$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/24697bbc-0f62-31c7-9116-4443eb7a3506.roa File: 24697bbc-0f62-31c7-9116-4443eb7a3506.roa (raw, json) Hash identifier: bgxJHKU1UmMF/hoih4psOvY46fsIwwXBWMcOjq9niWw= Subject key identifier: 63:2B:FB:1B:EC:F8:34:41:E4:CE:52:A1:F2:9A:54:FB:62:18:4A:95 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858451FAC775CE1C4E124E2486390 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/24697bbc-0f62-31c7-9116-4443eb7a3506.roa Signing time: Thu 07 Mar 2024 02:00:25 +0000 ROA not before: Thu 07 Mar 2024 02:00:25 +0000 ROA not after: Wed 05 Jun 2024 01:00:25 +0000 asID: 22909 IP address blocks: 68.34.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:1f:ac:77:5c:e1:c4:e1:24:e2:48:63:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 7 02:00:25 2024 GMT Not After : Jun 5 01:00:25 2024 GMT Subject: CN=b678c547-33ba-4cea-afa9-3e102ec08d7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:7d:3e:1d:23:cc:c4:3a:fa:c9:e7:b2:29:d9: 1a:d1:b7:90:52:6e:7e:e3:68:58:be:aa:ce:3e:81: aa:69:d0:ea:9f:1e:00:ba:d4:33:3b:bc:b9:03:04: 3c:a8:cb:9b:f7:46:6c:f4:00:d9:96:13:00:5c:25: 95:00:93:11:66:dd:1e:2d:51:2c:16:41:81:91:db: 07:12:e3:d2:34:a6:1b:f0:d0:db:50:3f:a9:6d:f1: 52:d9:e3:69:67:51:1e:8b:71:81:f9:e3:0f:3b:75: 5f:f3:7a:fd:01:fe:07:01:57:f7:71:79:ae:2a:f2: e2:e1:29:f5:58:2e:52:54:16:63:96:dd:87:e3:5b: 05:a6:03:7c:8d:e1:3d:3d:2f:af:2f:c3:3d:da:d1: b7:7a:a0:d4:58:8e:39:1a:10:25:e6:bd:16:a0:51: 0c:d3:6d:50:f0:e0:e2:b0:03:52:de:71:7b:22:88: c2:28:aa:23:07:d2:ab:9f:9d:57:2c:09:d8:81:63: 1b:97:61:c2:8f:a9:e2:a0:8d:4f:42:82:b6:30:2a: bc:09:5b:72:d1:b0:b1:b3:30:04:e4:47:e4:6c:d9: b8:75:6a:26:13:11:a6:cb:b8:e9:a3:cb:38:19:51: 65:38:2a:9c:af:86:1a:81:9f:a5:85:05:2b:f4:22: d1:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:2B:FB:1B:EC:F8:34:41:E4:CE:52:A1:F2:9A:54:FB:62:18:4A:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/24697bbc-0f62-31c7-9116-4443eb7a3506.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.34.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:71:0b:6c:7f:39:01:d7:4e:56:8d:27:fd:f7:76:f5:98:18: e9:1a:33:aa:20:76:52:31:a7:27:99:af:a5:a3:b3:e3:60:fe: f9:33:22:5d:53:03:8c:31:07:87:33:7c:78:07:0b:60:bd:3d: 35:5f:af:e5:41:6a:cd:02:59:38:c0:f1:28:b0:8d:75:ae:1f: 5c:a8:d9:4a:73:3e:a4:4e:f4:a0:63:d3:92:bd:8b:6a:fe:55: 77:cd:b6:f0:08:2d:82:52:d6:7f:7e:cc:d8:c5:59:a8:21:54: f2:1b:f5:2d:f8:5f:c2:92:63:bb:40:32:48:11:53:c3:5e:b5: cb:70:14:2b:90:d0:dd:5c:39:57:76:1a:e1:eb:2e:1e:20:d0: 43:2a:af:67:c9:dd:d0:67:78:be:43:ac:1c:39:0e:c8:0b:90: db:2a:2d:f2:59:d8:36:ee:99:25:c7:38:37:42:2b:4f:ec:34: e4:f3:7c:09:78:75:7b:d5:86:73:8e:80:c5:ad:33:80:08:ed: d2:09:23:77:a2:5f:95:ed:fe:26:74:6a:d2:d9:bb:fd:e2:72: 1d:cb:60:3c:00:51:d0:99:43:60:fe:0a:0d:d9:16:05:b2:81: 5d:5e:66:d0:0a:2e:ad:17:d2:09:30:84:0a:68:2b:ee:ab:c5: 37:6d:df:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUfrHdc4cThJOJIY5AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MDMwNzAyMDAyNVoXDTI0MDYwNTAxMDAyNVowLzEtMCsGA1UEAxMk YjY3OGM1NDctMzNiYS00Y2VhLWFmYTktM2UxMDJlYzA4ZDdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhX0+HSPMxDr6yeeyKdka0beQUm5+42hYvqrO PoGqadDqnx4AutQzO7y5AwQ8qMub90Zs9ADZlhMAXCWVAJMRZt0eLVEsFkGBkdsH EuPSNKYb8NDbUD+pbfFS2eNpZ1Eei3GB+eMPO3Vf83r9Af4HAVf3cXmuKvLi4Sn1 WC5SVBZjlt2H41sFpgN8jeE9PS+vL8M92tG3eqDUWI45GhAl5r0WoFEM021Q8ODi sANS3nF7IojCKKojB9Krn51XLAnYgWMbl2HCj6nioI1PQoK2MCq8CVty0bCxszAE 5EfkbNm4dWomExGmy7jpo8s4GVFlOCqcr4YagZ+lhQUr9CLRQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGMr+xvs+DRB5M5SofKaVPtiGEqVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjQ2OTdiYmMtMGY2Mi0z MWM3LTkxMTYtNDQ0M2ViN2EzNTA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARCLQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHZxC2x/OQHXTlaNJ/33dvWYGOkaM6ogdlIxpyeZr6Wjs+Ng/vkzIl1T A4wxB4czfHgHC2C9PTVfr+VBas0CWTjA8SiwjXWuH1yo2UpzPqRO9KBj05K9i2r+ VXfNtvAILYJS1n9+zNjFWaghVPIb9S34X8KSY7tAMkgRU8NetctwFCuQ0N1cOVd2 GuHrLh4g0EMqr2fJ3dBneL5DrBw5DsgLkNsqLfJZ2DbumSXHODdCK0/sNOTzfAl4 dXvVhnOOgMWtM4AI7dIJI3eiX5Xt/iZ0atLZu/3ich3LYDwAUdCZQ2D+Cg3ZFgWy gV1eZtAKLq0X0gkwhApoK+6rxTdt3zA= -----END CERTIFICATE-----Generated at Sat May 4 14:46:01 2024 by rpki-client on console-fra.rpki-client.org