$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fa875c6e-1330-30a7-a0be-f4c0cd9e9b2a.roa File: fa875c6e-1330-30a7-a0be-f4c0cd9e9b2a.roa (raw, json) Hash identifier: p+8ao6rXS71AJqxQGdL3hLNXQ4FMkV92wijo6Aor5/E= Subject key identifier: E6:D9:13:93:BB:AF:11:C1:27:F3:B9:45:70:C1:CE:68:1E:3E:A2:BF Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858451FAC85D8DC0FAB2A9C398240 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fa875c6e-1330-30a7-a0be-f4c0cd9e9b2a.roa Signing time: Thu 07 Mar 2024 02:00:25 +0000 ROA not before: Thu 07 Mar 2024 02:00:25 +0000 ROA not after: Wed 05 Jun 2024 01:00:25 +0000 asID: 22909 IP address blocks: 68.84.80.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:1f:ac:85:d8:dc:0f:ab:2a:9c:39:82:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 7 02:00:25 2024 GMT Not After : Jun 5 01:00:25 2024 GMT Subject: CN=ca833dcd-0898-4c07-9310-3a42d5e40bcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:b1:4d:38:4f:fa:31:0e:96:fb:4c:d9:93:1d: d3:fe:af:20:02:63:e8:e4:92:0c:13:8b:bf:e1:df: cc:f9:97:3a:d1:fd:66:58:64:f7:19:27:a9:21:7c: 14:ff:a2:32:e5:96:74:61:46:e2:e7:06:4d:35:0d: 7b:a2:50:34:eb:40:a4:ee:c6:5e:92:cb:31:ab:7c: 99:18:4f:c7:60:f1:0b:78:3a:1a:7f:45:a6:7c:45: a4:c6:e7:b1:73:ed:2f:1c:e8:e0:31:40:d8:cf:f5: 23:c4:58:cf:a5:46:65:e3:a4:61:13:c8:0e:8a:99: d5:0b:47:53:86:80:28:e5:01:fd:60:44:5e:b5:de: 02:d8:40:fc:28:dd:a0:13:2b:e1:20:36:f1:a0:3b: 96:fe:e6:e8:44:48:40:cd:a6:9b:d4:66:3f:da:8a: 1e:1f:3f:ee:a5:c6:1d:1a:18:c7:f7:c5:bc:a0:08: b3:5e:e9:fc:f6:49:e5:63:9f:2a:c9:72:cd:ff:c7: fa:3e:41:4a:8f:58:03:ff:98:cf:58:1d:01:a4:44: 7f:8e:1c:6a:56:b9:c5:0a:a1:ae:cf:b4:19:cb:2f: 57:11:2c:49:79:74:39:f1:c7:bb:18:e0:c7:69:3f: 6d:91:68:0b:55:43:6a:e8:8b:81:e6:53:d5:e4:2d: a1:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:D9:13:93:BB:AF:11:C1:27:F3:B9:45:70:C1:CE:68:1E:3E:A2:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fa875c6e-1330-30a7-a0be-f4c0cd9e9b2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.84.80.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:24:f1:a9:04:9a:10:8c:e3:89:28:df:d5:70:57:ba:71:28: e9:3b:1e:ac:f8:d4:21:42:74:bb:06:fc:45:3b:00:7d:e1:ad: a9:f4:7d:88:3c:13:79:df:7e:ec:05:20:61:23:72:38:31:9b: 81:38:8f:90:fa:41:09:c8:1e:9d:ae:ab:97:ae:b8:58:95:f5: ae:1d:44:77:98:cd:79:f1:6a:24:0f:3f:04:a1:8b:31:72:9c: 68:cb:fd:5f:f8:30:21:89:d9:57:2b:52:84:bb:52:bf:bb:27: 7d:a5:a0:1e:19:7d:91:b5:8b:ba:1f:d2:2b:bd:e9:cd:ad:60: 42:5d:e8:1a:58:7e:18:db:f3:a8:81:ff:3f:83:75:99:31:07: 04:28:4b:4d:f2:53:ba:3d:49:9d:58:87:c0:39:e7:12:44:38: 06:d9:46:0f:c2:1d:ec:19:2a:12:8a:31:60:a6:d6:4f:20:4b: 88:35:3d:4a:b1:08:5b:db:9f:c8:45:67:7c:d8:ba:36:d7:86: 5e:22:2e:91:5b:fe:8d:85:c0:2d:30:ae:9a:39:a5:1b:ce:13: c6:dc:25:cd:12:76:a6:69:e2:6d:26:0a:39:13:7d:12:f3:7d: 9f:a0:cf:66:d0:ad:0a:64:4c:0d:d2:64:6f:a6:59:f9:13:c8: ee:b6:9f:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUfrIXY3A+rKpw5gkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MDMwNzAyMDAyNVoXDTI0MDYwNTAxMDAyNVowLzEtMCsGA1UEAxMk Y2E4MzNkY2QtMDg5OC00YzA3LTkzMTAtM2E0MmQ1ZTQwYmNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhLFNOE/6MQ6W+0zZkx3T/q8gAmPo5JIME4u/ 4d/M+Zc60f1mWGT3GSepIXwU/6Iy5ZZ0YUbi5wZNNQ17olA060Ck7sZekssxq3yZ GE/HYPELeDoaf0WmfEWkxuexc+0vHOjgMUDYz/UjxFjPpUZl46RhE8gOipnVC0dT hoAo5QH9YERetd4C2ED8KN2gEyvhIDbxoDuW/uboREhAzaab1GY/2ooeHz/upcYd GhjH98W8oAizXun89knlY58qyXLN/8f6PkFKj1gD/5jPWB0BpER/jhxqVrnFCqGu z7QZyy9XESxJeXQ58ce7GODHaT9tkWgLVUNq6IuB5lPV5C2hFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFObZE5O7rxHBJ/O5RXDBzmgePqK/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZmE4NzVjNmUtMTMzMC0z MGE3LWEwYmUtZjRjMGNkOWU5YjJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRFRQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALYk8akEmhCM44ko39VwV7pxKOk7Hqz41CFCdLsG/EU7AH3hran0fYg8 E3nffuwFIGEjcjgxm4E4j5D6QQnIHp2uq5euuFiV9a4dRHeYzXnxaiQPPwShizFy nGjL/V/4MCGJ2VcrUoS7Ur+7J32loB4ZfZG1i7of0iu96c2tYEJd6BpYfhjb86iB /z+DdZkxBwQoS03yU7o9SZ1Yh8A55xJEOAbZRg/CHewZKhKKMWCm1k8gS4g1PUqx CFvbn8hFZ3zYujbXhl4iLpFb/o2FwC0wrpo5pRvOE8bcJc0SdqZp4m0mCjkTfRLz fZ+gz2bQrQpkTA3SZG+mWfkTyO62n2A= -----END CERTIFICATE-----Generated at Sat May 4 14:59:08 2024 by rpki-client on console-fra.rpki-client.org