$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/efe4f9b6-9bff-398b-8782-4e4924a99851.roa File: efe4f9b6-9bff-398b-8782-4e4924a99851.roa (raw, json) Hash identifier: xhYhvyWcdZRb6S2yJwRwced26+S2iVZVYnnfUCMi4sM= Subject key identifier: 91:51:D9:B7:99:D7:33:E1:2A:10:87:D9:08:3C:4E:56:7A:5E:0E:9C Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858451FAC79559DD29C2107490F00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/efe4f9b6-9bff-398b-8782-4e4924a99851.roa Signing time: Thu 07 Mar 2024 02:00:25 +0000 ROA not before: Thu 07 Mar 2024 02:00:25 +0000 ROA not after: Wed 05 Jun 2024 01:00:25 +0000 asID: 22909 IP address blocks: 68.52.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:1f:ac:79:55:9d:d2:9c:21:07:49:0f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 7 02:00:25 2024 GMT Not After : Jun 5 01:00:25 2024 GMT Subject: CN=a51eed01-a624-44b6-bf1b-09fe06070312 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:fa:48:1d:81:26:a8:c3:88:2d:02:b7:4b:88: 67:ad:c3:b0:c3:24:e3:e3:3b:51:18:fb:e9:df:17: 1d:fc:93:00:07:58:e5:26:9c:cd:dc:a3:60:34:f7: a8:5d:ea:2c:4d:02:7f:e9:05:08:7d:5e:97:3b:7a: 4a:2d:e8:f7:aa:7c:86:08:85:e6:ba:1f:fa:66:43: fb:2d:3c:a8:b1:49:18:7c:45:46:09:9f:9e:0f:e2: 3b:cc:54:22:96:f2:bb:7a:4d:b2:c7:a1:77:b4:8a: f7:05:07:ca:e2:0a:f9:5d:3f:d5:1b:44:5f:a9:da: 1a:22:12:18:7b:cd:7f:f3:0e:c7:97:6c:49:28:57: 29:64:09:aa:36:fb:1c:2d:f2:76:7d:74:94:ba:13: ee:96:67:d0:ba:5d:be:2b:28:e0:3f:74:bd:a9:3b: e4:d3:77:e7:6f:5a:f3:0a:40:71:9a:3b:9a:fd:56: fa:72:76:7f:43:ca:f5:3d:f8:45:68:a1:70:ab:22: 9e:eb:d3:f8:b4:c3:db:d9:1f:39:84:34:bf:8b:b2: 1d:08:45:3f:48:66:a1:44:3a:a1:5d:60:42:07:41: 01:be:18:bc:6d:eb:75:8d:1c:0d:3b:d8:c7:d8:98: 2a:62:63:2e:97:a5:70:02:dd:38:8b:76:df:cd:48: 58:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:51:D9:B7:99:D7:33:E1:2A:10:87:D9:08:3C:4E:56:7A:5E:0E:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/efe4f9b6-9bff-398b-8782-4e4924a99851.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.52.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:84:10:a2:98:5c:55:55:0c:7a:c2:89:f6:6f:4a:e2:70:85: 42:8e:bb:62:fb:ab:29:88:f5:9f:6f:ef:3a:23:69:a7:99:8e: aa:76:c8:b9:2e:3e:47:5e:40:14:3c:bf:5f:7c:37:65:66:8f: f0:70:92:48:7b:df:6f:7b:a3:7d:83:15:13:79:a6:50:38:11: 0b:08:4e:62:f6:5b:ac:bc:d6:e4:bc:a7:bf:03:24:39:6e:75: 25:90:a7:0f:b9:27:6e:8f:ee:7a:07:f9:ea:45:9a:0e:c5:52: e5:96:5b:b1:f5:c1:28:93:03:27:1b:a3:6a:23:17:f7:ee:b4: 44:f8:cf:66:41:84:4c:8e:f7:2c:38:d0:95:38:1a:72:69:ad: 78:ab:ec:bb:ba:9f:3f:4b:e4:a4:18:ff:04:d8:05:9c:19:1b: ec:dd:cd:9b:8b:3b:b5:38:85:ea:ee:64:49:94:0e:21:a3:3a: 40:79:07:66:d1:69:bf:36:ff:62:13:91:a3:6a:ca:28:35:a0: f1:93:b6:a0:ad:ce:85:bc:ee:9b:12:3c:0c:17:f7:df:41:13: 18:dc:d6:93:0d:0b:d5:e3:0a:c9:c5:3b:03:42:42:ae:69:1e: b3:18:9a:d8:84:af:2f:7c:f5:62:a1:d2:83:b1:0f:5f:c1:b6: b5:ef:69:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUfrHlVndKcIQdJDwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MDMwNzAyMDAyNVoXDTI0MDYwNTAxMDAyNVowLzEtMCsGA1UEAxMk YTUxZWVkMDEtYTYyNC00NGI2LWJmMWItMDlmZTA2MDcwMzEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiPpIHYEmqMOILQK3S4hnrcOwwyTj4ztRGPvp 3xcd/JMAB1jlJpzN3KNgNPeoXeosTQJ/6QUIfV6XO3pKLej3qnyGCIXmuh/6ZkP7 LTyosUkYfEVGCZ+eD+I7zFQilvK7ek2yx6F3tIr3BQfK4gr5XT/VG0RfqdoaIhIY e81/8w7Hl2xJKFcpZAmqNvscLfJ2fXSUuhPulmfQul2+KyjgP3S9qTvk03fnb1rz CkBxmjua/Vb6cnZ/Q8r1PfhFaKFwqyKe69P4tMPb2R85hDS/i7IdCEU/SGahRDqh XWBCB0EBvhi8bet1jRwNO9jH2JgqYmMul6VwAt04i3bfzUhYjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJFR2beZ1zPhKhCH2Qg8TlZ6Xg6cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZWZlNGY5YjYtOWJmZi0z OThiLTg3ODItNGU0OTI0YTk5ODUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRDQgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADCEEKKYXFVVDHrCifZvSuJwhUKOu2L7qymI9Z9v7zojaaeZjqp2yLku PkdeQBQ8v198N2Vmj/Bwkkh73297o32DFRN5plA4EQsITmL2W6y81uS8p78DJDlu dSWQpw+5J26P7noH+epFmg7FUuWWW7H1wSiTAycbo2ojF/futET4z2ZBhEyO9yw4 0JU4GnJprXir7Lu6nz9L5KQY/wTYBZwZG+zdzZuLO7U4heruZEmUDiGjOkB5B2bR ab82/2ITkaNqyig1oPGTtqCtzoW87psSPAwX999BExjc1pMNC9XjCsnFOwNCQq5p HrMYmtiEry989WKh0oOxD1/BtrXvaSk= -----END CERTIFICATE-----Generated at Sat May 4 14:58:31 2024 by rpki-client on console-fra.rpki-client.org