$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/f5bbe177-db20-3981-a339-c4f34d572e28.roa File: f5bbe177-db20-3981-a339-c4f34d572e28.roa (raw, json) Hash identifier: fYR5Ts3T2bogpGaP9WptUAkHZVJo+IxKQDHwYlw+XMI= Subject key identifier: D9:5D:D0:18:23:C0:46:C1:F3:6A:1F:DE:73:18:03:20:DD:A4:52:97 Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F43285844F9FAB2FD5D24AD2764021A80 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/f5bbe177-db20-3981-a339-c4f34d572e28.roa Signing time: Thu 22 Feb 2024 14:00:30 +0000 ROA not before: Thu 22 Feb 2024 14:00:30 +0000 ROA not after: Wed 22 May 2024 13:00:30 +0000 asID: 22781 IP address blocks: 207.204.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 May 2024 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:f9:fa:b2:fd:5d:24:ad:27:64:02:1a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Feb 22 14:00:30 2024 GMT Not After : May 22 13:00:30 2024 GMT Subject: CN=92927ffa-b7cc-4034-940c-aeecc800c885 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:d0:95:1f:5d:48:7d:89:5a:68:ab:53:19:b0: b0:37:e5:1c:1d:ed:76:b1:2a:85:28:95:5b:b0:83: 13:c0:95:d9:48:23:6e:15:d2:7c:68:fc:fb:d8:33: f1:b5:ab:37:ef:d9:a9:08:1b:19:80:e2:dc:8f:63: b6:04:2b:39:be:33:90:e4:47:a3:7a:e3:c0:c4:bf: 8b:d6:05:a4:fb:89:6c:8b:c6:cb:a4:c4:46:ad:83: 9c:5f:e9:7e:b8:ab:13:98:1d:52:60:ae:e4:5a:b5: 41:2c:e1:e6:fd:b3:97:78:cf:09:54:df:7a:7c:94: 7f:dc:dc:05:23:fd:c6:90:a6:0e:0f:90:26:ea:48: c2:cd:f8:9b:95:2b:54:c4:4b:ce:81:16:44:8d:90: db:d7:c8:d8:a4:38:c5:15:85:2f:ce:e4:9e:cb:b4: bc:91:e5:bd:95:80:f3:08:30:50:e4:8f:b5:da:1d: e8:2a:32:a3:97:8e:f5:ec:8b:2d:30:c7:cb:9d:3a: 24:f8:e0:08:33:60:0c:60:11:d1:51:44:c7:e7:da: 29:82:38:80:94:a2:b6:86:c1:e5:8f:35:14:fe:06: 19:24:8e:d7:1b:62:53:ee:aa:a3:75:c2:c3:0e:60: fe:73:49:c3:b3:a2:1b:c7:ca:51:43:d2:27:4e:ea: 92:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:5D:D0:18:23:C0:46:C1:F3:6A:1F:DE:73:18:03:20:DD:A4:52:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/f5bbe177-db20-3981-a339-c4f34d572e28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 207.204.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:80:e3:09:4c:88:98:91:b3:99:bc:43:c3:85:2c:5b:8b:a5: 68:fb:ce:2d:85:07:ca:2f:7b:94:56:8e:97:5a:2a:41:7b:97: 1e:d2:41:a1:25:b6:ef:df:d4:b4:99:cb:7e:f0:77:eb:20:e3: f0:48:42:ab:51:07:38:b0:5f:85:30:8f:42:ee:9a:16:d3:3f: 95:5a:be:56:a7:fa:13:c1:eb:3b:5f:8c:e6:51:93:5d:53:e5: 16:9f:89:fb:68:1f:c8:b4:48:38:89:96:fc:bc:78:50:24:a1: 57:2d:e6:a7:f0:6f:5d:00:96:8d:87:a3:c7:5f:0c:26:11:c6: 54:32:58:fd:f5:80:62:e9:f5:44:bc:f8:82:5a:9f:a5:58:ec: 85:b3:e2:e5:7d:55:8b:81:23:c8:18:c1:09:66:88:e3:86:5d: a2:d8:99:29:0a:97:44:3e:94:57:5b:e5:f2:52:e8:db:e6:36: c2:bb:46:59:c2:86:b5:cf:a5:c0:42:65:bc:e4:17:21:2a:fb: e0:d0:ba:01:4e:09:60:fa:62:e6:3f:14:63:2f:78:9e:c9:51: 7e:3e:28:c9:83:b7:5d:42:0b:d5:f3:dc:32:46:f6:20:d1:e8: 00:0c:3e:ea:45:3e:ad:0a:31:98:f5:c3:e5:6b:84:47:c0:36: 1b:38:9c:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWET5+rL9XSStJ2QCGoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI0MDIyMjE0MDAzMFoXDTI0MDUyMjEzMDAzMFowLzEtMCsGA1UEAxMk OTI5MjdmZmEtYjdjYy00MDM0LTk0MGMtYWVlY2M4MDBjODg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNCVH11IfYlaaKtTGbCwN+UcHe12sSqFKJVb sIMTwJXZSCNuFdJ8aPz72DPxtas379mpCBsZgOLcj2O2BCs5vjOQ5EejeuPAxL+L 1gWk+4lsi8bLpMRGrYOcX+l+uKsTmB1SYK7kWrVBLOHm/bOXeM8JVN96fJR/3NwF I/3GkKYOD5Am6kjCzfiblStUxEvOgRZEjZDb18jYpDjFFYUvzuSey7S8keW9lYDz CDBQ5I+12h3oKjKjl4717IstMMfLnTok+OAIM2AMYBHRUUTH59opgjiAlKK2hsHl jzUU/gYZJI7XG2JT7qqjdcLDDmD+c0nDs6Ibx8pRQ9InTuqSVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNld0BgjwEbB82of3nMYAyDdpFKXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvZjViYmUxNzctZGIyMC0z OTgxLWEzMzktYzRmMzRkNTcyZTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDz8zwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGGA4wlMiJiRs5m8Q8OFLFuLpWj7zi2FB8ove5RWjpdaKkF7lx7SQaEl tu/f1LSZy37wd+sg4/BIQqtRBziwX4Uwj0LumhbTP5Vavlan+hPB6ztfjOZRk11T 5RafiftoH8i0SDiJlvy8eFAkoVct5qfwb10Alo2Ho8dfDCYRxlQyWP31gGLp9US8 +IJan6VY7IWz4uV9VYuBI8gYwQlmiOOGXaLYmSkKl0Q+lFdb5fJS6NvmNsK7RlnC hrXPpcBCZbzkFyEq++DQugFOCWD6YuY/FGMveJ7JUX4+KMmDt11CC9Xz3DJG9iDR 6AAMPupFPq0KMZj1w+VrhEfANhs4nBk= -----END CERTIFICATE-----Generated at Thu May 9 15:20:26 2024 by rpki-client on console-ams.rpki-client.org