$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/33dfb761-b044-3c41-bdf5-0f92684de4fd.roa File: 33dfb761-b044-3c41-bdf5-0f92684de4fd.roa (raw, json) Hash identifier: vgqct3t4TT7wyC4ksvWxStJZ7XuBBjhNkN1cjFIKUEs= Subject key identifier: 99:C6:A2:54:43:B4:A4:EE:A5:43:DB:70:EC:A9:B3:A9:D9:51:5D:8C Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285843E8B82601198142A82F7FF400 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/33dfb761-b044-3c41-bdf5-0f92684de4fd.roa Signing time: Wed 15 Nov 2023 12:00:00 +0000 ROA not before: Wed 15 Nov 2023 12:00:00 +0000 ROA not after: Mon 16 Sep 2024 04:00:00 +0000 asID: 13335 IP address blocks: 172.68.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:43:e8:b8:26:01:19:81:42:a8:2f:7f:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Nov 15 12:00:00 2023 GMT Not After : Sep 16 04:00:00 2024 GMT Subject: CN=978966cc-bdd3-4387-8680-08add1191343 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:2f:5c:df:ca:e9:d9:32:1c:b0:0d:f8:ee:37: f2:1d:19:4b:e2:2e:9b:04:a3:4e:2a:ce:aa:99:78: ce:c5:f7:00:6d:e2:94:3f:b0:fc:fe:8a:a0:78:b5: 52:89:d2:af:b7:5c:eb:ef:9e:8f:7c:15:4d:73:26: 98:28:48:75:f1:48:02:0b:84:8e:d0:34:e6:d8:21: 52:6b:c8:07:a7:e3:5d:e0:aa:ac:07:3c:c0:e5:82: e1:63:cd:51:a4:68:dd:a4:69:25:29:2e:be:fa:79: 74:76:33:50:81:aa:eb:4e:6f:bd:f3:0b:2f:2d:fb: 57:c9:f7:a8:f6:1a:33:f2:f3:c5:9a:90:6e:d5:77: 5a:29:19:6b:f1:be:9e:20:3c:6c:00:b1:91:7f:d3: 91:01:55:73:0c:47:77:09:0c:ed:2f:5c:04:5b:25: 45:34:58:2c:6a:e5:f1:8b:40:4e:c4:85:cb:c5:a3: 48:14:79:b3:a4:06:71:e7:6a:b9:00:4f:e1:07:6f: db:22:8a:c8:56:f8:eb:a6:ae:9e:86:52:36:b2:8b: d4:30:7f:64:c6:50:08:5e:58:20:be:50:97:4f:e8: 58:3c:d2:03:32:9a:f2:7b:9b:33:c1:81:e1:88:a7: f9:82:35:1c:16:f9:bb:90:68:86:e3:5e:a0:56:80: 0c:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:C6:A2:54:43:B4:A4:EE:A5:43:DB:70:EC:A9:B3:A9:D9:51:5D:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/33dfb761-b044-3c41-bdf5-0f92684de4fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c0:ef:7e:d3:f8:a1:1a:0f:48:dc:f8:2c:70:34:b7:58:9a:90: 43:d7:4a:bb:af:b7:f5:6f:87:49:38:fe:d6:27:c5:df:75:78: 55:57:7d:18:58:d5:a8:50:cd:7f:a3:73:94:17:68:a9:07:af: 31:b3:2e:25:4e:ad:2a:bb:09:3d:27:b4:c7:c4:3b:99:55:c1: e7:63:1b:90:c2:48:41:ca:17:71:90:a9:89:09:7b:49:68:eb: b5:34:fa:cf:8a:94:5f:09:6c:5f:f6:98:4f:ef:c1:29:3e:7a: 54:6a:93:37:b9:25:2d:e6:3a:42:1e:f5:02:00:1a:bd:2c:f3: e7:66:d0:03:4e:db:80:e3:45:36:a1:51:2d:dc:9c:51:26:d1: 21:12:12:27:f7:11:e3:f5:08:37:8c:88:b9:2f:70:87:eb:f8: 1a:58:85:61:e6:cb:44:58:18:d8:eb:c7:05:01:bf:b5:37:19: 8d:6f:de:61:4a:8a:a5:0d:1c:46:4e:4d:47:77:78:1b:f0:61: 18:b5:fc:a3:58:7e:00:98:01:8d:7b:e7:8e:5d:b6:fe:e9:9d: ea:fc:31:d5:84:38:be:cc:6c:87:cb:c5:90:57:e9:6d:04:4a: 3c:6b:c8:7c:85:fb:19:e5:32:5a:ca:8b:97:d1:a1:69:40:ac: f0:68:42:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEPouCYBGYFCqC9/9AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTIzMTExNTEyMDAwMFoXDTI0MDkxNjA0MDAwMFowLzEtMCsGA1UEAxMk OTc4OTY2Y2MtYmRkMy00Mzg3LTg2ODAtMDhhZGQxMTkxMzQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhy9c38rp2TIcsA347jfyHRlL4i6bBKNOKs6q mXjOxfcAbeKUP7D8/oqgeLVSidKvt1zr756PfBVNcyaYKEh18UgCC4SO0DTm2CFS a8gHp+Nd4KqsBzzA5YLhY81RpGjdpGklKS6++nl0djNQgarrTm+98wsvLftXyfeo 9hoz8vPFmpBu1XdaKRlr8b6eIDxsALGRf9ORAVVzDEd3CQztL1wEWyVFNFgsauXx i0BOxIXLxaNIFHmzpAZx52q5AE/hB2/bIorIVvjrpq6ehlI2sovUMH9kxlAIXlgg vlCXT+hYPNIDMprye5szwYHhiKf5gjUcFvm7kGiG416gVoAMUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJnGolRDtKTupUPbcOyps6nZUV2MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMzNkZmI3NjEtYjA0NC0z YzQxLWJkZjUtMGY5MjY4NGRlNGZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArESRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMDvftP4oRoPSNz4LHA0t1iakEPXSruvt/Vvh0k4/tYnxd91eFVXfRhY 1ahQzX+jc5QXaKkHrzGzLiVOrSq7CT0ntMfEO5lVwedjG5DCSEHKF3GQqYkJe0lo 67U0+s+KlF8JbF/2mE/vwSk+elRqkze5JS3mOkIe9QIAGr0s8+dm0ANO24DjRTah US3cnFEm0SESEif3EeP1CDeMiLkvcIfr+BpYhWHmy0RYGNjrxwUBv7U3GY1v3mFK iqUNHEZOTUd3eBvwYRi1/KNYfgCYAY17545dtv7pner8MdWEOL7MbIfLxZBX6W0E SjxryHyF+xnlMlrKi5fRoWlArPBoQoM= -----END CERTIFICATE-----Generated at Sat May 11 02:51:08 2024 by rpki-client on console-ams.rpki-client.org