$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0670fa0c-1c69-3756-85a2-81fa79b0198b.roa File: 0670fa0c-1c69-3756-85a2-81fa79b0198b.roa (raw, json) Hash identifier: zpsnap6Rzxq3S4k0FezUmn+hKXD8iVaNm+K/0RP9q9k= Subject key identifier: 72:F8:70:74:29:F7:3C:89:AF:2C:C7:76:1E:9D:92:A8:6B:31:AD:EB Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F43285844F8955779CC01D8EC8A040400 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0670fa0c-1c69-3756-85a2-81fa79b0198b.roa Signing time: Thu 22 Feb 2024 02:00:27 +0000 ROA not before: Thu 22 Feb 2024 02:00:27 +0000 ROA not after: Wed 22 May 2024 01:00:27 +0000 asID: 22781 IP address blocks: 207.204.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 May 2024 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:f8:95:57:79:cc:01:d8:ec:8a:04:04:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Feb 22 02:00:27 2024 GMT Not After : May 22 01:00:27 2024 GMT Subject: CN=52251dfe-e023-4ee9-b315-740ec6542fdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:95:a7:78:eb:68:2a:88:d4:27:09:0e:c1:99: f4:a2:b1:ac:19:b0:40:49:86:ea:8c:96:b6:1d:68: 5a:ce:42:1f:1d:94:e1:86:5b:aa:a5:64:bd:42:d5: f0:ab:81:89:8a:e0:02:bd:f3:25:10:92:80:06:28: d4:a4:c3:3d:77:41:96:94:75:d3:c5:1a:cc:3d:b2: e3:69:46:a1:47:9b:82:a1:a9:bf:09:b5:f5:92:da: 0c:00:00:a8:bb:34:ce:cd:38:1d:2d:24:4f:e8:ca: f2:85:03:b7:62:51:f3:eb:df:e3:19:13:74:9b:8a: 6f:2a:bd:2e:97:c0:34:7f:51:e0:99:32:39:56:7a: fb:b1:d4:ce:c4:c5:5a:e6:9c:fe:5c:bd:fa:32:99: f2:6e:1c:6c:2a:cb:c0:4c:42:47:75:ff:b5:b0:96: cb:7c:06:42:57:44:dd:3a:06:0f:b4:b0:5c:ac:49: 5a:6a:27:ba:c5:c2:86:66:f6:bf:36:ee:d9:b7:86: 3f:2e:81:34:6f:49:ea:5c:ba:56:1b:cc:8e:90:37: 89:56:80:e7:88:50:35:b9:e2:36:84:53:32:84:7a: c4:9b:98:4c:89:32:83:d6:50:e2:6c:66:86:96:b3: a0:02:58:9f:7b:0b:a7:75:83:c1:d0:c7:30:23:8d: 26:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:F8:70:74:29:F7:3C:89:AF:2C:C7:76:1E:9D:92:A8:6B:31:AD:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0670fa0c-1c69-3756-85a2-81fa79b0198b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 207.204.224.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:6f:a1:1e:c2:98:d8:1e:d6:a6:6f:5f:46:81:19:00:f1:27: 63:b2:4e:02:96:7e:f3:4b:86:34:90:11:26:f0:e4:dd:32:d4: 2b:3a:b6:0a:51:64:fe:4a:d4:6a:93:57:ed:a7:d0:cf:f1:7e: 44:b7:dd:4f:5c:7f:fa:48:a7:70:cf:5f:6e:bd:ef:c9:23:57: ab:c5:a1:ad:c1:b4:e1:2a:57:af:73:96:7b:ee:f8:f7:99:78: 47:fa:58:2e:c6:37:99:6f:05:17:a3:ec:c8:a1:80:6a:64:8b: da:bb:00:99:10:61:11:25:a2:d1:1a:da:0f:5e:91:b9:ac:41: fc:41:12:a4:dd:33:02:ba:ac:75:81:ed:fd:c4:17:12:97:3d: 6e:70:bf:a3:b3:23:4d:61:1b:6d:32:6d:99:58:a7:fe:2f:55: 15:2f:86:fc:0e:47:e7:70:54:89:d7:5d:6e:e6:03:7e:92:fa: 6e:45:51:7a:d0:4c:07:98:85:7b:5e:b8:39:d6:7b:23:2f:c9: d6:54:59:eb:35:07:34:f8:a5:6d:81:e8:20:20:b2:44:4b:e2: 6d:2f:97:6f:2b:2f:ce:d4:09:bd:5a:e2:7a:ed:19:42:bd:b5: a9:7b:19:f5:d2:7e:6a:16:06:ab:88:61:36:2a:6b:90:c3:45: c5:c0:8e:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWET4lVd5zAHY7IoEBAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI0MDIyMjAyMDAyN1oXDTI0MDUyMjAxMDAyN1owLzEtMCsGA1UEAxMk NTIyNTFkZmUtZTAyMy00ZWU5LWIzMTUtNzQwZWM2NTQyZmRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5WneOtoKojUJwkOwZn0orGsGbBASYbqjJa2 HWhazkIfHZThhluqpWS9QtXwq4GJiuACvfMlEJKABijUpMM9d0GWlHXTxRrMPbLj aUahR5uCoam/CbX1ktoMAACouzTOzTgdLSRP6MryhQO3YlHz69/jGRN0m4pvKr0u l8A0f1HgmTI5Vnr7sdTOxMVa5pz+XL36MpnybhxsKsvATEJHdf+1sJbLfAZCV0Td OgYPtLBcrElaaie6xcKGZva/Nu7Zt4Y/LoE0b0nqXLpWG8yOkDeJVoDniFA1ueI2 hFMyhHrEm5hMiTKD1lDibGaGlrOgAlifewundYPB0McwI40m5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHL4cHQp9zyJryzHdh6dkqhrMa3rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvMDY3MGZhMGMtMWM2OS0z NzU2LTg1YTItODFmYTc5YjAxOThiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCz8zgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEZvoR7CmNge1qZvX0aBGQDxJ2OyTgKWfvNLhjSQESbw5N0y1Cs6tgpR ZP5K1GqTV+2n0M/xfkS33U9cf/pIp3DPX26978kjV6vFoa3BtOEqV69zlnvu+PeZ eEf6WC7GN5lvBRej7MihgGpki9q7AJkQYRElotEa2g9ekbmsQfxBEqTdMwK6rHWB 7f3EFxKXPW5wv6OzI01hG20ybZlYp/4vVRUvhvwOR+dwVInXXW7mA36S+m5FUXrQ TAeYhXteuDnWeyMvydZUWes1BzT4pW2B6CAgskRL4m0vl28rL87UCb1a4nrtGUK9 tal7GfXSfmoWBquIYTYqa5DDRcXAjg4= -----END CERTIFICATE-----Generated at Fri May 10 03:03:07 2024 by rpki-client on console-ams.rpki-client.org