$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3df4a283-55fd-3387-8957-878bb9736b53.roa File: 3df4a283-55fd-3387-8957-878bb9736b53.roa (raw, json) Hash identifier: wx99iEFeThNMQofOzzRd6O0bsbeH8p9e7PNLpDo0t34= Subject key identifier: 4A:5D:10:03:E3:1B:D9:43:76:5B:94:0F:D8:FC:F7:11:65:12:19:95 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F432858455C418988515DC7C313B86D40 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3df4a283-55fd-3387-8957-878bb9736b53.roa Signing time: Wed 27 Mar 2024 12:00:00 +0000 ROA not before: Wed 27 Mar 2024 12:00:00 +0000 ROA not after: Mon 16 Sep 2024 04:00:00 +0000 asID: 13335 IP address blocks: 172.68.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:5c:41:89:88:51:5d:c7:c3:13:b8:6d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Mar 27 12:00:00 2024 GMT Not After : Sep 16 04:00:00 2024 GMT Subject: CN=729510a5-19a2-4759-a71a-e4be7f8e3433 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:fd:ab:69:7c:6c:0e:7a:47:7f:46:a6:9c:92: 5d:0f:28:28:fc:7f:32:37:94:4c:35:d7:8b:0c:e6: 0a:8c:42:2c:ae:aa:b9:08:e9:26:66:6e:cf:ce:48: 50:4c:97:92:52:1b:14:a9:3a:b4:bc:26:19:1c:1b: c5:3d:0e:94:b1:13:1c:c0:6e:6e:ac:4b:b2:a1:78: b9:ef:3e:d0:c0:ff:a3:2e:d8:fa:8c:57:45:85:a9: f9:3d:4e:65:31:d1:f6:91:f4:ca:6b:eb:a0:c8:14: 4d:c0:73:4a:7e:9e:7a:21:f6:26:a6:b7:85:f4:22: 3f:fe:f6:c6:b8:8a:a2:6a:76:a9:c7:a9:62:b3:79: 44:fb:b8:bf:06:f5:69:13:30:e5:3f:46:e0:99:4b: d2:62:7c:fd:aa:c3:39:0f:1f:b1:a6:3b:a4:25:14: a7:ec:1b:e1:02:49:18:c3:09:77:b6:1f:5b:c0:15: 01:6c:16:ac:03:26:57:a0:92:d9:1d:ad:74:56:f5: 75:41:6c:1b:32:31:e6:2f:24:8d:86:56:28:ff:5e: 66:aa:9d:f8:6c:d3:49:75:76:e0:39:09:f1:d8:63: c7:36:d9:e7:02:fa:91:6a:ce:aa:d2:91:11:ac:01: f6:42:b0:21:13:18:69:c3:58:64:b8:8c:bb:6d:c9: 37:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:5D:10:03:E3:1B:D9:43:76:5B:94:0F:D8:FC:F7:11:65:12:19:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3df4a283-55fd-3387-8957-878bb9736b53.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c4:94:a0:d3:1b:18:4a:e6:93:be:60:6d:36:a4:be:fe:f5:ed: dc:19:59:51:7a:8f:5b:14:02:7d:8e:8d:77:99:78:6e:e7:fe: ed:b9:ed:d8:be:7a:85:c6:ed:ec:69:76:28:0a:e1:33:df:a6: d2:8b:a1:39:c3:67:9a:7b:32:00:77:40:55:15:bb:9f:51:fa: ca:c3:89:a6:92:4a:cd:28:84:e7:e7:59:7c:ba:69:c1:5a:d4: 35:6e:32:31:93:fa:e0:53:5a:c1:f3:aa:1f:f6:98:5a:ab:9e: 19:2e:8b:e2:c4:f1:eb:ae:58:ae:9c:d1:09:94:8c:01:fe:35: b7:b1:11:a6:d3:7b:27:14:2f:88:a6:0e:9a:22:fc:93:a1:bb: 4e:6b:7d:11:c1:32:f9:a6:b2:e3:00:16:9c:24:15:1e:ae:bd: 8e:98:f5:4f:d7:cd:cd:0a:95:fd:c5:df:0f:95:e9:82:77:f0: cb:2d:2a:4a:50:dc:e3:81:5b:13:5a:3f:01:fb:bb:26:00:93: fa:d1:3b:84:96:69:98:9e:bc:89:9f:02:a8:63:de:56:17:79: 33:d5:e8:6e:71:bc:c3:31:f6:29:5a:42:4c:e7:7a:84:b0:db: d7:84:69:4c:9e:6d:31:16:76:4b:2c:e9:07:d1:86:a2:53:3d: ed:f0:75:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVcQYmIUV3HwxO4bUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI0MDMyNzEyMDAwMFoXDTI0MDkxNjA0MDAwMFowLzEtMCsGA1UEAxMk NzI5NTEwYTUtMTlhMi00NzU5LWE3MWEtZTRiZTdmOGUzNDMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnf2raXxsDnpHf0amnJJdDygo/H8yN5RMNdeL DOYKjEIsrqq5COkmZm7PzkhQTJeSUhsUqTq0vCYZHBvFPQ6UsRMcwG5urEuyoXi5 7z7QwP+jLtj6jFdFhan5PU5lMdH2kfTKa+ugyBRNwHNKfp56IfYmpreF9CI//vbG uIqianapx6lis3lE+7i/BvVpEzDlP0bgmUvSYnz9qsM5Dx+xpjukJRSn7BvhAkkY wwl3th9bwBUBbBasAyZXoJLZHa10VvV1QWwbMjHmLySNhlYo/15mqp34bNNJdXbg OQnx2GPHNtnnAvqRas6q0pERrAH2QrAhExhpw1hkuIy7bck3NQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEpdEAPjG9lDdluUD9j89xFlEhmVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvM2RmNGEyODMtNTVmZC0z Mzg3LTg5NTctODc4YmI5NzM2YjUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArESdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMSUoNMbGErmk75gbTakvv717dwZWVF6j1sUAn2OjXeZeG7n/u257di+ eoXG7expdigK4TPfptKLoTnDZ5p7MgB3QFUVu59R+srDiaaSSs0ohOfnWXy6acFa 1DVuMjGT+uBTWsHzqh/2mFqrnhkui+LE8euuWK6c0QmUjAH+NbexEabTeycUL4im Dpoi/JOhu05rfRHBMvmmsuMAFpwkFR6uvY6Y9U/Xzc0Klf3F3w+V6YJ38MstKkpQ 3OOBWxNaPwH7uyYAk/rRO4SWaZievImfAqhj3lYXeTPV6G5xvMMx9ilaQkzneoSw 29eEaUyebTEWdkss6QfRhqJTPe3wdXA= -----END CERTIFICATE-----Generated at Sat May 11 15:30:39 2024 by rpki-client on console-fra.rpki-client.org