$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8c96d8ef-b34e-345e-a86c-d2dafee3c020.roa File: 8c96d8ef-b34e-345e-a86c-d2dafee3c020.roa (raw, json) Hash identifier: omdEPdwdwajYGWhWPhib+TrD0yO+JTKYKu2eHzJYyb0= Subject key identifier: 4B:1E:97:61:CB:B5:C3:64:58:1A:4C:53:8F:34:AF:90:BC:3F:72:A3 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858451FAAF4FC98F5AA44BBE037C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8c96d8ef-b34e-345e-a86c-d2dafee3c020.roa Signing time: Thu 07 Mar 2024 02:00:25 +0000 ROA not before: Thu 07 Mar 2024 02:00:25 +0000 ROA not after: Wed 05 Jun 2024 01:00:25 +0000 asID: 22909 IP address blocks: 68.34.176.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:1f:aa:f4:fc:98:f5:aa:44:bb:e0:37:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 7 02:00:25 2024 GMT Not After : Jun 5 01:00:25 2024 GMT Subject: CN=27a02063-f978-4c96-9c8c-5dd93616ad6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:f0:bc:7e:b8:64:64:19:7a:ea:ef:31:06:f7: e0:3c:fa:0e:07:aa:95:f6:da:76:42:8f:38:b5:bf: 77:ea:b3:a2:a9:0a:f2:d1:ae:cf:73:26:4e:5c:86: 03:d2:f5:f3:21:92:8e:7f:c8:4d:ee:6f:cf:b1:30: e6:a4:ca:ff:e3:f7:a4:af:0d:0d:62:11:ab:e0:80: 5d:8c:a6:a7:03:34:18:66:66:ac:a3:2e:04:23:bb: 6f:08:a2:b8:b5:08:4e:45:b6:bc:35:00:16:23:fc: a7:0f:2e:b8:c9:d8:4a:fb:d9:a9:f1:2c:34:d2:be: ab:a5:f1:29:ff:b6:fa:56:b6:f5:d0:1d:dc:8f:4e: f4:f1:f5:cf:3c:51:6e:d1:df:00:70:3c:d0:34:d2: 56:8c:09:ea:aa:17:9e:4a:93:4b:93:9d:10:72:3c: 08:d9:15:8c:73:9f:9c:dd:cf:98:10:f0:7d:16:22: 66:d0:ca:43:4b:b4:1b:b5:5f:d3:5d:ff:c5:ab:54: f5:87:21:c0:d1:dc:29:a9:77:e4:05:a4:12:78:86: 9d:8f:07:a6:0a:a6:17:5e:e2:17:5d:d5:4e:3e:8b: 34:0d:5b:36:53:83:b5:48:49:38:a8:43:18:81:8c: 86:f0:f6:bf:43:6f:2b:67:ed:18:fb:71:2d:87:a6: 7c:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:1E:97:61:CB:B5:C3:64:58:1A:4C:53:8F:34:AF:90:BC:3F:72:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8c96d8ef-b34e-345e-a86c-d2dafee3c020.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.34.176.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:21:1d:e7:2f:b6:be:3e:b1:97:bb:fc:74:9e:17:e4:96:30: 3f:49:c1:f9:b5:77:53:3d:b0:1e:58:a3:ba:f0:93:4a:4d:58: 3c:1d:5f:c3:21:03:78:5b:42:45:bd:64:1b:2b:66:a3:9f:1a: 99:3e:21:de:74:ad:a4:d0:68:29:80:63:08:e8:5e:36:4e:12: 7d:28:43:28:e5:63:34:14:d2:71:95:30:89:e4:3f:17:e1:f4: 8c:96:67:6d:57:1f:29:8e:34:80:d9:ef:93:c1:28:22:63:2e: d3:3d:96:92:8a:40:a7:16:70:6e:06:f3:cc:1e:92:12:fc:5e: 21:27:18:6d:04:ea:9d:fe:05:a9:2b:91:fd:52:c3:e6:71:2c: 41:e3:69:fa:eb:50:68:5f:e3:d1:b4:50:1f:61:2b:01:38:31: 4a:09:60:d3:5e:ef:30:d2:b2:45:fd:f9:c0:f4:d4:3f:f1:d8: 60:84:1b:50:42:65:2a:57:73:ad:5f:ad:d3:8b:fc:21:bb:bc: 12:f5:a6:cf:82:d1:a6:0b:bd:32:f3:07:66:7f:10:d2:69:0c: 3b:7f:82:c3:db:b1:6e:fa:1f:0d:86:1e:bc:d7:6e:4e:2f:df: 2d:1a:36:a5:1b:bf:30:7f:a6:0f:71:bd:27:8d:ef:b0:3e:40: 9e:98:4a:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUfqvT8mPWqRLvgN8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MDMwNzAyMDAyNVoXDTI0MDYwNTAxMDAyNVowLzEtMCsGA1UEAxMk MjdhMDIwNjMtZjk3OC00Yzk2LTljOGMtNWRkOTM2MTZhZDZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivC8frhkZBl66u8xBvfgPPoOB6qV9tp2Qo84 tb936rOiqQry0a7PcyZOXIYD0vXzIZKOf8hN7m/PsTDmpMr/4/ekrw0NYhGr4IBd jKanAzQYZmasoy4EI7tvCKK4tQhORba8NQAWI/ynDy64ydhK+9mp8Sw00r6rpfEp /7b6Vrb10B3cj0708fXPPFFu0d8AcDzQNNJWjAnqqheeSpNLk50QcjwI2RWMc5+c 3c+YEPB9FiJm0MpDS7QbtV/TXf/Fq1T1hyHA0dwpqXfkBaQSeIadjwemCqYXXuIX XdVOPos0DVs2U4O1SEk4qEMYgYyG8Pa/Q28rZ+0Y+3Eth6Z8ywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEsel2HLtcNkWBpMU480r5C8P3KjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGM5NmQ4ZWYtYjM0ZS0z NDVlLWE4NmMtZDJkYWZlZTNjMDIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCKwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIwhHecvtr4+sZe7/HSeF+SWMD9Jwfm1d1M9sB5Yo7rwk0pNWDwdX8Mh A3hbQkW9ZBsrZqOfGpk+Id50raTQaCmAYwjoXjZOEn0oQyjlYzQU0nGVMInkPxfh 9IyWZ21XHymONIDZ75PBKCJjLtM9lpKKQKcWcG4G88wekhL8XiEnGG0E6p3+Bakr kf1Sw+ZxLEHjafrrUGhf49G0UB9hKwE4MUoJYNNe7zDSskX9+cD01D/x2GCEG1BC ZSpXc61frdOL/CG7vBL1ps+C0aYLvTLzB2Z/ENJpDDt/gsPbsW76Hw2GHrzXbk4v 3y0aNqUbvzB/pg9xvSeN77A+QJ6YSuU= -----END CERTIFICATE-----Generated at Sun May 5 02:19:18 2024 by rpki-client on console-ams.rpki-client.org