$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/221c88f6-6e0e-35d1-9370-3bdfc734046a.roa File: 221c88f6-6e0e-35d1-9370-3bdfc734046a.roa (raw, json) Hash identifier: KCrLDmxt3cEQoafFLwR/8w81VTmZ2RjQlCZ/QjJcEzI= Subject key identifier: 5F:7D:06:DD:C0:59:FD:38:83:54:94:B5:75:89:60:F6:B0:D4:B8:42 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858451FAC3EDC97762778D21B8D80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/221c88f6-6e0e-35d1-9370-3bdfc734046a.roa Signing time: Thu 07 Mar 2024 02:00:25 +0000 ROA not before: Thu 07 Mar 2024 02:00:25 +0000 ROA not after: Wed 05 Jun 2024 01:00:25 +0000 asID: 33657 IP address blocks: 68.84.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:1f:ac:3e:dc:97:76:27:78:d2:1b:8d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 7 02:00:25 2024 GMT Not After : Jun 5 01:00:25 2024 GMT Subject: CN=44b6f2ed-de77-44fa-ae01-323a3799be26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:c1:f9:2d:21:9d:ad:27:29:3f:a1:40:a7:31: 08:92:b4:7d:82:98:b1:24:bc:09:28:4c:ad:38:fd: bc:ad:07:32:6c:c4:26:42:fe:ef:87:d4:04:ca:31: be:92:35:9c:5a:cf:39:17:51:05:a7:66:0e:a5:d2: cd:dd:63:31:c7:33:70:29:6a:d8:87:52:a0:f5:17: 3d:69:36:fd:74:70:f0:9d:f6:11:e7:bd:0c:67:01: 79:3e:6f:2b:d0:0d:49:0f:61:4a:68:cf:0d:24:6f: d9:72:b6:70:c6:a1:86:ea:14:8e:f8:b3:93:ce:81: c3:21:41:08:b6:91:96:53:69:7f:c4:c3:53:1a:0d: e1:57:f0:68:53:50:90:e1:82:00:a9:39:f8:0e:c0: 53:c5:18:a6:7c:ab:87:6a:fd:8a:27:ba:c9:6d:94: a6:91:ab:c5:18:c5:64:f7:a2:ba:80:16:6e:df:6c: 89:03:52:41:f6:4f:e6:a8:aa:db:d2:16:c4:c0:7d: de:33:92:c3:98:30:cb:47:1d:65:32:31:59:9c:fd: c9:0d:d7:8e:9a:27:05:09:84:36:78:04:e1:ff:46: 26:6a:70:16:31:c9:a5:ee:92:8c:18:5e:c9:f2:f9: 44:48:9c:ef:66:7c:59:36:8f:71:10:f3:9d:fe:8a: 23:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:7D:06:DD:C0:59:FD:38:83:54:94:B5:75:89:60:F6:B0:D4:B8:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/221c88f6-6e0e-35d1-9370-3bdfc734046a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.84.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:8a:ca:13:72:73:ac:8c:0e:5c:07:4c:29:22:40:1d:b9:db: aa:57:28:ca:3c:45:11:20:c7:49:8d:06:e2:eb:f8:ff:35:be: 97:9b:df:e3:02:48:c9:77:e6:65:ec:cc:da:1f:c8:7f:47:65: 74:0a:bd:d6:df:f3:72:95:89:c7:4f:45:bd:d3:8a:06:74:42: b7:79:8b:e1:88:3d:5d:75:b6:9b:fc:2e:27:7e:b9:98:93:21: 8a:3f:cc:fd:f3:c2:09:cb:4d:34:4b:ab:e8:ff:4c:41:d8:8e: 9b:7e:88:97:f9:40:ee:4c:80:e5:8c:56:61:c2:92:13:da:54: a7:5f:71:d3:48:50:fa:82:65:fc:40:a0:df:10:8a:ac:f6:3b: d6:4e:62:3c:38:9c:de:6e:11:e0:a7:dd:64:2d:67:89:b5:73: 56:d6:b5:6e:e2:15:33:af:e4:aa:76:1d:03:8f:b6:35:a4:e9: 6f:38:98:17:33:24:47:4a:b3:ab:6f:05:4f:61:17:d9:21:3a: d7:bf:96:03:4f:b4:3b:a4:1e:12:36:fb:a6:ff:52:89:0d:82: b5:51:54:5b:d6:43:b6:0f:28:2e:34:c1:8a:1d:da:63:8c:56: f1:de:81:35:22:0b:d6:4c:db:bf:e0:50:9d:e7:0c:3a:5c:ec: de:55:7b:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUfrD7cl3YneNIbjYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MDMwNzAyMDAyNVoXDTI0MDYwNTAxMDAyNVowLzEtMCsGA1UEAxMk NDRiNmYyZWQtZGU3Ny00NGZhLWFlMDEtMzIzYTM3OTliZTI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhsH5LSGdrScpP6FApzEIkrR9gpixJLwJKEyt OP28rQcybMQmQv7vh9QEyjG+kjWcWs85F1EFp2YOpdLN3WMxxzNwKWrYh1Kg9Rc9 aTb9dHDwnfYR570MZwF5Pm8r0A1JD2FKaM8NJG/ZcrZwxqGG6hSO+LOTzoHDIUEI tpGWU2l/xMNTGg3hV/BoU1CQ4YIAqTn4DsBTxRimfKuHav2KJ7rJbZSmkavFGMVk 96K6gBZu32yJA1JB9k/mqKrb0hbEwH3eM5LDmDDLRx1lMjFZnP3JDdeOmicFCYQ2 eATh/0YmanAWMcml7pKMGF7J8vlESJzvZnxZNo9xEPOd/oojTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF99Bt3AWf04g1SUtXWJYPaw1LhCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjIxYzg4ZjYtNmUwZS0z NWQxLTkzNzAtM2JkZmM3MzQwNDZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERFSAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJGKyhNyc6yMDlwHTCkiQB2526pXKMo8RREgx0mNBuLr+P81vpeb3+MC SMl35mXszNofyH9HZXQKvdbf83KVicdPRb3TigZ0Qrd5i+GIPV11tpv8Lid+uZiT IYo/zP3zwgnLTTRLq+j/TEHYjpt+iJf5QO5MgOWMVmHCkhPaVKdfcdNIUPqCZfxA oN8Qiqz2O9ZOYjw4nN5uEeCn3WQtZ4m1c1bWtW7iFTOv5Kp2HQOPtjWk6W84mBcz JEdKs6tvBU9hF9khOte/lgNPtDukHhI2+6b/UokNgrVRVFvWQ7YPKC40wYod2mOM VvHegTUiC9ZM27/gUJ3nDDpc7N5Veyo= -----END CERTIFICATE-----Generated at Sun May 5 02:14:44 2024 by rpki-client on console-ams.rpki-client.org