$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e711f3e3-8481-3896-a556-1f872947c1ef.roa File: e711f3e3-8481-3896-a556-1f872947c1ef.roa (raw, json) Hash identifier: l8YHsITEsqrdxdLbY/Q1xmHqIpTm7rtvJw44ybPLoz8= Subject key identifier: D2:A5:64:79:8D:4E:D5:54:90:A1:18:0B:C5:2E:D9:8E:06:2A:09:CA Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F432858473AEB38F2FB750F81B41035A0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e711f3e3-8481-3896-a556-1f872947c1ef.roa Signing time: Sun 15 Sep 2024 12:00:00 +0000 ROA not before: Sun 15 Sep 2024 12:00:00 +0000 ROA not after: Fri 19 Dec 2025 05:00:00 +0000 asID: 13335 IP address blocks: 172.68.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:3a:eb:38:f2:fb:75:0f:81:b4:10:35:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Sep 15 12:00:00 2024 GMT Not After : Dec 19 05:00:00 2025 GMT Subject: CN=ce296a53-f271-48f4-9d34-11ac8f59be83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:7e:3b:6b:00:7a:51:c2:ee:fd:9a:09:1b:05: ed:6b:13:f6:89:ad:a1:0a:89:95:a7:1f:b2:36:dd: 4e:96:a3:61:a1:ea:79:46:b0:0e:d6:42:e1:b0:c3: 6a:c7:1a:3e:a2:04:2f:5f:3e:d0:aa:42:6b:a3:8e: 30:fa:d0:dc:fe:25:64:6f:c6:e4:cf:b3:0e:50:45: a6:f0:3c:b0:e8:1f:18:64:4e:75:51:55:51:af:72: 63:be:f5:66:07:2a:36:39:b5:bc:7e:f8:d0:16:dd: b3:d9:0f:b5:5a:5a:4e:be:20:4f:56:3a:c2:95:0e: 30:01:4c:c3:82:7f:b6:9f:f6:bb:8e:4e:84:76:8e: 1a:de:ff:1f:d1:e7:bc:79:10:d2:46:06:ad:04:f8: fd:30:f5:ab:99:ab:1c:2f:90:ed:f3:07:e4:69:6c: 3c:4c:34:bb:b1:90:a9:bb:92:28:63:f1:c6:05:44: 6f:54:61:d9:82:f9:db:4f:10:4c:a8:76:b1:56:e1: 2b:ff:72:e4:28:29:ab:5b:12:0c:ea:28:54:fa:9f: f0:58:4a:d7:90:d8:62:98:e2:c8:1f:4a:4b:75:5a: 46:5c:b4:70:4e:ec:21:c1:fe:88:e6:e2:11:5b:55: 9e:1e:88:bd:11:44:15:60:3e:8b:5e:45:fa:d5:82: 7b:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:A5:64:79:8D:4E:D5:54:90:A1:18:0B:C5:2E:D9:8E:06:2A:09:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e711f3e3-8481-3896-a556-1f872947c1ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:e1:82:b4:a6:e3:9f:9c:ec:c9:72:44:60:31:e0:2c:4d:6f: 89:f0:8f:6d:b5:57:fd:2f:ed:de:89:75:45:bd:e9:cb:56:e3: 84:15:b6:0f:0c:23:4c:9a:ea:0d:a3:1b:1a:d1:e7:07:ff:e9: 0f:8e:e9:44:7e:c5:e8:a0:d7:24:68:d7:47:f1:4b:65:85:9f: 3f:45:d5:de:e1:d2:8d:e2:20:54:79:cb:a4:76:e4:46:5e:43: 6f:6c:cd:95:af:0f:f2:92:8f:1a:a4:c0:cb:0f:b9:3c:90:89: 7a:4f:a7:2f:40:c5:de:ac:13:0c:89:90:0f:b5:37:9d:d3:ce: 7e:b4:05:fb:d5:6e:db:bd:e8:32:38:8f:e0:c8:9d:1a:64:b0: 95:8a:af:a8:b2:7c:dd:f0:90:82:b4:be:89:99:aa:f5:dd:47: 86:5d:b1:0a:30:3c:cb:82:9a:90:45:cd:98:ea:c9:b8:4d:63: de:4e:e1:d6:91:de:e5:78:88:89:cf:8c:7f:e7:32:81:94:ba: e8:95:4d:36:b5:ce:d7:ae:5a:8d:f0:48:b1:1a:94:0d:03:8a: c1:2b:fa:7c:64:b2:f7:27:b9:d7:47:34:ab:67:aa:f9:9c:45: 06:0a:11:ff:0f:2d:ae:0f:0e:2c:4a:9c:1f:06:df:30:c0:57: 83:76:fd:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc66zjy+3UPgbQQNaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI0MDkxNTEyMDAwMFoXDTI1MTIxOTA1MDAwMFowLzEtMCsGA1UEAxMk Y2UyOTZhNTMtZjI3MS00OGY0LTlkMzQtMTFhYzhmNTliZTgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjH47awB6UcLu/ZoJGwXtaxP2ia2hComVpx+y Nt1OlqNhoep5RrAO1kLhsMNqxxo+ogQvXz7QqkJro44w+tDc/iVkb8bkz7MOUEWm 8Dyw6B8YZE51UVVRr3JjvvVmByo2ObW8fvjQFt2z2Q+1WlpOviBPVjrClQ4wAUzD gn+2n/a7jk6Edo4a3v8f0ee8eRDSRgatBPj9MPWrmascL5Dt8wfkaWw8TDS7sZCp u5IoY/HGBURvVGHZgvnbTxBMqHaxVuEr/3LkKCmrWxIM6ihU+p/wWErXkNhimOLI H0pLdVpGXLRwTuwhwf6I5uIRW1WeHoi9EUQVYD6LXkX61YJ7tQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNKlZHmNTtVUkKEYC8Uu2Y4GKgnKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZTcxMWYzZTMtODQ4MS0z ODk2LWE1NTYtMWY4NzI5NDdjMWVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArETMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFbhgrSm45+c7MlyRGAx4CxNb4nwj221V/0v7d6JdUW96ctW44QVtg8M I0ya6g2jGxrR5wf/6Q+O6UR+xeig1yRo10fxS2WFnz9F1d7h0o3iIFR5y6R25EZe Q29szZWvD/KSjxqkwMsPuTyQiXpPpy9Axd6sEwyJkA+1N53Tzn60BfvVbtu96DI4 j+DInRpksJWKr6iyfN3wkIK0vomZqvXdR4ZdsQowPMuCmpBFzZjqybhNY95O4daR 3uV4iInPjH/nMoGUuuiVTTa1zteuWo3wSLEalA0DisEr+nxksvcnuddHNKtnqvmc RQYKEf8PLa4PDixKnB8G3zDAV4N2/RU= -----END CERTIFICATE-----Generated at Fri Nov 22 02:01:16 2024 by rpki-client on console-ams.rpki-client.org