$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/bf1ea0d0-c6c3-3bdf-a20c-a8a939551a91.roa File: bf1ea0d0-c6c3-3bdf-a20c-a8a939551a91.roa (raw, json) Hash identifier: 15yVLYkBJsTkuOphZ72OJUu3cBxo+aXq+9ioRveCHFo= Subject key identifier: EB:37:4C:1D:EE:5B:0F:86:8F:81:76:90:E9:AD:81:F1:46:4E:3E:65 Certificate issuer: /CN=d589f3e4-2701-48f5-9c6b-7ea8d071ece7 Certificate serial: 010D0C9F432858453A12A75E6BC9A95979945600 Authority key identifier: 41:B9:A4:1B:C6:22:84:AE:E5:CB:BA:7B:33:62:3B:FA:24:FB:FF:22 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/bf1ea0d0-c6c3-3bdf-a20c-a8a939551a91.roa Signing time: Sat 16 Mar 2024 13:00:31 +0000 ROA not before: Sat 16 Mar 2024 13:00:31 +0000 ROA not after: Fri 14 Jun 2024 13:00:31 +0000 asID: 400679 IP address blocks: 206.168.92.0/24 maxlen: 24 2602:fb82::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:3a:12:a7:5e:6b:c9:a9:59:79:94:56:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d589f3e4-2701-48f5-9c6b-7ea8d071ece7 Validity Not Before: Mar 16 13:00:31 2024 GMT Not After : Jun 14 13:00:31 2024 GMT Subject: CN=0d50b68b-7d30-48e6-8835-65fdf5cf7a78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:1d:eb:ed:44:04:3d:bc:f8:f4:34:a8:b1:fd: 76:4d:a1:aa:fd:6b:77:6e:d9:e3:21:7d:64:ed:c6: 31:f0:43:92:e2:7e:df:b0:e7:ef:e2:f2:51:06:5d: 31:56:a5:10:29:42:84:62:2e:cf:92:86:d5:d6:57: e9:6b:5d:3d:74:bd:5b:e5:cb:df:cc:32:9f:12:82: fd:28:cb:28:80:03:3f:a5:f7:89:48:58:21:d5:d4: cf:ec:12:35:00:68:1f:3d:22:72:88:eb:91:43:6c: f5:97:aa:27:f1:a8:c8:12:eb:42:4a:59:23:dd:f4: 91:6c:51:60:84:f0:a8:04:ef:7e:96:5b:3f:f1:42: a8:c3:a5:d1:29:6f:e6:40:21:d4:23:c6:14:12:47: a9:63:7a:dc:08:ff:2b:bc:95:fe:2f:0b:c4:c3:ba: 83:b8:2d:bd:04:df:19:8c:97:e0:a9:37:a8:66:97: f0:0c:66:ad:56:63:ee:ee:2d:41:41:71:99:a5:3f: 18:67:b7:09:29:85:e8:e5:76:10:56:2b:e3:9a:0d: 62:34:d9:cd:cb:80:b6:1d:5f:b5:f8:b2:25:16:22: 92:5d:c0:f4:fe:4a:85:04:8a:80:5d:2a:65:6c:5b: 4e:08:e0:26:32:8f:a9:7c:86:08:02:80:14:04:08: 80:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:37:4C:1D:EE:5B:0F:86:8F:81:76:90:E9:AD:81:F1:46:4E:3E:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/bf1ea0d0-c6c3-3bdf-a20c-a8a939551a91.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.crl X509v3 Authority Key Identifier: keyid:41:B9:A4:1B:C6:22:84:AE:E5:CB:BA:7B:33:62:3B:FA:24:FB:FF:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.cer sbgp-ipAddrBlock: critical IPv4: 206.168.92.0/24 IPv6: 2602:fb82::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:12:98:f5:dd:3e:26:a3:69:dd:a6:fd:19:22:09:d5:49:e1: 