$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/aae793b8-1871-365c-b48d-3bc0238d3be0.roa File: aae793b8-1871-365c-b48d-3bc0238d3be0.roa (raw, json) Hash identifier: wpAMNyzePYiMExIUpR7lqmmDRPCspgDMgl7q+A9l7H0= Subject key identifier: 70:7F:D4:3F:C9:87:3E:1B:19:68:F3:2B:8D:D6:8C:16:A3:F0:15:6F Certificate issuer: /CN=65506c68-611f-46ed-9e78-36da39f8ee7d Certificate serial: 010D0C9F432858450C2026AEF40295DDFDB19780 Authority key identifier: 64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/aae793b8-1871-365c-b48d-3bc0238d3be0.roa Signing time: Thu 29 Feb 2024 02:00:27 +0000 ROA not before: Thu 29 Feb 2024 02:00:27 +0000 ROA not after: Wed 29 May 2024 01:00:27 +0000 asID: 5769 IP address blocks: 70.80.0.0/14 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 May 2024 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:0c:20:26:ae:f4:02:95:dd:fd:b1:97:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65506c68-611f-46ed-9e78-36da39f8ee7d Validity Not Before: Feb 29 02:00:27 2024 GMT Not After : May 29 01:00:27 2024 GMT Subject: CN=8a7a4d15-9391-47c8-a077-48196111b552 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:b5:3b:a4:f5:22:28:59:33:a7:4a:04:04:46: a2:bf:af:b2:67:da:19:76:68:a0:b6:85:54:8b:cc: 7f:6e:db:43:e3:13:5c:b1:27:1a:b0:c4:03:f8:db: df:1d:04:e7:9a:a1:38:fc:a2:3e:df:bb:0d:d5:5d: f8:a8:06:d0:62:f3:86:57:d1:35:e9:53:c0:a8:16: 50:ad:33:09:d7:18:1d:58:6a:23:02:dd:b6:98:5e: 66:0c:63:00:d7:24:29:7d:14:c9:8a:26:58:e7:eb: 79:84:b3:30:aa:e8:f5:41:0e:a0:7a:80:92:5a:7d: 7e:c6:d0:90:16:26:e8:ee:14:d7:85:1f:62:e6:55: f2:eb:c3:ad:09:de:fc:2f:07:12:bf:c3:c3:62:f8: ed:21:54:e6:61:4a:35:17:03:cd:dc:23:e7:eb:eb: 0c:6e:4f:1c:70:ef:fd:bf:62:ef:7c:69:11:ec:4d: 2a:b6:ff:73:ca:4d:e3:51:af:1c:8e:f7:3a:4a:ad: eb:0d:a1:2f:22:57:de:20:27:fa:66:a4:f7:e4:b3: 32:00:d7:cb:b1:71:01:c0:a8:69:97:ae:6b:57:73: df:b4:00:e9:51:52:30:21:31:4c:f2:26:69:e2:c5: 26:f4:eb:84:33:49:13:e3:ab:68:84:e1:c0:c0:17: 89:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:7F:D4:3F:C9:87:3E:1B:19:68:F3:2B:8D:D6:8C:16:A3:F0:15:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/aae793b8-1871-365c-b48d-3bc0238d3be0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl X509v3 Authority Key Identifier: keyid:64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer sbgp-ipAddrBlock: critical IPv4: 70.80.0.0/14 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:4a:ec:7e:6f:7c:9d:50:fe:f4:ad:38:53:c0:28:5a:7d:9d: 57:4d:9d:7f:30:0f:87:ff:4f:2b:74:0d:67:78:ab:ce:25:a4: 