$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3e06e472-9f27-3d49-982e-6be586464002.roa File: 3e06e472-9f27-3d49-982e-6be586464002.roa (raw, json) Hash identifier: fs/INmOL5OmnqOCevC4WY2xhLkZq6eZR2nvggWK49rM= Subject key identifier: E7:D9:E2:6D:FC:BC:EE:E7:AA:36:40:52:23:45:E8:30:F9:5C:F4:E7 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285846004B49EA9498C24846714300 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3e06e472-9f27-3d49-982e-6be586464002.roa Signing time: Sun 26 May 2024 13:00:34 +0000 ROA not before: Sun 26 May 2024 13:00:34 +0000 ROA not after: Sat 24 Aug 2024 13:00:34 +0000 asID: 7725 IP address blocks: 68.85.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Jun 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:46:00:4b:49:ea:94:98:c2:48:46:71:43:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 26 13:00:34 2024 GMT Not After : Aug 24 13:00:34 2024 GMT Subject: CN=f9061d5b-3ba5-45cf-bb9a-81e60b3050ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:72:15:23:26:fb:61:3a:27:fe:86:bd:25:e5: 74:5b:30:6f:b2:68:18:e0:13:65:13:b5:0b:7c:61: 01:5e:9b:7f:92:ba:88:61:cd:44:37:3c:21:82:91: 75:15:32:12:cb:f4:f5:5e:6c:2e:69:2f:a6:31:e8: 34:4b:46:fc:a4:1c:6e:13:b2:01:ee:6f:b4:0a:0e: 5d:78:54:29:ee:9c:a2:36:3c:05:33:1c:4d:4f:92: bd:aa:e0:5c:03:41:1c:03:f8:2b:ee:f4:6f:23:0d: 1e:6b:c5:c9:d4:50:0c:b1:39:35:f6:9c:c0:c1:fc: 16:e0:1a:03:cd:27:95:4b:8a:8e:f2:36:89:7d:9a: 1f:d4:f6:27:b3:42:be:aa:eb:06:86:25:32:08:fe: a7:2a:8f:72:9f:f9:2f:ed:4b:36:16:99:c8:35:69: ac:63:cf:7a:cd:99:cc:55:ad:87:1e:a0:ba:52:8e: 52:05:bb:dd:72:f9:d5:e4:d9:76:1e:2a:d5:86:ac: ce:61:38:4d:29:71:77:88:f5:6c:fd:c0:09:0b:6c: 23:57:ea:83:2e:b5:50:76:c2:c8:81:dc:e3:3d:9b: 52:2c:3b:a3:b4:7b:ad:5a:9f:84:10:1e:5b:3c:53: 65:3b:f1:df:84:34:00:15:97:a0:66:17:5a:db:40: bd:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:D9:E2:6D:FC:BC:EE:E7:AA:36:40:52:23:45:E8:30:F9:5C:F4:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3e06e472-9f27-3d49-982e-6be586464002.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.85.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:98:25:1d:72:b8:bf:4e:37:9d:32:2a:b9:2a:d3:c5:80:eb: 39:4d:da:49:c4:33:10:3c:e1:9c:03:bc:c7:ee:83:75:ee:29: fe:3f:cd:8e:8b:84:78:07:73:cc:28:ba:04:3a:e3:10:21:b0: 0a:fb:43:d7:d3:fe:98:42:1a:be:a9:dc:1e:3a:0b:79:b3:07: d8:fa:90:37:d9:1b:3a:12:c5:27:ad:bd:4b:e1:4a:fb:2b:d5: de:b2:15:06:e8:6d:13:9b:91:cc:3a:80:1f:29:d8:0f:86:b2: 5e:e2:57:70:cb:1a:e5:70:62:6b:70:33:3c:38:2a:4c:82:e4: 73:8e:68:90:84:04:07:37:0d:c1:27:75:b3:02:68:ec:6d:dd: 54:a4:5c:f2:9f:3c:42:8d:1e:32:10:f4:e5:45:86:12:84:85: 4b:aa:34:eb:31:62:62:b2:9e:ff:5b:84:5a:5d:79:f2:3e:5f: 29:de:dc:39:6b:32:44:20:d9:1e:11:e5:06:a6:35:ae:6c:66: 06:98:f5:9b:45:be:75:cd:a1:de:bc:bd:82:5d:44:e1:bf:8d: 4c:da:51:aa:d9:72:3a:3b:79:48:fc:6d:82:fa:37:bf:6b:e3: 67:23:97:31:9d:32:23:04:a1:25:19:e1:d8:9e:58:05:d6:71: a7:fe:58:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEYAS0nqlJjCSEZxQwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MDUyNjEzMDAzNFoXDTI0MDgyNDEzMDAzNFowLzEtMCsGA1UEAxMk ZjkwNjFkNWItM2JhNS00NWNmLWJiOWEtODFlNjBiMzA1MGVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXIVIyb7YTon/oa9JeV0WzBvsmgY4BNlE7UL fGEBXpt/krqIYc1ENzwhgpF1FTISy/T1XmwuaS+mMeg0S0b8pBxuE7IB7m+0Cg5d eFQp7pyiNjwFMxxNT5K9quBcA0EcA/gr7vRvIw0ea8XJ1FAMsTk19pzAwfwW4BoD zSeVS4qO8jaJfZof1PYns0K+qusGhiUyCP6nKo9yn/kv7Us2FpnINWmsY896zZnM Va2HHqC6Uo5SBbvdcvnV5Nl2HirVhqzOYThNKXF3iPVs/cAJC2wjV+qDLrVQdsLI gdzjPZtSLDujtHutWp+EEB5bPFNlO/HfhDQAFZegZhda20C9fQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOfZ4m38vO7nqjZAUiNF6DD5XPTnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2UwNmU0NzItOWYyNy0z ZDQ5LTk4MmUtNmJlNTg2NDY0MDAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARFUkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABOYJR1yuL9ON50yKrkq08WA6zlN2knEMxA84ZwDvMfug3XuKf4/zY6L hHgHc8wougQ64xAhsAr7Q9fT/phCGr6p3B46C3mzB9j6kDfZGzoSxSetvUvhSvsr 1d6yFQbobRObkcw6gB8p2A+Gsl7iV3DLGuVwYmtwMzw4KkyC5HOOaJCEBAc3DcEn dbMCaOxt3VSkXPKfPEKNHjIQ9OVFhhKEhUuqNOsxYmKynv9bhFpdefI+Xyne3Dlr MkQg2R4R5QamNa5sZgaY9ZtFvnXNod68vYJdROG/jUzaUarZcjo7eUj8bYL6N79r 42cjlzGdMiMEoSUZ4dieWAXWcaf+WEs= -----END CERTIFICATE-----Generated at Sat Jun 1 16:06:55 2024 by rpki-client on console-ams.rpki-client.org