$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/d4c35eea-db7f-3a31-84ac-144a1f7c2328.roa File: d4c35eea-db7f-3a31-84ac-144a1f7c2328.roa (raw, json) Hash identifier: D/p1+RtGP2e6o2xyqqsXMolR/VI3qwBzZMiaHwcrL7o= Subject key identifier: 9F:F0:63:7E:73:8E:1D:53:76:44:AC:E6:01:7E:7A:0A:65:41:05:21 Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F43285844F5CAAA25FA5841E3C8314B60 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/d4c35eea-db7f-3a31-84ac-144a1f7c2328.roa Signing time: Wed 21 Feb 2024 02:00:25 +0000 ROA not before: Wed 21 Feb 2024 02:00:25 +0000 ROA not after: Tue 21 May 2024 01:00:25 +0000 asID: 22781 IP address blocks: 216.131.84.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 May 2024 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:f5:ca:aa:25:fa:58:41:e3:c8:31:4b:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Feb 21 02:00:25 2024 GMT Not After : May 21 01:00:25 2024 GMT Subject: CN=89c0aa0e-b8b2-43a6-8059-4d4231ba89f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:3d:3a:e1:65:08:c2:77:ee:d0:f6:99:45:72: 04:09:be:9c:50:2a:70:2f:ce:3d:49:37:46:1c:39: e1:75:f7:00:ca:5a:48:be:3c:42:06:c0:e5:01:41: cf:50:4f:86:bc:01:0b:28:70:0e:72:11:a9:f6:19: e9:d6:3c:93:88:a2:42:d1:4e:01:8c:b2:da:b8:5c: 88:8d:40:df:a2:8e:bd:99:ba:31:9a:7f:73:f1:27: 74:34:56:b9:6a:dc:78:17:26:98:bf:8a:0b:8e:ef: 2e:b1:24:1e:97:ed:cf:16:f3:63:d9:4f:09:b0:96: d4:71:11:8a:63:f4:a1:7e:91:bb:b5:0e:5a:c4:a5: 44:2b:0a:15:a0:27:b1:9d:3f:8d:91:97:b0:35:ad: 12:4c:18:ff:ce:10:e4:79:6e:9c:4a:f4:17:88:d9: 01:72:27:84:e8:95:7e:4f:0e:d6:3b:d8:fe:6e:08: 61:4c:c2:1f:b2:65:91:9b:6b:ad:b7:73:b1:5a:7e: c3:b1:34:b5:92:5b:c2:bc:7c:49:6b:92:84:bc:42: 6e:86:ef:86:50:97:d4:6d:44:f6:6b:0b:13:e6:83: 72:39:ad:65:3b:9e:35:d7:73:0c:fe:6f:f8:c8:33: 6b:4a:48:c4:02:6e:a5:81:66:8b:39:91:2b:28:69: 0c:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:F0:63:7E:73:8E:1D:53:76:44:AC:E6:01:7E:7A:0A:65:41:05:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/d4c35eea-db7f-3a31-84ac-144a1f7c2328.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 216.131.84.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:fd:67:ef:5d:40:4b:3d:b0:9a:03:80:d3:89:03:12:99:9e: d1:e1:c6:6c:23:9c:72:cc:f7:99:a6:4e:f9:5c:2e:4b:64:86: 1a:7a:81:95:12:2e:75:7c:fd:96:6d:fd:77:61:09:96:27:f5: b4:72:50:2f:45:03:c5:9a:0a:2d:e6:b5:de:08:d8:78:6d:fb: d0:c3:4f:07:fd:b7:2c:6f:e3:8a:f3:c7:d5:6c:21:24:c1:8d: 2c:cc:ae:52:fc:d7:7e:bb:42:d0:34:6d:20:63:bf:1e:33:6f: 38:42:25:a9:c5:54:7f:6d:3a:3e:ac:fe:96:e6:88:d1:6b:0e: 0f:54:e9:a4:5a:9f:11:af:08:4a:e5:cf:bd:39:1f:1b:67:06: ae:74:fc:b0:53:ca:ab:80:31:1e:05:b9:c4:db:cf:50:ba:66: f6:52:da:66:0b:71:15:13:fa:ca:15:a8:a3:f3:9a:2e:25:3b: 8f:81:d5:1c:66:44:69:f1:3e:0a:99:c1:30:2a:0b:c3:ae:de: eb:d7:d0:91:dc:b3:d1:9b:04:1d:2d:5d:14:9c:45:dd:12:52: 85:2d:00:db:90:af:e8:69:bb:7d:f3:50:88:93:8d:9d:ea:8e: 93:cc:66:4a:8c:6e:5b:8c:8b:69:94:8e:e6:d1:6a:04:fe:b8: cf:f8:42:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWET1yqol+lhB48gxS2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI0MDIyMTAyMDAyNVoXDTI0MDUyMTAxMDAyNVowLzEtMCsGA1UEAxMk ODljMGFhMGUtYjhiMi00M2E2LTgwNTktNGQ0MjMxYmE4OWYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0j064WUIwnfu0PaZRXIECb6cUCpwL849STdG HDnhdfcAylpIvjxCBsDlAUHPUE+GvAELKHAOchGp9hnp1jyTiKJC0U4BjLLauFyI jUDfoo69mboxmn9z8Sd0NFa5atx4FyaYv4oLju8usSQel+3PFvNj2U8JsJbUcRGK Y/ShfpG7tQ5axKVEKwoVoCexnT+NkZewNa0STBj/zhDkeW6cSvQXiNkBcieE6JV+ Tw7WO9j+bghhTMIfsmWRm2utt3OxWn7DsTS1klvCvHxJa5KEvEJuhu+GUJfUbUT2 awsT5oNyOa1lO54113MM/m/4yDNrSkjEAm6lgWaLOZErKGkM3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ/wY35zjh1TdkSs5gF+egplQQUhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvZDRjMzVlZWEtZGI3Zi0z YTMxLTg0YWMtMTQ0YTFmN2MyMzI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2INUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFD9Z+9dQEs9sJoDgNOJAxKZntHhxmwjnHLM95mmTvlcLktkhhp6gZUS LnV8/ZZt/XdhCZYn9bRyUC9FA8WaCi3mtd4I2Hht+9DDTwf9tyxv44rzx9VsISTB jSzMrlL81367QtA0bSBjvx4zbzhCJanFVH9tOj6s/pbmiNFrDg9U6aRanxGvCErl z705HxtnBq50/LBTyquAMR4FucTbz1C6ZvZS2mYLcRUT+soVqKPzmi4lO4+B1Rxm RGnxPgqZwTAqC8Ou3uvX0JHcs9GbBB0tXRScRd0SUoUtANuQr+hpu33zUIiTjZ3q jpPMZkqMbluMi2mUjubRagT+uM/4Ql4= -----END CERTIFICATE-----Generated at Fri May 10 03:03:07 2024 by rpki-client on console-ams.rpki-client.org