67:ee:21:57:c6:31:a1:3f:80:8f:87:f1:41:56:f1:78:ef:dd: 82:85:cb:5e:87:01:c5:2f:54:ef:b2:ca:c1:a3:97:9f:61:33: 0f:a0:f9:ce:a0:5f:78:10:ca:de:86:f4:a6:f4:d2:ad:6f:7e: 28:8d:e0:79:73:8f:6f:74:25:7b:c2:f8:c9:df:ae:7a:20:ba: 9a:11:53:14:08:09:e6:0e:cc:4c:3e:18:79:3f:dd:46:60:1b: 85:9a:8a:dc:27:ac:cd:66:bd:c5:4a:78:1e:ac:31:12:89:61: 3e:49:f1:0b:e3:32:0b:70:46:20:ff:6b:39:84:77:ad:24:fe: b6:76:43:b2:ef:c4:65:23:69:4e:aa:01:a8:a6:79:5f:ab:64: 97:ad:4f:a7:6d:b9:3b:8e:f8:11:bd:a9:da:96:19:4b:2c:4a: 01:b1:55:a4:7e:74:ee:05:6e:8c:3a:13:19:1c:ef:2a:96:49: 5a:16:07:8b:64:dc:ba:57:33:a6:19:9e:37:64:a6:87:3c:36: be:01:64:d3:0b:6b:98:c0:13:39:65:7d:28:03:10:cf:28:9d: 34:93:ab:f4 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEUMICau9AKV3f2xl4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjU1MDZjNjgtNjExZi00NmVkLTllNzgtMzZkYTM5Zjhl ZTdkMB4XDTI0MDIyOTAyMDAyN1oXDTI0MDUyOTAxMDAyN1owLzEtMCsGA1UEAxMk OGE3YTRkMTUtOTM5MS00N2M4LWEwNzctNDgxOTYxMTFiNTUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0bU7pPUiKFkzp0oEBEaiv6+yZ9oZdmigtoVU i8x/bttD4xNcsScasMQD+NvfHQTnmqE4/KI+37sN1V34qAbQYvOGV9E16VPAqBZQ rTMJ1xgdWGojAt22mF5mDGMA1yQpfRTJiiZY5+t5hLMwquj1QQ6geoCSWn1+xtCQ Fibo7hTXhR9i5lXy68OtCd78LwcSv8PDYvjtIVTmYUo1FwPN3CPn6+sMbk8ccO/9 v2LvfGkR7E0qtv9zyk3jUa8cjvc6Sq3rDaEvIlfeICf6ZqT35LMyANfLsXEBwKhp l65rV3PftADpUVIwITFM8iZp4sUm9OuEM0kT46tohOHAwBeJoQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFHB/1D/Jhz4bGWjzK43WjBaj8BVvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NTUw NmM2OC02MTFmLTQ2ZWQtOWU3OC0zNmRhMzlmOGVlN2QvYWFlNzkzYjgtMTg3MS0z NjVjLWI0OGQtM2JjMDIzOGQzYmUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjU1MDZjNjgtNjExZi00NmVkLTll NzgtMzZkYTM5ZjhlZTdkLzY1NTA2YzY4LTYxMWYtNDZlZC05ZTc4LTM2ZGEzOWY4 ZWU3ZC5jcmwwHwYDVR0jBBgwFoAUZEZbboyKetm4+mOnYbot8PWcNjEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NTUwNmM2OC02MTFmLTQ2ZWQtOWU3OC0zNmRh MzlmOGVlN2QuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCRlAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAPUrsfm98nVD+9K04U8AoWn2dV02dfzAPh/9PK3QNZ3irziWkZ+4hV8Yx oT+Aj4fxQVbxeO/dgoXLXocBxS9U77LKwaOXn2EzD6D5zqBfeBDK3ob0pvTSrW9+ KI3geXOPb3Qle8L4yd+ueiC6mhFTFAgJ5g7MTD4YeT/dRmAbhZqK3CeszWa9xUp4 HqwxEolhPknxC+MyC3BGIP9rOYR3rST+tnZDsu/EZSNpTqoBqKZ5X6tkl61Pp225 O474Eb2p2pYZSyxKAbFVpH507gVujDoTGRzvKpZJWhYHi2TculczphmeN2Smhzw2 vgFk0wtrmMATOWV9KAMQzyidNJOr9A== -----END CERTIFICATE-----Generated at Sun May 19 01:47:18 2024 by rpki-client on console-fra.rpki-client.org