$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3b0c4ae2-41fa-343e-98c2-4d7547b11f23.roa File: 3b0c4ae2-41fa-343e-98c2-4d7547b11f23.roa (raw, json) Hash identifier: FmQDhb2zHnnTwUgeKKDnIrctiJsCzsBwsZEB4YWqBvI= Subject key identifier: 2B:98:3B:6B:13:E5:B0:8E:BC:A5:77:C2:16:5E:53:21:CA:CB:D9:89 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858451FAAFCFB0691F49D9FFF4F80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3b0c4ae2-41fa-343e-98c2-4d7547b11f23.roa Signing time: Thu 07 Mar 2024 02:00:25 +0000 ROA not before: Thu 07 Mar 2024 02:00:25 +0000 ROA not after: Wed 05 Jun 2024 01:00:25 +0000 asID: 22909 IP address blocks: 68.52.158.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:1f:aa:fc:fb:06:91:f4:9d:9f:ff:4f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 7 02:00:25 2024 GMT Not After : Jun 5 01:00:25 2024 GMT Subject: CN=2c740ddc-1792-46aa-bf18-2de7afba3f9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:7d:df:75:20:b2:49:54:3a:1c:08:43:7a:3c: 3d:67:76:a0:bc:84:9b:88:de:fb:60:49:48:1f:5c: b9:73:a9:e0:c6:43:90:fc:0b:78:08:35:62:26:b3: 5e:a4:72:81:75:b5:5b:32:bd:48:34:01:b6:b4:71: f4:c7:a8:e5:60:66:62:f8:da:57:1d:96:57:4a:aa: 4d:da:c4:39:1a:f0:bf:71:e4:8c:ec:ad:6f:35:1a: 2c:ca:d2:6f:95:a9:ff:fa:78:4c:a4:24:7d:a1:d8: 53:cc:38:20:31:5a:3b:3a:d4:4b:a0:9f:ff:39:f9: e9:4b:e6:a9:36:3b:8d:42:96:5e:dc:18:b0:35:c1: 90:09:16:22:83:7f:42:d3:11:97:be:94:5d:2d:87: 21:51:86:1e:c4:91:7b:46:4f:49:24:a4:0c:2c:4c: 9a:70:b7:a3:20:dc:ba:1c:a2:3b:78:07:a9:a8:63: f7:c2:c5:28:c6:e5:72:f6:f3:7a:d6:c7:98:7e:ce: 15:d6:d2:f2:da:20:6f:9a:03:97:90:00:22:cc:20: 87:04:ac:eb:9b:38:fc:d3:d5:55:ef:5d:5b:14:06: 45:7d:f5:a9:b3:46:01:e1:f8:cb:76:f2:28:f9:ce: ca:3b:0e:13:c6:8a:f2:51:03:1c:6e:2d:1a:3d:fb: 45:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:98:3B:6B:13:E5:B0:8E:BC:A5:77:C2:16:5E:53:21:CA:CB:D9:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3b0c4ae2-41fa-343e-98c2-4d7547b11f23.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.52.158.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:e1:6d:3f:69:7e:84:c2:85:17:3f:5c:54:04:a4:71:2c:a2: b8:c1:f2:0a:9f:71:fa:31:56:15:2b:6a:1b:12:b1:1e:ce:fa: 87:f2:29:9b:14:f7:f7:01:63:90:78:a7:df:21:66:de:02:0a: 31:cd:ab:0c:cb:cc:40:df:21:9f:8b:af:5b:81:fa:c2:9b:16: b1:e5:09:21:cc:ae:90:bc:d7:4f:b6:df:e1:50:0d:dd:61:b1: b2:a5:df:3d:fc:19:b9:15:e4:c6:a3:b5:4c:fa:2e:5b:2c:33: 50:ee:eb:03:2c:53:95:03:35:4c:12:90:ae:b5:47:c1:77:cc: a8:30:81:cf:b3:2b:a6:62:d8:64:8b:0a:d8:b8:17:13:ff:ec: d2:3a:ac:73:08:d2:78:fd:c9:c1:15:98:c3:1b:f8:ed:43:65: ea:40:b1:1e:94:cd:d7:86:c3:7b:b7:af:a3:3a:a3:69:fa:87: 06:2a:f2:db:07:a3:ea:93:f1:f9:f7:42:8a:bc:c3:92:2d:53: d4:ce:c3:aa:37:54:34:a1:0a:ae:d5:ac:9e:27:9e:8d:5e:1e: e7:f3:1e:9b:c9:1d:fb:ec:21:0e:03:bc:b1:2a:74:f3:51:1a: b6:0a:cb:5a:99:13:4c:6f:4c:7b:8a:52:31:80:cf:42:a8:51: 55:a9:bd:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUfqvz7BpH0nZ//T4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MDMwNzAyMDAyNVoXDTI0MDYwNTAxMDAyNVowLzEtMCsGA1UEAxMk MmM3NDBkZGMtMTc5Mi00NmFhLWJmMTgtMmRlN2FmYmEzZjllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzH3fdSCySVQ6HAhDejw9Z3agvISbiN77YElI H1y5c6ngxkOQ/At4CDViJrNepHKBdbVbMr1INAG2tHH0x6jlYGZi+NpXHZZXSqpN 2sQ5GvC/ceSM7K1vNRosytJvlan/+nhMpCR9odhTzDggMVo7OtRLoJ//OfnpS+ap NjuNQpZe3BiwNcGQCRYig39C0xGXvpRdLYchUYYexJF7Rk9JJKQMLEyacLejINy6 HKI7eAepqGP3wsUoxuVy9vN61seYfs4V1tLy2iBvmgOXkAAizCCHBKzrmzj809VV 711bFAZFffWps0YB4fjLdvIo+c7KOw4TxoryUQMcbi0aPftF5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCuYO2sT5bCOvKV3whZeUyHKy9mJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2IwYzRhZTItNDFmYS0z NDNlLTk4YzItNGQ3NTQ3YjExZjIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRDSeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKnhbT9pfoTChRc/XFQEpHEsorjB8gqfcfoxVhUrahsSsR7O+ofyKZsU 9/cBY5B4p98hZt4CCjHNqwzLzEDfIZ+Lr1uB+sKbFrHlCSHMrpC810+23+FQDd1h sbKl3z38GbkV5MajtUz6LlssM1Du6wMsU5UDNUwSkK61R8F3zKgwgc+zK6Zi2GSL Cti4FxP/7NI6rHMI0nj9ycEVmMMb+O1DZepAsR6UzdeGw3u3r6M6o2n6hwYq8tsH o+qT8fn3Qoq8w5ItU9TOw6o3VDShCq7VrJ4nno1eHufzHpvJHfvsIQ4DvLEqdPNR GrYKy1qZE0xvTHuKUjGAz0KoUVWpvTc= -----END CERTIFICATE-----Generated at Sat May 4 14:49:43 2024 by rpki-client on console-ams.rpki-client.org