$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/2afdc69b-1e74-3151-be64-39803ebd3ba8.roa File: 2afdc69b-1e74-3151-be64-39803ebd3ba8.roa (raw, json) Hash identifier: eh2zN1SHvAX8W3kEKmP2Nk6Lmr++cGOIIFFqBiwee10= Subject key identifier: C5:AC:AA:84:5F:47:65:5B:B4:23:A3:B2:7A:29:DC:B9:03:30:18:AE Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F43285844F5CAAB4B45534185C925A080 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/2afdc69b-1e74-3151-be64-39803ebd3ba8.roa Signing time: Wed 21 Feb 2024 02:00:25 +0000 ROA not before: Wed 21 Feb 2024 02:00:25 +0000 ROA not after: Tue 21 May 2024 01:00:25 +0000 asID: 54203 IP address blocks: 216.131.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:f5:ca:ab:4b:45:53:41:85:c9:25:a0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Feb 21 02:00:25 2024 GMT Not After : May 21 01:00:25 2024 GMT Subject: CN=446fe30c-0c95-4227-9d7c-0b7175098882 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:43:98:cc:1f:7a:62:ea:98:13:0b:8e:02:a6: e0:83:0f:25:89:4f:55:07:33:0f:a7:70:59:06:12: f9:f0:ab:31:4f:b6:fd:08:9c:38:20:90:31:b7:96: 14:62:56:08:41:dc:8e:ed:31:2b:c2:93:65:92:57: c1:f3:36:fb:08:a5:33:2c:12:b2:ca:1e:19:2c:eb: 39:30:f4:79:60:21:db:a0:83:96:ca:57:55:90:b7: a3:5a:64:9f:02:c0:41:91:83:c0:ca:2c:a9:8e:61: fb:5f:7b:f5:82:94:57:f6:eb:bd:31:48:8f:36:5b: ce:2f:20:85:29:4f:0b:ff:e7:ed:f0:19:3e:b5:c6: 75:85:29:08:d9:de:27:aa:af:a7:1a:e3:71:60:82: ed:3d:99:8d:41:9f:0e:89:ae:33:ef:60:0e:fb:27: 4d:5d:bb:44:42:68:6d:d3:a1:ec:8e:88:33:19:16: 3c:d3:26:a7:58:dd:23:ac:3d:f6:be:13:b2:80:8e: 50:78:4c:cc:0d:37:8f:d1:a3:d8:bf:aa:04:8b:22: f9:a9:65:22:b4:21:80:f1:f1:f7:63:82:82:92:d5: ba:b6:ac:c4:4b:c3:33:ff:b7:ee:64:f5:10:04:54: 2c:0a:e5:e1:fd:31:61:c2:54:bc:c4:c1:98:12:08: f4:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:AC:AA:84:5F:47:65:5B:B4:23:A3:B2:7A:29:DC:B9:03:30:18:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/2afdc69b-1e74-3151-be64-39803ebd3ba8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 216.131.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:12:2a:3e:bd:e8:19:e5:b8:e3:c6:64:6d:ae:53:ed:d7:94: 97:d1:11:15:9f:92:d1:5e:5d:05:94:83:bc:37:1c:75:eb:20: 30:80:b3:76:8d:5b:ef:d2:dd:72:d7:88:03:33:e1:17:6f:4a: a1:5b:18:e3:59:c9:4e:0e:25:d0:44:fe:73:2a:71:8c:71:4b: 2c:03:a8:e1:19:5e:7e:56:78:d3:db:52:6b:b8:77:9c:21:4f: a7:a7:42:aa:54:12:8a:ef:c6:f1:2e:15:41:e2:9b:a5:77:06: 3e:93:95:ad:d5:05:70:a3:4b:11:8a:25:c7:52:33:4a:1f:6c: 69:0d:7e:1b:f8:da:1a:12:40:50:82:35:be:69:c8:b6:3c:2c: 52:39:7a:20:00:f8:7b:6b:ca:fa:60:ab:5d:9e:9c:b7:db:32: ed:d4:36:91:5a:e2:37:ce:d1:54:f1:48:71:e4:11:a2:43:bf: 20:3c:1e:74:32:c3:c0:4c:b4:55:9c:d2:26:2a:f8:c4:f3:fd: 69:89:83:e0:f5:53:3f:20:67:5d:38:41:ed:58:6a:1d:c4:84: ab:10:6c:76:67:ee:2f:da:d0:4d:62:0a:08:06:66:4c:ee:4e: 81:c5:4b:72:58:09:5a:aa:5a:86:af:65:ff:88:26:7c:a0:5c: a9:13:1a:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWET1yqtLRVNBhckloIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI0MDIyMTAyMDAyNVoXDTI0MDUyMTAxMDAyNVowLzEtMCsGA1UEAxMk NDQ2ZmUzMGMtMGM5NS00MjI3LTlkN2MtMGI3MTc1MDk4ODgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0OYzB96YuqYEwuOAqbggw8liU9VBzMPp3BZ BhL58KsxT7b9CJw4IJAxt5YUYlYIQdyO7TErwpNlklfB8zb7CKUzLBKyyh4ZLOs5 MPR5YCHboIOWyldVkLejWmSfAsBBkYPAyiypjmH7X3v1gpRX9uu9MUiPNlvOLyCF KU8L/+ft8Bk+tcZ1hSkI2d4nqq+nGuNxYILtPZmNQZ8Oia4z72AO+ydNXbtEQmht 06HsjogzGRY80yanWN0jrD32vhOygI5QeEzMDTeP0aPYv6oEiyL5qWUitCGA8fH3 Y4KCktW6tqzES8Mz/7fuZPUQBFQsCuXh/TFhwlS8xMGYEgj0LQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMWsqoRfR2VbtCOjsnop3LkDMBiuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvMmFmZGM2OWItMWU3NC0z MTUxLWJlNjQtMzk4MDNlYmQzYmE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2IN4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACUSKj696BnluOPGZG2uU+3XlJfRERWfktFeXQWUg7w3HHXrIDCAs3aN W+/S3XLXiAMz4RdvSqFbGONZyU4OJdBE/nMqcYxxSywDqOEZXn5WeNPbUmu4d5wh T6enQqpUEorvxvEuFUHim6V3Bj6Tla3VBXCjSxGKJcdSM0ofbGkNfhv42hoSQFCC Nb5pyLY8LFI5eiAA+Htryvpgq12enLfbMu3UNpFa4jfO0VTxSHHkEaJDvyA8HnQy w8BMtFWc0iYq+MTz/WmJg+D1Uz8gZ104Qe1Yah3EhKsQbHZn7i/a0E1iCggGZkzu ToHFS3JYCVqqWoavZf+IJnygXKkTGio= -----END CERTIFICATE-----Generated at Fri May 10 14:27:16 2024 by rpki-client on console-fra.rpki-client.org