$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5b351298-f2f6-3b47-a818-67e38b893ea8.roa File: 5b351298-f2f6-3b47-a818-67e38b893ea8.roa (raw, json) Hash identifier: m8aPKOL35j1UJB3+lnttqfrssKVRagUYXWBWPqn4Gc0= Subject key identifier: 9A:47:27:0B:5A:C9:64:D6:69:82:CB:42:C7:0B:5C:5A:14:F1:91:51 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858451FAAFEF1017C04DAB72FFB60 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5b351298-f2f6-3b47-a818-67e38b893ea8.roa Signing time: Thu 07 Mar 2024 02:00:25 +0000 ROA not before: Thu 07 Mar 2024 02:00:25 +0000 ROA not after: Wed 05 Jun 2024 01:00:25 +0000 asID: 22909 IP address blocks: 68.53.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:1f:aa:fe:f1:01:7c:04:da:b7:2f:fb:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 7 02:00:25 2024 GMT Not After : Jun 5 01:00:25 2024 GMT Subject: CN=fceea3ad-b7a1-4b5a-95b8-cfa2df9e6ebd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:36:26:8b:8c:84:73:4e:4d:93:58:c9:1f:61: 27:43:02:b9:2c:d2:e2:f4:ea:c0:8c:60:05:9c:9a: f9:86:08:70:17:b5:92:16:1d:23:d8:76:5a:95:7a: 15:b6:ad:c8:08:df:f0:38:96:21:a8:56:dc:a0:c3: 69:bf:3a:24:ef:de:ba:57:7b:78:c7:ce:bb:db:0d: 24:36:98:90:23:75:1d:6b:ba:58:f0:3a:35:05:27: c3:18:86:8c:53:65:1a:7d:9e:5a:64:91:39:5f:12: 41:78:e1:6e:89:9f:52:2d:40:bc:99:76:8d:22:6d: 49:44:63:dc:3c:27:ef:d3:4a:d8:51:41:bc:75:ca: 83:9c:4f:a1:4b:1f:a1:67:61:0c:84:9d:c3:c8:20: dc:c1:a8:12:5b:68:8c:eb:15:55:0c:2d:7a:79:60: cf:ee:39:16:94:b3:b9:ca:cf:8e:59:98:88:0c:e4: e2:4d:d5:6a:72:95:08:0b:e7:d5:fc:a5:92:41:5b: 33:03:21:bc:e8:8e:d8:95:7d:a6:d8:42:e8:3e:d9: ef:0f:f1:c3:07:ad:f7:86:9d:af:da:8e:88:b4:9e: da:c5:cd:b2:3f:4c:d5:70:f5:f3:b9:9e:89:fc:82: 0b:83:93:e2:43:56:44:c8:3b:97:85:3b:cc:be:1c: 43:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:47:27:0B:5A:C9:64:D6:69:82:CB:42:C7:0B:5C:5A:14:F1:91:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5b351298-f2f6-3b47-a818-67e38b893ea8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.53.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:7f:ad:bd:be:80:16:6a:46:c3:43:89:65:0f:6a:3b:6d:3e: 09:64:cc:cb:47:68:02:ae:81:7d:13:34:b4:1b:f7:b7:41:a5: 90:65:80:1b:d6:ec:c7:b4:04:40:78:1d:ad:29:39:c5:ba:3c: 58:1f:91:b2:98:70:8e:4c:f7:90:ba:e2:c2:84:5a:23:1b:a7: cb:24:46:0b:22:7b:fd:24:da:a9:59:6e:30:7c:30:08:e8:f9: f7:2a:89:ec:a8:09:25:4c:58:f7:c9:41:ed:bb:15:bd:5f:98: 95:53:bd:e0:7e:11:de:b1:31:84:fa:69:68:02:0b:f9:8c:2a: 7b:84:83:d2:54:d9:61:30:28:db:42:64:e9:bd:95:d2:c0:4a: 09:29:64:aa:6c:65:26:a3:56:0c:cf:64:13:dd:d7:45:2e:92: 57:b9:d9:99:c0:bc:f5:2f:89:d5:33:f9:f5:15:32:da:3a:08: 17:00:50:f1:d0:a9:75:10:9f:2e:66:7e:5d:23:7e:c5:e5:b2: 98:63:dd:db:74:7e:3e:06:23:8b:58:3d:8a:96:5e:3c:77:2c: 27:b1:b9:a2:28:c6:e9:84:34:c8:01:ad:61:a5:5f:a2:5e:d0: 34:c1:56:3b:b7:0e:2c:3f:8a:a9:fe:4a:3c:b6:2b:87:ea:fe: 9f:c8:91:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUfqv7xAXwE2rcv+2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MDMwNzAyMDAyNVoXDTI0MDYwNTAxMDAyNVowLzEtMCsGA1UEAxMk ZmNlZWEzYWQtYjdhMS00YjVhLTk1YjgtY2ZhMmRmOWU2ZWJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjjYmi4yEc05Nk1jJH2EnQwK5LNLi9OrAjGAF nJr5hghwF7WSFh0j2HZalXoVtq3ICN/wOJYhqFbcoMNpvzok7966V3t4x8672w0k NpiQI3Uda7pY8Do1BSfDGIaMU2UafZ5aZJE5XxJBeOFuiZ9SLUC8mXaNIm1JRGPc PCfv00rYUUG8dcqDnE+hSx+hZ2EMhJ3DyCDcwagSW2iM6xVVDC16eWDP7jkWlLO5 ys+OWZiIDOTiTdVqcpUIC+fV/KWSQVszAyG86I7YlX2m2ELoPtnvD/HDB633hp2v 2o6ItJ7axc2yP0zVcPXzuZ6J/IILg5PiQ1ZEyDuXhTvMvhxDRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJpHJwtayWTWaYLLQscLXFoU8ZFRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNWIzNTEyOTgtZjJmNi0z YjQ3LWE4MTgtNjdlMzhiODkzZWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARDUJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEt/rb2+gBZqRsNDiWUPajttPglkzMtHaAKugX0TNLQb97dBpZBlgBvW 7Me0BEB4Ha0pOcW6PFgfkbKYcI5M95C64sKEWiMbp8skRgsie/0k2qlZbjB8MAjo +fcqieyoCSVMWPfJQe27Fb1fmJVTveB+Ed6xMYT6aWgCC/mMKnuEg9JU2WEwKNtC ZOm9ldLASgkpZKpsZSajVgzPZBPd10Uukle52ZnAvPUvidUz+fUVMto6CBcAUPHQ qXUQny5mfl0jfsXlsphj3dt0fj4GI4tYPYqWXjx3LCexuaIoxumENMgBrWGlX6Je 0DTBVju3Diw/iqn+Sjy2K4fq/p/Ikb0= -----END CERTIFICATE-----Generated at Sat May 4 14:49:19 2024 by rpki-client on console-fra.rpki-client.org