$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6de2dd1c-130e-3b66-b9d4-51c5c4b90317.roa File: 6de2dd1c-130e-3b66-b9d4-51c5c4b90317.roa (raw, json) Hash identifier: di72PoqanhzFyXn9KJzFidMo+26PeNDo6K7TQKp8toI= Subject key identifier: 20:4D:DE:A2:1F:B2:45:07:9F:CD:FC:64:96:51:5B:9D:EC:57:68:B6 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F432858404980DD47F37711292B9B9900 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6de2dd1c-130e-3b66-b9d4-51c5c4b90317.roa Signing time: Sun 18 Dec 2022 12:00:00 +0000 ROA not before: Sun 18 Dec 2022 12:00:00 +0000 ROA not after: Sun 19 Sep 2027 04:00:00 +0000 asID: 13335 IP address blocks: 172.68.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:40:49:80:dd:47:f3:77:11:29:2b:9b:99:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Dec 18 12:00:00 2022 GMT Not After : Sep 19 04:00:00 2027 GMT Subject: CN=fcd7448e-67be-49f7-bf6e-1e6859cca12e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:3b:6e:d5:8d:ec:ca:32:f0:ff:67:a2:12:f7: 4c:a4:04:76:d7:f7:72:14:18:8f:27:e3:a5:6c:3e: b3:31:b2:b9:45:34:0e:f1:79:63:26:fa:c4:96:a2: 20:ab:cc:41:3d:b0:c2:ca:6c:6c:9e:75:90:ae:59: 77:71:7a:b0:08:72:a1:59:fe:59:42:aa:7f:88:ad: 79:82:72:22:09:51:1a:41:18:e1:59:6a:65:e7:05: 75:81:0b:d2:d4:5e:ae:34:77:77:d8:c7:ae:95:db: 90:ce:cf:3e:4f:3f:c2:48:17:7e:2d:fd:f3:6e:7f: f1:e4:d2:6a:d6:58:e5:78:0d:f4:b5:0a:e9:3e:56: 1e:8a:19:c2:fc:3c:d6:40:e7:47:1e:1a:07:db:23: 0c:d3:0c:44:7b:a6:a0:75:fe:45:2f:54:26:e0:d6: db:9c:f6:1e:0a:9b:34:d2:1f:c9:d8:94:19:db:61: 1b:ae:4d:31:13:58:4c:53:7d:86:86:71:3b:44:ee: a7:bc:75:1c:31:ce:65:77:c7:c5:4e:6b:ae:da:12: a8:b6:e4:23:f9:cf:aa:34:f8:1c:5a:e5:3a:7c:a1: 78:83:20:16:7c:d5:35:13:20:62:f5:c9:93:12:0d: 8c:39:60:e7:91:22:5f:6c:63:34:f3:ac:a3:98:b9: 96:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:4D:DE:A2:1F:B2:45:07:9F:CD:FC:64:96:51:5B:9D:EC:57:68:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6de2dd1c-130e-3b66-b9d4-51c5c4b90317.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:73:78:59:de:5a:fb:05:d1:b6:b0:2a:c6:7d:0a:a4:1f:51: 91:e3:3a:37:9d:92:4d:82:9a:68:75:b5:20:d6:29:01:ce:7c: 60:cc:26:76:47:1b:9c:bf:4b:3c:a7:1b:95:c7:6d:0b:51:10: 64:75:e3:ab:e9:93:d5:13:7e:e1:c4:69:32:fc:31:19:35:20: e2:98:98:2b:5b:55:a7:78:62:7e:20:0a:e3:1a:4b:d0:71:41: ad:a4:f8:1b:6b:72:bf:be:72:81:2b:fa:bc:2e:af:5a:4a:e7: cd:b4:c3:d1:a4:bc:f5:e5:ab:d0:c0:eb:3c:f9:21:9a:80:fd: d8:3c:80:97:0b:10:45:1a:1d:36:c1:48:09:97:cb:1f:93:80: 77:d1:49:52:9d:26:28:8a:ec:f2:fd:c3:77:5b:34:f5:80:c2: b1:c2:0c:ad:a8:ab:4c:f6:11:68:c6:3d:f8:50:a1:13:42:68: 15:ee:cc:a0:2c:1c:fa:45:de:88:2c:e1:db:54:64:38:02:d4: 77:c6:3d:09:47:58:6b:8c:3d:05:42:7a:37:19:64:f9:0a:b6: ce:50:42:d0:5d:35:f3:da:f5:b9:36:6f:fc:4d:f6:2d:1d:80: 2b:20:2e:1b:0f:14:65:fc:f1:89:77:ae:ec:65:e1:85:93:7d: 5a:ba:cf:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEBJgN1H83cRKSubmQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTIyMTIxODEyMDAwMFoXDTI3MDkxOTA0MDAwMFowLzEtMCsGA1UEAxMk ZmNkNzQ0OGUtNjdiZS00OWY3LWJmNmUtMWU2ODU5Y2NhMTJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjtu1Y3syjLw/2eiEvdMpAR21/dyFBiPJ+Ol bD6zMbK5RTQO8XljJvrElqIgq8xBPbDCymxsnnWQrll3cXqwCHKhWf5ZQqp/iK15 gnIiCVEaQRjhWWpl5wV1gQvS1F6uNHd32MeulduQzs8+Tz/CSBd+Lf3zbn/x5NJq 1ljleA30tQrpPlYeihnC/DzWQOdHHhoH2yMM0wxEe6agdf5FL1Qm4NbbnPYeCps0 0h/J2JQZ22Ebrk0xE1hMU32GhnE7RO6nvHUcMc5ld8fFTmuu2hKotuQj+c+qNPgc WuU6fKF4gyAWfNU1EyBi9cmTEg2MOWDnkSJfbGM086yjmLmWlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCBN3qIfskUHn838ZJZRW53sV2i2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNmRlMmRkMWMtMTMwZS0z YjY2LWI5ZDQtNTFjNWM0YjkwMzE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArET9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ5zeFneWvsF0bawKsZ9CqQfUZHjOjedkk2Cmmh1tSDWKQHOfGDMJnZH G5y/SzynG5XHbQtREGR146vpk9UTfuHEaTL8MRk1IOKYmCtbVad4Yn4gCuMaS9Bx Qa2k+Btrcr++coEr+rwur1pK5820w9GkvPXlq9DA6zz5IZqA/dg8gJcLEEUaHTbB SAmXyx+TgHfRSVKdJiiK7PL9w3dbNPWAwrHCDK2oq0z2EWjGPfhQoRNCaBXuzKAs HPpF3ogs4dtUZDgC1HfGPQlHWGuMPQVCejcZZPkKts5QQtBdNfPa9bk2b/xN9i0d gCsgLhsPFGX88Yl3ruxl4YWTfVq6z/E= -----END CERTIFICATE-----Generated at Sat May 11 15:30:41 2024 by rpki-client on console-fra.rpki-client.org