$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27/2a3598a6-3c51-3995-b0a7-612073b7b44d.roa File: 2a3598a6-3c51-3995-b0a7-612073b7b44d.roa (raw, json) Hash identifier: OfFOl+aH1gOxaoCPhKZ1ntK5uzdJsYXSbqUpA3JGS2Y= Subject key identifier: 81:3C:A4:F9:8C:39:1F:64:6A:80:3F:37:A1:28:78:A3:66:F5:12:20 Certificate issuer: /CN=d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27 Certificate serial: 010D0C9F432858459E9362D752544280F93B9200 Authority key identifier: A1:2C:DA:96:0B:63:94:15:8D:17:96:2B:73:6A:DF:40:5C:72:A2:EB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27/2a3598a6-3c51-3995-b0a7-612073b7b44d.roa Signing time: Sun 21 Apr 2024 13:00:35 +0000 ROA not before: Sun 21 Apr 2024 13:00:35 +0000 ROA not after: Sat 20 Jul 2024 13:00:35 +0000 asID: 16509 IP address blocks: 206.204.64.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 04 May 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:9e:93:62:d7:52:54:42:80:f9:3b:92:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27 Validity Not Before: Apr 21 13:00:35 2024 GMT Not After : Jul 20 13:00:35 2024 GMT Subject: CN=f178e788-0600-4e7d-a790-0a09a2a8da5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:dd:cc:ff:ec:0a:1f:98:48:bf:6f:38:b8:e7: 5f:ec:2e:4e:7b:fd:03:f2:7e:3c:5c:b8:e1:c7:d1: 4d:3b:23:7c:b4:f0:9b:f0:09:9d:0a:aa:29:ce:bf: d2:55:db:2a:3a:77:e3:16:33:9a:c6:c4:34:10:b8: fd:67:24:32:c2:f5:7f:fb:94:a1:13:87:13:20:ab: 77:73:68:63:a0:ab:c2:f2:4b:f0:6b:f3:86:29:cf: e6:7c:6c:c0:73:8e:b9:55:86:dc:2f:47:71:03:b5: a1:8b:60:c0:47:01:5d:4e:8a:b0:f3:4b:4b:ab:bd: d0:48:a2:93:30:e6:99:73:26:10:d1:17:c7:43:60: 63:c8:3f:14:e8:2e:79:5e:b5:16:3f:42:86:99:59: 05:84:2f:83:2f:62:9f:5d:e7:4b:a3:78:51:36:14: 75:f9:ad:b5:2b:2c:94:e0:63:6b:84:dd:6b:ad:48: 95:ef:4f:67:64:6e:74:d4:32:f3:dd:99:26:78:e7: 7c:35:a1:7f:26:9e:ed:83:98:3a:fc:24:d6:f9:44: 88:4c:d7:2d:14:7f:5b:f6:6e:da:cd:71:f4:96:a2: 7f:0f:c3:61:28:30:f0:f3:aa:7a:05:72:5c:f2:a1: 0a:ba:45:77:ff:e2:c2:7b:ed:04:34:6c:0b:c9:64: 11:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:3C:A4:F9:8C:39:1F:64:6A:80:3F:37:A1:28:78:A3:66:F5:12:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27/2a3598a6-3c51-3995-b0a7-612073b7b44d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27.crl X509v3 Authority Key Identifier: keyid:A1:2C:DA:96:0B:63:94:15:8D:17:96:2B:73:6A:DF:40:5C:72:A2:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27.cer sbgp-ipAddrBlock: critical IPv4: 206.204.