$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c0d0b34c-2793-3833-85c8-5c7ea9d4bec2.roa File: c0d0b34c-2793-3833-85c8-5c7ea9d4bec2.roa (raw, json) Hash identifier: t4DQZ7OynAoIhF8QuusKQ3PJkVV/MF7a6VCHo+D1z18= Subject key identifier: 31:9C:FC:C9:3C:CD:3C:AF:0B:AE:36:A2:5A:35:2C:5C:FB:B3:1D:0E Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F432858456CAC4E085FA284EB39B91740 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c0d0b34c-2793-3833-85c8-5c7ea9d4bec2.roa Signing time: Tue 02 Apr 2024 12:00:00 +0000 ROA not before: Tue 02 Apr 2024 12:00:00 +0000 ROA not after: Mon 16 Sep 2024 04:00:00 +0000 asID: 13335 IP address blocks: 172.68.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:6c:ac:4e:08:5f:a2:84:eb:39:b9:17:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 2 12:00:00 2024 GMT Not After : Sep 16 04:00:00 2024 GMT Subject: CN=d99e348b-18d4-40ca-9b97-069dc6547c7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:f0:9a:fc:98:09:92:0d:bf:b4:ee:ed:0c:d7: f7:e7:80:95:a4:d7:65:58:c9:8c:72:12:69:f7:7e: 3d:83:5e:3f:2d:c9:09:23:49:e3:b7:bb:5d:71:8f: 7f:3f:24:8b:25:be:18:95:f0:de:74:4f:89:c9:7a: 0b:7d:4e:43:79:a5:fb:ad:31:10:6a:0a:1d:27:b5: 40:4b:67:36:10:09:44:60:63:9e:14:89:df:ca:70: 9f:64:4b:ed:57:bb:f6:00:3c:0c:22:fe:6c:db:40: f1:bf:00:5d:94:fe:fc:59:47:e9:0d:e1:3e:e5:e5: 27:cc:ae:21:43:2a:1f:86:f4:5e:02:17:f4:12:b4: a4:82:bd:d9:86:ed:9e:99:d7:e8:26:f3:c5:36:36: 9e:67:d7:7a:a0:55:14:b0:9c:0c:07:bf:4c:0a:e5: 74:89:e3:89:ad:0e:fd:02:ac:e1:03:c5:50:84:01: 61:89:82:26:e7:1d:11:78:8c:ce:19:dc:f9:86:6e: 3f:e4:a0:71:ef:13:be:57:0c:e1:bf:5f:5c:7b:27: 6f:38:b2:a1:af:e8:20:1e:da:84:34:18:e5:6c:3f: 6e:62:2d:3a:2c:27:61:9e:96:61:fd:e7:61:3c:b3: 44:4b:e6:68:80:18:7c:7e:4e:16:d2:e2:07:c0:28: 00:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:9C:FC:C9:3C:CD:3C:AF:0B:AE:36:A2:5A:35:2C:5C:FB:B3:1D:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c0d0b34c-2793-3833-85c8-5c7ea9d4bec2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:b4:42:17:cc:4c:3a:26:1a:55:43:31:51:53:98:da:de:c1: 32:22:67:6c:62:6e:bb:b7:6b:20:b1:ff:fc:c5:71:1d:ba:3c: cb:c2:4e:49:09:61:4f:b0:aa:e1:0a:6e:20:82:25:a0:fd:43: c2:b6:94:67:01:95:26:80:db:c5:11:4b:05:37:c3:7a:6d:5c: 96:a0:45:38:f6:dd:37:34:54:b0:f3:02:ba:ed:b7:32:44:ea: c8:ab:67:89:1d:14:a7:cd:44:72:94:a1:be:7f:99:6c:03:af: 53:79:41:8f:31:17:d2:9b:98:cd:c3:ed:45:64:b4:92:86:b1: f0:66:e1:85:a0:47:79:26:b0:8a:2d:fd:63:1c:f6:8d:ca:c9: 08:bd:ab:f6:59:bc:96:87:a1:50:e3:26:85:55:5d:09:b3:c2: b8:95:01:20:33:1f:fd:94:b8:0c:75:78:d4:ab:a4:de:83:0d: 13:3e:1c:f0:05:4d:5f:a0:7d:90:5c:b6:bf:7a:a1:38:19:2c: e3:1c:c2:8f:19:7f:97:c1:85:c7:5e:1f:1c:95:eb:c9:ff:09: 36:65:62:45:74:c4:a5:65:97:c6:df:09:1e:11:0b:64:8b:66: a4:b7:a6:01:bf:3f:45:c9:ce:87:ae:f3:8e:9b:26:3e:5d:cb: cd:3a:4b:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVsrE4IX6KE6zm5F0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI0MDQwMjEyMDAwMFoXDTI0MDkxNjA0MDAwMFowLzEtMCsGA1UEAxMk ZDk5ZTM0OGItMThkNC00MGNhLTliOTctMDY5ZGM2NTQ3YzdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvCa/JgJkg2/tO7tDNf354CVpNdlWMmMchJp 9349g14/LckJI0njt7tdcY9/PySLJb4YlfDedE+JyXoLfU5DeaX7rTEQagodJ7VA S2c2EAlEYGOeFInfynCfZEvtV7v2ADwMIv5s20DxvwBdlP78WUfpDeE+5eUnzK4h QyofhvReAhf0ErSkgr3Zhu2emdfoJvPFNjaeZ9d6oFUUsJwMB79MCuV0ieOJrQ79 AqzhA8VQhAFhiYIm5x0ReIzOGdz5hm4/5KBx7xO+Vwzhv19ceydvOLKhr+ggHtqE NBjlbD9uYi06LCdhnpZh/edhPLNES+ZogBh8fk4W0uIHwCgAuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDGc/Mk8zTyvC642olo1LFz7sx0OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYzBkMGIzNGMtMjc5My0z ODMzLTg1YzgtNWM3ZWE5ZDRiZWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArETMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABK0QhfMTDomGlVDMVFTmNrewTIiZ2xibru3ayCx//zFcR26PMvCTkkJ YU+wquEKbiCCJaD9Q8K2lGcBlSaA28URSwU3w3ptXJagRTj23Tc0VLDzArrttzJE 6sirZ4kdFKfNRHKUob5/mWwDr1N5QY8xF9KbmM3D7UVktJKGsfBm4YWgR3kmsIot /WMc9o3KyQi9q/ZZvJaHoVDjJoVVXQmzwriVASAzH/2UuAx1eNSrpN6DDRM+HPAF TV+gfZBctr96oTgZLOMcwo8Zf5fBhcdeHxyV68n/CTZlYkV0xKVll8bfCR4RC2SL ZqS3pgG/P0XJzoeu846bJj5dy806S7U= -----END CERTIFICATE-----Generated at Sat May 11 15:25:14 2024 by rpki-client on console-ams.rpki-client.org