$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a2514bcb-9e49-391a-96db-d8bda58fbb3c.roa File: a2514bcb-9e49-391a-96db-d8bda58fbb3c.roa (raw, json) Hash identifier: tB38tZgy5VierbflQH1oMGmUqg0tt6jWKr9ha3jQbDg= Subject key identifier: 33:D2:42:CA:E3:BC:3A:B6:7D:21:96:A4:A1:6F:BB:41:B2:5B:60:48 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285844470B0A83BB9ADD6C6C3EB540 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a2514bcb-9e49-391a-96db-d8bda58fbb3c.roa Signing time: Tue 19 Dec 2023 12:00:00 +0000 ROA not before: Tue 19 Dec 2023 12:00:00 +0000 ROA not after: Mon 16 Sep 2024 04:00:00 +0000 asID: 13335 IP address blocks: 172.68.226.0/24 maxlen: 24 172.68.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:47:0b:0a:83:bb:9a:dd:6c:6c:3e:b5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Dec 19 12:00:00 2023 GMT Not After : Sep 16 04:00:00 2024 GMT Subject: CN=88cb6e4d-2c69-4097-a2d1-01cf9667dbe9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:e0:de:bc:05:6e:e2:25:16:2e:3f:dc:ef:ca: 76:94:9b:b4:02:ee:c8:d8:40:5c:fa:a8:95:13:9e: 9c:1c:71:aa:5f:1f:0a:fd:7c:af:ed:58:17:01:2e: f7:5c:93:70:1f:27:6a:b7:9a:c5:44:7e:07:59:8e: 68:4d:f8:22:0f:aa:7d:16:16:ba:d1:58:cf:72:87: a1:c1:7a:3e:dc:76:30:cf:be:ac:88:24:40:7f:0c: 96:57:0e:36:aa:10:99:41:5e:c3:87:7e:a7:30:47: 69:21:44:1f:13:96:df:39:f9:fd:f6:d2:e8:8b:4f: 59:b3:46:57:40:d3:c3:dd:e2:43:37:6a:e1:ed:5d: 86:4b:11:5d:8c:ac:8f:d2:ee:63:26:c9:cc:67:86: 9c:93:4b:3b:52:f1:2f:7a:57:09:06:9d:bb:3d:eb: f1:9f:23:9f:68:4b:bb:60:4f:cc:ab:e4:f5:c2:ff: e9:51:1b:d8:46:41:63:8f:c6:fe:84:cc:aa:16:cb: c8:76:fd:1a:28:c0:ed:88:0e:25:48:6e:45:7b:8b: 66:54:71:eb:57:f5:03:c5:10:77:4d:e4:f6:fa:61: 51:5f:cd:ec:16:0e:ca:63:98:5c:84:58:bb:79:85: ac:a2:c4:0c:ca:bb:4c:f2:cc:ad:ed:92:99:82:ed: e7:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:D2:42:CA:E3:BC:3A:B6:7D:21:96:A4:A1:6F:BB:41:B2:5B:60:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a2514bcb-9e49-391a-96db-d8bda58fbb3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.226.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:c3:a4:c1:84:45:49:e4:ca:79:10:a8:2f:cc:69:84:74:6e: 11:20:74:73:51:c8:c5:18:ad:f6:6a:34:de:f4:d7:42:5e:21: ad:44:c1:08:ab:9c:fb:ec:ad:cf:fa:bc:4b:e0:e0:79:86:8d: b9:39:6d:b8:c8:dc:ff:b5:15:11:4f:bf:f0:5e:3e:aa:49:4c: 5a:ca:76:0e:b5:7a:8f:7e:16:bd:b3:e2:e6:89:10:3a:fb:98: e7:bf:d5:cd:1a:28:98:24:35:99:9b:a9:37:c7:59:89:a1:e8: cd:3e:fa:f1:fc:49:a4:2d:16:ea:e9:69:45:d9:b4:ec:1a:3a: 33:7c:a4:2e:3a:18:d8:67:56:fe:00:d9:93:55:81:19:1b:eb: 2a:86:d8:9c:36:5b:4c:c7:1a:65:a6:cd:de:fc:2f:d5:13:3a: 31:35:e4:f1:4c:ee:3c:42:b6:e3:af:51:75:7c:8d:8e:0b:2b: 6d:18:29:0c:72:24:c5:de:c9:cc:31:e1:2a:21:42:21:39:6c: 60:f3:7f:25:a5:48:30:1a:a9:fb:45:6c:69:57:5a:6c:e1:d8: 1f:75:5d:7d:de:fd:1a:3d:eb:76:93:8f:2b:6f:d8:c9:e4:01: 14:a5:2e:54:28:14:02:fd:c6:ea:ea:2f:cd:12:02:cc:0d:02: 14:a1:70:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWERHCwqDu5rdbGw+tUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTIzMTIxOTEyMDAwMFoXDTI0MDkxNjA0MDAwMFowLzEtMCsGA1UEAxMk ODhjYjZlNGQtMmM2OS00MDk3LWEyZDEtMDFjZjk2NjdkYmU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+DevAVu4iUWLj/c78p2lJu0Au7I2EBc+qiV E56cHHGqXx8K/Xyv7VgXAS73XJNwHydqt5rFRH4HWY5oTfgiD6p9Fha60VjPcoeh wXo+3HYwz76siCRAfwyWVw42qhCZQV7Dh36nMEdpIUQfE5bfOfn99tLoi09Zs0ZX QNPD3eJDN2rh7V2GSxFdjKyP0u5jJsnMZ4ack0s7UvEvelcJBp27PevxnyOfaEu7 YE/Mq+T1wv/pURvYRkFjj8b+hMyqFsvIdv0aKMDtiA4lSG5Fe4tmVHHrV/UDxRB3 TeT2+mFRX83sFg7KY5hchFi7eYWsosQMyrtM8syt7ZKZgu3nvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDPSQsrjvDq2fSGWpKFvu0GyW2BIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYTI1MTRiY2ItOWU0OS0z OTFhLTk2ZGItZDhiZGE1OGZiYjNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrETiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALTDpMGERUnkynkQqC/MaYR0bhEgdHNRyMUYrfZqNN7010JeIa1EwQir nPvsrc/6vEvg4HmGjbk5bbjI3P+1FRFPv/BePqpJTFrKdg61eo9+Fr2z4uaJEDr7 mOe/1c0aKJgkNZmbqTfHWYmh6M0++vH8SaQtFurpaUXZtOwaOjN8pC46GNhnVv4A 2ZNVgRkb6yqG2Jw2W0zHGmWmzd78L9UTOjE15PFM7jxCtuOvUXV8jY4LK20YKQxy JMXeycwx4SohQiE5bGDzfyWlSDAaqftFbGlXWmzh2B91XX3e/Ro963aTjytv2Mnk ARSlLlQoFAL9xurqL80SAswNAhShcF8= -----END CERTIFICATE-----Generated at Sat May 11 15:25:12 2024 by rpki-client on console-ams.rpki-client.org