$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/bd3530fc-aba4-30aa-b5ee-4cb67b4e5233.roa File: bd3530fc-aba4-30aa-b5ee-4cb67b4e5233.roa (raw, json) Hash identifier: JVQsFvG2wVr8d/h+OSCZUmuOc22nJGsh3DaHScgyg8s= Subject key identifier: E2:23:68:34:FC:C2:BC:59:DD:86:5C:32:00:F2:2E:01:76:F6:4E:85 Certificate issuer: /CN=d589f3e4-2701-48f5-9c6b-7ea8d071ece7 Certificate serial: 010D0C9F432858453A12AA12A86814B19AEC9640 Authority key identifier: 41:B9:A4:1B:C6:22:84:AE:E5:CB:BA:7B:33:62:3B:FA:24:FB:FF:22 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/bd3530fc-aba4-30aa-b5ee-4cb67b4e5233.roa Signing time: Sat 16 Mar 2024 13:00:31 +0000 ROA not before: Sat 16 Mar 2024 13:00:31 +0000 ROA not after: Fri 14 Jun 2024 13:00:31 +0000 asID: 398419 IP address blocks: 206.168.92.0/24 maxlen: 24 2602:fb82::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 May 2024 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:3a:12:aa:12:a8:68:14:b1:9a:ec:96:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d589f3e4-2701-48f5-9c6b-7ea8d071ece7 Validity Not Before: Mar 16 13:00:31 2024 GMT Not After : Jun 14 13:00:31 2024 GMT Subject: CN=b5bc370d-ee7b-4b6e-b3ee-d64e51152800 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:7e:8a:f6:8b:87:e1:45:b5:ad:1b:57:6f:de: 64:86:0a:90:64:c1:f2:cc:36:ea:cb:f9:a5:39:a6: 27:65:e0:7f:fe:3f:b5:50:1e:99:32:6f:e0:5d:40: 72:0a:ce:8d:d7:94:50:d2:44:14:66:a0:34:15:4f: f3:c3:2b:e6:d5:72:f7:41:2e:0f:0f:e3:a2:d2:75: 72:e2:73:4a:bc:cb:d8:15:39:e4:16:0d:ea:85:0f: 14:21:76:bc:d6:ba:e1:6c:f5:fa:8d:2f:5b:bc:ff: 18:c5:f3:18:49:da:de:68:96:8d:f0:74:19:96:89: 78:35:cb:07:07:15:8e:ec:89:ad:ec:86:69:ec:fb: 20:3e:fb:1c:a8:be:35:40:12:20:14:1d:4a:f8:38: 12:24:15:6d:a6:55:b9:7b:16:17:b6:32:0b:16:b9: b8:2b:6b:bc:0c:2a:36:fd:08:22:ad:e5:01:65:92: c1:4a:29:e0:10:32:22:90:5d:fb:54:82:73:d8:0e: 01:29:92:1f:67:28:74:f3:c9:7b:9b:d7:ea:91:51: ba:07:8e:81:9c:fb:6a:0f:25:08:cb:13:61:eb:5c: ee:7b:8a:f8:61:ad:eb:87:d3:86:83:34:f8:b3:78: ed:19:5b:eb:b1:7b:44:68:41:48:88:a6:12:e6:d5: bd:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:23:68:34:FC:C2:BC:59:DD:86:5C:32:00:F2:2E:01:76:F6:4E:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/bd3530fc-aba4-30aa-b5ee-4cb67b4e5233.