$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/0bae7820-559d-38ce-bc60-e8ef8a792915.roa File: 0bae7820-559d-38ce-bc60-e8ef8a792915.roa (raw, json) Hash identifier: 7S1k6Xt1onqUarZjm8SYyx3w60MDqa8b3CB3WNy9E/M= Subject key identifier: 4A:24:BA:52:6B:4B:C2:93:D4:C7:00:37:EB:59:E9:55:E3:DC:A9:24 Certificate issuer: /CN=487abf98-3073-43c6-b10e-a615e64ccc65 Certificate serial: 010D0C9F43285845B4E8D4BA921F291DBE8F2880 Authority key identifier: 50:7A:E4:02:3C:D8:83:E7:AD:F6:A4:D4:16:E6:E7:15:3F:0A:05:0A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/0bae7820-559d-38ce-bc60-e8ef8a792915.roa Signing time: Mon 29 Apr 2024 13:00:33 +0000 ROA not before: Mon 29 Apr 2024 13:00:33 +0000 ROA not after: Sun 28 Jul 2024 13:00:33 +0000 asID: 14618 IP address blocks: 216.9.204.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/487abf98-3073-43c6-b10e-a615e64ccc65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/487abf98-3073-43c6-b10e-a615e64ccc65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:b4:e8:d4:ba:92:1f:29:1d:be:8f:28:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=487abf98-3073-43c6-b10e-a615e64ccc65 Validity Not Before: Apr 29 13:00:33 2024 GMT Not After : Jul 28 13:00:33 2024 GMT Subject: CN=e9d4707a-c182-4b63-802d-9d47c8b148f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:96:dc:69:07:24:05:a4:d2:54:73:9f:25:c0: de:5e:63:08:a0:da:3f:df:cb:b7:f8:d5:e1:2e:67: 67:77:a0:eb:68:3e:1a:56:f9:a8:55:f5:35:52:5d: 27:03:a3:33:57:26:32:5d:f9:60:55:5f:20:ae:37: c4:a9:6b:3d:e8:b7:6c:4c:c6:c2:92:30:77:fb:a0: 4c:c4:8c:63:59:77:a4:36:f1:60:ec:6c:23:14:c3: 55:38:b5:c1:02:c2:08:d1:ba:db:f1:c1:f3:84:86: b7:e5:a0:86:b4:ff:3f:87:e1:cc:bc:5e:06:d1:e3: 93:d5:de:91:03:2f:66:ab:b9:78:4b:d5:3a:af:9b: 66:29:84:31:4b:6e:69:70:87:c8:39:a4:12:7c:f7: 1b:3d:2c:1c:e4:be:4e:ee:e1:9b:48:83:c5:b5:a8: 42:5e:9b:06:50:35:e6:64:27:b2:c6:a9:1b:3f:f9: 33:e7:0f:33:ea:95:43:92:1e:40:52:a8:1f:e1:89: 17:c6:05:2d:99:d5:ba:e1:b4:0c:5e:7a:1f:4e:92: 1c:40:43:13:04:a6:72:37:69:83:6d:29:31:df:2c: 9f:de:7f:f8:4c:37:8b:fd:3e:e6:27:3f:d2:60:80: d6:02:4e:31:a1:dd:67:08:b7:47:98:e1:0f:55:31: 2c:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:24:BA:52:6B:4B:C2:93:D4:C7:00:37:EB:59:E9:55:E3:DC:A9:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/0bae7820-559d-38ce-bc60-e8ef8a792915.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/487abf98-3073-43c6-b10e-a615e64ccc65.crl X509v3 Authority Key Identifier: keyid:50:7A:E4:02:3C:D8:83:E7:AD:F6:A4:D4:16:E6:E7:15:3F:0A:05:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65.cer sbgp-ipAddrBlock: critical IPv4: 216.9.