$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/95cbce52-a0f0-382c-8b81-d23c70ca3529.roa File: 95cbce52-a0f0-382c-8b81-d23c70ca3529.roa (raw, json) Hash identifier: EHn5ZSABLtn2kzT3WH1wrb8YCROevn/DUfH5LMS+5kc= Subject key identifier: B3:E1:37:15:F4:80:DC:90:B7:30:C8:08:25:69:42:3D:C8:12:0F:16 Certificate issuer: /CN=b5c2fe78-a447-40d9-8e11-9c9e6f81d082 Certificate serial: 010D0C9F43285845B3836B3FD2D0EDF08E0C03C0 Authority key identifier: 60:43:F6:F3:6A:ED:68:82:B1:F2:00:6E:DA:49:2B:6B:0F:63:55:9C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/95cbce52-a0f0-382c-8b81-d23c70ca3529.roa Signing time: Mon 29 Apr 2024 01:00:25 +0000 ROA not before: Mon 29 Apr 2024 01:00:25 +0000 ROA not after: Sun 28 Jul 2024 01:00:25 +0000 asID: 395464 IP address blocks: 192.68.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:b3:83:6b:3f:d2:d0:ed:f0:8e:0c:03:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5c2fe78-a447-40d9-8e11-9c9e6f81d082 Validity Not Before: Apr 29 01:00:25 2024 GMT Not After : Jul 28 01:00:25 2024 GMT Subject: CN=b8815bdd-9127-4be5-9cd1-6262332d521a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:64:69:d2:43:2c:b2:de:b2:10:22:06:26:e0: 46:59:15:d0:af:bf:11:ce:af:31:37:38:cd:6c:e9: 6d:cf:c6:44:32:9f:02:b9:93:c8:23:6f:ee:d3:50: 20:5d:0e:60:02:d1:c7:85:6c:f7:77:3f:e0:32:b6: 95:19:ba:aa:f8:77:1e:52:6d:ad:14:db:46:da:bc: 19:4d:28:0a:c3:6f:d7:72:5f:f1:65:9a:08:9a:68: ae:92:9b:72:6b:ee:e6:20:e0:93:98:e2:fe:1d:c0: b3:7b:57:86:3a:73:21:49:ca:91:21:dd:7e:30:01: 6a:cb:a3:ac:5b:1b:ba:cf:3a:00:2c:84:7a:4a:e0: 18:87:88:34:00:bd:8c:3d:2f:5c:ba:5d:d3:47:e5: 9e:20:a3:0e:7c:f1:6a:26:3b:c3:26:01:82:c5:93: 74:33:b8:f2:65:ee:70:24:6f:a6:ab:a1:5e:3a:40: 27:49:30:b1:7c:a0:11:8b:59:c1:7d:bc:bb:18:ec: 4f:5a:3b:b3:4d:6f:d8:e1:d8:e7:f6:03:e8:aa:57: 45:c0:bc:f5:9d:ed:73:9f:1d:c8:3b:8a:8f:0f:e6: bf:0c:ec:78:c4:4a:70:57:14:67:97:a4:3c:82:22: de:98:a7:05:c0:e8:a1:e1:27:14:e5:fc:49:bf:f6: 09:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:E1:37:15:F4:80:DC:90:B7:30:C8:08:25:69:42:3D:C8:12:0F:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/95cbce52-a0f0-382c-8b81-d23c70ca3529.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.crl X509v3 Authority Key Identifier: keyid:60:43:F6:F3:6A:ED:68:82:B1:F2:00:6E:DA:49:2B:6B:0F:63:55:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.cer sbgp-ipAddrBlock: critical IPv4: 192.68.