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.crl X509v3 Authority Key Identifier: keyid:41:B9:A4:1B:C6:22:84:AE:E5:CB:BA:7B:33:62:3B:FA:24:FB:FF:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.cer sbgp-ipAddrBlock: critical IPv4: 206.168.92.0/24 IPv6: 2602:fb82::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:f8:ff:46:7b:14:dd:94:f7:e3:75:e7:47:e9:f7:45:f6:68: 9d:cb:dd:30:d3:95:64:c0:9f:fe:c1:32:e3:95:57:c7:69:29: 35:3f:0b:c7:93:5c:1e:34:8d:06:bb:ed:fa:41:07:21:2b:d8: e8:40:93:c6:3f:25:41:b9:59:68:e1:07:f6:9e:5f:27:69:dc: 6c:cf:36:da:ce:da:9f:88:f7:6b:d2:c5:c2:54:2e:78:ba:dc: 9c:a2:2d:20:d0:d7:9e:a9:09:84:64:47:a8:c6:ea:f0:ff:74: 57:27:44:bd:97:76:d6:c8:08:7b:29:21:d9:fe:f1:70:48:b8: bc:49:c6:f4:98:11:f5:14:ab:71:66:05:d5:74:9d:22:96:13: 05:ef:98:05:58:f7:43:14:94:76:64:4a:93:c0:76:c4:84:66: 91:46:e3:bc:6a:01:63:c1:eb:c1:48:b6:67:78:f9:88:50:72: bc:17:3e:55:8a:0f:2a:35:1a:27:5c:0c:8d:5b:e6:ae:45:67: e6:a7:b3:97:2a:5b:90:6d:37:1c:22:64:a1:03:20:42:2e:90: 12:a1:f2:64:7b:6c:5e:9d:75:a7:42:2d:ca:2f:3e:f9:3d:b2: 2a:5d:48:c6:ae:19:46:29:37:97:7a:bf:ac:97:4d:15:5b:ce: c8:2c:61:46 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEU6EqoSqGgUsZrslkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDU4OWYzZTQtMjcwMS00OGY1LTljNmItN2VhOGQwNzFl Y2U3MB4XDTI0MDMxNjEzMDAzMVoXDTI0MDYxNDEzMDAzMVowLzEtMCsGA1UEAxMk YjViYzM3MGQtZWU3Yi00YjZlLWIzZWUtZDY0ZTUxMTUyODAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApH6K9ouH4UW1rRtXb95khgqQZMHyzDbqy/ml OaYnZeB//j+1UB6ZMm/gXUByCs6N15RQ0kQUZqA0FU/zwyvm1XL3QS4PD+Oi0nVy 4nNKvMvYFTnkFg3qhQ8UIXa81rrhbPX6jS9bvP8YxfMYSdreaJaN8HQZlol4NcsH BxWO7Imt7IZp7PsgPvscqL41QBIgFB1K+DgSJBVtplW5exYXtjILFrm4K2u8DCo2 /QgireUBZZLBSingEDIikF37VIJz2A4BKZIfZyh088l7m9fqkVG6B46BnPtqDyUI yxNh61zue4r4Ya3rh9OGgzT4s3jtGVvrsXtEaEFIiKYS5tW9iQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFOIjaDT8wrxZ3YZcMgDyLgF29k6FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kNTg5 ZjNlNC0yNzAxLTQ4ZjUtOWM2Yi03ZWE4ZDA3MWVjZTcvYmQzNTMwZmMtYWJhNC0z MGFhLWI1ZWUtNGNiNjdiNGU1MjMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDU4OWYzZTQtMjcwMS00OGY1LTlj NmItN2VhOGQwNzFlY2U3L2Q1ODlmM2U0LTI3MDEtNDhmNS05YzZiLTdlYThkMDcx ZWNlNy5jcmwwHwYDVR0jBBgwFoAUQbmkG8YihK7ly7p7M2I7+iT7/yIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kNTg5ZjNlNC0yNzAxLTQ4ZjUtOWM2Yi03ZWE4 ZDA3MWVjZTcuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAzqhcMA4E AgACMAgDBgQmAvuCADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBZ+P9GexTdlPfjdedH6fdF9midy90w05Vk wJ/+wTLjlVfHaSk1PwvHk1weNI0Gu+36QQchK9joQJPGPyVBuVlo4Qf2nl8nadxs zzbaztqfiPdr0sXCVC54utycoi0g0NeeqQmEZEeoxurw/3RXJ0S9l3bWyAh7KSHZ /vFwSLi8Scb0mBH1FKtxZgXVdJ0ilhMF75gFWPdDFJR2ZEqTwHbEhGaRRuO8agFj wevBSLZnePmIUHK8Fz5Vig8qNRonXAyNW+auRWfmp7OXKluQbTccImShAyBCLpAS ofJke2xenXWnQi3KLz75PbIqXUjGrhlGKTeXer+sl00VW87ILGFG -----END CERTIFICATE-----Generated at Thu May 9 15:31:24 2024 by rpki-client on console-fra.rpki-client.org