$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2a1b9fe6-5425-352f-b641-9cb2d1a846aa.roa File: 2a1b9fe6-5425-352f-b641-9cb2d1a846aa.roa (raw, json) Hash identifier: r5CBk1+tqYb/DcRpr43pkZSKrjLPxrkE4iG11uizF6Y= Subject key identifier: A8:30:88:B0:2C:32:50:FD:B3:74:B0:D9:88:7D:64:65:7C:A7:BD:61 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858451FAAF4B0AFF47C0244452F20 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2a1b9fe6-5425-352f-b641-9cb2d1a846aa.roa Signing time: Thu 07 Mar 2024 02:00:25 +0000 ROA not before: Thu 07 Mar 2024 02:00:25 +0000 ROA not after: Wed 05 Jun 2024 01:00:25 +0000 asID: 22909 IP address blocks: 68.34.144.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:1f:aa:f4:b0:af:f4:7c:02:44:45:2f:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 7 02:00:25 2024 GMT Not After : Jun 5 01:00:25 2024 GMT Subject: CN=0a42289c-0c0c-4881-b5f8-e328df7dfeec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:ef:50:d6:12:79:23:fa:38:d4:3a:f8:4e:e1: 7f:f3:dd:ea:67:d7:5f:5a:91:38:c5:ac:e5:e4:3f: c3:e0:04:5d:99:76:69:f1:50:a0:84:da:50:74:fa: ab:7c:cb:8e:dd:d7:8d:41:5e:e2:1f:4f:ee:4e:17: b5:8f:ca:5e:db:a4:d0:64:76:01:4d:19:d0:5f:e6: e5:6a:2e:07:09:90:63:3c:c3:20:18:04:97:b9:9d: 62:5c:6c:a7:6d:3f:b0:ef:44:d7:41:21:97:ad:5d: 10:05:b9:1e:f8:08:0b:7b:d1:df:d3:54:7f:cd:92: 34:08:5d:1c:df:8c:c3:df:2a:11:b6:03:9e:88:c7: 8c:1c:5d:94:22:ad:35:de:be:f9:df:93:87:7e:42: 8c:91:d9:a8:88:05:80:31:67:ae:c0:f8:cf:83:a6: 34:5d:7f:d2:87:85:71:b1:b1:10:48:49:0e:c3:16: 1a:24:cb:d5:b0:5f:a0:e8:3c:8d:45:13:0b:7d:89: 81:5a:70:d9:e4:56:78:60:56:bc:d9:d7:4d:3f:eb: c6:d3:9a:43:de:c1:8a:08:23:c9:f7:7b:cb:3c:b7: 65:d8:dc:35:02:1c:6b:fe:d7:33:59:e8:a3:31:9a: 10:89:31:a4:60:d2:4b:af:2c:35:09:1f:8a:92:b4: 71:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:30:88:B0:2C:32:50:FD:B3:74:B0:D9:88:7D:64:65:7C:A7:BD:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2a1b9fe6-5425-352f-b641-9cb2d1a846aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.34.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:fa:92:1b:59:2a:01:e6:95:6e:0e:30:7b:7d:7c:c4:a0:57: b9:31:76:76:1a:be:81:d3:38:1e:9d:b8:55:47:7e:a4:7a:54: 19:b2:93:f9:b9:19:50:79:56:e7:b2:c1:45:25:c2:83:d2:5e: eb:6b:ea:32:51:f3:65:48:ee:79:84:a1:d9:79:4f:7d:49:15: 6d:c5:f0:bd:60:79:bb:25:2d:66:26:8e:a8:3d:cd:40:9e:83: e0:94:11:e4:28:90:d2:75:0c:ca:16:c2:9e:fb:13:e1:84:45: 26:3c:e9:b1:93:21:08:68:f4:1c:06:cc:5d:8e:fb:6f:47:86: b6:27:3a:6d:e1:70:6c:08:ed:a8:91:b1:79:d2:4a:6b:6e:f1: 6f:14:86:be:b4:dd:5c:8c:f9:45:8c:e2:56:b5:4d:90:cb:6c: 85:7d:84:d7:68:a0:ce:90:d9:3e:7a:59:e3:a1:18:70:24:8a: be:9b:3f:3c:b8:59:57:ed:c3:72:f1:18:e7:92:d9:45:1d:28: 3c:91:cc:eb:15:c3:e8:08:6d:56:f0:ed:d5:ad:86:c4:14:71: 21:30:5b:18:82:57:45:40:6a:10:cd:dd:78:4c:fb:4e:d7:0d: be:99:97:67:ba:14:6c:c2:62:02:6b:a7:e0:aa:e1:89:1a:31: 6c:9e:9e:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUfqvSwr/R8AkRFLyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MDMwNzAyMDAyNVoXDTI0MDYwNTAxMDAyNVowLzEtMCsGA1UEAxMk MGE0MjI4OWMtMGMwYy00ODgxLWI1ZjgtZTMyOGRmN2RmZWVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhO9Q1hJ5I/o41Dr4TuF/893qZ9dfWpE4xazl 5D/D4ARdmXZp8VCghNpQdPqrfMuO3deNQV7iH0/uThe1j8pe26TQZHYBTRnQX+bl ai4HCZBjPMMgGASXuZ1iXGynbT+w70TXQSGXrV0QBbke+AgLe9Hf01R/zZI0CF0c 34zD3yoRtgOeiMeMHF2UIq013r7535OHfkKMkdmoiAWAMWeuwPjPg6Y0XX/Sh4Vx sbEQSEkOwxYaJMvVsF+g6DyNRRMLfYmBWnDZ5FZ4YFa82ddNP+vG05pD3sGKCCPJ 93vLPLdl2Nw1Ahxr/tczWeijMZoQiTGkYNJLryw1CR+KkrRx0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKgwiLAsMlD9s3Sw2Yh9ZGV8p71hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMmExYjlmZTYtNTQyNS0z NTJmLWI2NDEtOWNiMmQxYTg0NmFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRCKQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL/6khtZKgHmlW4OMHt9fMSgV7kxdnYavoHTOB6duFVHfqR6VBmyk/m5 GVB5VueywUUlwoPSXutr6jJR82VI7nmEodl5T31JFW3F8L1gebslLWYmjqg9zUCe g+CUEeQokNJ1DMoWwp77E+GERSY86bGTIQho9BwGzF2O+29HhrYnOm3hcGwI7aiR sXnSSmtu8W8Uhr603VyM+UWM4la1TZDLbIV9hNdooM6Q2T56WeOhGHAkir6bPzy4 WVftw3LxGOeS2UUdKDyRzOsVw+gIbVbw7dWthsQUcSEwWxiCV0VAahDN3XhM+07X Db6Zl2e6FGzCYgJrp+Cq4YkaMWyeniw= -----END CERTIFICATE-----Generated at Sat May 4 14:46:22 2024 by rpki-client on console-fra.rpki-client.org