:f5:f6:61:08: 48:85:e1:63:2b:d6:93:8a:51:9b:b9:07:6a:0c:7d: 04:db:f0:d0:e3:7f:be:c0:62:0c:9e:94:f5:0a:e3: 50:51:d2:e9:ff:98:39:84:7e:55:64:1c:16:5c:04: 9a:d7:b2:cf:2d:8c:6c:4a:1b:e4:dc:4c:07:87:11: bd:5b:b1:bc:5e:f9:c0:a2:0c:f4:bc:d3:89:cc:bc: 34:5a:32:69:53:d0:7b:a4:95:9b:80:33:6c:35:f6: 99:57:f0:a1:b4:e1:5a:93:34:91:8a:6c:32:17:f3: cb:9a:1a:f8:b0:88:50:e5:69:2c:84:35:40:40:e8: c8:b9:61:fd:74:15:ce:3e:4c:d4:7e:39:5b:ed:6a: 87:17:78:a7:76:d6:bf:96:b5:ed:7a:66:46:6c:06: 7b:e3:f9:d2:72:8a:64:15:06:3c:7a:52:ff:39:16: 11:f9:76:e5:42:5f:c0:ab:fe:62:ab:a9:d3:5e:d2: d1:d1:ab:36:6b:6b:e1:96:bc:d6:82:63:c1:bc:3a: 69:32:c2:47:b0:9b:62:a8:90:24:e2:18:20:fb:b2: 21:fc:a8:f1:55:f6:a9:f2:92:df:4a:19:da:24:b8: 3e:b6:ad:ba:66:50:31:50:f8:8a:a3:78:8e:79:03: 24:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:2D:0E:FF:76:F4:58:0D:7B:F9:26:01:6E:A4:D4:0C:7C:69:58:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/870da1df-3763-33fe-b843-1fd222d18b61.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.crl X509v3 Authority Key Identifier: keyid:B8:2D:73:8E:4B:5A:99:ED:25:54:55:58:EF:D1:33:51:15:68:F4:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.cer sbgp-ipAddrBlock: critical IPv4: 64.130.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:cb:2f:9b:4a:39:ff:97:c9:d9:4c:09:8d:97:67:c7:83:81: bf:00:29:3f:fd:34:19:98:96:fe:e2:07:0c:21:37:bc:1c:11: 9a:b0:85:e0:00:04:90:a3:6e:76:84:34:5e:9d:c7:a5:dd:a6: f9:de:b2:65:5c:83:61:2b:dd:61:8a:c2:d0:29:27:8f:e7:2f: 45:41:81:6f:92:b2:d5:4a:d3:d7:5c:5f:a2:3e:31:fc:f6:51: c7:ed:66:fd:c8:fa:f4:e1:96:53:62:98:1e:ee:99:ed:36:38: e9:f1:cf:b5:a0:44:cf:df:cd:ea:2f:0c:5a:61:d0:aa:52:d2: 15:b8:a9:00:66:b9:fc:7f:2b:bc:b3:f2:2f:84:40:e5:97:ff: 9f:b8:fa:e3:72:af:24:3e:51:81:33:77:ec:a9:9e:1c:50:cb: ad:97:10:c8:c3:cc:09:ac:12:cb:70:b2:74:22:fb:c1:fa:e6: d8:4b:e0:97:37:80:9c:9d:51:8f:7a:b1:82:52:9b:4c:10:98: 9f:0c:e7:dc:93:7a:a1:99:38:6f:fd:c0:3e:e5:a9:94:6f:87: 27:53:b0:ca:db:ed:45:01:fa:70:3c:4b:fb:9b:85:d9:39:82: 48:56:83:fb:b7:4b:61:44:fd:fd:0f:06:4b:7f:a2:fd:dc:9b: 23:84:49:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUbzZHeQhymBCKRToAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjBkNmZkNTAtYjU0My00ZTk3LWE3ZjMtMGQ2YTU5MDhj YTM4MB4XDTI0MDMwNTE2NDcwNloXDTI0MDYwMzE1NDcwNlowLzEtMCsGA1UEAxMk MjUwY2U4ZmUtNGUyMS00YWYyLWJlZDYtNDdiMThiOGViOWQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprBN/oOfjKJELPX2YQhIheFjK9aTilGbuQdq DH0E2/DQ43++wGIMnpT1CuNQUdLp/5g5hH5VZBwWXASa17LPLYxsShvk3EwHhxG9 W7G8XvnAogz0vNOJzLw0WjJpU9B7pJWbgDNsNfaZV/ChtOFakzSRimwyF/PLmhr4 sIhQ5WkshDVAQOjIuWH9dBXOPkzUfjlb7WqHF3indta/lrXtemZGbAZ74/nScopk FQY8elL/ORYR+XblQl/Aq/5iq6nTXtLR0as2a2vhlrzWgmPBvDppMsJHsJtiqJAk 4hgg+7Ih/KjxVfap8pLfShnaJLg+tq26ZlAxUPiKo3iOeQMkgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFgtDv929FgNe/kmAW6k1Ax8aVjVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iMGQ2 ZmQ1MC1iNTQzLTRlOTctYTdmMy0wZDZhNTkwOGNhMzgvODcwZGExZGYtMzc2My0z M2ZlLWI4NDMtMWZkMjIyZDE4YjYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYjBkNmZkNTAtYjU0My00ZTk3LWE3 ZjMtMGQ2YTU5MDhjYTM4L2IwZDZmZDUwLWI1NDMtNGU5Ny1hN2YzLTBkNmE1OTA4 Y2EzOC5jcmwwHwYDVR0jBBgwFoAUuC1zjktame0lVFVY79EzURVo9P8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9iMGQ2ZmQ1MC1iNTQzLTRlOTctYTdmMy0wZDZh NTkwOGNhMzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQIIoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJHLL5tKOf+XydlMCY2XZ8eDgb8AKT/9NBmYlv7iBwwhN7wcEZqwheAA BJCjbnaENF6dx6XdpvnesmVcg2Er3WGKwtApJ4/nL0VBgW+SstVK09dcX6I+Mfz2 UcftZv3I+vThllNimB7ume02OOnxz7WgRM/fzeovDFph0KpS0hW4qQBmufx/K7yz 8i+EQOWX/5+4+uNyryQ+UYEzd+ypnhxQy62XEMjDzAmsEstwsnQi+8H65thL4Jc3 gJydUY96sYJSm0wQmJ8M59yTeqGZOG/9wD7lqZRvhydTsMrb7UUB+nA8S/ubhdk5 gkhWg/u3S2FE/f0PBkt/ov3cmyOESdQ= -----END CERTIFICATE-----Generated at Tue May 7 14:20:51 2024 by rpki-client on console-ams.rpki-client.org