$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/321d74cf-cbe4-3233-b790-c21d1a17ed55.roa File: 321d74cf-cbe4-3233-b790-c21d1a17ed55.roa (raw, json) Hash identifier: Wg9ggEjFmD6ETWzixoGZ6eB23B0xLeQLhytNs0t1VOA= Subject key identifier: DB:09:BD:44:7E:F1:52:34:98:EB:17:AB:E0:7B:18:72:7E:FC:4B:DD Certificate issuer: /CN=a68ef886-c437-4b77-8d56-b917b6150d9a Certificate serial: 010D0C9F432858451480348E63DCE404F4765280 Authority key identifier: 7C:09:E8:AF:EE:91:79:F5:08:2C:B7:C8:0A:3C:38:63:D4:E2:1C:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/321d74cf-cbe4-3233-b790-c21d1a17ed55.roa Signing time: Sun 03 Mar 2024 02:00:27 +0000 ROA not before: Sun 03 Mar 2024 02:00:27 +0000 ROA not after: Sat 01 Jun 2024 01:00:27 +0000 asID: 91 IP address blocks: 192.12.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/a68ef886-c437-4b77-8d56-b917b6150d9a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/a68ef886-c437-4b77-8d56-b917b6150d9a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 16 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:14:80:34:8e:63:dc:e4:04:f4:76:52:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a68ef886-c437-4b77-8d56-b917b6150d9a Validity Not Before: Mar 3 02:00:27 2024 GMT Not After : Jun 1 01:00:27 2024 GMT Subject: CN=5067a1aa-0710-4cac-b97c-f71756b88762 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:3f:e4:9e:a6:1f:9a:d5:24:96:78:d0:7e:1e: 25:96:02:dd:c9:87:15:0b:16:47:ce:09:0a:10:87: e4:11:d8:76:09:0a:72:3c:ff:7b:6e:d2:ab:5e:66: 97:b9:77:b6:74:3a:73:d0:48:e1:5a:79:e6:b8:1f: 3f:83:ff:51:30:32:17:b8:ac:ae:a8:e4:ca:b3:b2: b8:8c:01:4b:4e:f1:69:6c:14:3b:94:b8:57:4b:da: 9c:6e:e8:21:89:15:c8:ed:3d:9d:60:ba:60:55:14: a6:15:18:75:25:1e:68:c4:2e:d1:b6:0b:c8:01:75: 20:50:68:55:ee:88:cc:e4:39:14:60:62:48:2c:0f: 2e:91:fa:6c:1a:f8:95:c6:4a:7a:58:9b:d8:5d:ef: 47:4b:ce:e9:74:e5:ae:02:5e:f6:59:ae:44:f9:d9: 9a:2e:2a:dd:31:6e:de:33:ae:e7:07:ac:30:13:9b: af:0f:82:48:7b:ce:69:ed:ac:37:d1:91:96:f5:35: 3a:17:e2:ac:02:b4:70:d8:10:b5:26:1b:f5:e6:71: a5:63:49:fe:50:89:4f:d9:71:ff:ca:99:80:42:d5: 0e:ea:17:90:a6:0b:71:20:ec:07:74:0a:f9:df:e9: 82:5e:3d:50:f9:25:2f:32:c3:a5:4b:6c:8d:2b:e2: b0:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:09:BD:44:7E:F1:52:34:98:EB:17:AB:E0:7B:18:72:7E:FC:4B:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/321d74cf-cbe4-3233-b790-c21d1a17ed55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/a68ef886-c437-4b77-8d56-b917b6150d9a.crl X509v3 Authority Key Identifier: keyid:7C:09:E8:AF:EE:91:79:F5:08:2C:B7:C8:0A:3C:38:63:D4:E2:1C:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a.cer sbgp-ipAddrBlock: critical IPv4: 192.12.91.