$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8f3a5621-f275-3db6-8614-0c1d46fe8365.roa File: 8f3a5621-f275-3db6-8614-0c1d46fe8365.roa (raw, json) Hash identifier: HHnVH46ro5ZQELWrTtb0tzZt+BDK9rnxAxTvXEU7i8s= Subject key identifier: A1:F6:A2:D3:B6:0A:22:33:04:13:37:58:B3:61:4D:C7:A5:28:2B:87 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285845AC89DB464467F07B96B60700 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8f3a5621-f275-3db6-8614-0c1d46fe8365.roa Signing time: Fri 26 Apr 2024 13:00:35 +0000 ROA not before: Fri 26 Apr 2024 13:00:35 +0000 ROA not after: Thu 25 Jul 2024 13:00:35 +0000 asID: 33287 IP address blocks: 68.84.238.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Jun 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:ac:89:db:46:44:67:f0:7b:96:b6:07:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 26 13:00:35 2024 GMT Not After : Jul 25 13:00:35 2024 GMT Subject: CN=b68107c4-bc6b-46f5-9676-a076fc99a16f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:2c:22:5b:14:45:e1:b8:1e:17:d9:4e:c5:eb: c6:6a:96:6a:85:e0:d8:b0:b9:68:37:1d:24:5d:b8: 24:64:d0:fb:a1:22:a7:4c:66:e3:4e:00:b8:0f:bb: 38:3c:ee:b0:2a:6f:b4:12:12:1d:fb:43:97:dd:4a: 13:34:c9:eb:f2:98:28:bf:3e:4f:9b:78:b7:21:80: 1e:74:30:6b:00:48:e8:41:27:6a:6d:f5:74:32:88: 79:0f:31:aa:93:51:fe:fd:48:3a:64:65:fa:37:c1: a4:62:de:40:ba:39:84:7e:d5:26:2c:da:62:14:d7: 82:fa:76:34:c9:0a:95:a0:5b:70:1c:d8:0b:2a:95: aa:4a:9b:f9:b9:bd:12:0e:2b:f8:55:b1:2f:55:3b: b4:ed:e6:54:71:86:77:e9:ab:18:19:74:97:b3:2c: d4:4c:58:d7:9e:c9:df:a3:91:0d:63:45:29:d0:46: 80:31:8a:a6:41:03:a1:5a:e2:c7:e2:ee:9d:68:9e: 9f:6b:f4:37:92:20:a4:0e:8f:f5:a7:bf:26:0e:54: 48:99:5c:a2:8b:d5:43:1a:ad:9c:29:e9:b1:7a:a0: 13:d5:2a:40:03:22:ca:6d:4d:d5:9e:65:7d:13:d7: 37:46:a5:61:94:eb:03:48:1f:97:da:18:29:c5:51: bd:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:F6:A2:D3:B6:0A:22:33:04:13:37:58:B3:61:4D:C7:A5:28:2B:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8f3a5621-f275-3db6-8614-0c1d46fe8365.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.84.238.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:de:7a:73:80:20:31:a1:8e:a0:52:b2:a9:94:cd:ce:a5:87: 13:5e:2e:ea:2b:39:8a:c6:1c:74:16:04:2c:c6:7c:c9:19:17: 34:e6:c2:37:48:62:78:36:b9:53:30:a7:53:59:d3:f1:0d:e4: 22:34:67:b9:28:23:69:21:6f:94:c6:f3:8e:d1:b3:96:36:e7: 3c:98:29:04:e0:1b:dd:9c:ea:30:ac:4f:bc:cc:f5:0f:e3:4d: 23:7c:76:11:63:ee:2b:75:bf:dd:24:5a:0b:19:7e:d1:b2:f5: 12:98:bc:cb:70:25:61:3c:db:52:67:0d:bf:31:5e:83:85:0a: b8:93:25:3d:53:fa:bb:af:2d:ce:92:c0:fe:c4:65:9f:3d:cd: 57:38:d1:e9:97:fa:b2:49:8b:a0:db:30:a7:53:83:5a:4d:b2: e3:49:b7:e6:ab:b2:47:6e:a8:07:03:41:b3:87:38:65:ed:81: bf:56:02:7f:76:a3:cb:dd:44:25:af:77:da:5c:47:eb:91:7d: 2e:19:b2:3a:ed:2f:36:6a:30:b4:2e:bd:b9:7b:c9:4f:7f:68: f6:2d:0b:b6:63:35:b7:60:20:32:21:72:dd:43:09:90:2b:a4: c5:99:88:96:af:e1:26:77:11:70:a3:a5:1c:18:0a:a7:27:98: 36:6b:b6:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWsidtGRGfwe5a2BwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MDQyNjEzMDAzNVoXDTI0MDcyNTEzMDAzNVowLzEtMCsGA1UEAxMk YjY4MTA3YzQtYmM2Yi00NmY1LTk2NzYtYTA3NmZjOTlhMTZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwywiWxRF4bgeF9lOxevGapZqheDYsLloNx0k XbgkZND7oSKnTGbjTgC4D7s4PO6wKm+0EhId+0OX3UoTNMnr8pgovz5Pm3i3IYAe dDBrAEjoQSdqbfV0Moh5DzGqk1H+/Ug6ZGX6N8GkYt5AujmEftUmLNpiFNeC+nY0 yQqVoFtwHNgLKpWqSpv5ub0SDiv4VbEvVTu07eZUcYZ36asYGXSXsyzUTFjXnsnf o5ENY0Up0EaAMYqmQQOhWuLH4u6daJ6fa/Q3kiCkDo/1p78mDlRImVyii9VDGq2c KemxeqAT1SpAAyLKbU3VnmV9E9c3RqVhlOsDSB+X2hgpxVG9hwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKH2otO2CiIzBBM3WLNhTcelKCuHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGYzYTU2MjEtZjI3NS0z ZGI2LTg2MTQtMGMxZDQ2ZmU4MzY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRFTuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABLeenOAIDGhjqBSsqmUzc6lhxNeLuorOYrGHHQWBCzGfMkZFzTmwjdI Yng2uVMwp1NZ0/EN5CI0Z7koI2khb5TG847Rs5Y25zyYKQTgG92c6jCsT7zM9Q/j TSN8dhFj7it1v90kWgsZftGy9RKYvMtwJWE821JnDb8xXoOFCriTJT1T+ruvLc6S wP7EZZ89zVc40emX+rJJi6DbMKdTg1pNsuNJt+arskduqAcDQbOHOGXtgb9WAn92 o8vdRCWvd9pcR+uRfS4ZsjrtLzZqMLQuvbl7yU9/aPYtC7ZjNbdgIDIhct1DCZAr pMWZiJav4SZ3EXCjpRwYCqcnmDZrtm8= -----END CERTIFICATE-----Generated at Sat Jun 1 16:17:05 2024 by rpki-client on console-ams.rpki-client.org