$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/08c6ef38-cee2-3fa1-826b-42344e0a8687.roa File: 08c6ef38-cee2-3fa1-826b-42344e0a8687.roa (raw, json) Hash identifier: JgHQqVg9yQCagZr7L/nRWEmatNRu3jGTGYZMN4fkGMU= Subject key identifier: 50:14:0B:A3:47:9D:F4:63:0E:C0:FF:73:96:C4:DD:F7:EB:F5:E4:4E Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285844D05207173EA7978714BB7000 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/08c6ef38-cee2-3fa1-826b-42344e0a8687.roa Signing time: Tue 06 Feb 2024 12:00:00 +0000 ROA not before: Tue 06 Feb 2024 12:00:00 +0000 ROA not after: Mon 16 Sep 2024 04:00:00 +0000 asID: 13335 IP address blocks: 172.68.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:d0:52:07:17:3e:a7:97:87:14:bb:70:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Feb 6 12:00:00 2024 GMT Not After : Sep 16 04:00:00 2024 GMT Subject: CN=f8a722a7-a9bb-45eb-8a21-f3ff38e4df59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:7c:0e:53:25:ef:86:5b:ce:78:92:5e:e2:39: 49:72:90:ac:6f:57:0e:e8:3b:10:a5:0d:71:e6:b3: 6c:9f:3e:91:11:eb:99:c5:79:c2:06:6f:97:80:3a: bd:4b:2d:58:11:86:8b:93:a2:10:66:ea:76:4c:d5: 16:a5:56:7d:a7:5e:0c:20:42:56:40:05:d3:48:dc: b1:16:f9:ed:57:c7:d8:da:19:cd:16:a9:9b:d5:92: d1:7f:8a:ee:2f:a5:5b:14:06:42:26:6a:33:28:15: aa:09:59:b9:0f:8a:c9:3f:1c:08:39:04:84:2c:24: ee:fd:43:c2:ac:e8:0a:29:88:43:b9:52:6f:5c:31: 15:f8:fa:c7:bb:01:fa:3b:78:24:67:f6:40:03:44: 93:84:e0:58:11:84:93:31:79:58:cd:52:0b:57:94: 80:a4:df:be:97:5c:68:5f:d3:bb:ea:8d:a3:46:29: 19:50:0b:67:cd:51:1b:b6:5c:1c:8c:bc:91:d7:c6: 9c:cd:b3:c4:52:9c:30:9a:55:0e:d4:f4:26:a0:05: 47:aa:17:59:50:0b:72:96:76:79:89:05:ed:1b:b0: 64:8b:ca:49:f6:e1:b1:86:4c:74:30:3e:4a:bd:e8: 67:3c:06:55:a3:d2:94:07:58:8b:07:93:b1:76:3c: 61:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:14:0B:A3:47:9D:F4:63:0E:C0:FF:73:96:C4:DD:F7:EB:F5:E4:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/08c6ef38-cee2-3fa1-826b-42344e0a8687.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:c1:44:d2:13:e5:c9:b8:63:8f:b6:3c:55:3d:e9:8c:6f:05: b5:fc:a9:5e:15:07:01:ed:f7:38:f2:e2:f4:11:9e:8d:05:4e: d2:8b:d6:a4:fc:ad:1a:2c:b9:8d:00:55:6e:12:95:87:76:5f: 6d:da:ee:c8:ef:bc:ba:cb:9e:7d:ed:39:c7:6e:e0:30:c6:fc: 21:6a:3f:5b:49:d8:57:c3:e4:6a:91:63:c3:bd:f8:3c:c3:40: 44:ea:c7:43:49:2f:de:f9:56:72:19:6c:1f:c3:28:0c:fe:a3: 15:61:ef:8f:10:9a:48:ed:c6:eb:79:7e:ec:88:bd:7a:36:74: 8d:f8:38:7b:07:b2:2c:cd:60:cf:f0:d4:f0:13:4b:2e:8f:d7: 07:b7:d4:3e:c0:ec:58:96:38:35:74:fb:50:85:f1:fa:3f:11: 07:8e:be:9a:e3:ac:bb:3e:73:cd:51:b5:a4:0a:4d:a5:ec:4d: 22:22:29:db:55:59:a2:de:a5:a6:4f:7b:05:94:68:61:d3:5a: 60:92:e3:40:56:ee:94:0d:0b:24:30:1d:07:c1:90:ac:a7:fc: 11:24:13:1a:9f:4d:b9:c2:56:77:20:57:03:29:55:d7:14:0d: 11:da:d0:78:cb:48:54:db:70:77:20:3f:a8:02:1f:12:4e:35: 9b:40:b7:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWETQUgcXPqeXhxS7cAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI0MDIwNjEyMDAwMFoXDTI0MDkxNjA0MDAwMFowLzEtMCsGA1UEAxMk ZjhhNzIyYTctYTliYi00NWViLThhMjEtZjNmZjM4ZTRkZjU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhHwOUyXvhlvOeJJe4jlJcpCsb1cO6DsQpQ1x 5rNsnz6REeuZxXnCBm+XgDq9Sy1YEYaLk6IQZup2TNUWpVZ9p14MIEJWQAXTSNyx FvntV8fY2hnNFqmb1ZLRf4ruL6VbFAZCJmozKBWqCVm5D4rJPxwIOQSELCTu/UPC rOgKKYhDuVJvXDEV+PrHuwH6O3gkZ/ZAA0SThOBYEYSTMXlYzVILV5SApN++l1xo X9O76o2jRikZUAtnzVEbtlwcjLyR18aczbPEUpwwmlUO1PQmoAVHqhdZUAtylnZ5 iQXtG7Bki8pJ9uGxhkx0MD5KvehnPAZVo9KUB1iLB5OxdjxhpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFAUC6NHnfRjDsD/c5bE3ffr9eROMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMDhjNmVmMzgtY2VlMi0z ZmExLTgyNmItNDIzNDRlMGE4Njg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArER5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJnBRNIT5cm4Y4+2PFU96YxvBbX8qV4VBwHt9zjy4vQRno0FTtKL1qT8 rRosuY0AVW4SlYd2X23a7sjvvLrLnn3tOcdu4DDG/CFqP1tJ2FfD5GqRY8O9+DzD QETqx0NJL975VnIZbB/DKAz+oxVh748Qmkjtxut5fuyIvXo2dI34OHsHsizNYM/w 1PATSy6P1we31D7A7FiWODV0+1CF8fo/EQeOvprjrLs+c81RtaQKTaXsTSIiKdtV WaLepaZPewWUaGHTWmCS40BW7pQNCyQwHQfBkKyn/BEkExqfTbnCVncgVwMpVdcU DRHa0HjLSFTbcHcgP6gCHxJONZtAtyM= -----END CERTIFICATE-----Generated at Sat May 11 02:51:03 2024 by rpki-client on console-ams.rpki-client.org