$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/43272661-bc0f-30fb-bbd4-fe85b45988bb.roa File: 43272661-bc0f-30fb-bbd4-fe85b45988bb.roa (raw, json) Hash identifier: H6nntOilEJ04xLVb6UboCBS5VnH7Aiad8qLYRiSFEaY= Subject key identifier: FD:83:6B:D7:1C:CF:E3:16:CC:D3:28:34:12:0D:FB:BB:03:09:DD:A8 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285845805D75C6B04B00222F33468C Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/43272661-bc0f-30fb-bbd4-fe85b45988bb.roa Signing time: Tue 09 Apr 2024 12:00:00 +0000 ROA not before: Tue 09 Apr 2024 12:00:00 +0000 ROA not after: Mon 16 Sep 2024 04:00:00 +0000 asID: 13335 IP address blocks: 172.68.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:80:5d:75:c6:b0:4b:00:22:2f:33:46:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 9 12:00:00 2024 GMT Not After : Sep 16 04:00:00 2024 GMT Subject: CN=c4b4eb41-e48e-4eae-b16f-0c11e2d11d9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e3:6e:3f:d4:03:8d:8b:5c:5f:0d:14:3b:26: 3f:de:53:77:d1:e4:3a:7f:57:23:60:7a:b7:fe:23: 0e:34:8c:ec:23:21:90:31:56:f2:48:4c:a7:ee:27: 48:24:07:98:3a:18:5a:df:62:2d:91:f6:1f:07:c6: 5e:f8:43:27:8a:78:5d:be:80:f1:d6:6f:87:97:27: 8b:d1:1a:7e:e1:e5:6d:99:54:15:32:bb:95:f3:e6: 48:85:0b:25:7b:31:00:99:97:66:fd:4c:12:75:2c: 2e:28:67:00:58:28:df:aa:20:c0:b5:df:38:68:e0: 5f:65:b6:4f:42:1c:d0:67:4a:9c:e9:7f:bc:7b:11: 2a:70:e3:b6:2b:ff:92:bb:26:e6:e8:93:25:c0:bd: 17:05:d9:af:29:03:54:f8:66:8d:3a:56:1d:46:a3: 12:32:34:c2:13:18:14:ec:7a:19:13:ed:b8:e0:11: 09:a4:be:e1:58:37:6e:dd:d7:4f:b8:7d:9b:f4:16: e9:39:4e:28:df:8e:f5:22:e1:e5:c5:ca:99:f9:af: fb:2f:38:ee:ac:d3:41:4a:1f:58:a0:d7:81:5f:23: 4d:a1:37:86:e7:a8:23:e0:06:3d:c2:59:0a:36:26: 7c:ef:57:82:9a:6c:83:ef:0a:20:af:57:b7:86:63: 68:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:83:6B:D7:1C:CF:E3:16:CC:D3:28:34:12:0D:FB:BB:03:09:DD:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/43272661-bc0f-30fb-bbd4-fe85b45988bb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:7e:46:b3:9c:ec:1e:68:c8:6c:c7:16:da:8d:35:05:0f:d9: 2c:6b:37:da:79:e0:2b:e5:51:ad:b8:26:54:29:19:7a:4c:73: fa:a4:af:02:6b:7f:c9:25:84:45:76:69:a3:3e:4a:9c:2f:5b: e8:08:c3:27:39:3d:2e:cb:c9:3a:f6:10:f8:0f:f4:43:90:2d: a9:6d:75:f6:d2:5a:0b:7e:34:88:6c:ca:e8:0f:d0:66:37:2f: e1:95:09:32:e9:30:ed:92:05:7a:d6:ce:ea:9a:db:e7:ca:ad: 90:59:df:2d:bb:2b:d7:cf:2c:68:1d:b3:cc:49:13:c6:a3:71: 18:b4:78:89:dd:cc:2a:ea:8c:52:21:9b:b7:6d:52:95:14:83: ce:54:0d:7e:37:51:70:23:61:a0:cb:68:ce:f8:01:02:bc:ad: cc:4b:3c:31:82:f9:17:27:c2:f3:f7:ce:f9:59:1e:67:81:36: d9:33:74:43:a6:d0:7d:79:d0:47:30:a4:87:a7:3c:f2:be:b8: 27:2e:4c:ee:d8:c4:f9:94:f7:25:7e:31:95:0e:16:c1:b8:0c: 4b:60:3a:00:99:58:50:c1:68:3c:27:29:2b:88:ec:d3:d2:11: d4:77:c6:5a:01:ee:37:e1:72:b4:5c:6d:b3:78:77:ab:c5:31: 72:80:82:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWAXXXGsEsAIi8zRowwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI0MDQwOTEyMDAwMFoXDTI0MDkxNjA0MDAwMFowLzEtMCsGA1UEAxMk YzRiNGViNDEtZTQ4ZS00ZWFlLWIxNmYtMGMxMWUyZDExZDljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+NuP9QDjYtcXw0UOyY/3lN30eQ6f1cjYHq3 /iMONIzsIyGQMVbySEyn7idIJAeYOhha32ItkfYfB8Ze+EMninhdvoDx1m+HlyeL 0Rp+4eVtmVQVMruV8+ZIhQslezEAmZdm/UwSdSwuKGcAWCjfqiDAtd84aOBfZbZP QhzQZ0qc6X+8exEqcOO2K/+Suybm6JMlwL0XBdmvKQNU+GaNOlYdRqMSMjTCExgU 7HoZE+244BEJpL7hWDdu3ddPuH2b9BbpOU4o3471IuHlxcqZ+a/7LzjurNNBSh9Y oNeBXyNNoTeG56gj4AY9wlkKNiZ871eCmmyD7wogr1e3hmNoyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP2Da9ccz+MWzNMoNBIN+7sDCd2oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNDMyNzI2NjEtYmMwZi0z MGZiLWJiZDQtZmU4NWI0NTk4OGJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArETcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI5+RrOc7B5oyGzHFtqNNQUP2SxrN9p54CvlUa24JlQpGXpMc/qkrwJr f8klhEV2aaM+SpwvW+gIwyc5PS7LyTr2EPgP9EOQLaltdfbSWgt+NIhsyugP0GY3 L+GVCTLpMO2SBXrWzuqa2+fKrZBZ3y27K9fPLGgds8xJE8ajcRi0eIndzCrqjFIh m7dtUpUUg85UDX43UXAjYaDLaM74AQK8rcxLPDGC+RcnwvP3zvlZHmeBNtkzdEOm 0H150EcwpIenPPK+uCcuTO7YxPmU9yV+MZUOFsG4DEtgOgCZWFDBaDwnKSuI7NPS EdR3xloB7jfhcrRcbbN4d6vFMXKAgiw= -----END CERTIFICATE-----Generated at Sat May 11 15:30:39 2024 by rpki-client on console-fra.rpki-client.org