$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/e106c261-72f9-3563-af12-41f3067a3912.roa File: e106c261-72f9-3563-af12-41f3067a3912.roa (raw, json) Hash identifier: 6zX1YTgqv+bWQZEtKEZHh9ZDRhyuOxgTG1b2fannCx4= Subject key identifier: 61:89:40:D8:AC:33:27:BF:AF:D8:E8:7D:4C:D5:CF:27:4F:F8:05:BB Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F43285845CF6E4186155452FA3178ADEC Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/e106c261-72f9-3563-af12-41f3067a3912.roa Signing time: Thu 09 May 2024 01:00:26 +0000 ROA not before: Thu 09 May 2024 01:00:26 +0000 ROA not after: Wed 07 Aug 2024 01:00:26 +0000 asID: 22781 IP address blocks: 192.200.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 May 2024 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:cf:6e:41:86:15:54:52:fa:31:78:ad:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: May 9 01:00:26 2024 GMT Not After : Aug 7 01:00:26 2024 GMT Subject: CN=dc3f6854-a820-4a08-9161-8dec782eaa13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:29:6f:c7:d8:f3:c3:62:1c:d7:5f:f1:4c:cc: 2f:87:ab:d7:cf:13:b2:69:97:c2:0f:23:39:b6:f8: 1d:7c:79:81:80:7a:24:b4:c2:17:86:25:fe:29:66: 72:96:42:09:55:58:b7:f2:a1:2d:07:22:f5:ba:1a: 6b:5f:84:5c:e6:d3:d6:ae:fb:93:f1:e2:74:d8:66: 69:27:56:3d:eb:c0:cd:68:22:d1:84:df:a4:da:36: 12:89:ae:26:d5:5e:6b:76:eb:c6:6a:e6:13:21:43: 2a:93:3b:dd:d7:b9:87:db:70:3d:a2:b3:64:3c:94: ff:7c:c7:fd:28:02:24:fa:24:ae:c3:47:3f:6d:73: ec:0f:36:22:2f:26:2e:31:8e:a0:56:4f:e2:c3:aa: 72:eb:7f:26:b1:6e:67:ec:62:18:dd:24:a6:a2:2e: ac:90:43:71:f4:5a:c5:86:27:3e:2b:0c:a2:d9:5e: 62:46:8f:4e:09:c9:0c:58:4e:95:62:e2:91:79:d7: d0:f2:8d:c4:80:0a:b6:cf:da:d4:ec:0a:db:2c:f3: 0d:c3:05:69:12:3d:0f:21:6f:66:19:08:c9:6f:f7: cf:b5:3c:56:46:5b:03:96:a5:d7:3d:15:27:0b:27: 36:b4:dc:a8:2d:61:07:f4:18:a5:eb:a4:7d:fd:15: 6d:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:89:40:D8:AC:33:27:BF:AF:D8:E8:7D:4C:D5:CF:27:4F:F8:05:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/e106c261-72f9-3563-af12-41f3067a3912.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 192.200.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:2a:1d:fd:a1:1b:05:8f:b9:7d:96:55:2c:2e:4f:bb:f2:46: 71:0d:40:ef:f8:6c:b2:07:8e:6c:75:e3:45:79:e9:7e:2d:8d: cb:3d:4c:a9:1d:87:56:56:06:66:48:3b:14:24:30:c6:cf:cd: 0b:bd:3b:a2:67:92:ae:24:da:e6:eb:8c:c5:08:34:c2:95:f9: 30:84:4f:6e:7b:b9:b5:71:a1:f7:ac:ab:31:7f:4a:d3:5f:b8: f7:d8:b3:6c:3c:0a:9d:21:15:10:78:c7:28:e5:51:79:2a:15: fb:78:70:d6:ca:f8:9f:83:e7:56:60:9b:67:45:08:26:96:57: c0:a2:93:e4:50:cc:69:6d:3b:a0:fe:3d:66:2c:e3:76:c0:60: e1:02:93:ee:c8:4a:18:14:a4:f7:9b:4a:86:0f:63:0c:62:75: af:72:b5:9f:69:f7:b6:39:8d:fd:3a:ef:77:9d:12:96:f8:1a: 66:00:db:43:60:6f:67:07:5e:5e:e3:e8:4e:15:68:fc:63:6a: 4c:ed:15:1a:e9:f8:b9:91:6e:10:d6:34:d8:fc:c3:cd:28:ab: c7:31:b3:77:98:17:74:d0:c3:e7:15:30:65:fb:1d:79:ab:10: d2:82:d2:c4:3f:fe:91:c9:01:9e:be:6e:9d:62:db:e7:3f:91: c6:e3:e9:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXPbkGGFVRS+jF4rewwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI0MDUwOTAxMDAyNloXDTI0MDgwNzAxMDAyNlowLzEtMCsGA1UEAxMk ZGMzZjY4NTQtYTgyMC00YTA4LTkxNjEtOGRlYzc4MmVhYTEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSlvx9jzw2Ic11/xTMwvh6vXzxOyaZfCDyM5 tvgdfHmBgHoktMIXhiX+KWZylkIJVVi38qEtByL1uhprX4Rc5tPWrvuT8eJ02GZp J1Y968DNaCLRhN+k2jYSia4m1V5rduvGauYTIUMqkzvd17mH23A9orNkPJT/fMf9 KAIk+iSuw0c/bXPsDzYiLyYuMY6gVk/iw6py638msW5n7GIY3SSmoi6skENx9FrF hic+Kwyi2V5iRo9OCckMWE6VYuKRedfQ8o3EgAq2z9rU7ArbLPMNwwVpEj0PIW9m GQjJb/fPtTxWRlsDlqXXPRUnCyc2tNyoLWEH9Bil66R9/RVtnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGGJQNisMye/r9jofUzVzydP+AW7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvZTEwNmMyNjEtNzJmOS0z NTYzLWFmMTItNDFmMzA2N2EzOTEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwMiQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEoqHf2hGwWPuX2WVSwuT7vyRnENQO/4bLIHjmx140V56X4tjcs9TKkd h1ZWBmZIOxQkMMbPzQu9O6Jnkq4k2ubrjMUINMKV+TCET257ubVxofesqzF/StNf uPfYs2w8Cp0hFRB4xyjlUXkqFft4cNbK+J+D51Zgm2dFCCaWV8Cik+RQzGltO6D+ PWYs43bAYOECk+7IShgUpPebSoYPYwxida9ytZ9p97Y5jf0673edEpb4GmYA20Ng b2cHXl7j6E4VaPxjakztFRrp+LmRbhDWNNj8w80oq8cxs3eYF3TQw+cVMGX7HXmr ENKC0sQ//pHJAZ6+bp1i2+c/kcbj6fg= -----END CERTIFICATE-----Generated at Fri May 10 03:03:07 2024 by rpki-client on console-ams.rpki-client.org