$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b474b480-fe96-3b05-b016-6bf1d10c1289.roa File: b474b480-fe96-3b05-b016-6bf1d10c1289.roa (raw, json) Hash identifier: 6f6pcpxEWJzRpc9/cCOJWpvHjIotFn+Zdp373+dcaP0= Subject key identifier: 02:30:52:57:6E:36:CA:BA:0A:F0:50:B8:14:95:54:0A:CE:31:A1:48 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858451FAB750FFAD2662FDCC5E180 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b474b480-fe96-3b05-b016-6bf1d10c1289.roa Signing time: Thu 07 Mar 2024 02:00:25 +0000 ROA not before: Thu 07 Mar 2024 02:00:25 +0000 ROA not after: Wed 05 Jun 2024 01:00:25 +0000 asID: 22258 IP address blocks: 68.86.44.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:1f:ab:75:0f:fa:d2:66:2f:dc:c5:e1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 7 02:00:25 2024 GMT Not After : Jun 5 01:00:25 2024 GMT Subject: CN=daf9fa6f-d1cb-4c42-aec8-964415c4fc88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:46:d7:ba:57:28:f7:dc:2e:99:bb:f3:46:e2: 16:34:6b:5f:a0:01:f7:b5:c9:53:b5:74:ed:20:39: 52:ce:85:df:eb:9e:d9:92:7f:3e:48:2e:7f:bb:66: c8:f4:20:35:e5:ce:28:16:d9:0f:10:7e:d3:88:19: 37:02:f8:d0:27:d2:f6:86:08:20:ba:e4:b4:83:00: f2:d1:6a:3b:bb:c3:6b:bd:7e:85:81:cc:11:08:01: 67:d6:ad:67:14:9a:46:26:fc:97:18:06:7a:73:51: 1a:c5:b1:a3:0e:3a:b7:ff:a3:6c:64:f5:14:50:d3: 1d:58:20:7d:95:97:4d:6f:93:e5:bd:cd:89:29:01: 05:64:f0:b7:fb:f5:48:f4:55:b1:6c:fc:17:46:af: 1f:45:82:14:a0:ba:57:62:a2:e1:9a:6a:40:35:6e: e9:12:08:24:4e:70:e2:0c:cd:aa:fb:1f:35:99:13: 59:82:fa:bc:a2:49:62:07:3e:38:16:75:43:8c:1b: 37:2c:1f:db:5a:a3:d4:d8:2e:11:2b:57:6f:28:eb: e7:15:7c:e6:9d:31:eb:54:05:85:e7:41:43:8e:cf: 81:98:67:4a:5a:2e:be:03:a6:51:6a:f3:ad:05:07: 36:b6:2f:2c:96:58:31:f8:2a:89:64:17:fc:17:70: 53:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:30:52:57:6E:36:CA:BA:0A:F0:50:B8:14:95:54:0A:CE:31:A1:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b474b480-fe96-3b05-b016-6bf1d10c1289.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.86.44.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:5c:e8:44:91:8a:94:11:95:40:f5:4b:f5:85:a0:82:3b:cd: a0:f9:2d:f6:c5:af:9b:9e:d3:b6:60:e9:d0:81:7c:fc:65:1e: be:ba:d9:7b:71:70:6c:e6:c2:0f:65:82:ef:27:3a:23:f4:28: 5a:c0:4f:cc:f9:be:ae:08:e4:00:dc:6b:fd:13:fc:f0:70:7c: 76:db:4b:9a:f2:5e:41:37:ec:6d:4c:a8:33:ee:6f:98:d1:2f: b5:ed:d4:93:fa:be:be:28:3b:58:a0:db:ad:f1:ef:f4:59:0a: f9:a6:21:37:c8:4a:de:2a:d7:24:97:58:db:be:71:c9:b6:14: ba:24:bf:dd:44:1e:18:14:84:21:0a:ce:cb:29:1f:98:9e:44: 0f:d9:7b:14:0b:2d:3e:5e:58:25:5f:38:2e:92:95:26:fc:7d: e1:2e:34:97:61:03:47:e1:d6:1f:ca:61:5e:45:eb:e1:b6:f9: 08:5f:5e:06:35:bc:98:b7:88:13:8b:39:d3:e1:2f:78:93:29: 3e:cd:1f:1c:8c:fa:fd:23:3f:f4:4a:e3:8c:15:13:6a:f0:0f: 28:0e:28:d6:ba:69:6c:0c:1a:c1:77:9e:72:48:4d:ad:1f:b1: cf:4c:20:96:c8:7a:bb:65:f6:3e:c8:ee:a0:86:67:58:4d:ee: c0:1f:fe:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUfq3UP+tJmL9zF4YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MDMwNzAyMDAyNVoXDTI0MDYwNTAxMDAyNVowLzEtMCsGA1UEAxMk ZGFmOWZhNmYtZDFjYi00YzQyLWFlYzgtOTY0NDE1YzRmYzg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzkbXulco99wumbvzRuIWNGtfoAH3tclTtXTt IDlSzoXf657Zkn8+SC5/u2bI9CA15c4oFtkPEH7TiBk3AvjQJ9L2hggguuS0gwDy 0Wo7u8NrvX6FgcwRCAFn1q1nFJpGJvyXGAZ6c1EaxbGjDjq3/6NsZPUUUNMdWCB9 lZdNb5Plvc2JKQEFZPC3+/VI9FWxbPwXRq8fRYIUoLpXYqLhmmpANW7pEggkTnDi DM2q+x81mRNZgvq8okliBz44FnVDjBs3LB/bWqPU2C4RK1dvKOvnFXzmnTHrVAWF 50FDjs+BmGdKWi6+A6ZRavOtBQc2ti8sllgx+CqJZBf8F3BTiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAIwUlduNsq6CvBQuBSVVArOMaFIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjQ3NGI0ODAtZmU5Ni0z YjA1LWIwMTYtNmJmMWQxMGMxMjg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRFYsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADtc6ESRipQRlUD1S/WFoII7zaD5LfbFr5ue07Zg6dCBfPxlHr662Xtx cGzmwg9lgu8nOiP0KFrAT8z5vq4I5ADca/0T/PBwfHbbS5ryXkE37G1MqDPub5jR L7Xt1JP6vr4oO1ig263x7/RZCvmmITfISt4q1ySXWNu+ccm2FLokv91EHhgUhCEK zsspH5ieRA/ZexQLLT5eWCVfOC6SlSb8feEuNJdhA0fh1h/KYV5F6+G2+QhfXgY1 vJi3iBOLOdPhL3iTKT7NHxyM+v0jP/RK44wVE2rwDygOKNa6aWwMGsF3nnJITa0f sc9MIJbIertl9j7I7qCGZ1hN7sAf/rE= -----END CERTIFICATE-----Generated at Sun May 5 02:21:07 2024 by rpki-client on console-ams.rpki-client.org