$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ad531af8-ca2c-345a-9a96-55e22c8cd694.roa File: ad531af8-ca2c-345a-9a96-55e22c8cd694.roa (raw, json) Hash identifier: j+WDE+HqGW1hwQdwhUZCdKkcbjtTYN4TjzT0bPlkPVk= Subject key identifier: 5D:F1:8E:A5:F9:9C:6C:91:68:8C:E7:B6:23:ED:E7:9C:F3:D6:FD:69 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858451FAC827F4CEC984EFA7F8B80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ad531af8-ca2c-345a-9a96-55e22c8cd694.roa Signing time: Thu 07 Mar 2024 02:00:25 +0000 ROA not before: Thu 07 Mar 2024 02:00:25 +0000 ROA not after: Wed 05 Jun 2024 01:00:25 +0000 asID: 22909 IP address blocks: 68.57.96.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:1f:ac:82:7f:4c:ec:98:4e:fa:7f:8b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 7 02:00:25 2024 GMT Not After : Jun 5 01:00:25 2024 GMT Subject: CN=83a860a9-e0ad-4e6b-b07e-de812a70f961 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:fd:da:87:a4:08:e6:1c:5e:d3:d5:c5:eb:7e: 35:5d:c2:cd:01:42:42:b4:f2:48:fd:7c:7c:a2:e2: 2a:35:7f:b2:af:ef:97:52:5c:c8:05:6a:5d:b0:89: 00:73:c8:34:cd:12:6b:44:94:9a:65:7f:d2:22:83: 5f:c2:bc:bb:11:90:d8:f6:3c:bf:c6:d5:54:b0:fd: ba:c8:91:09:d8:10:f4:97:64:e7:4c:c6:b5:af:93: dd:90:64:61:e5:93:7d:63:a0:81:87:56:d6:6f:2c: 17:0f:e9:8a:22:be:a2:d6:fc:da:bd:79:e6:0e:38: ba:aa:9e:5a:29:e5:90:32:ba:98:af:12:90:ce:00: cb:b9:ad:5f:8f:17:ed:3a:ee:7c:33:b0:cb:51:f9: d7:cd:f6:37:77:77:19:5f:78:88:41:f0:aa:c1:35: 26:42:af:68:70:ad:cf:67:84:a6:d8:e2:67:26:ae: 83:21:ba:39:8e:1a:13:ec:92:f1:f3:92:22:77:11: 07:f7:cc:e5:1b:ec:c2:55:94:42:62:05:de:e4:b3: 33:bd:a5:8b:33:cb:0d:41:fb:88:dd:7a:55:bb:65: 16:04:dd:c9:d1:23:5c:0c:fb:f6:63:56:7d:24:d8: 8c:b4:56:7a:b3:a5:49:cf:33:46:88:eb:e6:72:eb: c1:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:F1:8E:A5:F9:9C:6C:91:68:8C:E7:B6:23:ED:E7:9C:F3:D6:FD:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ad531af8-ca2c-345a-9a96-55e22c8cd694.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.57.96.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:01:c6:df:2a:f4:b0:5f:47:09:c2:99:80:25:ec:bd:40:aa: fd:6d:48:11:aa:ff:04:de:51:a9:f6:e8:e0:8a:96:5c:f6:29: ad:aa:47:f8:25:f8:c5:7e:9b:94:0c:6d:81:da:73:76:3e:65: d1:ac:88:fd:24:05:43:9d:48:62:14:9d:d7:93:c8:3e:12:b4: 1d:a0:d8:13:7a:eb:1e:0f:45:8b:41:ec:d7:8e:7d:55:d9:c9: 17:b7:74:80:f4:25:9a:eb:63:14:27:ef:b8:a4:ae:b9:7d:6e: a2:9e:44:a7:00:f9:82:9e:7e:cf:68:42:38:da:f5:2c:31:22: 2c:42:ad:42:21:15:de:76:5b:de:22:8f:8b:0c:07:93:ad:d3: 98:ed:55:df:56:1a:35:a8:71:f6:f0:d4:aa:f4:cb:d3:99:72: 7a:57:28:c3:9b:b5:67:6e:2e:ec:e0:2c:c0:4a:86:54:8a:cb: 26:8b:9c:20:2c:0a:b2:35:1c:34:7e:c2:f3:36:2b:e1:24:bd: f7:3d:99:11:aa:28:cb:c8:4d:06:32:31:49:48:bf:fa:1f:11: dd:46:1f:24:dc:cd:20:6e:4a:ed:31:6f:04:f2:d3:4b:17:35: 3d:b9:91:b7:a0:1c:7b:9a:49:54:a6:73:46:d3:ca:9b:7e:40: 69:1b:fb:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUfrIJ/TOyYTvp/i4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MDMwNzAyMDAyNVoXDTI0MDYwNTAxMDAyNVowLzEtMCsGA1UEAxMk ODNhODYwYTktZTBhZC00ZTZiLWIwN2UtZGU4MTJhNzBmOTYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkv3ah6QI5hxe09XF6341XcLNAUJCtPJI/Xx8 ouIqNX+yr++XUlzIBWpdsIkAc8g0zRJrRJSaZX/SIoNfwry7EZDY9jy/xtVUsP26 yJEJ2BD0l2TnTMa1r5PdkGRh5ZN9Y6CBh1bWbywXD+mKIr6i1vzavXnmDji6qp5a KeWQMrqYrxKQzgDLua1fjxftOu58M7DLUfnXzfY3d3cZX3iIQfCqwTUmQq9ocK3P Z4Sm2OJnJq6DIbo5jhoT7JLx85IidxEH98zlG+zCVZRCYgXe5LMzvaWLM8sNQfuI 3XpVu2UWBN3J0SNcDPv2Y1Z9JNiMtFZ6s6VJzzNGiOvmcuvBiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF3xjqX5nGyRaIzntiPt55zz1v1pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWQ1MzFhZjgtY2EyYy0z NDVhLTlhOTYtNTVlMjJjOGNkNjk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRDlgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKkBxt8q9LBfRwnCmYAl7L1Aqv1tSBGq/wTeUan26OCKllz2Ka2qR/gl +MV+m5QMbYHac3Y+ZdGsiP0kBUOdSGIUndeTyD4StB2g2BN66x4PRYtB7NeOfVXZ yRe3dID0JZrrYxQn77ikrrl9bqKeRKcA+YKefs9oQjja9SwxIixCrUIhFd52W94i j4sMB5Ot05jtVd9WGjWocfbw1Kr0y9OZcnpXKMObtWduLuzgLMBKhlSKyyaLnCAs CrI1HDR+wvM2K+Ekvfc9mRGqKMvITQYyMUlIv/ofEd1GHyTczSBuSu0xbwTy00sX NT25kbegHHuaSVSmc0bTypt+QGkb+/A= -----END CERTIFICATE-----Generated at Sat May 4 14:56:03 2024 by rpki-client on console-ams.rpki-client.org