$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3d5d9d30-9282-340a-a83d-74cc897b6e26.roa File: 3d5d9d30-9282-340a-a83d-74cc897b6e26.roa (raw, json) Hash identifier: ddHkMgJpQ5NW4cbSOjoO3xeD1a43pz/fUKloH5TkjfE= Subject key identifier: D4:6C:9C:CC:BC:3D:5C:62:BB:AF:FA:B5:BB:85:7F:85:B8:B9:D1:4D Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584235E9950DCA098F5DB085A940 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3d5d9d30-9282-340a-a83d-74cc897b6e26.roa Signing time: Mon 12 Jun 2023 12:00:00 +0000 ROA not before: Mon 12 Jun 2023 12:00:00 +0000 ROA not after: Mon 16 Sep 2024 04:00:00 +0000 asID: 13335 IP address blocks: 172.69.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:42:35:e9:95:0d:ca:09:8f:5d:b0:85:a9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Jun 12 12:00:00 2023 GMT Not After : Sep 16 04:00:00 2024 GMT Subject: CN=9856e9f2-a5cc-4c5d-8eb3-6264d6e5836e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:1d:4e:7f:1e:47:9e:a0:46:e3:22:39:0d:09: 9b:d2:40:05:ae:5e:fc:15:3a:ac:1c:34:3b:f2:e4: 9f:ac:13:58:b0:9a:c3:b9:ea:2a:67:97:b0:dd:a7: a5:48:91:86:5a:08:1f:bc:a4:ac:cc:14:64:fb:63: d5:42:be:84:eb:6a:b0:ab:28:34:8e:4b:a1:83:c8: 2f:32:39:a4:91:69:c2:9d:cf:a4:62:2d:b4:46:3d: 16:ec:c7:25:21:23:62:3b:b7:68:b0:62:8d:43:2c: 93:7b:10:f0:90:cc:94:3c:eb:48:d8:67:ab:f0:1b: ff:1e:9e:dd:e6:33:8d:5c:84:63:14:74:62:8c:9f: 27:8f:a2:46:2a:06:03:5f:27:13:98:d1:53:de:67: ae:aa:c6:eb:17:58:4b:81:07:31:d6:3b:c3:45:76: c5:85:98:d9:6a:84:ef:e0:f0:63:86:69:77:5b:43: ba:db:14:eb:f5:03:6d:5c:d1:4d:f2:12:f1:2a:c8: 64:a0:d9:15:ee:a7:cd:21:e1:d6:2c:66:9e:08:1c: 14:46:6a:ca:b3:67:de:16:66:09:8b:bf:a3:62:8c: 30:09:43:84:fb:d5:57:30:9b:37:08:d6:bd:be:c8: 42:5b:05:13:38:92:cd:ee:6a:41:d3:c3:d9:1e:1e: bf:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:6C:9C:CC:BC:3D:5C:62:BB:AF:FA:B5:BB:85:7F:85:B8:B9:D1:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3d5d9d30-9282-340a-a83d-74cc897b6e26.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.95.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:a5:1c:37:72:6f:af:77:66:dd:b6:91:8e:fc:b4:4c:0b:7a: 9e:f3:05:6d:b0:01:72:e0:b2:36:fb:6a:a4:cd:3e:47:f3:10: 3d:86:c1:2e:b1:3d:ae:ba:ae:8b:3d:e3:9a:dc:73:15:2e:f6: 8d:94:c0:31:21:ba:b3:5b:74:d9:34:6d:d9:2d:ab:8d:39:27: 13:45:ea:b3:70:04:9b:26:53:d8:57:5d:7a:39:9b:70:2e:78: 2d:05:69:2a:48:a0:e6:f6:38:49:8f:b1:00:61:d3:0d:4f:1b: 47:70:40:e0:6c:43:d5:b5:8a:b5:84:29:cd:ac:2c:3a:10:8b: 16:04:8b:fd:ca:1e:c5:d2:67:56:c0:79:8c:e1:6a:d0:98:89: f4:db:56:98:fc:33:bf:19:28:4a:ba:3c:c3:49:5d:59:5f:4e: 61:a3:7e:b6:15:cb:2c:6d:55:2c:7c:a9:69:67:0d:94:64:ac: 14:57:86:49:cc:b9:90:23:33:f1:aa:40:e5:c1:75:a8:fd:5f: 08:94:93:26:12:1d:11:8e:09:0e:8c:c9:cb:03:20:4d:06:08: a3:f2:ce:b8:db:19:8e:05:f7:76:f1:91:1b:0f:0d:9c:2b:36: 16:ce:29:11:87:84:9d:1b:64:1e:6d:d4:9e:08:d7:3f:8e:03: 50:91:0e:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEI16ZUNygmPXbCFqUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTIzMDYxMjEyMDAwMFoXDTI0MDkxNjA0MDAwMFowLzEtMCsGA1UEAxMk OTg1NmU5ZjItYTVjYy00YzVkLThlYjMtNjI2NGQ2ZTU4MzZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsx1Ofx5HnqBG4yI5DQmb0kAFrl78FTqsHDQ7 8uSfrBNYsJrDueoqZ5ew3aelSJGGWggfvKSszBRk+2PVQr6E62qwqyg0jkuhg8gv MjmkkWnCnc+kYi20Rj0W7MclISNiO7dosGKNQyyTexDwkMyUPOtI2Ger8Bv/Hp7d 5jONXIRjFHRijJ8nj6JGKgYDXycTmNFT3meuqsbrF1hLgQcx1jvDRXbFhZjZaoTv 4PBjhml3W0O62xTr9QNtXNFN8hLxKshkoNkV7qfNIeHWLGaeCBwURmrKs2feFmYJ i7+jYowwCUOE+9VXMJs3CNa9vshCWwUTOJLN7mpB08PZHh6/UQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNRsnMy8PVxiu6/6tbuFf4W4udFNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvM2Q1ZDlkMzAtOTI4Mi0z NDBhLWE4M2QtNzRjYzg5N2I2ZTI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEVfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIGlHDdyb693Zt22kY78tEwLep7zBW2wAXLgsjb7aqTNPkfzED2GwS6x Pa66ros945rccxUu9o2UwDEhurNbdNk0bdktq405JxNF6rNwBJsmU9hXXXo5m3Au eC0FaSpIoOb2OEmPsQBh0w1PG0dwQOBsQ9W1irWEKc2sLDoQixYEi/3KHsXSZ1bA eYzhatCYifTbVpj8M78ZKEq6PMNJXVlfTmGjfrYVyyxtVSx8qWlnDZRkrBRXhknM uZAjM/GqQOXBdaj9XwiUkyYSHRGOCQ6MycsDIE0GCKPyzrjbGY4F93bxkRsPDZwr NhbOKRGHhJ0bZB5t1J4I1z+OA1CRDsM= -----END CERTIFICATE-----Generated at Sun May 12 03:30:13 2024 by rpki-client on console-ams.rpki-client.org