$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683/2c227bfd-f08b-398c-9969-3fff99fa4025.roa File: 2c227bfd-f08b-398c-9969-3fff99fa4025.roa (raw, json) Hash identifier: 8vB7I+Ek5zHkN+m+FW+aDGemJLljzAULIfAQyvR6fYs= Subject key identifier: 84:A7:06:36:4C:50:B2:B5:9C:6D:53:F9:DE:47:FA:97:F0:EE:3F:9B Certificate issuer: /CN=6bf0b484-94d2-490f-8a68-d7588d1f3683 Certificate serial: 010D0C9F432858457D13344CF9B54F15C63A7D80 Authority key identifier: 2C:7F:1E:92:2A:96:B9:4C:13:5E:EB:5C:38:45:77:97:4A:C6:5E:5C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683/2c227bfd-f08b-398c-9969-3fff99fa4025.roa Signing time: Tue 09 Apr 2024 13:00:34 +0000 ROA not before: Tue 09 Apr 2024 13:00:34 +0000 ROA not after: Mon 08 Jul 2024 13:00:34 +0000 asID: 397444 IP address blocks: 208.68.6.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683/6bf0b484-94d2-490f-8a68-d7588d1f3683.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683/6bf0b484-94d2-490f-8a68-d7588d1f3683.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 27 Apr 2024 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:7d:13:34:4c:f9:b5:4f:15:c6:3a:7d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bf0b484-94d2-490f-8a68-d7588d1f3683 Validity Not Before: Apr 9 13:00:34 2024 GMT Not After : Jul 8 13:00:34 2024 GMT Subject: CN=e8a1cdce-4c92-4e3b-8c37-04c1cb759da6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:55:e2:b4:8d:1c:c0:16:47:ca:3a:d0:35:1f: 2c:7b:9c:94:eb:ca:c5:5b:a7:1e:ad:82:8e:75:77: 34:d2:89:23:6d:92:8a:2f:74:79:33:c6:0f:b3:31: 2b:87:dc:f4:ab:88:d5:cf:6f:30:a3:3a:1e:37:ed: b2:fe:fd:c2:92:d1:d1:00:aa:f8:5c:fa:91:24:0f: a5:da:28:f3:08:96:19:28:e6:01:84:5d:df:58:f5: 2d:67:00:d0:78:78:53:41:b1:de:51:1b:23:2c:6f: ba:d7:de:c9:c5:fa:de:64:29:e4:c4:ea:4c:a2:51: cf:95:ae:3f:4b:c2:e2:ed:53:01:00:91:d7:cc:ad: ee:69:21:1b:bb:fe:4e:26:64:59:dd:b8:90:f5:5d: bc:30:90:65:b5:55:b2:ae:94:c6:1d:11:00:4d:07: 17:bf:7f:84:6c:a1:cb:8b:a7:a2:95:7e:07:87:9e: df:ad:26:80:77:57:c6:80:51:ac:4b:0a:80:9a:84: 27:66:0c:2f:85:f8:56:a2:3b:0d:4d:12:2c:22:18: 38:be:4e:0b:e2:ec:08:73:c5:a7:16:90:9a:6e:d5: a7:e0:be:83:a9:43:6e:9f:03:95:30:b3:f3:34:81: ae:4f:a9:b4:19:d8:05:1e:49:42:e6:1b:96:89:8f: d8:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:A7:06:36:4C:50:B2:B5:9C:6D:53:F9:DE:47:FA:97:F0:EE:3F:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683/2c227bfd-f08b-398c-9969-3fff99fa4025.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683/6bf0b484-94d2-490f-8a68-d7588d1f3683.crl X509v3 Authority Key Identifier: keyid:2C:7F:1E:92:2A:96:B9:4C:13:5E:EB:5C:38:45:77:97:4A:C6:5E:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683.cer sbgp-ipAddrBlock: critical IPv4: 208.68.6.