18:d2:3b:fb:c9:a1:85:a2:53:50:b1:81:45:fb:cc:50:88:7a: e9:0a:c2:46:54:81:f3:19:d4:c9:9e:6b:c9:9d:63:26:31:94: ab:58:54:db:51:61:49:3a:df:ea:66:48:ef:a5:9f:b8:47:f4: 4c:31:48:1c:45:f6:0c:5e:c5:8a:d0:ee:72:98:7a:49:24:93: be:70:b9:c9:f6:83:39:7a:6f:11:ad:18:6a:36:11:0b:e0:94: 64:6a:73:02:82:27:4f:b3:fc:b3:39:a6:c1:dd:ea:37:17:cf: ad:d9:91:71:9a:13:a4:da:15:0f:48:0a:8f:85:87:fb:3e:03: 7f:18:b0:64:e3:52:6c:e5:61:8a:b7:88:c8:62:d4:4c:67:f8: ff:79:fb:70:32:91:58:dc:ef:8c:1e:62:db:c3:92:3f:15:75: 6c:e0:26:e7:92:57:71:03:8c:fb:53:a4:f2:f9:fc:a8:33:31: ac:83:44:23:83:e7:24:71:3e:25:26:8f:8e:65:a4:bc:46:0e: 6c:f7:42:58:9c:53:07:ef:39:3e:08:ce:67:eb:3f:0f:50:c5: 33:f4:7b:f4:3d:94:25:fb:4d:97:b2:09:95:a3:0a:d2:09:16: 1f:8f:fc:2f -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEU6Eqdea8mpWXmUVgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDU4OWYzZTQtMjcwMS00OGY1LTljNmItN2VhOGQwNzFl Y2U3MB4XDTI0MDMxNjEzMDAzMVoXDTI0MDYxNDEzMDAzMVowLzEtMCsGA1UEAxMk MGQ1MGI2OGItN2QzMC00OGU2LTg4MzUtNjVmZGY1Y2Y3YTc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlR3r7UQEPbz49DSosf12TaGq/Wt3btnjIX1k 7cYx8EOS4n7fsOfv4vJRBl0xVqUQKUKEYi7PkobV1lfpa109dL1b5cvfzDKfEoL9 KMsogAM/pfeJSFgh1dTP7BI1AGgfPSJyiOuRQ2z1l6on8ajIEutCSlkj3fSRbFFg hPCoBO9+lls/8UKow6XRKW/mQCHUI8YUEkepY3rcCP8rvJX+LwvEw7qDuC29BN8Z jJfgqTeoZpfwDGatVmPu7i1BQXGZpT8YZ7cJKYXo5XYQVivjmg1iNNnNy4C2HV+1 +LIlFiKSXcD0/kqFBIqAXSplbFtOCOAmMo+pfIYIAoAUBAiAzQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFOs3TB3uWw+Gj4F2kOmtgfFGTj5lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kNTg5 ZjNlNC0yNzAxLTQ4ZjUtOWM2Yi03ZWE4ZDA3MWVjZTcvYmYxZWEwZDAtYzZjMy0z YmRmLWEyMGMtYThhOTM5NTUxYTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDU4OWYzZTQtMjcwMS00OGY1LTlj NmItN2VhOGQwNzFlY2U3L2Q1ODlmM2U0LTI3MDEtNDhmNS05YzZiLTdlYThkMDcx ZWNlNy5jcmwwHwYDVR0jBBgwFoAUQbmkG8YihK7ly7p7M2I7+iT7/yIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kNTg5ZjNlNC0yNzAxLTQ4ZjUtOWM2Yi03ZWE4 ZDA3MWVjZTcuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAzqhcMA4E AgACMAgDBgQmAvuCADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBoEpj13T4mo2ndpv0ZIgnVSeEY0jv7yaGF olNQsYFF+8xQiHrpCsJGVIHzGdTJnmvJnWMmMZSrWFTbUWFJOt/qZkjvpZ+4R/RM MUgcRfYMXsWK0O5ymHpJJJO+cLnJ9oM5em8RrRhqNhEL4JRkanMCgidPs/yzOabB 3eo3F8+t2ZFxmhOk2hUPSAqPhYf7PgN/GLBk41Js5WGKt4jIYtRMZ/j/eftwMpFY 3O+MHmLbw5I/FXVs4CbnkldxA4z7U6Ty+fyoMzGsg0Qjg+ckcT4lJo+OZaS8Rg5s 90JYnFMH7zk+CM5n6z8PUMUz9Hv0PZQl+02XsgmVowrSCRYfj/wv -----END CERTIFICATE-----Generated at Sat May 4 15:02:36 2024 by rpki-client on console-ams.rpki-client.org