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:a0:69:18:2b:e8:ca:0a:9c:7c:15:2d:5a:af:3e:a1:89:bb: 57:6f:69:49:2c:9c:a2:02:af:48:30:3f:2c:ec:e8:c6:ee:f5: bf:4f:19:e4:86:a3:e6:3e:1a:f2:06:25:a1:5d:15:f1:03:d7: 06:e7:88:6e:6a:0d:da:41:2b:9c:0a:b1:34:73:4d:ba:2f:49: ba:02:c1:32:ad:9d:54:2b:35:02:01:9d:c2:24:50:33:9a:46: 4c:57:78:95:a6:b5:9d:9f:88:a5:67:a7:be:19:51:98:ff:db: ca:00:dc:b7:ab:97:37:5a:66:be:10:0b:36:e8:ba:ce:60:97: ed:5b:af:c2:46:13:68:bd:26:36:8a:90:47:2d:71:25:0a:8c: 6c:98:f2:38:ac:54:41:bd:b7:4c:2d:ff:d5:a9:6d:ca:51:37: d5:0f:1c:cb:7a:64:3d:d7:b4:d1:65:77:ee:bc:03:84:72:33: 76:cf:d8:7a:4e:03:41:39:4d:4b:7f:22:5f:07:42:69:34:c9: 5e:4d:9c:24:dc:8d:50:f0:67:24:84:2a:e5:ce:6d:aa:d0:57: 73:37:63:6c:40:af:90:87:b1:37:fd:d0:4a:c9:f3:09:b4:0f: d4:ef:5f:40:e4:a8:66:ce:6c:05:02:98:27:c8:39:32:43:eb: 73:cf:39:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUUgDSOY9zkBPR2UoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTY4ZWY4ODYtYzQzNy00Yjc3LThkNTYtYjkxN2I2MTUw ZDlhMB4XDTI0MDMwMzAyMDAyN1oXDTI0MDYwMTAxMDAyN1owLzEtMCsGA1UEAxMk NTA2N2ExYWEtMDcxMC00Y2FjLWI5N2MtZjcxNzU2Yjg4NzYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtT/knqYfmtUklnjQfh4llgLdyYcVCxZHzgkK EIfkEdh2CQpyPP97btKrXmaXuXe2dDpz0EjhWnnmuB8/g/9RMDIXuKyuqOTKs7K4 jAFLTvFpbBQ7lLhXS9qcbughiRXI7T2dYLpgVRSmFRh1JR5oxC7RtgvIAXUgUGhV 7ojM5DkUYGJILA8ukfpsGviVxkp6WJvYXe9HS87pdOWuAl72Wa5E+dmaLirdMW7e M67nB6wwE5uvD4JIe85p7aw30ZGW9TU6F+KsArRw2BC1Jhv15nGlY0n+UIlP2XH/ ypmAQtUO6heQpgtxIOwHdAr53+mCXj1Q+SUvMsOlS2yNK+KwDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNsJvUR+8VI0mOsXq+B7GHJ+/EvdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNjhl Zjg4Ni1jNDM3LTRiNzctOGQ1Ni1iOTE3YjYxNTBkOWEvMzIxZDc0Y2YtY2JlNC0z MjMzLWI3OTAtYzIxZDFhMTdlZDU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYTY4ZWY4ODYtYzQzNy00Yjc3LThk NTYtYjkxN2I2MTUwZDlhL2E2OGVmODg2LWM0MzctNGI3Ny04ZDU2LWI5MTdiNjE1 MGQ5YS5jcmwwHwYDVR0jBBgwFoAUfAnor+6RefUILLfICjw4Y9TiHA4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hNjhlZjg4Ni1jNDM3LTRiNzctOGQ1Ni1iOTE3 YjYxNTBkOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwAxbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGKgaRgr6MoKnHwVLVqvPqGJu1dvaUksnKICr0gwPyzs6Mbu9b9PGeSG o+Y+GvIGJaFdFfED1wbniG5qDdpBK5wKsTRzTbovSboCwTKtnVQrNQIBncIkUDOa RkxXeJWmtZ2fiKVnp74ZUZj/28oA3LerlzdaZr4QCzbous5gl+1br8JGE2i9JjaK kEctcSUKjGyY8jisVEG9t0wt/9WpbcpRN9UPHMt6ZD3XtNFld+68A4RyM3bP2HpO A0E5TUt/Il8HQmk0yV5NnCTcjVDwZySEKuXObarQV3M3Y2xAr5CHsTf90ErJ8wm0 D9TvX0DkqGbObAUCmCfIOTJD63PPOZw= -----END CERTIFICATE-----Generated at Wed May 15 15:09:05 2024 by rpki-client on console-fra.rpki-client.org