$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4d456aa8-e6b9-34ac-97c0-493b64577dc9.roa File: 4d456aa8-e6b9-34ac-97c0-493b64577dc9.roa (raw, json) Hash identifier: b7J1o74qO8rBQAI5Ne/pdw9+BBy8vic9Ide+w0oWyd0= Subject key identifier: 1A:1D:29:89:C8:E0:C8:77:4D:43:AA:4C:78:DC:C9:C9:22:F1:E8:96 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858451FAC526FC1C719F7FFB1D600 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4d456aa8-e6b9-34ac-97c0-493b64577dc9.roa Signing time: Thu 07 Mar 2024 02:00:25 +0000 ROA not before: Thu 07 Mar 2024 02:00:25 +0000 ROA not after: Wed 05 Jun 2024 01:00:25 +0000 asID: 33659 IP address blocks: 68.86.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:1f:ac:52:6f:c1:c7:19:f7:ff:b1:d6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 7 02:00:25 2024 GMT Not After : Jun 5 01:00:25 2024 GMT Subject: CN=9abc031b-f693-4c74-855e-d1d7416913e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:8b:77:ab:9f:a6:48:c1:82:b0:b0:d1:fc:fa: bd:99:ca:b5:a4:b2:93:0b:2b:dd:2e:82:9d:b3:8a: 84:a4:ec:d8:bf:a7:1b:77:a7:04:57:06:9e:0a:0f: 4c:8f:42:67:f7:f8:66:d2:b3:e9:1a:12:92:b7:ae: c3:1a:35:f4:e9:c8:28:d1:af:9f:9b:f4:04:1c:ca: 1b:7d:79:13:95:c5:7f:a3:51:0c:35:6b:0b:e8:78: cb:c3:00:1b:03:5d:c1:04:a4:4a:70:43:d9:49:4f: 84:11:3a:96:4e:eb:7b:31:93:62:8d:4d:42:96:81: ac:c5:0b:60:bf:b2:f3:7d:eb:d4:63:e6:2b:50:6b: 96:bf:bd:51:58:e3:71:f7:01:46:4a:ed:dc:08:64: 48:8f:03:01:33:63:40:0a:d4:e7:d4:a3:ce:df:99: e8:10:ea:4f:4e:02:a1:02:f0:cd:05:cc:73:b1:1e: c2:40:49:e0:86:e6:fa:e9:2c:6a:98:68:f4:e4:e9: 72:a7:ab:ae:55:17:4e:da:58:f7:d9:6a:c7:ba:53: 81:d9:6e:d9:f8:3b:5b:7c:d0:44:55:f9:23:16:98: 3f:fe:b6:a2:0d:cb:1e:0b:35:85:ef:8d:ab:b9:81: 0e:72:9a:c8:71:e9:a0:68:1b:a5:21:a3:23:a3:5f: 1d:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:1D:29:89:C8:E0:C8:77:4D:43:AA:4C:78:DC:C9:C9:22:F1:E8:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4d456aa8-e6b9-34ac-97c0-493b64577dc9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.86.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption dc:dd:fe:1a:6a:90:d4:f8:ae:22:74:9d:97:e5:9f:e9:c7:2a: 86:b1:0f:ad:93:51:99:fc:28:f4:1f:2a:98:4f:64:dd:97:54: fc:64:8d:70:b0:14:db:83:0a:1e:f6:a1:0b:d0:90:39:fb:07: 50:2d:9e:2e:d7:62:80:32:58:fd:81:be:22:a1:51:23:40:65: 3c:27:02:ca:10:a4:b0:3e:0f:2c:dc:d1:1e:f9:7c:82:4f:84: 0c:4b:a4:7c:ba:4f:e0:2f:38:6f:54:6c:80:2d:7f:96:da:f3: e7:6a:b4:d2:98:bf:dd:b6:dc:f2:29:e0:4a:3a:38:9d:dc:9a: 71:f8:b4:89:98:7d:db:a8:85:9a:14:2c:ee:c3:3e:7d:28:2c: 00:87:3b:9b:89:29:a8:7f:de:80:1c:b8:a0:3e:e3:48:a6:82: b7:0e:20:93:94:6b:2b:1a:b7:0b:6a:81:92:05:26:ac:7e:a4: d3:dc:bf:77:80:33:60:da:02:a4:57:12:a2:c6:43:68:8c:49: 9d:2b:7f:e6:48:cd:5f:69:8c:1c:71:39:34:e2:82:9a:06:ee: b0:e1:c3:0a:5a:fe:10:f5:0a:b8:5a:99:84:a8:4c:fc:5d:e0: da:fe:a5:15:79:95:8f:29:ad:f6:b8:20:40:14:9e:b8:f8:2d: b5:c2:bf:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUfrFJvwccZ9/+x1gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MDMwNzAyMDAyNVoXDTI0MDYwNTAxMDAyNVowLzEtMCsGA1UEAxMk OWFiYzAzMWItZjY5My00Yzc0LTg1NWUtZDFkNzQxNjkxM2UyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYt3q5+mSMGCsLDR/Pq9mcq1pLKTCyvdLoKd s4qEpOzYv6cbd6cEVwaeCg9Mj0Jn9/hm0rPpGhKSt67DGjX06cgo0a+fm/QEHMob fXkTlcV/o1EMNWsL6HjLwwAbA13BBKRKcEPZSU+EETqWTut7MZNijU1CloGsxQtg v7LzfevUY+YrUGuWv71RWONx9wFGSu3cCGRIjwMBM2NACtTn1KPO35noEOpPTgKh AvDNBcxzsR7CQEnghub66SxqmGj05Olyp6uuVRdO2lj32WrHulOB2W7Z+DtbfNBE VfkjFpg//raiDcseCzWF742ruYEOcprIcemgaBulIaMjo18dUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBodKYnI4Mh3TUOqTHjcycki8eiWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNGQ0NTZhYTgtZTZiOS0z NGFjLTk3YzAtNDkzYjY0NTc3ZGM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARFbRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANzd/hpqkNT4riJ0nZfln+nHKoaxD62TUZn8KPQfKphPZN2XVPxkjXCw FNuDCh72oQvQkDn7B1Atni7XYoAyWP2BviKhUSNAZTwnAsoQpLA+Dyzc0R75fIJP hAxLpHy6T+AvOG9UbIAtf5ba8+dqtNKYv9223PIp4Eo6OJ3cmnH4tImYfduohZoU LO7DPn0oLACHO5uJKah/3oAcuKA+40imgrcOIJOUaysatwtqgZIFJqx+pNPcv3eA M2DaAqRXEqLGQ2iMSZ0rf+ZIzV9pjBxxOTTigpoG7rDhwwpa/hD1CrhamYSoTPxd 4Nr+pRV5lY8prfa4IEAUnrj4LbXCv8g= -----END CERTIFICATE-----Generated at Sat May 4 14:48:28 2024 by rpki-client on console-fra.rpki-client.org