$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/536dac69-c594-38fc-a9fe-12628e71305d.roa File: 536dac69-c594-38fc-a9fe-12628e71305d.roa (raw, json) Hash identifier: RkVUwZr8CYDUrFPg/kFT3drMtosm/2UEJIxmixneCPo= Subject key identifier: AB:A3:0D:08:C8:F7:66:21:24:4B:6C:67:29:6F:0E:C4:39:49:64:F4 Certificate issuer: /CN=a90f006a-b108-4757-9dfd-b36376534658 Certificate serial: 010D0C9F43285844F2FFF51C7142F0C29F4DB800 Authority key identifier: 56:BB:75:1A:8B:BE:92:0D:89:99:26:23:FB:B5:A5:FB:A9:F7:18:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/536dac69-c594-38fc-a9fe-12628e71305d.roa Signing time: Tue 20 Feb 2024 02:00:26 +0000 ROA not before: Tue 20 Feb 2024 02:00:26 +0000 ROA not after: Mon 20 May 2024 01:00:26 +0000 asID: 0 IP address blocks: 45.43.21.0/24 maxlen: 24 66.11.126.0/24 maxlen: 24 2605:fb80:e000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/a90f006a-b108-4757-9dfd-b36376534658.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/a90f006a-b108-4757-9dfd-b36376534658.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 25 Apr 2024 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:f2:ff:f5:1c:71:42:f0:c2:9f:4d:b8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a90f006a-b108-4757-9dfd-b36376534658 Validity Not Before: Feb 20 02:00:26 2024 GMT Not After : May 20 01:00:26 2024 GMT Subject: CN=02ef182a-19d5-4eb8-9877-33bab9d9438d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:62:57:5d:eb:7e:5e:13:f5:d9:21:ce:b0:6f: ad:67:82:5c:a8:ad:0e:f7:3c:17:ca:51:55:5c:92: 9f:04:41:30:3b:5a:2f:3d:32:9a:70:4f:0a:83:48: 57:b6:a5:23:c6:20:86:fe:89:d5:da:46:4d:64:a2: 76:e4:2d:67:57:da:87:14:b6:68:fc:9d:db:3c:12: af:b3:85:28:92:01:d7:24:b9:f3:94:f0:d0:d0:46: 73:7f:11:78:96:6f:a6:85:a1:98:5c:f3:8f:64:5a: d7:09:7a:e9:a1:7f:37:28:76:39:27:39:68:a6:1a: 8b:34:64:15:1a:65:ca:2b:e0:8d:e0:8c:07:2d:90: ea:41:ed:8a:f1:99:69:19:83:02:2f:53:b2:2c:43: 82:4c:d0:f9:e9:e6:d7:68:f0:7c:79:a9:31:79:43: 73:8e:3a:72:72:f5:fc:58:f0:46:71:08:53:95:c7: 77:71:d0:f8:c7:11:8d:08:b8:3d:32:ed:54:c8:6e: 1e:c2:26:96:a6:99:f2:7f:0b:a5:32:bb:ca:16:02: 93:45:1c:33:59:02:60:20:cb:02:57:ba:33:d9:1c: 20:99:50:96:33:90:da:b9:be:97:d2:2e:ff:c4:de: 33:18:b0:3f:a4:c7:3a:8c:c5:8f:e0:da:f3:e6:d0: 2b:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:A3:0D:08:C8:F7:66:21:24:4B:6C:67:29:6F:0E:C4:39:49:64:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/536dac69-c594-38fc-a9fe-12628e71305d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/a90f006a-b108-4757-9dfd-b36376534658.crl X509v3 Authority Key Identifier: keyid:56:BB:75:1A:8B:BE:92:0D:89:99:26:23:FB:B5:A5:FB:A9:F7:18:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658.cer sbgp-ipAddrBlock: critical IPv4: 