$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6d1d2f3e-7ba6-3b2a-a91d-fe958266d1ae.roa File: 6d1d2f3e-7ba6-3b2a-a91d-fe958266d1ae.roa (raw, json) Hash identifier: Y73oGFG+2Wuqn2vR4kjuzK4rX4uxo380bEbWVcL+GvA= Subject key identifier: CD:25:98:F8:7B:E9:A0:48:1A:7D:7D:2B:99:C0:E2:FE:9A:7E:68:E2 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F432858473B59419CBDC74F0A36A62380 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6d1d2f3e-7ba6-3b2a-a91d-fe958266d1ae.roa Signing time: Sun 15 Sep 2024 12:00:00 +0000 ROA not before: Sun 15 Sep 2024 12:00:00 +0000 ROA not after: Fri 19 Dec 2025 05:00:00 +0000 asID: 13335 IP address blocks: 172.68.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:3b:59:41:9c:bd:c7:4f:0a:36:a6:23:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Sep 15 12:00:00 2024 GMT Not After : Dec 19 05:00:00 2025 GMT Subject: CN=d59fb5ff-64a2-4f87-aac6-91499b070583 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:0b:19:1e:aa:0d:91:7b:4c:ab:fc:5f:c2:09: e3:f6:79:86:20:9a:2e:56:5e:29:93:ad:ac:11:76: b5:b2:5d:24:f7:d3:05:88:30:80:ea:4b:20:a9:b0: 96:8e:3c:1c:1e:87:c4:ce:b8:fb:f8:eb:9a:35:d3: d2:91:ac:d9:d5:12:a9:3e:6a:5c:0a:48:f1:1c:b1: 7a:28:0b:97:f5:c5:1f:92:94:7e:6f:ae:2f:e5:86: cf:d9:4d:fc:b3:e2:e4:5f:78:64:4b:df:61:0d:ab: 53:58:55:b8:1d:cc:00:80:32:a4:b1:de:2d:d0:87: 2e:09:4d:3b:3e:87:08:72:0d:98:54:00:a5:64:77: 02:56:14:52:37:06:d2:b7:86:d4:d2:c4:90:d9:f1: ed:35:da:a6:89:9d:a3:01:a7:f7:94:a2:01:d2:c7: 95:10:d8:bd:3d:e2:88:fb:b3:f1:76:c9:af:ed:db: 6a:63:3b:f2:2e:40:c6:fa:ba:d5:80:2f:82:5b:ef: 60:98:33:fb:59:af:69:7c:19:85:e6:b4:1a:f7:bf: 20:a9:85:fe:4c:5a:55:9e:65:94:05:b3:f2:09:ad: 57:f9:85:bf:fd:95:3c:44:20:6c:21:08:78:bd:c6: dd:51:97:9f:09:b1:4a:5f:50:c7:eb:e3:50:94:ba: ea:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:25:98:F8:7B:E9:A0:48:1A:7D:7D:2B:99:C0:E2:FE:9A:7E:68:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6d1d2f3e-7ba6-3b2a-a91d-fe958266d1ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.192.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:0a:26:5f:70:f1:61:ea:05:b9:88:f5:ef:22:cb:4f:6e:70: 5a:69:21:e0:f6:35:7c:f0:81:3b:7e:f8:69:a4:a0:bc:19:e0: a4:76:09:72:24:15:a2:c6:6b:ae:87:40:fa:e2:59:be:a6:00: a9:3a:39:30:38:ea:06:d7:dc:ee:e1:21:58:7a:31:c0:ac:33: ee:79:fb:46:77:4d:c1:57:dc:e5:3a:70:f5:76:fe:34:19:3d: f4:45:5a:fe:7c:89:dc:64:e6:1a:65:6f:58:d0:04:d2:59:22: c2:f1:48:1c:49:ad:f2:60:98:c8:8d:ce:4e:17:12:c1:2e:2d: df:d8:de:69:dc:88:0b:d1:8a:f4:7e:58:35:2e:67:38:cb:c5: 66:59:4b:c3:c1:6e:ec:88:6e:90:ef:bd:a9:46:b6:bd:87:b7: 58:02:a0:f9:7e:76:e2:15:45:84:17:62:ad:9d:24:0b:13:8f: d8:17:63:15:9d:ee:33:03:78:b6:8a:6e:1e:0f:fd:b1:92:f2: f7:3c:a9:b4:51:73:aa:ed:29:c1:8e:05:d2:4f:46:b0:aa:d9: d8:63:3d:ab:f1:05:aa:1c:8a:d7:e2:f7:65:91:ee:6a:ca:43: 84:2d:39:83:e6:76:de:51:31:21:d1:21:e7:c7:e0:ca:c6:85: eb:17:d3:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc7WUGcvcdPCjamI4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI0MDkxNTEyMDAwMFoXDTI1MTIxOTA1MDAwMFowLzEtMCsGA1UEAxMk ZDU5ZmI1ZmYtNjRhMi00Zjg3LWFhYzYtOTE0OTliMDcwNTgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAsZHqoNkXtMq/xfwgnj9nmGIJouVl4pk62s EXa1sl0k99MFiDCA6ksgqbCWjjwcHofEzrj7+OuaNdPSkazZ1RKpPmpcCkjxHLF6 KAuX9cUfkpR+b64v5YbP2U38s+LkX3hkS99hDatTWFW4HcwAgDKksd4t0IcuCU07 PocIcg2YVAClZHcCVhRSNwbSt4bU0sSQ2fHtNdqmiZ2jAaf3lKIB0seVENi9PeKI +7Pxdsmv7dtqYzvyLkDG+rrVgC+CW+9gmDP7Wa9pfBmF5rQa978gqYX+TFpVnmWU BbPyCa1X+YW//ZU8RCBsIQh4vcbdUZefCbFKX1DH6+NQlLrqmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM0lmPh76aBIGn19K5nA4v6afmjiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNmQxZDJmM2UtN2JhNi0z YjJhLWE5MWQtZmU5NTgyNjZkMWFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArETAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHoKJl9w8WHqBbmI9e8iy09ucFppIeD2NXzwgTt++GmkoLwZ4KR2CXIk FaLGa66HQPriWb6mAKk6OTA46gbX3O7hIVh6McCsM+55+0Z3TcFX3OU6cPV2/jQZ PfRFWv58idxk5hplb1jQBNJZIsLxSBxJrfJgmMiNzk4XEsEuLd/Y3mnciAvRivR+ WDUuZzjLxWZZS8PBbuyIbpDvvalGtr2Ht1gCoPl+duIVRYQXYq2dJAsTj9gXYxWd 7jMDeLaKbh4P/bGS8vc8qbRRc6rtKcGOBdJPRrCq2dhjPavxBaocitfi92WR7mrK Q4QtOYPmdt5RMSHRIefH4MrGhesX0yk= -----END CERTIFICATE-----Generated at Fri Nov 22 02:01:05 2024 by rpki-client on console-ams.rpki-client.org