$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/8e70db2c-74a3-3945-87ea-aebd9dd22796.roa File: 8e70db2c-74a3-3945-87ea-aebd9dd22796.roa (raw, json) Hash identifier: 6MbIZlB+ppoa7zdYRlCwYNtC3WS38v0LbBg5plYNlg4= Subject key identifier: 23:A6:5A:34:9F:2F:A0:10:71:A6:67:0F:1D:D7:26:57:16:98:94:7B Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F43285844F4655AEC3AE3DC2DCDE7E180 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/8e70db2c-74a3-3945-87ea-aebd9dd22796.roa Signing time: Tue 20 Feb 2024 14:00:31 +0000 ROA not before: Tue 20 Feb 2024 14:00:31 +0000 ROA not after: Mon 20 May 2024 13:00:31 +0000 asID: 54203 IP address blocks: 2606:b300:a000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:f4:65:5a:ec:3a:e3:dc:2d:cd:e7:e1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Feb 20 14:00:31 2024 GMT Not After : May 20 13:00:31 2024 GMT Subject: CN=786f9053-129a-4f09-95dd-2025b1e56df3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:75:b2:a8:19:e6:54:f6:36:85:f4:b8:b7:57: 47:38:e8:b6:c6:db:47:cd:06:f2:35:f5:75:15:db: 57:1d:f7:6a:da:f9:ad:32:17:e2:da:32:6f:57:5c: e8:59:22:a9:bd:13:44:32:ab:26:11:2b:e0:c9:84: 8c:be:c5:d1:26:a5:fd:9d:a6:58:03:3e:f4:38:4f: 43:4a:90:e2:e5:b1:0d:36:b4:1f:48:9a:bb:d1:d5: fb:8a:5b:cc:5c:d9:94:12:29:d8:8f:63:ca:56:cf: 31:61:ed:82:e4:d4:0f:6c:8f:99:60:d3:9c:cc:33: e9:c4:d5:74:8b:e2:fe:85:c2:26:77:e9:1e:ac:5d: 5f:c1:80:fb:c8:4f:b8:55:25:0d:aa:eb:1b:ff:6c: f3:84:f9:b5:7d:7b:48:1f:15:ae:42:8a:dc:a9:62: f7:81:7e:a4:88:ae:79:26:83:6e:c2:bd:b8:33:32: 72:2e:c2:ab:7c:c0:6b:57:81:ac:22:01:eb:b6:7f: 96:08:32:8b:63:6b:78:40:f5:4a:65:fa:c2:c5:ce: 6b:64:fd:ae:50:16:aa:bf:74:a8:90:9a:0a:f7:b7: 6a:44:78:ff:03:81:1c:fd:f1:7f:28:80:62:88:ce: 91:1a:1c:7b:70:fc:52:63:89:dc:d7:6c:6f:70:22: 5b:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:A6:5A:34:9F:2F:A0:10:71:A6:67:0F:1D:D7:26:57:16:98:94:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/8e70db2c-74a3-3945-87ea-aebd9dd22796.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv6: 2606:b300:a000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:50:27:75:b7:15:34:48:99:2f:63:5f:80:0d:e2:a9:30:67: 74:1c:5a:11:70:83:20:fc:7a:83:eb:df:8c:5e:92:45:7d:ac: 37:49:f5:35:99:36:74:ee:61:e1:74:e2:e5:de:4d:97:68:ed: 73:50:ad:09:98:fc:72:1a:08:56:59:3a:3f:b7:95:2a:25:14: 4c:99:76:a8:d5:5e:3c:66:db:26:1d:db:25:25:0f:f2:d2:99: ab:8b:6f:96:1e:71:0d:ed:31:4e:15:b0:fc:df:b8:c4:19:ba: f8:67:1d:82:87:55:48:35:70:e5:56:a5:c4:8a:2c:3a:9b:29: 5f:03:56:f3:ba:0f:fe:a1:c6:4e:f4:b0:e3:9e:cf:a2:3a:a0: 2e:64:65:bd:d3:16:cf:7f:b4:ec:52:2e:0a:95:ed:08:1e:07: 9e:33:dc:76:ce:b6:c7:a5:62:aa:3f:a0:58:f3:c0:bb:c4:e6: c6:7d:dc:64:db:d0:22:b0:15:ad:52:1c:98:85:82:f5:45:8a: 62:e5:89:2a:34:05:68:9e:e1:fa:76:a6:d5:ef:79:24:e7:91: 2d:7a:09:26:c5:c0:aa:12:8e:91:02:d9:c3:60:98:68:c6:d1: b7:f6:73:ea:b9:cf:b5:a0:44:ad:5f:05:4a:c4:4f:10:c3:a4: 48:b0:bd:12 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWET0ZVrsOuPcLc3n4YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI0MDIyMDE0MDAzMVoXDTI0MDUyMDEzMDAzMVowLzEtMCsGA1UEAxMk Nzg2ZjkwNTMtMTI5YS00ZjA5LTk1ZGQtMjAyNWIxZTU2ZGYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnWyqBnmVPY2hfS4t1dHOOi2xttHzQbyNfV1 FdtXHfdq2vmtMhfi2jJvV1zoWSKpvRNEMqsmESvgyYSMvsXRJqX9naZYAz70OE9D SpDi5bENNrQfSJq70dX7ilvMXNmUEinYj2PKVs8xYe2C5NQPbI+ZYNOczDPpxNV0 i+L+hcImd+kerF1fwYD7yE+4VSUNqusb/2zzhPm1fXtIHxWuQorcqWL3gX6kiK55 JoNuwr24MzJyLsKrfMBrV4GsIgHrtn+WCDKLY2t4QPVKZfrCxc5rZP2uUBaqv3So kJoK97dqRHj/A4Ec/fF/KIBiiM6RGhx7cPxSY4nc12xvcCJbJQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFCOmWjSfL6AQcaZnDx3XJlcWmJR7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvOGU3MGRiMmMtNzRhMy0z OTQ1LTg3ZWEtYWViZDlkZDIyNzk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgazAKAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAI1AndbcVNEiZL2NfgA3iqTBndBxaEXCDIPx6g+vfjF6SRX2sN0n1 NZk2dO5h4XTi5d5Nl2jtc1CtCZj8choIVlk6P7eVKiUUTJl2qNVePGbbJh3bJSUP 8tKZq4tvlh5xDe0xThWw/N+4xBm6+GcdgodVSDVw5ValxIosOpspXwNW87oP/qHG TvSw457PojqgLmRlvdMWz3+07FIuCpXtCB4HnjPcds62x6Viqj+gWPPAu8Tmxn3c ZNvQIrAVrVIcmIWC9UWKYuWJKjQFaJ7h+nam1e95JOeRLXoJJsXAqhKOkQLZw2CY aMbRt/Zz6rnPtaBErV8FSsRPEMOkSLC9Eg== -----END CERTIFICATE-----Generated at Fri May 10 11:48:57 2024 by rpki-client on console-ams.rpki-client.org