$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c4cba9ee-edb5-3ab1-aff5-84ab42b5bf64.roa File: c4cba9ee-edb5-3ab1-aff5-84ab42b5bf64.roa (raw, json) Hash identifier: 8qjlE2+SoaPw3eU1n0T+qBQcxdyRF46vjoqtGijshGM= Subject key identifier: 86:52:65:2A:FA:64:A0:E6:55:B6:E8:F1:D7:9B:83:2C:2A:42:EA:C9 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584480139616EA5F98C15783E500 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c4cba9ee-edb5-3ab1-aff5-84ab42b5bf64.roa Signing time: Mon 08 Jan 2024 12:00:00 +0000 ROA not before: Mon 08 Jan 2024 12:00:00 +0000 ROA not after: Mon 16 Sep 2024 04:00:00 +0000 asID: 13335 IP address blocks: 172.69.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:80:13:96:16:ea:5f:98:c1:57:83:e5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Jan 8 12:00:00 2024 GMT Not After : Sep 16 04:00:00 2024 GMT Subject: CN=e881960b-ebc5-4bf5-baa8-46c03a19421b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:9b:47:8d:09:a1:be:d3:b2:16:72:6c:74:d5: c6:bf:ec:07:da:d5:fc:3e:ac:2a:92:8c:27:90:70: 93:cb:5c:b4:1c:80:1e:d7:40:c3:5b:63:1e:90:38: ab:9c:f9:bb:28:a9:29:07:0b:d1:a5:bf:6b:d0:07: 2b:e1:fe:2b:3f:bf:eb:43:77:eb:b6:50:80:b4:20: 80:69:49:47:86:e8:a9:36:80:31:b4:3d:12:cf:be: 10:09:7f:5f:93:da:63:50:52:9c:72:67:8e:75:42: 0a:ad:fd:ad:5c:ec:2b:b1:15:53:01:bc:f2:dc:ba: 60:ed:a0:11:93:10:3a:a1:21:63:54:2e:f5:6e:7f: 11:75:50:9c:91:8c:43:86:d1:c2:0f:a6:61:5f:b9: 37:5f:19:d9:cd:82:cd:a4:22:c7:b9:a1:d7:5a:4c: 5f:ff:d2:6e:a8:a9:e7:63:9a:be:49:23:06:3e:27: 00:43:94:1e:25:4f:a8:63:ed:8f:f8:11:d6:06:12: ff:a1:e8:30:59:de:1f:68:f1:be:1e:58:81:df:fc: 55:9a:3a:32:a0:d6:bf:2c:de:f8:27:2d:56:4b:f6: 17:ef:a7:9d:cc:61:4b:59:f0:aa:64:cf:6a:df:ba: a6:4c:74:0e:94:f7:18:3f:15:16:86:00:69:d6:d1: d8:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:52:65:2A:FA:64:A0:E6:55:B6:E8:F1:D7:9B:83:2C:2A:42:EA:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c4cba9ee-edb5-3ab1-aff5-84ab42b5bf64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:29:41:7f:e0:34:09:af:4a:41:30:99:6c:65:3b:f0:24:c4: 3c:75:89:be:e2:3b:02:7f:46:87:a8:de:38:d3:e8:f9:10:af: 79:4a:ec:1a:a3:07:00:42:3a:5d:cf:17:7c:66:ab:95:f8:76: 7d:56:b6:4c:18:46:23:11:5d:ff:a2:31:b7:c8:0e:4b:c8:d5: 7c:8c:81:37:0a:3c:d9:8e:9e:97:39:50:32:81:e9:f0:d8:f2: e8:ad:f9:60:bf:0b:01:32:3b:2c:67:58:1f:67:e0:33:18:c3: 2c:37:a9:e7:58:f8:8a:1a:94:22:4d:af:13:ba:0b:cd:fe:3a: 9f:a8:0d:f0:23:cd:e2:30:a9:ee:2f:0b:12:81:b5:46:a3:50: cd:e4:0c:f6:1d:99:4c:1b:f9:c7:00:7e:20:99:a2:d1:7a:6e: d4:ae:7d:b9:81:58:e5:89:9b:5b:95:4d:5e:1a:0f:0e:44:e0: 6d:5f:30:2c:1e:78:af:39:5d:82:f2:3d:8d:4e:c9:8f:8d:b3: 37:d4:49:00:61:66:7f:38:c9:a7:0f:c3:ab:ef:af:2a:99:8a: b7:14:a6:e1:ae:c7:7e:3b:d4:15:67:31:01:3f:22:0a:2e:71: ed:93:fa:3a:bf:bc:b3:f5:38:a5:ed:4b:69:9e:dd:d6:db:b0: e7:52:66:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWESAE5YW6l+YwVeD5QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI0MDEwODEyMDAwMFoXDTI0MDkxNjA0MDAwMFowLzEtMCsGA1UEAxMk ZTg4MTk2MGItZWJjNS00YmY1LWJhYTgtNDZjMDNhMTk0MjFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZtHjQmhvtOyFnJsdNXGv+wH2tX8Pqwqkown kHCTy1y0HIAe10DDW2MekDirnPm7KKkpBwvRpb9r0Acr4f4rP7/rQ3frtlCAtCCA aUlHhuipNoAxtD0Sz74QCX9fk9pjUFKccmeOdUIKrf2tXOwrsRVTAbzy3Lpg7aAR kxA6oSFjVC71bn8RdVCckYxDhtHCD6ZhX7k3XxnZzYLNpCLHuaHXWkxf/9JuqKnn Y5q+SSMGPicAQ5QeJU+oY+2P+BHWBhL/oegwWd4faPG+HliB3/xVmjoyoNa/LN74 Jy1WS/YX76edzGFLWfCqZM9q37qmTHQOlPcYPxUWhgBp1tHYIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIZSZSr6ZKDmVbbo8debgywqQurJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYzRjYmE5ZWUtZWRiNS0z YWIxLWFmZjUtODRhYjQyYjViZjY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEWoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAMpQX/gNAmvSkEwmWxlO/AkxDx1ib7iOwJ/Roeo3jjT6PkQr3lK7Bqj BwBCOl3PF3xmq5X4dn1WtkwYRiMRXf+iMbfIDkvI1XyMgTcKPNmOnpc5UDKB6fDY 8uit+WC/CwEyOyxnWB9n4DMYwyw3qedY+IoalCJNrxO6C83+Op+oDfAjzeIwqe4v CxKBtUajUM3kDPYdmUwb+ccAfiCZotF6btSufbmBWOWJm1uVTV4aDw5E4G1fMCwe eK85XYLyPY1OyY+NszfUSQBhZn84yacPw6vvryqZircUpuGux3471BVnMQE/Igou ce2T+jq/vLP1OKXtS2me3dbbsOdSZk0= -----END CERTIFICATE-----Generated at Sat May 11 15:25:14 2024 by rpki-client on console-ams.rpki-client.org