$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8c96d8ef-b34e-345e-a86c-d2dafee3c020.roa File: 8c96d8ef-b34e-345e-a86c-d2dafee3c020.roa (raw, json) Hash identifier: wDe/waYHw1Au+EX+bEHqLfopfHPWagoS6fur2x3G17o= Subject key identifier: 3C:F7:C6:51:E9:24:E4:17:5A:B2:FD:40:F9:05:70:C4:AB:BE:20:B1 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285846004951759FF3BFA5AB424060 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8c96d8ef-b34e-345e-a86c-d2dafee3c020.roa Signing time: Sun 26 May 2024 13:00:34 +0000 ROA not before: Sun 26 May 2024 13:00:34 +0000 ROA not after: Sat 24 Aug 2024 13:00:34 +0000 asID: 22909 IP address blocks: 68.34.176.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Jun 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:46:00:49:51:75:9f:f3:bf:a5:ab:42:40:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 26 13:00:34 2024 GMT Not After : Aug 24 13:00:34 2024 GMT Subject: CN=402121df-8e15-4587-8c21-3d907ee6b061 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d5:13:25:8e:b5:0d:b7:f8:ba:d9:2a:ac:d1: fd:2f:00:90:ed:e0:85:5f:a0:8c:43:e0:36:10:3c: d1:1f:69:bd:e7:d0:ca:07:31:5e:9f:68:8a:fb:f3: fb:68:1f:f4:27:b9:f3:8f:e1:ff:62:63:98:10:61: 94:1f:5e:99:65:23:c3:56:99:7f:12:e3:fe:38:d5: 95:27:01:71:aa:50:b1:91:dd:f5:fb:8e:fd:49:2b: 9f:2e:6f:28:e1:07:27:ea:27:b0:d2:39:f8:f2:9d: d6:d0:66:ec:45:db:8b:d1:54:8c:eb:36:fe:57:49: 88:c7:a6:d1:6a:ee:8e:9b:fd:f1:7b:f6:e6:cb:53: 6c:5e:81:d3:de:a7:19:73:a2:d1:72:69:33:89:52: 58:56:c3:de:10:47:ed:c6:19:49:17:67:47:16:82: 1a:2c:9a:e4:a1:2e:9e:f2:02:6d:75:9b:e9:bc:ec: 10:3e:ee:33:53:c9:b0:46:ca:73:a5:a5:b4:8e:2c: b1:57:f5:92:0a:2a:de:58:5f:a5:f1:93:3f:65:ff: 08:ed:4b:48:2d:ef:ed:ea:d8:9e:64:9f:28:99:9c: d1:5e:c0:06:29:bf:95:4a:07:72:ee:69:8a:3f:73: b5:55:90:48:c6:a3:3c:de:5c:dd:2f:ee:58:2f:cc: 3b:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:F7:C6:51:E9:24:E4:17:5A:B2:FD:40:F9:05:70:C4:AB:BE:20:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8c96d8ef-b34e-345e-a86c-d2dafee3c020.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.34.176.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption be:32:e2:a5:e8:81:40:ac:60:d0:63:71:70:60:c1:75:56:1c: 29:b4:fe:fc:14:bb:8a:af:82:92:3d:2a:96:43:2c:b1:8f:67: 16:31:0e:0c:de:34:bf:6f:5e:60:2a:e2:a0:de:d4:d7:1b:17: 9a:47:84:87:5c:f3:a0:48:e0:46:a3:5c:ba:ae:e5:65:f8:d8: 38:11:3c:2c:97:44:63:1d:6a:a9:98:51:ba:b6:b8:a5:88:b6: 1c:69:ed:9d:cc:55:99:da:c2:31:7a:08:e8:da:7c:74:c0:2e: de:15:1e:56:26:20:2b:56:0c:61:2a:e1:cc:0d:86:fe:02:c9: ca:7e:1a:75:66:be:52:d6:b6:d9:e7:89:e4:35:10:c7:3e:35: 79:44:35:74:1c:c8:e2:c8:b4:78:80:53:b6:61:43:3d:ee:f0: 1d:ef:dd:cf:10:80:51:44:e9:18:d4:fd:8c:8d:d4:59:4c:7c: 9d:17:29:d2:5e:24:07:04:10:6f:3e:04:ea:46:b8:4e:05:cb: ea:fb:70:d0:d8:51:d6:47:24:a4:67:1d:75:5f:00:ac:b7:a2: 9a:ec:11:57:51:6f:16:c9:8c:80:d6:3a:86:51:49:2c:9b:87: 52:6b:db:b8:7a:70:f1:64:68:33:b5:d9:11:24:e4:54:f8:8e: f0:42:a1:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEYASVF1n/O/patCQGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MDUyNjEzMDAzNFoXDTI0MDgyNDEzMDAzNFowLzEtMCsGA1UEAxMk NDAyMTIxZGYtOGUxNS00NTg3LThjMjEtM2Q5MDdlZTZiMDYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAytUTJY61Dbf4utkqrNH9LwCQ7eCFX6CMQ+A2 EDzRH2m959DKBzFen2iK+/P7aB/0J7nzj+H/YmOYEGGUH16ZZSPDVpl/EuP+ONWV JwFxqlCxkd31+479SSufLm8o4Qcn6iew0jn48p3W0GbsRduL0VSM6zb+V0mIx6bR au6Om/3xe/bmy1NsXoHT3qcZc6LRcmkziVJYVsPeEEftxhlJF2dHFoIaLJrkoS6e 8gJtdZvpvOwQPu4zU8mwRspzpaW0jiyxV/WSCireWF+l8ZM/Zf8I7UtILe/t6tie ZJ8omZzRXsAGKb+VSgdy7mmKP3O1VZBIxqM83lzdL+5YL8w7tQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDz3xlHpJOQXWrL9QPkFcMSrviCxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGM5NmQ4ZWYtYjM0ZS0z NDVlLWE4NmMtZDJkYWZlZTNjMDIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCKwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL4y4qXogUCsYNBjcXBgwXVWHCm0/vwUu4qvgpI9KpZDLLGPZxYxDgze NL9vXmAq4qDe1NcbF5pHhIdc86BI4EajXLqu5WX42DgRPCyXRGMdaqmYUbq2uKWI thxp7Z3MVZnawjF6COjafHTALt4VHlYmICtWDGEq4cwNhv4Cycp+GnVmvlLWttnn ieQ1EMc+NXlENXQcyOLItHiAU7ZhQz3u8B3v3c8QgFFE6RjU/YyN1FlMfJ0XKdJe JAcEEG8+BOpGuE4Fy+r7cNDYUdZHJKRnHXVfAKy3oprsEVdRbxbJjIDWOoZRSSyb h1Jr27h6cPFkaDO12REk5FT4jvBCoQk= -----END CERTIFICATE-----Generated at Sat Jun 1 12:07:03 2024 by rpki-client on console-ams.rpki-client.org