$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ca29321c-0656-352c-81c4-fc86fec6dea9.roa File: ca29321c-0656-352c-81c4-fc86fec6dea9.roa (raw, json) Hash identifier: vqQ8WvS8HBljL2W2h9O5GN8kySOWyjo+e4tT8baJDYw= Subject key identifier: 36:5B:99:A3:C8:D0:7F:14:2D:53:32:C6:12:47:B2:5F:E0:28:88:84 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F432858473B0E7D426B09B762FF5230D0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ca29321c-0656-352c-81c4-fc86fec6dea9.roa Signing time: Sun 15 Sep 2024 12:00:00 +0000 ROA not before: Sun 15 Sep 2024 12:00:00 +0000 ROA not after: Fri 19 Dec 2025 05:00:00 +0000 asID: 13335 IP address blocks: 172.68.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:3b:0e:7d:42:6b:09:b7:62:ff:52:30:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Sep 15 12:00:00 2024 GMT Not After : Dec 19 05:00:00 2025 GMT Subject: CN=98c2abd5-fe9a-466b-8b04-80fbb6ee5fe1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d9:4b:0e:b3:2e:fa:83:9b:03:7c:b7:9b:3a: 25:f6:ff:43:9c:88:da:ae:bb:68:a8:b2:59:92:b9: 17:87:cb:9f:45:99:25:af:e5:cf:d3:58:71:24:30: 8d:ec:d4:8d:30:6f:46:fb:9c:f7:70:fb:83:22:3f: 50:d8:f1:36:8a:e5:c6:7a:88:a3:a9:11:3e:10:6f: 95:14:5e:ea:dc:84:5f:50:66:46:59:b3:2b:01:7c: 98:7b:6d:42:db:a1:f5:d6:5a:0b:f0:70:87:63:27: 4f:16:4f:48:df:10:89:f8:22:e0:cb:ad:4d:5d:0e: b7:bb:48:b5:eb:85:29:a8:17:08:f3:67:49:55:f0: 73:c5:9b:8c:80:22:2a:50:ae:e4:17:9c:7d:85:5c: d6:aa:6d:b6:82:78:32:f0:09:16:13:3d:b4:53:49: cb:5e:d2:64:2b:45:15:23:d1:74:17:d9:5c:32:26: 8d:50:b1:fb:82:00:8c:0c:93:77:c9:7f:fb:87:ba: 0c:44:ec:9c:ae:2c:47:af:d7:84:0d:58:47:99:84: 0f:e7:f4:ff:42:d3:2c:d2:9f:a6:3e:93:36:ca:b2: ab:d6:fe:3b:92:d5:9d:b2:dd:ab:5d:a5:3e:4a:88: 7f:77:f8:96:32:c6:5c:a3:33:05:9d:4a:aa:4e:78: 2e:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:5B:99:A3:C8:D0:7F:14:2D:53:32:C6:12:47:B2:5F:E0:28:88:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ca29321c-0656-352c-81c4-fc86fec6dea9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:ac:1e:95:f3:22:bb:b3:a2:8c:33:19:fc:1f:69:fe:4c:ed: bf:94:a1:aa:e1:ec:48:ab:93:74:e4:b4:a0:d0:1b:4b:d7:f7: 79:da:9e:95:cf:81:cd:99:8d:f2:b6:1c:92:67:ef:aa:70:e2: 4b:9a:55:92:10:a9:06:c3:11:41:4c:d2:d4:dc:6c:f2:2e:e9: 13:6e:a2:78:5a:c2:26:e5:27:a1:b1:72:87:83:83:fb:a0:8e: 3a:d3:d6:8c:a5:02:a8:57:8d:70:c4:e8:29:21:c6:e5:98:6b: 1c:0c:da:25:45:3a:bf:56:9c:f9:d5:b6:88:4c:b0:0c:5c:17: 22:6f:fb:23:a5:9c:e4:2c:6f:b6:52:88:26:dc:22:1e:c5:9f: 49:ac:0f:d1:3e:ed:c3:c7:72:5e:b5:df:ad:05:04:f7:d3:85: a5:0a:7a:a2:c1:bc:a8:da:54:c0:65:04:6e:b5:d8:15:a1:68: 69:eb:70:01:98:96:b6:68:79:42:f1:fa:05:7c:16:ec:7e:29: 0e:87:b4:33:2f:38:ea:05:fb:7e:7f:fd:64:c3:cb:8c:99:97: 3f:c3:49:63:4e:46:d9:47:02:f4:c9:0f:b3:26:56:34:3f:bd: dd:16:81:ad:b3:67:b6:34:d1:9d:ff:53:c3:ab:07:83:ad:ca: 1a:d6:90:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc7Dn1Cawm3Yv9SMNAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI0MDkxNTEyMDAwMFoXDTI1MTIxOTA1MDAwMFowLzEtMCsGA1UEAxMk OThjMmFiZDUtZmU5YS00NjZiLThiMDQtODBmYmI2ZWU1ZmUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtlLDrMu+oObA3y3mzol9v9DnIjarrtoqLJZ krkXh8ufRZklr+XP01hxJDCN7NSNMG9G+5z3cPuDIj9Q2PE2iuXGeoijqRE+EG+V FF7q3IRfUGZGWbMrAXyYe21C26H11loL8HCHYydPFk9I3xCJ+CLgy61NXQ63u0i1 64UpqBcI82dJVfBzxZuMgCIqUK7kF5x9hVzWqm22gngy8AkWEz20U0nLXtJkK0UV I9F0F9lcMiaNULH7ggCMDJN3yX/7h7oMROycrixHr9eEDVhHmYQP5/T/QtMs0p+m PpM2yrKr1v47ktWdst2rXaU+Soh/d/iWMsZcozMFnUqqTnguIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDZbmaPI0H8ULVMyxhJHsl/gKIiEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvY2EyOTMyMWMtMDY1Ni0z NTJjLTgxYzQtZmM4NmZlYzZkZWE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEThMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAACsHpXzIruzoowzGfwfaf5M7b+Uoarh7Eirk3TktKDQG0vX93nanpXP gc2ZjfK2HJJn76pw4kuaVZIQqQbDEUFM0tTcbPIu6RNuonhawiblJ6GxcoeDg/ug jjrT1oylAqhXjXDE6CkhxuWYaxwM2iVFOr9WnPnVtohMsAxcFyJv+yOlnOQsb7ZS iCbcIh7Fn0msD9E+7cPHcl61360FBPfThaUKeqLBvKjaVMBlBG612BWhaGnrcAGY lrZoeULx+gV8Fux+KQ6HtDMvOOoF+35//WTDy4yZlz/DSWNORtlHAvTJD7MmVjQ/ vd0Wga2zZ7Y00Z3/U8OrB4OtyhrWkLs= -----END CERTIFICATE-----Generated at Sun Nov 24 15:57:05 2024 by rpki-client on console-ams.rpki-client.org