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bd:a4:cb:bf:c8:83:e4:33:77:fc:e9:55:c9:b3:88:ba:01:43: 8d:15:13:26:3c:aa:91:ce:da:ed:70:e8:d8:06:cb:3d:49:2a: f8:2d:83:23:9b:37:bf:50:f4:4b:c0:51:6a:19:3d:19:3d:01: a4:2a:a9:85:79:95:9f:c7:28:47:3d:68:34:c1:dc:ee:40:67: 97:e7:81:d6:51:59:63:ce:68:17:0b:dd:83:bb:6b:11:a2:9b: 9d:df:5b:2b:8a:79:1a:2f:ba:ca:c2:39:1e:92:ea:99:cc:70: 22:e4:71:d1:35:2e:5f:2d:ab:58:4f:92:1e:48:21:b3:5f:cc: 5e:a9:5c:a8:4e:bd:8d:36:ec:67:c5:94:6b:b8:3e:2a:ea:b4: 41:29:b9:4a:6f:39:b8:c6:84:74:23:77:10:e8:c5:af:b7:b3: 26:3c:ea:43:cc:e9:a5:e4:34:10:ef:90:93:07:3e:5b:6d:1d: fd:fe:d8:79:5f:da:bc:c9:39:f4:d0:61:30:3e:82:5a:58:10: 71:d0:49:8f:b2:9e:dc:01:ee:5e:91:2a:b7:1a:81:3a:4c:06: 7b:36:de:c6:bc:8c:62:19:99:fd:0f:53:e2:ee:b1:3e:e2:71: 92:1e:9f:2e:14:41:80:a8:d8:91:e3:00:a6:53:ef:c5:5d:e2: f5:fb:29:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEV9EzRM+bVPFcY6fYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmJmMGI0ODQtOTRkMi00OTBmLThhNjgtZDc1ODhkMWYz NjgzMB4XDTI0MDQwOTEzMDAzNFoXDTI0MDcwODEzMDAzNFowLzEtMCsGA1UEAxMk ZThhMWNkY2UtNGM5Mi00ZTNiLThjMzctMDRjMWNiNzU5ZGE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlXitI0cwBZHyjrQNR8se5yU68rFW6cerYKO dXc00okjbZKKL3R5M8YPszErh9z0q4jVz28wozoeN+2y/v3CktHRAKr4XPqRJA+l 2ijzCJYZKOYBhF3fWPUtZwDQeHhTQbHeURsjLG+6197JxfreZCnkxOpMolHPla4/ S8Li7VMBAJHXzK3uaSEbu/5OJmRZ3biQ9V28MJBltVWyrpTGHREATQcXv3+EbKHL i6eilX4Hh57frSaAd1fGgFGsSwqAmoQnZgwvhfhWojsNTRIsIhg4vk4L4uwIc8Wn FpCabtWn4L6DqUNunwOVMLPzNIGuT6m0GdgFHklC5huWiY/YEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFISnBjZMULK1nG1T+d5H+pfw7j+bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82YmYw YjQ4NC05NGQyLTQ5MGYtOGE2OC1kNzU4OGQxZjM2ODMvMmMyMjdiZmQtZjA4Yi0z OThjLTk5NjktM2ZmZjk5ZmE0MDI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNmJmMGI0ODQtOTRkMi00OTBmLThh NjgtZDc1ODhkMWYzNjgzLzZiZjBiNDg0LTk0ZDItNDkwZi04YTY4LWQ3NTg4ZDFm MzY4My5jcmwwHwYDVR0jBBgwFoAULH8ekiqWuUwTXutcOEV3l0rGXlwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82YmYwYjQ4NC05NGQyLTQ5MGYtOGE2OC1kNzU4 OGQxZjM2ODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0EQGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL2ky7/Ig+Qzd/zpVcmziLoBQ40VEyY8qpHO2u1w6NgGyz1JKvgtgyOb N79Q9EvAUWoZPRk9AaQqqYV5lZ/HKEc9aDTB3O5AZ5fngdZRWWPOaBcL3YO7axGi m53fWyuKeRovusrCOR6S6pnMcCLkcdE1Ll8tq1hPkh5IIbNfzF6pXKhOvY027GfF lGu4PirqtEEpuUpvObjGhHQjdxDoxa+3syY86kPM6aXkNBDvkJMHPlttHf3+2Hlf 2rzJOfTQYTA+glpYEHHQSY+yntwB7l6RKrcagTpMBns23sa8jGIZmf0PU+LusT7i cZIeny4UQYCo2JHjAKZT78Vd4vX7KR8= -----END CERTIFICATE-----Generated at Thu Apr 25 22:46:13 2024 by rpki-client on console-fra.rpki-client.org