$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/0bbbcc0c-9729-38ca-b886-528c694bd6d0.roa File: 0bbbcc0c-9729-38ca-b886-528c694bd6d0.roa (raw, json) Hash identifier: WJ8D+PFtloLG7vVPTG4U5AEGBB1t4tDHtOjZNOOL/cM= Subject key identifier: 34:C6:59:4D:47:EF:57:05:01:93:12:07:08:07:36:29:F0:41:CA:D9 Certificate issuer: /CN=4d2cd209-f77d-4fb6-8d28-946d42f60d8e Certificate serial: 010D0C9F432858424E606C728DABD36FCE450DC0 Authority key identifier: F8:F3:80:E4:03:08:2D:F8:8E:62:61:A8:E5:D1:0A:0E:97:D1:7A:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/0bbbcc0c-9729-38ca-b886-528c694bd6d0.roa Signing time: Wed 21 Jun 2023 12:00:00 +0000 ROA not before: Wed 21 Jun 2023 12:00:00 +0000 ROA not after: Sat 09 Aug 2025 04:00:00 +0000 asID: 11892 IP address blocks: 168.146.64.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:42:4e:60:6c:72:8d:ab:d3:6f:ce:45:0d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d2cd209-f77d-4fb6-8d28-946d42f60d8e Validity Not Before: Jun 21 12:00:00 2023 GMT Not After : Aug 9 04:00:00 2025 GMT Subject: CN=5b873842-f068-4d15-bf27-863203bd3409 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:66:50:62:eb:86:7e:05:4d:fb:7c:0c:fa:5f: f8:78:3e:97:56:58:19:0a:48:0d:d8:7f:6f:c7:31: 3e:e4:07:03:0a:4b:f8:97:5f:fd:84:7c:c0:95:94: 21:fe:d3:d8:49:d5:9b:e0:f3:32:d7:f0:b6:ad:9f: 69:1b:a5:a3:ee:d9:1e:da:01:d1:a4:86:51:0c:f9: 91:78:91:66:53:18:43:d0:96:ee:70:64:a3:96:c6: 04:41:f3:4b:73:7b:9d:62:b2:c2:ef:37:12:e7:8b: 58:77:e4:f2:24:71:36:15:fe:29:ba:48:af:23:6d: 96:48:e6:fb:b3:b3:b0:bf:dd:68:df:19:92:7b:9d: 4d:08:71:50:23:23:6a:fc:34:ee:95:ed:bb:8e:0e: a8:0e:3d:b4:96:95:6d:5f:d5:13:80:ed:f2:dc:cf: 51:ff:d1:67:64:10:b8:6c:6f:35:8c:6f:8e:89:6c: 38:13:e1:b7:d2:27:97:ad:4a:87:44:5a:6f:c7:ff: 71:9c:99:e2:7a:61:58:7a:0b:9a:c0:ce:d5:0c:83: 0a:23:7f:f0:58:ef:9a:5f:3d:be:55:50:f8:aa:01: d6:a2:0d:0c:c0:3d:74:15:9a:3b:fa:83:76:c1:3e: 59:14:b3:ff:48:24:5e:f2:75:45:25:fd:05:de:42: 66:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:C6:59:4D:47:EF:57:05:01:93:12:07:08:07:36:29:F0:41:CA:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/0bbbcc0c-9729-38ca-b886-528c694bd6d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.crl X509v3 Authority Key Identifier: keyid:F8:F3:80:E4:03:08:2D:F8:8E:62:61:A8:E5:D1:0A:0E:97:D1:7A:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer sbgp-ipAddrBlock: critical IPv4: 168.146.64.