$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/12213f9b-00c6-35c4-84a6-0964642f7e08.roa File: 12213f9b-00c6-35c4-84a6-0964642f7e08.roa (raw, json) Hash identifier: nfyfVqUigrGTGvzaNPybmusIwZaDRm9f3VU8XSvL/u8= Subject key identifier: 90:32:E5:16:4F:9E:C5:C1:07:B9:8F:7B:F6:14:3F:5E:C5:25:14:70 Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F43285844F5CAA0D5502E26102314E780 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/12213f9b-00c6-35c4-84a6-0964642f7e08.roa Signing time: Wed 21 Feb 2024 02:00:25 +0000 ROA not before: Wed 21 Feb 2024 02:00:25 +0000 ROA not after: Tue 21 May 2024 01:00:25 +0000 asID: 22781 IP address blocks: 216.131.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:f5:ca:a0:d5:50:2e:26:10:23:14:e7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Feb 21 02:00:25 2024 GMT Not After : May 21 01:00:25 2024 GMT Subject: CN=54647bbf-aea5-483b-80f4-beb66a11f6ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:0b:d3:41:96:3a:56:c1:23:0e:5f:15:f1:e7: b2:93:e3:ac:2e:18:e9:34:f8:90:60:9a:ab:0d:d0: 80:b4:be:0e:76:fc:a3:37:0c:51:34:da:d1:d8:f6: ee:52:e6:cd:9a:e1:5f:b4:23:c2:31:06:43:85:bb: 23:f4:d5:10:32:d0:a1:d7:b1:06:60:8e:be:3e:ee: bd:e1:ed:bf:8b:e6:a3:33:ff:3e:88:26:3b:15:be: 8a:dd:bf:d9:62:e5:34:08:f1:9a:e1:44:99:a5:c5: 9a:b8:4f:a3:2d:b7:f5:ea:2d:c1:4b:bc:a1:db:6f: a2:a4:25:b1:aa:17:a9:85:3b:10:9c:82:92:a2:ab: 12:1f:6f:43:48:7f:69:86:f0:b8:99:e2:0d:cc:61: b1:91:a9:42:81:4c:71:db:03:f9:5d:cc:ff:94:ae: 6a:e7:d8:f0:5f:97:84:45:68:41:37:19:f8:b6:00: aa:34:c6:2c:3f:89:b6:18:e9:e6:e5:3c:c0:61:59: c1:34:f9:f1:72:30:53:ac:c6:97:23:15:95:a9:b6: 79:a5:f9:78:7b:61:80:42:6f:c2:be:59:c6:73:d9: 71:cf:da:7c:1a:dd:87:9d:c5:d7:0c:ad:a2:e8:78: 41:ee:3a:e0:e7:15:85:20:ae:6d:2d:2a:ca:d8:54: 70:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:32:E5:16:4F:9E:C5:C1:07:B9:8F:7B:F6:14:3F:5E:C5:25:14:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/12213f9b-00c6-35c4-84a6-0964642f7e08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 216.131.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:8c:ef:fa:4e:ef:76:71:6f:78:0f:11:76:21:1c:7d:10:41: 75:b0:a4:a0:6e:6b:9f:56:0d:26:38:63:80:0a:58:66:f2:6c: f6:d1:87:c3:e3:f3:e0:84:f1:35:0d:a3:4d:32:99:6d:14:25: 7c:4b:a8:12:07:5b:b3:d0:aa:c7:44:9b:37:a0:2f:97:30:b5: e3:c2:a8:4a:80:60:7d:55:c8:9a:8e:3b:f5:be:b9:06:5c:1f: 6a:a4:f4:bf:4f:07:a4:8d:e5:6b:11:a9:49:92:03:f6:19:23: 59:e8:ca:65:2f:23:ea:62:ae:f6:7a:7d:66:41:4b:e8:9e:2f: 70:fa:9a:83:a6:38:fd:8b:17:a4:bb:2b:6f:4d:70:92:fe:96: 9a:31:fd:34:59:f0:75:e0:e8:4b:b7:ec:ff:03:29:d0:ac:b2: a9:92:9b:30:ef:a5:8d:bb:19:10:6f:ae:75:c4:8e:e7:d4:99: 55:53:d2:43:14:c5:5a:2b:6f:86:1b:1b:17:8a:ff:8c:74:12: b0:7c:58:ca:ca:6e:0c:a8:07:08:4b:41:b7:f5:ad:f2:aa:f5: b1:e5:57:70:b2:22:e5:93:ac:d0:5f:59:1a:48:71:a3:34:b5: 82:df:1e:5c:28:9b:ed:89:6d:00:97:19:ad:cc:78:58:59:0a: a1:98:7c:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWET1yqDVUC4mECMU54AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI0MDIyMTAyMDAyNVoXDTI0MDUyMTAxMDAyNVowLzEtMCsGA1UEAxMk NTQ2NDdiYmYtYWVhNS00ODNiLTgwZjQtYmViNjZhMTFmNmJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgAvTQZY6VsEjDl8V8eeyk+OsLhjpNPiQYJqr DdCAtL4OdvyjNwxRNNrR2PbuUubNmuFftCPCMQZDhbsj9NUQMtCh17EGYI6+Pu69 4e2/i+ajM/8+iCY7Fb6K3b/ZYuU0CPGa4USZpcWauE+jLbf16i3BS7yh22+ipCWx qhephTsQnIKSoqsSH29DSH9phvC4meINzGGxkalCgUxx2wP5Xcz/lK5q59jwX5eE RWhBNxn4tgCqNMYsP4m2GOnm5TzAYVnBNPnxcjBTrMaXIxWVqbZ5pfl4e2GAQm/C vlnGc9lxz9p8Gt2HncXXDK2i6HhB7jrg5xWFIK5tLSrK2FRw4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJAy5RZPnsXBB7mPe/YUP17FJRRwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvMTIyMTNmOWItMDBjNi0z NWM0LTg0YTYtMDk2NDY0MmY3ZTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2INEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHqM7/pO73Zxb3gPEXYhHH0QQXWwpKBua59WDSY4Y4AKWGbybPbRh8Pj 8+CE8TUNo00ymW0UJXxLqBIHW7PQqsdEmzegL5cwtePCqEqAYH1VyJqOO/W+uQZc H2qk9L9PB6SN5WsRqUmSA/YZI1noymUvI+pirvZ6fWZBS+ieL3D6moOmOP2LF6S7 K29NcJL+lpox/TRZ8HXg6Eu37P8DKdCssqmSmzDvpY27GRBvrnXEjufUmVVT0kMU xVorb4YbGxeK/4x0ErB8WMrKbgyoBwhLQbf1rfKq9bHlV3CyIuWTrNBfWRpIcaM0 tYLfHlwom+2JbQCXGa3MeFhZCqGYfE0= -----END CERTIFICATE-----Generated at Fri May 10 14:27:16 2024 by rpki-client on console-fra.rpki-client.org