$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/7ef699c1-e302-3259-96e8-3b63af9c8a70.roa File: 7ef699c1-e302-3259-96e8-3b63af9c8a70.roa (raw, json) Hash identifier: OVcPyMUmIKlI2jGecKYeGCOgaIy65UoxJ4mGdg54TWk= Subject key identifier: E0:94:C4:2B:B6:38:A4:A4:86:46:D2:26:CF:12:F2:DD:1C:4B:BC:37 Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F43285844F8955867C2D650326BAA7B40 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/7ef699c1-e302-3259-96e8-3b63af9c8a70.roa Signing time: Thu 22 Feb 2024 02:00:27 +0000 ROA not before: Thu 22 Feb 2024 02:00:27 +0000 ROA not after: Wed 22 May 2024 01:00:27 +0000 asID: 62651 IP address blocks: 216.131.76.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:f8:95:58:67:c2:d6:50:32:6b:aa:7b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Feb 22 02:00:27 2024 GMT Not After : May 22 01:00:27 2024 GMT Subject: CN=a709dab1-0a86-4098-903f-2a18b0e56dcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:95:29:99:6f:2b:72:5d:61:96:5e:ee:ea:28: 6d:72:40:85:17:32:07:16:75:6c:9b:52:7e:b4:c5: 05:bf:94:06:de:43:8a:e6:ba:46:74:49:df:b7:96: 5e:2a:2d:f5:f8:9c:e7:74:a7:49:c7:e9:4d:48:ad: 79:06:91:66:4e:55:e1:37:ae:2a:84:25:3b:de:e3: b0:36:cb:76:95:eb:e3:75:da:40:03:75:32:2a:8c: 85:66:98:5c:6b:7f:de:b1:ad:25:4b:ab:ef:21:8c: 87:aa:4c:c8:3e:d0:73:f2:d3:37:8d:d4:b6:da:40: cc:56:92:1a:78:4e:69:20:80:64:65:9e:ab:ef:6d: 12:1f:83:46:de:83:65:20:96:6a:95:7b:f6:0c:a7: 86:cc:a5:68:11:06:0e:e5:2e:99:75:69:d8:07:7d: a2:a4:8d:24:0b:52:cf:78:78:66:10:4a:0a:1f:fe: ed:4a:8a:c5:4e:3e:2d:1d:fd:71:44:96:4a:75:73: f8:64:97:b2:0e:6e:63:81:ff:60:32:ae:5d:e1:cf: d8:9d:38:84:f9:d2:bd:97:8b:14:3a:20:4f:3d:d8: f9:4a:4b:9f:e8:3b:23:0c:54:dc:f9:1b:6d:3c:39: 57:d5:67:05:66:53:a0:a4:8a:17:95:4b:80:10:fc: 80:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:94:C4:2B:B6:38:A4:A4:86:46:D2:26:CF:12:F2:DD:1C:4B:BC:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/7ef699c1-e302-3259-96e8-3b63af9c8a70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 216.131.76.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:a5:e0:7b:11:81:64:d0:cb:c1:4e:31:59:fb:98:47:46:4a: 2d:29:27:4a:d6:23:ec:d0:6f:e3:9b:d5:ec:1d:c7:b1:12:fa: 4c:86:53:5a:ab:d0:0c:2f:a7:b4:e1:f4:95:2a:24:a1:e3:d4: 0c:2b:8c:52:6a:2e:62:23:c0:e9:21:8d:77:26:41:2c:a3:24: 49:53:d6:23:97:a7:81:3d:d4:6b:9f:84:c9:f7:1b:28:08:e0: 3d:98:a2:4a:ba:34:0d:ed:b7:0e:ce:f4:56:77:68:ef:da:e9: 90:50:8d:ab:cc:c6:32:89:a4:40:db:f8:93:8f:74:9b:6b:2b: c5:06:9a:31:f9:92:32:5c:e8:cf:77:95:a4:56:69:5c:25:78: bb:65:98:35:38:0d:6c:89:41:e1:c2:b3:1e:10:ad:ef:3e:d1: 9e:ec:89:a3:7a:56:5d:2b:9f:06:ca:29:43:1c:9b:01:3d:a9: a7:09:5d:df:64:fb:b6:21:ea:f5:fe:95:77:09:c0:b6:d5:45: 5a:18:b0:c6:bb:95:58:55:e6:98:a6:aa:80:61:a8:07:ea:44: 85:6b:45:e2:99:ed:ba:7f:1f:11:ed:da:1d:3f:5a:65:3a:42: 1c:ed:b2:99:2e:bc:94:37:37:fb:d2:5e:2b:02:21:b2:7e:40: 8d:28:95:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWET4lVhnwtZQMmuqe0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI0MDIyMjAyMDAyN1oXDTI0MDUyMjAxMDAyN1owLzEtMCsGA1UEAxMk YTcwOWRhYjEtMGE4Ni00MDk4LTkwM2YtMmExOGIwZTU2ZGNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5UpmW8rcl1hll7u6ihtckCFFzIHFnVsm1J+ tMUFv5QG3kOK5rpGdEnft5ZeKi31+JzndKdJx+lNSK15BpFmTlXhN64qhCU73uOw Nst2levjddpAA3UyKoyFZphca3/esa0lS6vvIYyHqkzIPtBz8tM3jdS22kDMVpIa eE5pIIBkZZ6r720SH4NG3oNlIJZqlXv2DKeGzKVoEQYO5S6ZdWnYB32ipI0kC1LP eHhmEEoKH/7tSorFTj4tHf1xRJZKdXP4ZJeyDm5jgf9gMq5d4c/YnTiE+dK9l4sU OiBPPdj5Skuf6DsjDFTc+RttPDlX1WcFZlOgpIoXlUuAEPyALwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOCUxCu2OKSkhkbSJs8S8t0cS7w3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvN2VmNjk5YzEtZTMwMi0z MjU5LTk2ZTgtM2I2M2FmOWM4YTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2INMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFGl4HsRgWTQy8FOMVn7mEdGSi0pJ0rWI+zQb+Ob1ewdx7ES+kyGU1qr 0Awvp7Th9JUqJKHj1AwrjFJqLmIjwOkhjXcmQSyjJElT1iOXp4E91GufhMn3GygI 4D2Yokq6NA3ttw7O9FZ3aO/a6ZBQjavMxjKJpEDb+JOPdJtrK8UGmjH5kjJc6M93 laRWaVwleLtlmDU4DWyJQeHCsx4Qre8+0Z7siaN6Vl0rnwbKKUMcmwE9qacJXd9k +7Yh6vX+lXcJwLbVRVoYsMa7lVhV5pimqoBhqAfqRIVrReKZ7bp/HxHt2h0/WmU6 QhztspkuvJQ3N/vSXisCIbJ+QI0olXE= -----END CERTIFICATE-----Generated at Fri May 10 11:39:12 2024 by rpki-client on console-fra.rpki-client.org