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:8b:15:c6:5a:3e:1c:3a:af:86:51:ca:63:b0:87:0d:11:58: d4:55:53:f4:e7:c6:0f:fd:65:de:c2:cb:a5:1d:d0:3e:39:1b: 9b:37:7b:86:04:c7:39:af:8f:60:5f:f2:50:81:9d:9d:db:6e: 61:d3:ab:91:15:36:5e:68:a6:78:e4:77:d5:79:49:8f:f6:e3: c0:b8:06:07:b4:4a:51:92:7e:8f:d0:e7:e2:69:5d:b0:e3:ed: 5e:7b:22:b7:4c:b4:21:f1:7a:02:d3:3a:e0:ac:c2:0d:85:0c: 46:c0:80:7d:b1:53:fe:57:cb:ce:dd:8d:76:fb:66:11:45:70: bd:b9:e1:80:b5:06:75:db:0b:5b:29:db:bf:b5:84:be:b9:b1: 87:9c:38:4c:06:80:9d:85:89:14:9c:bc:e5:02:73:57:0c:98: 36:88:c5:c4:ad:a9:5c:47:25:df:80:ac:52:dc:2b:f8:9b:79: 48:30:18:b3:6a:e2:ef:cb:3d:40:f2:a5:92:6f:d9:2f:59:75: 6a:30:b0:32:ec:9f:49:ac:55:69:a5:2b:8e:5f:aa:52:45:56: f4:ff:96:8b:b1:43:cc:f9:cd:ea:00:07:f5:ef:2f:57:c2:b0: 50:d1:10:19:92:c4:91:d9:f3:47:69:9f:3d:61:0c:47:08:f6: 2f:0e:dd:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEJOYGxyjavTb85FDcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGQyY2QyMDktZjc3ZC00ZmI2LThkMjgtOTQ2ZDQyZjYw ZDhlMB4XDTIzMDYyMTEyMDAwMFoXDTI1MDgwOTA0MDAwMFowLzEtMCsGA1UEAxMk NWI4NzM4NDItZjA2OC00ZDE1LWJmMjctODYzMjAzYmQzNDA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmZQYuuGfgVN+3wM+l/4eD6XVlgZCkgN2H9v xzE+5AcDCkv4l1/9hHzAlZQh/tPYSdWb4PMy1/C2rZ9pG6Wj7tke2gHRpIZRDPmR eJFmUxhD0JbucGSjlsYEQfNLc3udYrLC7zcS54tYd+TyJHE2Ff4pukivI22WSOb7 s7Owv91o3xmSe51NCHFQIyNq/DTule27jg6oDj20lpVtX9UTgO3y3M9R/9FnZBC4 bG81jG+OiWw4E+G30ieXrUqHRFpvx/9xnJniemFYeguawM7VDIMKI3/wWO+aXz2+ VVD4qgHWog0MwD10FZo7+oN2wT5ZFLP/SCRe8nVFJf0F3kJm/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDTGWU1H71cFAZMSBwgHNinwQcrZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZDJj ZDIwOS1mNzdkLTRmYjYtOGQyOC05NDZkNDJmNjBkOGUvMGJiYmNjMGMtOTcyOS0z OGNhLWI4ODYtNTI4YzY5NGJkNmQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGQyY2QyMDktZjc3ZC00ZmI2LThk MjgtOTQ2ZDQyZjYwZDhlLzRkMmNkMjA5LWY3N2QtNGZiNi04ZDI4LTk0NmQ0MmY2 MGQ4ZS5jcmwwHwYDVR0jBBgwFoAU+POA5AMILfiOYmGo5dEKDpfReucwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZDJjZDIwOS1mNzdkLTRmYjYtOGQyOC05NDZk NDJmNjBkOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqJJAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI6LFcZaPhw6r4ZRymOwhw0RWNRVU/Tnxg/9Zd7Cy6Ud0D45G5s3e4YE xzmvj2Bf8lCBnZ3bbmHTq5EVNl5opnjkd9V5SY/248C4Bge0SlGSfo/Q5+JpXbDj 7V57IrdMtCHxegLTOuCswg2FDEbAgH2xU/5Xy87djXb7ZhFFcL254YC1BnXbC1sp 27+1hL65sYecOEwGgJ2FiRScvOUCc1cMmDaIxcStqVxHJd+ArFLcK/ibeUgwGLNq 4u/LPUDypZJv2S9ZdWowsDLsn0msVWmlK45fqlJFVvT/louxQ8z5zeoAB/XvL1fC sFDREBmSxJHZ80dpnz1hDEcI9i8O3eQ= -----END CERTIFICATE-----Generated at Sun May 12 15:11:09 2024 by rpki-client on console-ams.rpki-client.org