$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/503e3aea-7ff7-3e37-9611-2fa65ee0d6b1.roa File: 503e3aea-7ff7-3e37-9611-2fa65ee0d6b1.roa (raw, json) Hash identifier: WylGy44k9qqngFZuLHC0hlP+91PRy+Zl5jfh1/t+ezA= Subject key identifier: FB:62:88:5E:FC:A5:24:F1:6F:88:11:DE:8D:58:AF:5E:81:47:CE:3A Certificate issuer: /CN=4e87c0b3-383a-438c-aa45-1e5df0d0e061 Certificate serial: 010D0C9F4328584521104F6B217D01FB4726EB8C Authority key identifier: 21:B4:6D:BF:CB:19:2A:8D:29:54:F0:6B:20:82:83:C2:12:1B:7F:D9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/503e3aea-7ff7-3e37-9611-2fa65ee0d6b1.roa Signing time: Thu 07 Mar 2024 14:00:32 +0000 ROA not before: Thu 07 Mar 2024 14:00:32 +0000 ROA not after: Wed 05 Jun 2024 13:00:32 +0000 asID: 14618 IP address blocks: 208.64.80.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/4e87c0b3-383a-438c-aa45-1e5df0d0e061.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/4e87c0b3-383a-438c-aa45-1e5df0d0e061.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:21:10:4f:6b:21:7d:01:fb:47:26:eb:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e87c0b3-383a-438c-aa45-1e5df0d0e061 Validity Not Before: Mar 7 14:00:32 2024 GMT Not After : Jun 5 13:00:32 2024 GMT Subject: CN=b8c0261d-5d1f-4a8c-b24d-93253c0ae98f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:24:e2:ab:c4:73:e4:b2:0b:af:f6:87:6e:5d: 3f:e7:54:88:31:f0:95:42:4a:2f:0c:5d:2b:76:3c: c1:ab:5b:c3:ba:97:89:a9:b8:0b:d9:44:97:23:30: d1:1f:76:b9:ba:6e:8b:bf:b9:81:f8:3b:58:d4:d9: 8d:c6:1c:b9:3d:a1:9d:62:73:ef:36:08:c2:84:79: 17:c1:82:92:b5:a9:38:c2:14:22:ff:c2:77:db:3f: 77:c7:ae:b1:24:d8:9f:31:6f:22:40:1c:7e:58:69: a9:be:7d:fe:cc:c3:2b:b5:4c:61:2d:2b:93:c8:e5: d6:2d:40:87:5b:6a:7e:e4:3e:d0:55:a2:8a:f3:fe: 00:fe:07:70:bd:39:d2:79:54:fd:fa:f3:16:50:95: bc:f1:69:eb:ca:61:f4:44:be:cb:49:f4:b5:13:4e: a7:f4:e0:75:7b:e4:c4:49:ef:2e:d1:f7:a9:0d:59: 7b:f8:fa:e6:09:ae:cb:b7:27:69:4f:f0:da:9f:bf: a0:be:76:1e:ca:0b:de:21:2e:0c:9a:6c:80:63:94: 44:af:6f:0f:cf:ff:5d:ed:81:3f:17:97:8d:1f:cc: 7b:33:7f:f0:0e:cd:c9:3c:31:93:1f:41:ee:ef:94: 86:8b:e5:c5:04:64:ee:90:3a:57:88:7a:90:fe:ea: 59:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:62:88:5E:FC:A5:24:F1:6F:88:11:DE:8D:58:AF:5E:81:47:CE:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/503e3aea-7ff7-3e37-9611-2fa65ee0d6b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/4e87c0b3-383a-438c-aa45-1e5df0d0e061.crl X509v3 Authority Key Identifier: keyid:21:B4:6D:BF:CB:19:2A:8D:29:54:F0:6B:20:82:83:C2:12:1B:7F:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061.cer sbgp-ipAddrBlock: critical IPv4: 208.64.80.