$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/86d8de02-83a6-310a-a74a-61af5eba8244.roa File: 86d8de02-83a6-310a-a74a-61af5eba8244.roa (raw, json) Hash identifier: N5zMQ+IF3/XFwQI98dUTjf/1xvjE8oFCW3vAFVz9sCM= Subject key identifier: B0:60:37:52:42:22:94:FB:0F:31:82:59:B5:39:76:87:A2:B3:34:52 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858451FAC769E16667EE710FBEBC0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/86d8de02-83a6-310a-a74a-61af5eba8244.roa Signing time: Thu 07 Mar 2024 02:00:25 +0000 ROA not before: Thu 07 Mar 2024 02:00:25 +0000 ROA not after: Wed 05 Jun 2024 01:00:25 +0000 asID: 22909 IP address blocks: 68.32.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:1f:ac:76:9e:16:66:7e:e7:10:fb:eb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 7 02:00:25 2024 GMT Not After : Jun 5 01:00:25 2024 GMT Subject: CN=3107c96d-0b32-498c-b6d3-b46e19f88c81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:49:2a:a0:f6:2b:15:5a:b9:0a:c5:f4:ba:fb: 8a:20:14:d2:a9:0b:c8:13:b5:2f:75:e6:bc:97:30: 1c:ad:0a:40:67:94:24:6c:6f:9a:27:b5:b6:0b:19: a6:f7:79:0d:6b:6c:89:02:92:e0:c4:bf:17:02:06: 2f:77:a8:d4:20:7a:59:b2:a4:2e:a6:ff:9f:0f:5c: d1:a2:ce:db:db:df:ef:84:41:a0:ea:6e:d8:00:18: a9:1d:20:b7:a2:6f:33:85:fa:72:1c:6a:32:7c:d8: 8c:b0:a5:1f:99:9c:4a:f4:1b:bc:6d:bc:f2:24:63: ca:05:d0:9e:e8:ba:67:ce:7e:21:a3:03:b2:fd:ab: 6b:78:da:7d:f2:8c:78:88:68:54:0a:9e:3c:dc:86: e1:eb:7d:d8:15:e1:56:95:dc:ef:91:f9:2f:18:22: a7:47:ad:07:77:b4:0d:3c:f2:63:5d:41:56:0c:31: aa:0e:59:95:8f:94:16:2d:0f:29:32:3e:6c:ed:9c: 65:f6:47:2d:4b:87:9c:ac:ef:aa:e7:75:63:02:cc: 1f:87:90:8c:dd:50:6d:18:d6:98:d8:10:fd:5f:53: 92:64:e8:9e:da:07:1e:c2:aa:b4:7b:f7:fb:95:3c: 5f:51:65:d1:a8:d2:af:e1:19:c1:d2:f8:69:c2:4d: 46:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:60:37:52:42:22:94:FB:0F:31:82:59:B5:39:76:87:A2:B3:34:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/86d8de02-83a6-310a-a74a-61af5eba8244.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.32.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d0:b3:70:ec:23:08:cf:51:0f:19:04:6c:81:8e:04:88:b5:a7: 43:ee:58:87:62:d9:3e:ad:dc:7c:98:d8:91:6f:bf:54:df:fd: 2d:a1:a8:70:b8:cb:55:d5:70:f3:25:16:e8:b1:93:61:e4:79: 8b:b7:0f:56:ad:fa:63:5c:cf:ab:ae:5b:8f:6f:90:66:f5:8d: 05:92:ba:f6:33:0d:94:86:d1:0b:4c:f6:7d:bf:a8:e1:d5:64: 01:c9:26:26:1e:ee:28:36:e1:c9:25:9b:e9:ef:5c:75:b8:d2: ed:39:4c:48:7c:46:69:0c:c1:9c:c5:2c:29:25:fc:e5:1a:03: 32:d0:8a:fa:79:b3:21:37:21:8b:d8:37:ba:2f:7f:41:40:86: 5e:2e:e7:68:4b:2a:e4:fc:f5:f9:bc:f9:57:42:b9:8a:08:1d: a8:d2:5c:13:70:23:07:73:60:9e:07:f6:d5:4a:9d:3a:69:ff: b4:fd:3a:75:96:92:28:a5:28:e8:e7:f8:2e:82:c3:21:08:08: 15:cd:75:76:c3:e7:5e:61:ce:03:c1:6b:cd:34:1f:17:5b:fe: 0f:f5:c4:b1:e2:4a:b1:50:42:ea:9e:ea:6e:ee:40:ed:27:0a: fd:b7:99:6d:a5:29:2a:fa:ce:fa:b2:2f:a6:84:71:87:b1:1b: b2:da:a9:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUfrHaeFmZ+5xD768AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MDMwNzAyMDAyNVoXDTI0MDYwNTAxMDAyNVowLzEtMCsGA1UEAxMk MzEwN2M5NmQtMGIzMi00OThjLWI2ZDMtYjQ2ZTE5Zjg4YzgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0kqoPYrFVq5CsX0uvuKIBTSqQvIE7Uvdea8 lzAcrQpAZ5QkbG+aJ7W2Cxmm93kNa2yJApLgxL8XAgYvd6jUIHpZsqQupv+fD1zR os7b29/vhEGg6m7YABipHSC3om8zhfpyHGoyfNiMsKUfmZxK9Bu8bbzyJGPKBdCe 6Lpnzn4howOy/atreNp98ox4iGhUCp483Ibh633YFeFWldzvkfkvGCKnR60Hd7QN PPJjXUFWDDGqDlmVj5QWLQ8pMj5s7Zxl9kctS4ecrO+q53VjAswfh5CM3VBtGNaY 2BD9X1OSZOie2gcewqq0e/f7lTxfUWXRqNKv4RnB0vhpwk1GAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLBgN1JCIpT7DzGCWbU5doeiszRSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODZkOGRlMDItODNhNi0z MTBhLWE3NGEtNjFhZjVlYmE4MjQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERCDwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANCzcOwjCM9RDxkEbIGOBIi1p0PuWIdi2T6t3HyY2JFvv1Tf/S2hqHC4 y1XVcPMlFuixk2HkeYu3D1at+mNcz6uuW49vkGb1jQWSuvYzDZSG0QtM9n2/qOHV ZAHJJiYe7ig24cklm+nvXHW40u05TEh8RmkMwZzFLCkl/OUaAzLQivp5syE3IYvY N7ovf0FAhl4u52hLKuT89fm8+VdCuYoIHajSXBNwIwdzYJ4H9tVKnTpp/7T9OnWW kiilKOjn+C6CwyEICBXNdXbD515hzgPBa800Hxdb/g/1xLHiSrFQQuqe6m7uQO0n Cv23mW2lKSr6zvqyL6aEcYexG7Laqew= -----END CERTIFICATE-----Generated at Sun May 5 02:19:02 2024 by rpki-client on console-ams.rpki-client.org