$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3a23a4e0-d8ef-34dd-8317-39a4ee2e3739.roa File: 3a23a4e0-d8ef-34dd-8317-39a4ee2e3739.roa (raw, json) Hash identifier: RMFUIJdlc5fU32Z0dC3yOsqVhi/WPfQ3rLQjxlV219s= Subject key identifier: 99:97:C2:06:A4:7C:E2:9A:D1:21:B1:74:FD:65:2B:6B:1B:AF:A5:F7 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858451FAC76D191AB1C3114AA5020 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3a23a4e0-d8ef-34dd-8317-39a4ee2e3739.roa Signing time: Thu 07 Mar 2024 02:00:25 +0000 ROA not before: Thu 07 Mar 2024 02:00:25 +0000 ROA not after: Wed 05 Jun 2024 01:00:25 +0000 asID: 22909 IP address blocks: 68.34.164.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:1f:ac:76:d1:91:ab:1c:31:14:aa:50:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 7 02:00:25 2024 GMT Not After : Jun 5 01:00:25 2024 GMT Subject: CN=82e7fa40-728d-417d-8783-32d0d26f9d48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:05:34:5b:28:b5:1e:c3:02:4a:3c:91:b2:bb: 9e:4c:5d:5e:f6:09:f8:d6:6c:c8:37:0a:15:cf:5f: 0d:3c:89:79:7c:e0:ee:6e:46:29:0e:44:a2:c4:65: fb:80:82:b0:e4:19:2b:84:75:0e:5f:28:9f:c1:bc: 90:c2:71:89:d2:9f:b7:8e:1d:88:9f:28:51:73:b6: ca:3a:10:51:f0:02:8d:6c:f7:c4:40:32:e4:73:06: 18:c5:5a:a0:cc:18:b0:2b:04:52:85:3b:0d:77:50: d7:2e:51:ef:03:63:67:6b:94:4c:18:95:19:9a:5c: 20:4b:99:57:43:4b:1c:d3:03:64:d5:b7:f9:a6:4e: 8b:8b:9f:9b:86:bc:04:c1:7d:4d:2f:a8:bf:7e:21: 1c:53:32:b7:45:43:78:5f:a8:03:7b:9c:2a:88:8c: e9:12:e2:1f:28:90:95:d0:29:27:ff:18:36:f7:6d: ef:49:1d:69:2d:b9:41:1a:21:1c:d6:2a:05:f2:ba: 7e:76:e2:8e:52:5a:cf:90:4d:22:7e:33:08:92:12: 85:81:38:2d:44:d7:ba:c2:d0:c7:ae:ee:01:5c:24: e1:3f:5b:4a:07:1b:b3:bf:6e:cf:18:01:0a:f2:74: f2:4d:aa:c5:c2:e5:68:c6:18:18:d3:b1:8c:d0:c4: 4d:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:97:C2:06:A4:7C:E2:9A:D1:21:B1:74:FD:65:2B:6B:1B:AF:A5:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3a23a4e0-d8ef-34dd-8317-39a4ee2e3739.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.34.164.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:13:fd:18:7b:ce:e6:3e:b7:37:eb:91:ca:2b:74:d8:20:88: 0a:58:22:93:67:dd:09:c3:c3:b6:0a:9f:04:94:81:b1:45:50: 50:bd:e5:ff:da:8b:7b:2c:ed:be:69:04:71:30:53:25:16:1e: 5b:98:f0:82:91:c4:3a:2c:cb:cf:04:02:bd:31:8b:bc:8d:bc: ce:cb:3a:63:42:e9:de:a7:a5:a6:f4:fb:83:90:25:d0:21:24: 82:42:18:f7:f7:57:83:06:bd:13:39:ab:ef:ae:4f:dc:a8:14: fc:47:f0:40:3d:9d:ed:f4:3b:02:ac:60:b5:59:48:19:cb:b6: b0:c1:81:ab:9b:08:8d:6c:92:0f:63:df:4e:2c:06:da:34:d5: bf:ec:6d:5a:d2:da:6b:fa:0d:cf:66:a4:92:b2:17:ee:c4:41: ca:02:4b:93:fe:5a:60:74:c9:8c:99:7b:82:fe:8e:6e:d3:a5: 43:b2:13:6d:be:f7:62:03:82:e5:62:8f:ae:20:3a:15:49:db: ad:f9:77:01:f1:a1:6b:81:af:c0:95:88:e3:b3:0b:1b:3b:96: 2c:cc:cd:b6:45:a9:70:e6:74:af:3e:29:88:cc:25:e5:da:cd: 2b:92:89:18:c8:a5:98:fe:ab:d8:04:64:c6:31:3b:1f:9e:c5: 0c:bf:3c:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUfrHbRkascMRSqUCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MDMwNzAyMDAyNVoXDTI0MDYwNTAxMDAyNVowLzEtMCsGA1UEAxMk ODJlN2ZhNDAtNzI4ZC00MTdkLTg3ODMtMzJkMGQyNmY5ZDQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwU0Wyi1HsMCSjyRsrueTF1e9gn41mzINwoV z18NPIl5fODubkYpDkSixGX7gIKw5BkrhHUOXyifwbyQwnGJ0p+3jh2InyhRc7bK OhBR8AKNbPfEQDLkcwYYxVqgzBiwKwRShTsNd1DXLlHvA2Nna5RMGJUZmlwgS5lX Q0sc0wNk1bf5pk6Li5+bhrwEwX1NL6i/fiEcUzK3RUN4X6gDe5wqiIzpEuIfKJCV 0Ckn/xg2923vSR1pLblBGiEc1ioF8rp+duKOUlrPkE0ifjMIkhKFgTgtRNe6wtDH ru4BXCThP1tKBxuzv27PGAEK8nTyTarFwuVoxhgY07GM0MRNAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJmXwgakfOKa0SGxdP1lK2sbr6X3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2EyM2E0ZTAtZDhlZi0z NGRkLTgzMTctMzlhNGVlMmUzNzM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRCKkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACIT/Rh7zuY+tzfrkcordNggiApYIpNn3QnDw7YKnwSUgbFFUFC95f/a i3ss7b5pBHEwUyUWHluY8IKRxDosy88EAr0xi7yNvM7LOmNC6d6npab0+4OQJdAh JIJCGPf3V4MGvRM5q++uT9yoFPxH8EA9ne30OwKsYLVZSBnLtrDBgaubCI1skg9j 304sBto01b/sbVrS2mv6Dc9mpJKyF+7EQcoCS5P+WmB0yYyZe4L+jm7TpUOyE22+ 92IDguVij64gOhVJ2635dwHxoWuBr8CViOOzCxs7lizMzbZFqXDmdK8+KYjMJeXa zSuSiRjIpZj+q9gEZMYxOx+exQy/PJw= -----END CERTIFICATE-----Generated at Sun May 5 01:26:24 2024 by rpki-client on console-fra.rpki-client.org