$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/de93d752-61fa-35d1-89fe-de1c540126f7.roa File: de93d752-61fa-35d1-89fe-de1c540126f7.roa (raw, json) Hash identifier: ziRUMiDnaNk8Uro0FJAXP9G9TSrQU0PAa+hi9OeZE5E= Subject key identifier: 49:C2:5F:C8:BE:77:26:54:0E:74:5F:E1:1A:C1:70:1A:F2:19:1B:F3 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858451FAB03A95A9F45E328892980 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/de93d752-61fa-35d1-89fe-de1c540126f7.roa Signing time: Thu 07 Mar 2024 02:00:25 +0000 ROA not before: Thu 07 Mar 2024 02:00:25 +0000 ROA not after: Wed 05 Jun 2024 01:00:25 +0000 asID: 22909 IP address blocks: 68.60.20.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:1f:ab:03:a9:5a:9f:45:e3:28:89:29:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 7 02:00:25 2024 GMT Not After : Jun 5 01:00:25 2024 GMT Subject: CN=39bcfd5f-bf31-4df6-8f0d-ed2356c0d8f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:e1:2a:ad:c8:64:c7:04:5d:1d:5e:3c:89:9f: 03:74:71:d3:3e:29:52:5f:d0:22:b0:1d:5a:f9:ae: 64:fd:6f:0f:8a:c5:23:9f:b8:e2:05:5a:56:82:23: 59:37:84:3e:c2:d8:d4:42:76:c0:56:2c:85:4b:13: 72:f2:79:0d:7d:92:18:92:1d:2b:93:6e:53:be:e4: fa:21:01:68:ad:b0:f9:c9:ed:d8:8c:61:9e:0c:e5: 06:65:85:32:b2:7a:67:f1:ca:a8:69:12:29:51:9f: 03:84:81:8e:f2:32:49:6e:a6:52:cc:0e:40:ff:c4: a5:63:57:98:bc:6f:bd:15:a2:44:10:c6:83:cc:23: 04:0d:9b:a0:b1:57:51:de:f7:c7:48:be:fa:9c:b1: e3:b1:ee:23:91:70:2e:ab:53:fd:c6:e7:51:e4:1a: 5e:e9:e4:47:0d:f6:5a:f1:cd:9d:df:38:f5:68:5b: 5f:c8:28:1d:e1:c1:7d:18:6b:67:c5:89:ad:4c:df: ab:ae:4d:20:31:1a:f7:33:44:82:a8:78:1e:23:eb: 54:c2:89:07:07:43:75:d8:27:b6:9d:00:ad:79:a9: 28:6b:2c:8b:08:d8:96:e8:90:dd:64:02:f7:90:fd: 9b:d1:ec:cd:16:7b:98:d1:fa:8c:b8:8f:4d:5f:ba: 9b:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:C2:5F:C8:BE:77:26:54:0E:74:5F:E1:1A:C1:70:1A:F2:19:1B:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/de93d752-61fa-35d1-89fe-de1c540126f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.60.20.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:90:0c:d5:e1:16:06:6c:62:cb:9d:9e:a5:f5:84:24:3f:c9: b6:0d:c6:07:35:57:5a:35:53:cf:17:2b:cd:6e:b5:d9:18:29: 60:d4:26:92:3f:82:b2:44:1f:3f:7d:0b:50:d6:d2:6c:de:c1: e2:6f:2c:54:a1:a7:58:81:ca:ed:b4:c6:20:ed:d7:ff:2b:d2: ec:5d:c0:4d:b7:f3:97:93:99:06:33:ff:ef:a7:94:9d:3b:ec: dc:49:fe:d4:8d:06:f7:4f:fc:d9:a7:56:77:d7:aa:3d:80:0f: bb:45:c4:8b:63:21:fd:59:22:e7:d9:57:ca:d6:af:d1:86:7e: be:3c:44:54:7a:b3:3c:4b:0a:ba:74:40:77:a6:5e:d7:3e:20: 08:6e:9c:ff:47:92:3a:8b:be:9a:e5:a5:44:37:e7:2e:d1:81: 39:1b:1f:3d:e3:7f:ff:c9:a0:66:99:bd:3c:67:e4:74:ec:2e: 9d:d2:9f:e4:f2:c5:d3:de:03:7a:11:3e:aa:91:3f:51:ce:f6: d8:26:15:21:12:77:c2:99:b1:ee:d5:3e:86:d2:4e:d2:6f:2c: c9:c7:59:b8:bf:b6:fc:89:52:07:55:d5:47:3f:ad:5c:0b:39: 61:c1:78:b8:ad:21:1a:e3:e3:65:ee:d0:11:ea:88:2e:a9:76: f9:d3:c2:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUfqwOpWp9F4yiJKYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MDMwNzAyMDAyNVoXDTI0MDYwNTAxMDAyNVowLzEtMCsGA1UEAxMk MzliY2ZkNWYtYmYzMS00ZGY2LThmMGQtZWQyMzU2YzBkOGYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOEqrchkxwRdHV48iZ8DdHHTPilSX9AisB1a +a5k/W8PisUjn7jiBVpWgiNZN4Q+wtjUQnbAViyFSxNy8nkNfZIYkh0rk25TvuT6 IQForbD5ye3YjGGeDOUGZYUysnpn8cqoaRIpUZ8DhIGO8jJJbqZSzA5A/8SlY1eY vG+9FaJEEMaDzCMEDZugsVdR3vfHSL76nLHjse4jkXAuq1P9xudR5Bpe6eRHDfZa 8c2d3zj1aFtfyCgd4cF9GGtnxYmtTN+rrk0gMRr3M0SCqHgeI+tUwokHB0N12Ce2 nQCteakoayyLCNiW6JDdZAL3kP2b0ezNFnuY0fqMuI9NX7qbcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEnCX8i+dyZUDnRf4RrBcBryGRvzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGU5M2Q3NTItNjFmYS0z NWQxLTg5ZmUtZGUxYzU0MDEyNmY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRDwUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKGQDNXhFgZsYsudnqX1hCQ/ybYNxgc1V1o1U88XK81utdkYKWDUJpI/ grJEHz99C1DW0mzeweJvLFShp1iByu20xiDt1/8r0uxdwE2385eTmQYz/++nlJ07 7NxJ/tSNBvdP/NmnVnfXqj2AD7tFxItjIf1ZIufZV8rWr9GGfr48RFR6szxLCrp0 QHemXtc+IAhunP9HkjqLvprlpUQ35y7RgTkbHz3jf//JoGaZvTxn5HTsLp3Sn+Ty xdPeA3oRPqqRP1HO9tgmFSESd8KZse7VPobSTtJvLMnHWbi/tvyJUgdV1Uc/rVwL OWHBeLitIRrj42Xu0BHqiC6pdvnTwvI= -----END CERTIFICATE-----Generated at Sat May 4 14:58:45 2024 by rpki-client on console-ams.rpki-client.org