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:d7:ff:33:9d:81:2c:75:8d:2b:26:48:04:8f:df:1c:9a:e9: 51:df:5f:80:e1:f1:1c:65:e6:bb:39:9e:d1:e4:96:ca:d6:82: ca:41:4d:75:45:1e:39:43:73:21:3d:71:9e:eb:87:ec:a4:00: 62:0c:eb:f1:2d:87:2e:06:93:c5:71:3d:7d:c0:18:87:6d:a0: 0f:04:8e:b5:e7:a8:ef:d2:f8:b1:03:ee:b4:ce:43:7f:85:e5: 0e:90:d7:3a:33:ea:75:f1:d4:f6:d6:89:3c:35:66:5c:92:8a: 53:8f:f9:ef:ca:3d:a0:99:91:c3:38:f7:4e:26:e4:f2:af:5d: d4:0d:e2:15:5d:c9:9a:50:10:7e:35:c9:f9:b3:aa:33:f9:cf: 8c:d2:be:fc:25:33:0d:86:7e:5a:eb:98:55:97:ec:bb:19:56: 28:e3:38:1d:c2:d2:9f:e9:98:be:30:88:82:98:46:63:6b:19: e5:b1:b7:4b:f5:10:56:f9:0f:02:d2:97:a0:40:02:be:7e:46: a0:98:ed:c9:bb:ee:4a:3b:93:a0:92:bb:17:92:bd:f2:56:28: db:89:ab:75:bd:61:64:fc:e5:7b:7e:9f:60:f8:69:5b:07:1b: 38:0f:e0:c6:34:e5:1a:11:ab:e7:03:3b:65:c5:98:0f:a9:f5: ec:b6:88:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEW06NS6kh8pHb6PKIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDg3YWJmOTgtMzA3My00M2M2LWIxMGUtYTYxNWU2NGNj YzY1MB4XDTI0MDQyOTEzMDAzM1oXDTI0MDcyODEzMDAzM1owLzEtMCsGA1UEAxMk ZTlkNDcwN2EtYzE4Mi00YjYzLTgwMmQtOWQ0N2M4YjE0OGY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJbcaQckBaTSVHOfJcDeXmMIoNo/38u3+NXh Lmdnd6DraD4aVvmoVfU1Ul0nA6MzVyYyXflgVV8grjfEqWs96LdsTMbCkjB3+6BM xIxjWXekNvFg7GwjFMNVOLXBAsII0brb8cHzhIa35aCGtP8/h+HMvF4G0eOT1d6R Ay9mq7l4S9U6r5tmKYQxS25pcIfIOaQSfPcbPSwc5L5O7uGbSIPFtahCXpsGUDXm ZCeyxqkbP/kz5w8z6pVDkh5AUqgf4YkXxgUtmdW64bQMXnofTpIcQEMTBKZyN2mD bSkx3yyf3n/4TDeL/T7mJz/SYIDWAk4xod1nCLdHmOEPVTEs8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEokulJrS8KT1McAN+tZ6VXj3KkkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80ODdh YmY5OC0zMDczLTQzYzYtYjEwZS1hNjE1ZTY0Y2NjNjUvMGJhZTc4MjAtNTU5ZC0z OGNlLWJjNjAtZThlZjhhNzkyOTE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDg3YWJmOTgtMzA3My00M2M2LWIx MGUtYTYxNWU2NGNjYzY1LzQ4N2FiZjk4LTMwNzMtNDNjNi1iMTBlLWE2MTVlNjRj Y2M2NS5jcmwwHwYDVR0jBBgwFoAUUHrkAjzYg+et9qTUFubnFT8KBQowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80ODdhYmY5OC0zMDczLTQzYzYtYjEwZS1hNjE1 ZTY0Y2NjNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2AnMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACbX/zOdgSx1jSsmSASP3xya6VHfX4Dh8Rxl5rs5ntHklsrWgspBTXVF HjlDcyE9cZ7rh+ykAGIM6/Ethy4Gk8VxPX3AGIdtoA8EjrXnqO/S+LED7rTOQ3+F 5Q6Q1zoz6nXx1PbWiTw1ZlySilOP+e/KPaCZkcM4904m5PKvXdQN4hVdyZpQEH41 yfmzqjP5z4zSvvwlMw2GflrrmFWX7LsZVijjOB3C0p/pmL4wiIKYRmNrGeWxt0v1 EFb5DwLSl6BAAr5+RqCY7cm77ko7k6CSuxeSvfJWKNuJq3W9YWT85Xt+n2D4aVsH GzgP4MY05RoRq+cDO2XFmA+p9ey2iMg= -----END CERTIFICATE-----Generated at Wed May 1 20:51:36 2024 by rpki-client on console-ams.rpki-client.org