$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/696f8618-87a2-30f7-847a-25a8f5feddde.roa File: 696f8618-87a2-30f7-847a-25a8f5feddde.roa (raw, json) Hash identifier: VuLJR6+07KV1fE1vRtQ6/pP9gP1r3KmP0TPAcnCvYdg= Subject key identifier: A9:94:4F:60:9B:12:9E:BC:67:3F:26:91:F6:66:BC:25:CE:ED:93:2F Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285844D051E2AC303D2597B116BD00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/696f8618-87a2-30f7-847a-25a8f5feddde.roa Signing time: Tue 06 Feb 2024 12:00:00 +0000 ROA not before: Tue 06 Feb 2024 12:00:00 +0000 ROA not after: Mon 16 Sep 2024 04:00:00 +0000 asID: 13335 IP address blocks: 172.68.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:d0:51:e2:ac:30:3d:25:97:b1:16:bd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Feb 6 12:00:00 2024 GMT Not After : Sep 16 04:00:00 2024 GMT Subject: CN=d57393e1-69f9-454c-a1ba-a9335836f4ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:82:60:d0:03:53:38:07:71:1a:0a:ca:aa:d7: 11:6c:fe:77:25:14:b7:e3:fb:95:8f:50:de:df:00: 52:53:18:95:f9:71:86:d1:b3:a3:90:23:55:e9:b6: 48:8f:67:11:f3:2e:4d:9a:94:76:15:09:f4:a9:51: e4:c2:bd:e0:d7:40:06:61:3c:b2:30:13:97:1e:0e: 6e:a2:bd:e8:b0:7c:22:55:e7:38:db:60:cf:1b:3b: 36:93:ee:f6:47:98:ed:22:c7:11:2c:13:a2:b6:25: 5c:ca:3c:2c:bb:c4:56:f6:ab:d8:cd:09:75:70:8e: 45:9b:c3:0f:c1:d6:73:f0:17:b9:04:cf:5c:5a:3f: c2:75:56:2d:46:05:94:f5:24:f1:82:4b:55:7e:bd: b1:f3:f3:a9:a5:f0:a6:c8:3d:bd:2b:85:bd:64:eb: 41:ff:65:37:dd:b7:89:dc:26:1a:af:47:5b:be:ea: bb:62:37:93:b9:a8:8a:ed:d4:8f:a4:cd:79:67:7b: 80:76:b8:6e:60:6c:09:7c:bf:9b:dc:ef:3f:8b:a5: 10:c8:dd:4b:9e:9d:a0:11:41:56:1b:21:46:26:4c: 31:5d:e4:b3:12:92:3b:39:f4:03:87:1d:75:93:43: fd:c4:b6:8e:cd:98:ca:99:5a:e9:3d:76:aa:e2:71: 9a:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:94:4F:60:9B:12:9E:BC:67:3F:26:91:F6:66:BC:25:CE:ED:93:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/696f8618-87a2-30f7-847a-25a8f5feddde.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:a1:c8:7f:e0:4a:4c:84:23:e1:8c:35:23:91:8e:3a:23:69: 53:60:75:74:d2:6c:49:6f:1c:e2:f3:91:4c:07:e1:f9:4c:b5: bf:67:32:ff:92:38:43:5f:47:c7:da:e2:d1:25:39:e3:c5:c1: 08:dc:35:4a:7b:df:60:cd:c1:76:3a:d0:cc:db:0a:1a:05:68: c3:0c:40:63:5a:8e:11:c1:97:8a:18:7c:ec:a3:7c:44:a2:8f: 5f:77:92:e9:e4:07:ed:00:ea:43:1b:85:8d:6d:59:2d:bb:54: 3f:be:4a:31:93:7e:1d:da:70:36:33:41:a5:e0:fd:e1:35:ae: a5:40:5c:59:42:2e:01:de:3c:5c:36:bb:18:d2:b0:c9:cd:b2: 89:55:9d:3b:ca:08:ec:e9:e7:9c:08:31:45:b8:fd:f6:e2:15: 27:ea:c8:b1:d6:7b:bd:bc:7a:b4:11:0f:9a:2a:5f:6d:d1:f8: ed:cb:c1:63:9a:22:57:69:b0:f3:a5:9d:3e:7f:8a:45:06:f4: 53:ee:cd:26:a2:e5:6c:d3:f1:b2:3a:b7:4d:6b:92:bf:98:f8: 54:19:f9:24:65:dd:ec:81:12:d3:35:39:9b:72:72:4c:8a:e6: 59:80:ce:ce:5f:2b:08:fd:41:7f:a6:74:7d:77:a1:00:4e:6a: d3:d6:89:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWETQUeKsMD0ll7EWvQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI0MDIwNjEyMDAwMFoXDTI0MDkxNjA0MDAwMFowLzEtMCsGA1UEAxMk ZDU3MzkzZTEtNjlmOS00NTRjLWExYmEtYTkzMzU4MzZmNGVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIJg0ANTOAdxGgrKqtcRbP53JRS34/uVj1De 3wBSUxiV+XGG0bOjkCNV6bZIj2cR8y5NmpR2FQn0qVHkwr3g10AGYTyyMBOXHg5u or3osHwiVec422DPGzs2k+72R5jtIscRLBOitiVcyjwsu8RW9qvYzQl1cI5Fm8MP wdZz8Be5BM9cWj/CdVYtRgWU9STxgktVfr2x8/OppfCmyD29K4W9ZOtB/2U33beJ 3CYar0dbvuq7YjeTuaiK7dSPpM15Z3uAdrhuYGwJfL+b3O8/i6UQyN1Lnp2gEUFW GyFGJkwxXeSzEpI7OfQDhx11k0P9xLaOzZjKmVrpPXaq4nGaNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKmUT2CbEp68Zz8mkfZmvCXO7ZMvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNjk2Zjg2MTgtODdhMi0z MGY3LTg0N2EtMjVhOGY1ZmVkZGRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArER4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFOhyH/gSkyEI+GMNSORjjojaVNgdXTSbElvHOLzkUwH4flMtb9nMv+S OENfR8fa4tElOePFwQjcNUp732DNwXY60MzbChoFaMMMQGNajhHBl4oYfOyjfESi j193kunkB+0A6kMbhY1tWS27VD++SjGTfh3acDYzQaXg/eE1rqVAXFlCLgHePFw2 uxjSsMnNsolVnTvKCOzp55wIMUW4/fbiFSfqyLHWe728erQRD5oqX23R+O3LwWOa IldpsPOlnT5/ikUG9FPuzSai5WzT8bI6t01rkr+Y+FQZ+SRl3eyBEtM1OZtyckyK 5lmAzs5fKwj9QX+mdH13oQBOatPWiVQ= -----END CERTIFICATE-----Generated at Sun May 12 03:26:01 2024 by rpki-client on console-fra.rpki-client.org