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:be:70:63:89:81:9b:4a:cb:36:b1:03:5f:76:67:f2:29:b5: 9f:a7:60:48:4f:b6:27:df:55:87:43:74:7c:9c:c4:4c:ae:b6: 4d:3c:d0:94:14:43:81:3e:7b:a7:30:74:57:dd:f1:9d:9c:bc: 72:7b:67:ad:b0:42:a7:21:b8:3d:fe:87:7b:31:24:3b:8e:af: fc:9b:ba:9d:c0:7f:f3:6c:95:0d:91:35:10:d0:84:f1:d4:dc: d5:c0:86:d8:16:7b:c3:82:87:77:e9:69:da:86:55:68:35:75: 22:17:ab:01:86:02:95:f7:a9:32:0f:4d:12:34:37:83:53:72: e1:e0:c6:16:10:42:96:de:da:87:48:50:5e:0a:e1:d0:a9:c9: 47:0e:ec:be:4e:96:dc:cc:7f:1d:83:73:b4:16:3a:ed:2c:90: 10:8c:eb:e8:1a:74:a7:bd:cd:9d:70:fc:09:9a:8c:59:96:f4: c4:34:c7:b1:81:8d:be:a9:cd:95:6e:f5:0e:02:a3:94:26:a5: 37:b8:20:7c:e2:d1:b6:2e:e3:3b:52:03:65:85:0e:4e:31:b4: ad:c9:09:46:66:d1:24:28:fd:6a:32:88:6e:df:9c:db:af:3f: f6:21:36:f8:bc:7f:60:e3:7f:48:94:09:d2:43:6e:b8:b2:9d: ce:35:3d:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWzg2s/0tDt8I4MA8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVjMmZlNzgtYTQ0Ny00MGQ5LThlMTEtOWM5ZTZmODFk MDgyMB4XDTI0MDQyOTAxMDAyNVoXDTI0MDcyODAxMDAyNVowLzEtMCsGA1UEAxMk Yjg4MTViZGQtOTEyNy00YmU1LTljZDEtNjI2MjMzMmQ1MjFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2Rp0kMsst6yECIGJuBGWRXQr78Rzq8xNzjN bOltz8ZEMp8CuZPII2/u01AgXQ5gAtHHhWz3dz/gMraVGbqq+HceUm2tFNtG2rwZ TSgKw2/Xcl/xZZoImmiukptya+7mIOCTmOL+HcCze1eGOnMhScqRId1+MAFqy6Os Wxu6zzoALIR6SuAYh4g0AL2MPS9cul3TR+WeIKMOfPFqJjvDJgGCxZN0M7jyZe5w JG+mq6FeOkAnSTCxfKARi1nBfby7GOxPWjuzTW/Y4djn9gPoqldFwLz1ne1znx3I O4qPD+a/DOx4xEpwVxRnl6Q8giLemKcFwOih4ScU5fxJv/YJUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLPhNxX0gNyQtzDICCVpQj3IEg8WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iNWMy ZmU3OC1hNDQ3LTQwZDktOGUxMS05YzllNmY4MWQwODIvOTVjYmNlNTItYTBmMC0z ODJjLThiODEtZDIzYzcwY2EzNTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYjVjMmZlNzgtYTQ0Ny00MGQ5LThl MTEtOWM5ZTZmODFkMDgyL2I1YzJmZTc4LWE0NDctNDBkOS04ZTExLTljOWU2Zjgx ZDA4Mi5jcmwwHwYDVR0jBBgwFoAUYEP282rtaIKx8gBu2kkraw9jVZwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iNWMyZmU3OC1hNDQ3LTQwZDktOGUxMS05Yzll NmY4MWQwODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwERwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAO+cGOJgZtKyzaxA192Z/IptZ+nYEhPtiffVYdDdHycxEyutk080JQU Q4E+e6cwdFfd8Z2cvHJ7Z62wQqchuD3+h3sxJDuOr/ybup3Af/NslQ2RNRDQhPHU 3NXAhtgWe8OCh3fpadqGVWg1dSIXqwGGApX3qTIPTRI0N4NTcuHgxhYQQpbe2odI UF4K4dCpyUcO7L5OltzMfx2Dc7QWOu0skBCM6+gadKe9zZ1w/AmajFmW9MQ0x7GB jb6pzZVu9Q4Co5QmpTe4IHzi0bYu4ztSA2WFDk4xtK3JCUZm0SQo/WoyiG7fnNuv P/YhNvi8f2Djf0iUCdJDbriync41Pds= -----END CERTIFICATE-----Generated at Sat May 18 13:41:08 2024 by rpki-client on console-ams.rpki-client.org