$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8e72043c-4503-371d-a9d2-927a764afd43.roa File: 8e72043c-4503-371d-a9d2-927a764afd43.roa (raw, json) Hash identifier: g8jWTWV/dpYDl6xa1x5RODRM+I8AlF1TNxbtWvPVYCQ= Subject key identifier: DE:81:31:8E:DB:5A:65:70:33:C6:26:BD:58:A2:8C:1F:B1:FA:99:6F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858451FAC81AC6759EE6FE23D2D80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8e72043c-4503-371d-a9d2-927a764afd43.roa Signing time: Thu 07 Mar 2024 02:00:25 +0000 ROA not before: Thu 07 Mar 2024 02:00:25 +0000 ROA not after: Wed 05 Jun 2024 01:00:25 +0000 asID: 22909 IP address blocks: 68.57.24.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:1f:ac:81:ac:67:59:ee:6f:e2:3d:2d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 7 02:00:25 2024 GMT Not After : Jun 5 01:00:25 2024 GMT Subject: CN=b43c8193-e6f0-4aaa-9662-ec51f16e4ad3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:22:25:be:55:35:25:8f:c8:93:6b:28:e2:e0: 74:8d:88:ad:e1:83:49:01:cf:79:bf:3c:5d:cb:3b: e7:c9:3d:55:9f:1b:fc:f6:51:16:55:01:5f:4d:89: 33:e2:52:9e:2a:40:ce:bf:40:6f:ca:25:2e:bc:46: df:3d:6f:26:32:0a:21:1d:b9:5d:2f:17:ca:57:eb: 40:07:0c:44:de:90:c0:9f:a6:2a:fc:ec:d1:2b:46: 4b:84:1d:35:04:37:a4:e5:fd:1c:9b:c5:f8:96:f4: b0:c3:4e:7c:f1:0f:5f:c1:49:99:df:a7:7e:58:dc: 47:73:47:93:9d:76:3f:9c:f7:ec:5a:2c:04:ac:5a: 1a:ca:85:e7:d2:05:2f:a1:21:3a:cb:94:7f:e3:b6: c8:37:0f:7f:54:89:3f:98:6c:9d:81:a0:b7:6f:7f: 66:ee:54:c0:84:45:8a:a6:8d:ba:70:fc:58:23:6c: 62:60:d6:fe:4c:ab:25:92:9f:64:c8:d0:e6:f9:73: 5b:b5:f7:e5:c3:ff:30:56:ab:7a:b3:d4:b8:c2:91: 69:e1:00:10:84:ef:52:75:ab:f5:55:94:81:2b:3f: 10:88:f3:9d:b8:f4:0f:f8:31:b9:2f:35:66:22:d4: 47:f6:96:4a:8e:8e:c4:3c:87:3e:4d:c5:36:19:16: 69:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:81:31:8E:DB:5A:65:70:33:C6:26:BD:58:A2:8C:1F:B1:FA:99:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8e72043c-4503-371d-a9d2-927a764afd43.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.57.24.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:fe:f0:a7:65:3f:e9:35:45:21:2a:03:c0:47:ba:ec:dc:a9: 81:65:92:04:b4:d3:1b:ca:e1:27:f1:7c:3e:9d:7c:17:6c:66: f8:f4:1d:1b:82:38:03:2a:43:2a:38:3b:bf:43:4a:74:6a:fd: 80:3d:db:01:f0:db:ca:8f:79:8a:fc:57:37:63:3b:51:29:72: d0:00:1a:d0:8d:e0:8d:27:03:c0:7d:00:74:a2:e6:9b:1c:68: 15:e1:e0:b9:3e:22:f4:b7:01:59:1f:49:15:98:b6:4e:8e:0b: 36:aa:f7:74:fe:50:4a:9b:e3:22:5f:46:ef:31:37:3d:6d:aa: db:7c:51:ef:11:d6:86:03:75:ec:12:9c:78:90:d1:06:d0:f8: 36:d6:a1:90:02:84:f5:50:13:40:73:39:5e:d2:10:a5:50:96: fa:c9:75:90:c4:4f:86:38:e0:c9:41:06:e9:cd:c4:7a:91:e3: 3f:e8:68:77:a3:24:2e:c1:8f:bd:16:a4:b1:d7:3f:34:16:06: 3f:34:87:6d:32:02:f5:5d:b5:0a:1b:64:16:50:e0:12:0e:9c: 5b:d4:49:72:0c:18:d9:b7:3d:ee:9e:0d:54:77:9d:ae:15:6f: af:ed:a6:d0:09:e8:e4:cb:d9:73:0e:e5:d4:ed:b2:e9:3a:25: 12:9d:f3:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUfrIGsZ1nub+I9LYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MDMwNzAyMDAyNVoXDTI0MDYwNTAxMDAyNVowLzEtMCsGA1UEAxMk YjQzYzgxOTMtZTZmMC00YWFhLTk2NjItZWM1MWYxNmU0YWQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5iIlvlU1JY/Ik2so4uB0jYit4YNJAc95vzxd yzvnyT1Vnxv89lEWVQFfTYkz4lKeKkDOv0BvyiUuvEbfPW8mMgohHbldLxfKV+tA BwxE3pDAn6Yq/OzRK0ZLhB01BDek5f0cm8X4lvSww0588Q9fwUmZ36d+WNxHc0eT nXY/nPfsWiwErFoayoXn0gUvoSE6y5R/47bINw9/VIk/mGydgaC3b39m7lTAhEWK po26cPxYI2xiYNb+TKslkp9kyNDm+XNbtfflw/8wVqt6s9S4wpFp4QAQhO9Sdav1 VZSBKz8QiPOduPQP+DG5LzVmItRH9pZKjo7EPIc+TcU2GRZpiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN6BMY7bWmVwM8YmvViijB+x+plvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGU3MjA0M2MtNDUwMy0z NzFkLWE5ZDItOTI3YTc2NGFmZDQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRDkYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAED+8KdlP+k1RSEqA8BHuuzcqYFlkgS00xvK4SfxfD6dfBdsZvj0HRuC OAMqQyo4O79DSnRq/YA92wHw28qPeYr8VzdjO1EpctAAGtCN4I0nA8B9AHSi5psc aBXh4Lk+IvS3AVkfSRWYtk6OCzaq93T+UEqb4yJfRu8xNz1tqtt8Ue8R1oYDdewS nHiQ0QbQ+DbWoZAChPVQE0BzOV7SEKVQlvrJdZDET4Y44MlBBunNxHqR4z/oaHej JC7Bj70WpLHXPzQWBj80h20yAvVdtQobZBZQ4BIOnFvUSXIMGNm3Pe6eDVR3na4V b6/tptAJ6OTL2XMO5dTtsuk6JRKd80M= -----END CERTIFICATE-----Generated at Sat May 4 14:54:25 2024 by rpki-client on console-ams.rpki-client.org