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:5e:ad:90:26:ea:94:55:e0:3c:16:93:0b:44:0d:cb:c2:ce: 1e:a4:36:37:3c:93:44:73:aa:a8:72:9d:5f:98:ec:0a:c2:9a: bf:61:56:bc:6e:53:7f:5b:21:70:fa:4c:be:6e:88:24:ac:44: 03:94:55:67:21:b4:81:6b:15:7b:02:9f:e9:c3:e2:54:95:41: 9a:53:d3:c8:17:1c:69:f9:0f:31:c8:6e:47:77:db:69:60:ca: d7:4f:65:80:8b:ce:78:11:09:f6:f6:51:1a:3e:04:d0:0b:6d: 9f:56:28:d7:0c:f8:a0:6b:60:ed:13:d7:7a:64:63:a5:46:98: fa:14:91:bc:7f:fe:9d:5f:35:d9:00:24:39:89:e9:1e:64:ea: e6:64:3d:ca:fe:bb:64:1b:02:2e:11:de:ea:ed:90:b1:35:29: a7:d2:e2:9e:f7:87:e6:6e:c4:6d:a7:33:2d:9a:3e:e7:59:2a: 30:f3:c3:03:80:42:22:49:56:4c:b8:37:2e:e5:26:c9:78:f0: ad:39:c7:01:65:e0:9b:7f:19:62:d1:c9:b6:36:1c:0f:6b:84: 12:3b:b8:52:a5:f5:28:a8:59:1c:b6:ed:3c:24:f6:6d:46:4b: c4:b6:ae:37:64:79:6e:5a:a8:6d:0c:9c:e2:3f:41:9d:f8:ed: 1e:58:3f:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUhEE9rIX0B+0cm64wwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU4N2MwYjMtMzgzYS00MzhjLWFhNDUtMWU1ZGYwZDBl MDYxMB4XDTI0MDMwNzE0MDAzMloXDTI0MDYwNTEzMDAzMlowLzEtMCsGA1UEAxMk YjhjMDI2MWQtNWQxZi00YThjLWIyNGQtOTMyNTNjMGFlOThmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCTiq8Rz5LILr/aHbl0/51SIMfCVQkovDF0r djzBq1vDupeJqbgL2USXIzDRH3a5um6Lv7mB+DtY1NmNxhy5PaGdYnPvNgjChHkX wYKStak4whQi/8J32z93x66xJNifMW8iQBx+WGmpvn3+zMMrtUxhLSuTyOXWLUCH W2p+5D7QVaKK8/4A/gdwvTnSeVT9+vMWUJW88WnrymH0RL7LSfS1E06n9OB1e+TE Se8u0fepDVl7+PrmCa7LtydpT/Dan7+gvnYeygveIS4MmmyAY5REr28Pz/9d7YE/ F5eNH8x7M3/wDs3JPDGTH0Hu75SGi+XFBGTukDpXiHqQ/upZtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPtiiF78pSTxb4gR3o1Yr16BR846MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80ZTg3 YzBiMy0zODNhLTQzOGMtYWE0NS0xZTVkZjBkMGUwNjEvNTAzZTNhZWEtN2ZmNy0z ZTM3LTk2MTEtMmZhNjVlZTBkNmIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNGU4N2MwYjMtMzgzYS00MzhjLWFh NDUtMWU1ZGYwZDBlMDYxLzRlODdjMGIzLTM4M2EtNDM4Yy1hYTQ1LTFlNWRmMGQw ZTA2MS5jcmwwHwYDVR0jBBgwFoAUIbRtv8sZKo0pVPBrIIKDwhIbf9kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80ZTg3YzBiMy0zODNhLTQzOGMtYWE0NS0xZTVk ZjBkMGUwNjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0EBQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADperZAm6pRV4DwWkwtEDcvCzh6kNjc8k0RzqqhynV+Y7ArCmr9hVrxu U39bIXD6TL5uiCSsRAOUVWchtIFrFXsCn+nD4lSVQZpT08gXHGn5DzHIbkd322lg ytdPZYCLzngRCfb2URo+BNALbZ9WKNcM+KBrYO0T13pkY6VGmPoUkbx//p1fNdkA JDmJ6R5k6uZkPcr+u2QbAi4R3urtkLE1KafS4p73h+ZuxG2nMy2aPudZKjDzwwOA QiJJVky4Ny7lJsl48K05xwFl4Jt/GWLRybY2HA9rhBI7uFKl9SioWRy27Twk9m1G S8S2rjdkeW5aqG0MnOI/QZ347R5YP5c= -----END CERTIFICATE-----Generated at Wed May 1 15:59:55 2024 by rpki-client on console-ams.rpki-client.org