45.43.21.0/24 66.11.126.0/24 IPv6: 2605:fb80:e000::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:47:e7:2d:a4:8d:aa:00:72:f4:12:e0:72:9e:be:ec:72:c6: 69:85:89:77:86:1d:37:65:64:cf:74:13:8f:d3:35:25:b0:ea: 3d:49:15:dd:16:95:7e:81:cd:1d:04:88:89:51:a5:c5:c5:19: e5:7a:be:34:d5:a7:b9:53:c9:e4:24:99:e9:d9:23:60:a4:3d: 1c:0e:66:ce:72:8e:34:b6:fb:76:65:8d:84:fe:bb:fe:b6:9f: dc:73:25:c0:7d:c6:b4:aa:25:99:be:a4:c4:fa:43:40:6e:cf: 69:bd:3f:6d:69:f3:2d:93:62:90:50:96:59:48:e1:61:2a:63: 53:f8:0d:24:38:31:9a:17:4e:e5:fb:71:69:d6:bc:11:0a:5f: fc:d4:cc:01:55:b3:0b:d1:73:6f:ba:b1:f1:1c:e6:3b:43:12: 05:eb:3e:72:d0:f3:83:a4:18:ef:05:c3:4a:b0:cb:0c:96:94: 9a:51:3e:36:72:f6:89:5e:ce:33:74:23:b4:7c:06:5a:68:aa: be:d8:ed:4c:ec:15:5b:71:81:f4:3b:ad:84:5f:95:22:fe:6c: c7:ef:bf:c0:f0:43:8d:b1:2b:82:01:b1:b6:05:52:bc:73:5a: 9e:67:10:75:ab:31:03:d7:2e:ad:98:98:d9:0f:b6:23:dd:4f: 1f:e5:a5:95 -----BEGIN CERTIFICATE----- MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWETy//UccULwwp9NuAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTkwZjAwNmEtYjEwOC00NzU3LTlkZmQtYjM2Mzc2NTM0 NjU4MB4XDTI0MDIyMDAyMDAyNloXDTI0MDUyMDAxMDAyNlowLzEtMCsGA1UEAxMk MDJlZjE4MmEtMTlkNS00ZWI4LTk4NzctMzNiYWI5ZDk0MzhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmJXXet+XhP12SHOsG+tZ4JcqK0O9zwXylFV XJKfBEEwO1ovPTKacE8Kg0hXtqUjxiCG/onV2kZNZKJ25C1nV9qHFLZo/J3bPBKv s4UokgHXJLnzlPDQ0EZzfxF4lm+mhaGYXPOPZFrXCXrpoX83KHY5JzlophqLNGQV GmXKK+CN4IwHLZDqQe2K8ZlpGYMCL1OyLEOCTND56ebXaPB8eakxeUNzjjpycvX8 WPBGcQhTlcd3cdD4xxGNCLg9Mu1UyG4ewiaWppnyfwulMrvKFgKTRRwzWQJgIMsC V7oz2RwgmVCWM5Daub6X0i7/xN4zGLA/pMc6jMWP4Nrz5tArWQIDAQABo4IDazCC A2cwHQYDVR0OBBYEFKujDQjI92YhJEtsZylvDsQ5SWT0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hOTBm MDA2YS1iMTA4LTQ3NTctOWRmZC1iMzYzNzY1MzQ2NTgvNTM2ZGFjNjktYzU5NC0z OGZjLWE5ZmUtMTI2MjhlNzEzMDVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTkwZjAwNmEtYjEwOC00NzU3LTlk ZmQtYjM2Mzc2NTM0NjU4L2E5MGYwMDZhLWIxMDgtNDc1Ny05ZGZkLWIzNjM3NjUz NDY1OC5jcmwwHwYDVR0jBBgwFoAUVrt1Gou+kg2JmSYj+7Wl+6n3GPgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hOTBmMDA2YS1iMTA4LTQ3NTctOWRmZC1iMzYz NzY1MzQ2NTguY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQALSsVAwQA Qgt+MA4EAgACMAgDBgQmBfuA4DBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBXR+ctpI2qAHL0EuBynr7scsZp hYl3hh03ZWTPdBOP0zUlsOo9SRXdFpV+gc0dBIiJUaXFxRnler401ae5U8nkJJnp 2SNgpD0cDmbOco40tvt2ZY2E/rv+tp/ccyXAfca0qiWZvqTE+kNAbs9pvT9tafMt k2KQUJZZSOFhKmNT+A0kODGaF07l+3Fp1rwRCl/81MwBVbML0XNvurHxHOY7QxIF 6z5y0PODpBjvBcNKsMsMlpSaUT42cvaJXs4zdCO0fAZaaKq+2O1M7BVbcYH0O62E X5Ui/mzH77/A8EONsSuCAbG2BVK8c1qeZxB1qzED1y6tmJjZD7Yj3U8f5aWV -----END CERTIFICATE-----Generated at Wed Apr 24 02:10:16 2024 by rpki-client on console-ams.rpki-client.org