$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ca5c83e3-f2ce-3c42-8287-3eb012836919.roa File: ca5c83e3-f2ce-3c42-8287-3eb012836919.roa (raw, json) Hash identifier: JTyeJaGn9Sn1F+Orzbjo+1OrznGrv+JXhBfBTwB8gqY= Subject key identifier: CC:29:A7:02:94:EA:0D:F2:E7:8F:12:37:04:A1:6C:54:F0:BB:0E:2F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858451FAC28EE0191210B45865E80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ca5c83e3-f2ce-3c42-8287-3eb012836919.roa Signing time: Thu 07 Mar 2024 02:00:25 +0000 ROA not before: Thu 07 Mar 2024 02:00:25 +0000 ROA not after: Wed 05 Jun 2024 01:00:25 +0000 asID: 33491 IP address blocks: 68.85.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:1f:ac:28:ee:01:91:21:0b:45:86:5e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 7 02:00:25 2024 GMT Not After : Jun 5 01:00:25 2024 GMT Subject: CN=9fa93b6a-419e-46b6-b1d7-ee8a820bdddf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:30:67:17:7a:1e:29:13:b4:46:33:b0:51:d5: cc:48:34:9b:bb:01:ff:fe:51:b7:37:f4:ac:9a:3e: e9:29:99:02:ac:0a:4c:91:be:98:25:a7:82:a2:7f: 4f:24:75:d5:97:c1:6e:dc:ed:6a:81:55:89:97:d6: fa:ef:78:03:57:4e:50:90:f4:06:90:e7:a9:43:cb: d8:41:0e:1e:3d:e2:79:af:b1:7c:96:81:6a:f5:a0: 6c:1a:2f:67:7f:06:4a:33:33:af:77:7f:bf:eb:a7: 0e:48:f7:a9:96:f9:fc:29:81:90:1f:ae:a8:c7:24: bb:f2:c6:5a:22:3e:ca:c5:42:37:d0:39:61:c2:06: 34:1e:83:a0:4f:07:3c:e6:a9:5d:bd:7c:e1:f4:79: 10:ac:b3:54:71:95:dd:4c:de:56:b5:c7:6c:8a:90: 2e:4e:57:ee:f3:c3:38:8f:30:d4:eb:aa:59:9d:db: f8:73:7e:34:86:06:96:91:7c:ad:37:15:eb:69:f6: 15:fd:a7:0a:78:dc:8e:9e:1a:28:a7:f7:f1:50:62: 9b:04:50:30:f7:58:37:03:60:6f:64:a3:b8:b4:b5: 23:85:b4:4c:c3:3a:41:93:04:d4:1c:d1:a9:e6:47: 5d:f6:0e:b8:3b:3a:a8:16:37:bd:8a:3a:e2:d6:02: 91:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:29:A7:02:94:EA:0D:F2:E7:8F:12:37:04:A1:6C:54:F0:BB:0E:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ca5c83e3-f2ce-3c42-8287-3eb012836919.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.85.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:73:0f:f8:4f:c3:2c:f6:50:0d:f3:32:5c:a6:57:10:76:17: 31:7e:d2:eb:14:23:b9:d5:26:bc:11:ec:75:04:48:9e:8f:c8: f1:04:f9:b1:57:09:d6:51:9b:eb:96:77:95:93:fe:b4:73:84: 0b:fb:ef:51:0d:7b:ba:e4:86:b3:da:f3:a4:3f:ee:5e:df:c6: 6a:b1:10:76:2b:39:4d:1e:de:43:e5:20:8f:2d:0f:ad:cd:2e: 77:a9:d7:12:b6:18:6f:43:00:37:1d:ab:3f:3d:53:05:8d:7f: cb:e5:ed:66:a5:8f:7c:07:14:34:78:c8:39:21:44:16:70:be: a0:ef:67:4d:70:1e:17:a1:13:75:95:e8:dd:2b:fb:fa:65:5a: 0b:39:5f:9c:20:b3:4a:e2:5c:49:63:6d:ff:bc:30:50:8b:e3: b4:8f:3f:47:34:75:6c:a2:f1:e5:98:34:cf:ac:2d:22:97:61: 4d:c7:c1:16:72:5f:cb:4a:89:b8:a1:ed:32:2b:bd:67:dc:89: 16:19:96:c8:76:36:02:e2:09:44:08:2e:36:4e:cd:78:64:7a: 05:1f:5b:c4:6b:ed:dc:0c:6c:60:da:d6:a5:2b:70:07:40:9d: 07:1d:f7:99:6c:7e:d6:a1:f2:9b:82:a4:95:46:d3:f0:42:4d: 57:c1:64:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUfrCjuAZEhC0WGXoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MDMwNzAyMDAyNVoXDTI0MDYwNTAxMDAyNVowLzEtMCsGA1UEAxMk OWZhOTNiNmEtNDE5ZS00NmI2LWIxZDctZWU4YTgyMGJkZGRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDBnF3oeKRO0RjOwUdXMSDSbuwH//lG3N/Ss mj7pKZkCrApMkb6YJaeCon9PJHXVl8Fu3O1qgVWJl9b673gDV05QkPQGkOepQ8vY QQ4ePeJ5r7F8loFq9aBsGi9nfwZKMzOvd3+/66cOSPeplvn8KYGQH66oxyS78sZa Ij7KxUI30DlhwgY0HoOgTwc85qldvXzh9HkQrLNUcZXdTN5WtcdsipAuTlfu88M4 jzDU66pZndv4c340hgaWkXytNxXrafYV/acKeNyOnhoop/fxUGKbBFAw91g3A2Bv ZKO4tLUjhbRMwzpBkwTUHNGp5kdd9g64OzqoFje9ijri1gKRKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMwppwKU6g3y548SNwShbFTwuw4vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2E1YzgzZTMtZjJjZS0z YzQyLTgyODctM2ViMDEyODM2OTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARFXQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKxzD/hPwyz2UA3zMlymVxB2FzF+0usUI7nVJrwR7HUESJ6PyPEE+bFX CdZRm+uWd5WT/rRzhAv771ENe7rkhrPa86Q/7l7fxmqxEHYrOU0e3kPlII8tD63N Lnep1xK2GG9DADcdqz89UwWNf8vl7Walj3wHFDR4yDkhRBZwvqDvZ01wHhehE3WV 6N0r+/plWgs5X5wgs0riXEljbf+8MFCL47SPP0c0dWyi8eWYNM+sLSKXYU3HwRZy X8tKibih7TIrvWfciRYZlsh2NgLiCUQILjZOzXhkegUfW8Rr7dwMbGDa1qUrcAdA nQcd95lsftah8puCpJVG0/BCTVfBZIQ= -----END CERTIFICATE-----Generated at Sat May 4 14:56:14 2024 by rpki-client on console-fra.rpki-client.org