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:4c:29:a1:8f:de:b8:3d:3e:b8:9f:c6:d1:6e:cc:e3:a7:7d: 35:9f:d8:62:9b:c6:9c:62:0a:27:ee:82:a6:f1:22:b9:b4:de: 3a:1a:2b:a9:3f:02:d5:a8:4d:92:b9:68:d2:ad:a4:c6:61:3d: e5:54:d1:32:71:6b:fe:c9:cd:b9:f9:18:28:90:fa:28:d1:e9: a8:0e:48:23:3d:4c:38:84:cb:f4:6f:a6:1f:d9:3c:18:2e:de: fc:68:37:c6:7e:08:cf:8d:5c:c0:c2:e4:2e:0c:e0:60:ef:52: 3d:7e:3b:83:e7:6e:f0:fb:39:27:69:a2:b6:55:3b:81:23:a1: 6e:40:97:ad:07:06:f3:39:77:74:c5:8c:a9:3e:7c:05:a6:c5: a5:13:59:b5:fe:b8:e7:34:bc:bd:82:bb:89:53:d3:49:05:d2: b8:4e:b7:cd:3d:24:d5:5c:a9:b0:8e:16:12:61:fc:86:19:6c: 5d:11:1e:29:47:4c:52:cb:3e:15:70:66:fb:76:03:8d:14:cd: a2:21:ef:d0:16:05:af:1c:35:3f:0f:20:58:bd:89:9d:4a:02: 82:9b:dd:6e:9c:18:48:a0:a6:db:91:ba:7e:06:b3:34:f7:2a: 91:53:ae:45:a4:d3:c7:2f:28:f3:ae:6b:1e:05:a9:2a:9f:ba: b3:f5:53:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWek2LXUlRCgPk7kgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlhYjlhNDUtMmIwNi00Y2E4LWJkMGYtYmJkOTZhY2Nj YzI3MB4XDTI0MDQyMTEzMDAzNVoXDTI0MDcyMDEzMDAzNVowLzEtMCsGA1UEAxMk ZjE3OGU3ODgtMDYwMC00ZTdkLWE3OTAtMGEwOWEyYThkYTVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7d3M/+wKH5hIv284uOdf7C5Oe/0D8n48XLjh x9FNOyN8tPCb8AmdCqopzr/SVdsqOnfjFjOaxsQ0ELj9ZyQywvV/+5ShE4cTIKt3 c2hjoKvC8kvwa/OGKc/mfGzAc465VYbcL0dxA7Whi2DARwFdToqw80tLq73QSKKT MOaZcyYQ0RfHQ2BjyD8U6C55XrUWP0KGmVkFhC+DL2KfXedLo3hRNhR1+a21KyyU 4GNrhN1rrUiV709nZG501DLz3ZkmeOd8NaF/Jp7tg5g6/CTW+USITNctFH9b9m7a zXH0lqJ/D8NhKDDw86p6BXJc8qEKukV3/+LCe+0ENGwLyWQRaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIE8pPmMOR9kaoA/N6EoeKNm9RIgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kOWFi OWE0NS0yYjA2LTRjYTgtYmQwZi1iYmQ5NmFjY2NjMjcvMmEzNTk4YTYtM2M1MS0z OTk1LWIwYTctNjEyMDczYjdiNDRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDlhYjlhNDUtMmIwNi00Y2E4LWJk MGYtYmJkOTZhY2NjYzI3L2Q5YWI5YTQ1LTJiMDYtNGNhOC1iZDBmLWJiZDk2YWNj Y2MyNy5jcmwwHwYDVR0jBBgwFoAUoSzalgtjlBWNF5Yrc2rfQFxyouswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kOWFiOWE0NS0yYjA2LTRjYTgtYmQwZi1iYmQ5 NmFjY2NjMjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFzsxAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIJMKaGP3rg9PrifxtFuzOOnfTWf2GKbxpxiCifugqbxIrm03joaK6k/ AtWoTZK5aNKtpMZhPeVU0TJxa/7Jzbn5GCiQ+ijR6agOSCM9TDiEy/Rvph/ZPBgu 3vxoN8Z+CM+NXMDC5C4M4GDvUj1+O4PnbvD7OSdporZVO4EjoW5Al60HBvM5d3TF jKk+fAWmxaUTWbX+uOc0vL2Cu4lT00kF0rhOt809JNVcqbCOFhJh/IYZbF0RHilH TFLLPhVwZvt2A40UzaIh79AWBa8cNT8PIFi9iZ1KAoKb3W6cGEigptuRun4GszT3 KpFTrkWk08cvKPOuax4FqSqfurP1U/w= -----END CERTIFICATE-----Generated at Thu May 2 14:56:57 2024 by rpki-client on console-ams.rpki-client.org