$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/3f3ae9c5-7cab-35e7-a76f-4f792ccb7783.roa File: 3f3ae9c5-7cab-35e7-a76f-4f792ccb7783.roa (raw, json) Hash identifier: XihHzAI4dnRjDbPwTqte2z9xz4RVwYrmno7/tDwyROo= Subject key identifier: 6A:43:FE:3F:41:9D:6F:52:17:6F:C2:49:36:E9:C1:DB:E9:03:2E:A3 Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F43285844F8955842EA16307EBFDDD280 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/3f3ae9c5-7cab-35e7-a76f-4f792ccb7783.roa Signing time: Thu 22 Feb 2024 02:00:27 +0000 ROA not before: Thu 22 Feb 2024 02:00:27 +0000 ROA not after: Wed 22 May 2024 01:00:27 +0000 asID: 62651 IP address blocks: 216.131.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:f8:95:58:42:ea:16:30:7e:bf:dd:d2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Feb 22 02:00:27 2024 GMT Not After : May 22 01:00:27 2024 GMT Subject: CN=46114bcd-2380-4dfc-b5c4-5633386c1c69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:87:83:95:8b:c1:f4:63:26:10:56:7e:fc:c8: f4:e3:f7:a4:a5:8b:d8:e4:8e:53:c6:98:18:7f:17: 49:6f:b1:d9:4b:72:00:1a:b8:24:cf:f2:4d:d1:8e: 17:c1:ff:fa:07:f6:eb:2d:80:f6:c0:08:01:3e:cd: b9:56:f6:7d:5f:2f:ed:55:55:dc:d7:f8:f9:cd:c1: 2c:6f:3a:bd:5e:f9:e5:b4:04:31:b4:e1:b8:b4:11: 05:28:05:d7:0e:59:f7:2c:3b:4e:81:d5:3f:35:71: 12:d2:51:ae:12:bf:87:68:a9:4c:57:9e:b3:4e:cf: c8:ff:f7:ed:05:81:de:31:66:ca:dd:5c:d9:80:72: bf:4b:7e:24:9f:5b:b6:e7:78:65:7e:49:08:58:9e: 4a:f9:08:84:02:b0:d8:f7:5a:0f:2a:00:4d:a6:6d: cc:fe:76:4d:7e:1a:4e:24:7c:dc:56:73:96:63:0e: 38:66:64:bd:35:b2:4c:30:4d:09:06:b2:0b:d8:63: 67:40:30:71:6f:22:b7:f5:db:5e:f4:e0:1f:fa:45: 8a:ba:f3:35:bd:ee:8e:ca:63:93:43:cc:30:98:a7: 3a:2f:1d:6e:2b:06:af:19:7f:63:c4:18:e5:d0:5a: b9:b1:39:9b:e1:09:31:3f:6e:af:1e:38:f1:23:88: 05:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:43:FE:3F:41:9D:6F:52:17:6F:C2:49:36:E9:C1:DB:E9:03:2E:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/3f3ae9c5-7cab-35e7-a76f-4f792ccb7783.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 216.131.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:69:c6:f0:c0:02:d8:a3:0d:e5:24:69:7c:c6:68:7d:79:b7: 89:60:88:3d:3d:76:da:5a:8d:2b:a0:7d:a0:fa:67:9c:d8:db: 01:23:81:be:7e:1a:52:ef:ae:95:02:53:0e:b5:d3:17:d4:0d: d0:4c:c7:3e:aa:a5:7a:72:ab:c2:3a:d4:bf:ce:10:25:7b:a8: 6d:9d:a6:28:d1:66:83:b6:4e:8a:94:ef:19:94:db:53:99:bb: a9:ee:4d:25:09:1c:47:6a:ab:77:c9:c5:6f:7f:c3:59:03:f5: fc:a4:e3:8f:fe:bb:ea:0b:5c:36:5c:95:ea:18:e3:eb:78:82: 63:01:28:eb:24:9d:5c:da:99:af:59:95:d4:25:b4:e2:75:29: 05:ca:d4:b7:24:a7:2f:dd:9b:a9:23:bc:62:b5:f6:8a:9e:17: f4:be:e8:ac:04:7f:83:40:62:e1:9d:d3:72:8b:ae:56:57:da: 3e:de:af:29:18:df:7b:dd:78:e2:44:ce:c9:28:86:3c:20:40: 71:51:90:a7:49:72:2e:6f:1a:8b:1f:7d:f2:97:02:6b:cb:df: 0c:dc:f0:ac:d2:3d:fc:3f:4f:ba:e1:a6:0c:c8:81:99:8f:4c: 23:24:ff:e4:a3:ab:f8:cf:8b:a9:c8:bc:41:ee:67:35:2e:81: 00:fd:02:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWET4lVhC6hYwfr/d0oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI0MDIyMjAyMDAyN1oXDTI0MDUyMjAxMDAyN1owLzEtMCsGA1UEAxMk NDYxMTRiY2QtMjM4MC00ZGZjLWI1YzQtNTYzMzM4NmMxYzY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYeDlYvB9GMmEFZ+/Mj04/ekpYvY5I5TxpgY fxdJb7HZS3IAGrgkz/JN0Y4Xwf/6B/brLYD2wAgBPs25VvZ9Xy/tVVXc1/j5zcEs bzq9XvnltAQxtOG4tBEFKAXXDln3LDtOgdU/NXES0lGuEr+HaKlMV56zTs/I//ft BYHeMWbK3VzZgHK/S34kn1u253hlfkkIWJ5K+QiEArDY91oPKgBNpm3M/nZNfhpO JHzcVnOWYw44ZmS9NbJMME0JBrIL2GNnQDBxbyK39dte9OAf+kWKuvM1ve6OymOT Q8wwmKc6Lx1uKwavGX9jxBjl0Fq5sTmb4QkxP26vHjjxI4gFMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGpD/j9BnW9SF2/CSTbpwdvpAy6jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvM2YzYWU5YzUtN2NhYi0z NWU3LWE3NmYtNGY3OTJjY2I3NzgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2INwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADRpxvDAAtijDeUkaXzGaH15t4lgiD09dtpajSugfaD6Z5zY2wEjgb5+ GlLvrpUCUw610xfUDdBMxz6qpXpyq8I61L/OECV7qG2dpijRZoO2ToqU7xmU21OZ u6nuTSUJHEdqq3fJxW9/w1kD9fyk44/+u+oLXDZcleoY4+t4gmMBKOsknVzama9Z ldQltOJ1KQXK1Lckpy/dm6kjvGK19oqeF/S+6KwEf4NAYuGd03KLrlZX2j7erykY 33vdeOJEzskohjwgQHFRkKdJci5vGosfffKXAmvL3wzc8KzSPfw/T7rhpgzIgZmP TCMk/+Sjq/jPi6nIvEHuZzUugQD9AvQ= -----END CERTIFICATE-----Generated at Fri May 10 11:48:56 2024 by rpki-client on console-ams.rpki-client.org