$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f94c81ce-d864-3768-961d-f07eddbc5e1e.roa File: f94c81ce-d864-3768-961d-f07eddbc5e1e.roa (raw, json) Hash identifier: 79RQVl7tCYLh9CiuojrKSEDoSRXDTtiWnKPmFkDUKbc= Subject key identifier: AD:DD:18:18:30:55:08:59:22:70:E9:9B:8D:EC:D2:35:BD:D5:53:96 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584321DD6305AEA5131FECBDDD40 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f94c81ce-d864-3768-961d-f07eddbc5e1e.roa Signing time: Tue 05 Sep 2023 12:00:00 +0000 ROA not before: Tue 05 Sep 2023 12:00:00 +0000 ROA not after: Mon 16 Sep 2024 04:00:00 +0000 asID: 13335 IP address blocks: 172.68.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:43:21:dd:63:05:ae:a5:13:1f:ec:bd:dd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Sep 5 12:00:00 2023 GMT Not After : Sep 16 04:00:00 2024 GMT Subject: CN=c0614d18-e755-430d-b4e6-c3c296de4ec0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:22:bc:2f:de:7a:76:e6:f5:73:2c:b0:9b:a7: e6:b1:a3:52:ba:7a:76:4c:83:27:d0:5b:e2:10:8f: 3b:6f:5c:a0:14:bf:1e:0a:2e:b0:f7:8b:27:e7:b3: 64:aa:dd:b5:c7:bf:12:d7:8a:85:d2:a4:e2:c9:18: 14:46:3f:0c:a0:eb:0c:c8:a6:71:11:65:76:c8:e2: 8d:9d:b3:81:9b:56:5e:f8:9f:da:ea:0d:dd:01:6b: 62:45:d8:a4:80:1f:fc:5e:46:fc:88:aa:5f:1b:a9: dc:4c:69:7e:d5:85:46:19:82:62:d1:6d:4c:95:ad: c3:a9:44:8c:2a:c2:66:e4:fd:c5:dc:9e:aa:b5:07: db:92:95:05:e0:4f:3d:01:54:1a:a1:21:38:b3:db: 31:85:86:a7:af:2e:62:4b:50:d1:57:a1:7c:dc:97: 85:d2:e8:62:8c:16:a4:ab:0c:9d:d9:49:3a:56:99: 27:29:42:9a:54:76:34:5e:d2:c2:e9:38:fc:9b:9e: 5c:dc:b3:d7:e0:d5:17:83:47:c3:08:aa:c1:cd:07: 53:57:6d:bb:7e:16:b7:0e:42:77:5a:45:3c:b4:71: ae:83:a7:e4:e7:96:69:be:e5:37:21:4e:b5:38:c4: 85:54:54:4b:dd:30:db:4c:7f:47:69:b3:c7:8b:0d: 66:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:DD:18:18:30:55:08:59:22:70:E9:9B:8D:EC:D2:35:BD:D5:53:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f94c81ce-d864-3768-961d-f07eddbc5e1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.198.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:62:bb:4a:c4:37:52:70:7b:0c:81:13:fd:57:e8:83:94:99: d4:85:90:40:7c:70:69:5d:88:ef:f9:16:85:1f:51:e6:22:50: 45:19:36:f4:96:8d:0f:a2:2c:f6:82:9b:75:07:e5:00:20:08: 84:d4:93:26:08:0c:61:5e:c5:c3:93:80:da:43:8c:97:f0:01: 5d:0f:8b:1f:31:a7:35:b2:62:ef:f3:a8:6b:94:71:70:12:c3: 42:9e:f9:ef:f3:cd:90:c3:02:a4:b9:a9:14:ab:ba:10:80:40: 95:27:08:5b:07:b1:df:17:11:6b:2a:95:f4:e9:e3:26:0c:da: 3b:90:9d:d0:98:8b:59:a9:5b:46:9f:35:ff:c2:fd:2a:d6:2b: b8:ba:5d:36:b9:d1:61:bb:f8:07:56:ab:20:63:db:54:d4:98: 8b:9c:95:35:10:fe:b1:b1:77:4f:0d:ef:a5:38:63:d2:55:fb: 66:4e:7a:51:2a:b7:c2:88:a9:c8:7c:61:5d:13:26:34:36:68: 0c:6b:55:5b:e3:a6:b4:bf:1b:9b:87:74:0d:37:b0:0d:b8:2a: 1e:86:c0:a7:48:4d:8e:60:4f:f8:37:57:7f:c8:a4:f5:c4:b0: a7:58:a6:45:ee:a5:57:4a:4d:23:b9:8e:3f:4f:d7:26:c3:ba: 73:ca:3d:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMh3WMFrqUTH+y93UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTIzMDkwNTEyMDAwMFoXDTI0MDkxNjA0MDAwMFowLzEtMCsGA1UEAxMk YzA2MTRkMTgtZTc1NS00MzBkLWI0ZTYtYzNjMjk2ZGU0ZWMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoiK8L956dub1cyywm6fmsaNSunp2TIMn0Fvi EI87b1ygFL8eCi6w94sn57Nkqt21x78S14qF0qTiyRgURj8MoOsMyKZxEWV2yOKN nbOBm1Ze+J/a6g3dAWtiRdikgB/8Xkb8iKpfG6ncTGl+1YVGGYJi0W1Mla3DqUSM KsJm5P3F3J6qtQfbkpUF4E89AVQaoSE4s9sxhYanry5iS1DRV6F83JeF0uhijBak qwyd2Uk6VpknKUKaVHY0XtLC6Tj8m55c3LPX4NUXg0fDCKrBzQdTV227fha3DkJ3 WkU8tHGug6fk55ZpvuU3IU61OMSFVFRL3TDbTH9HabPHiw1mpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK3dGBgwVQhZInDpm43s0jW91VOWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZjk0YzgxY2UtZDg2NC0z NzY4LTk2MWQtZjA3ZWRkYmM1ZTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArETGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJNiu0rEN1JwewyBE/1X6IOUmdSFkEB8cGldiO/5FoUfUeYiUEUZNvSW jQ+iLPaCm3UH5QAgCITUkyYIDGFexcOTgNpDjJfwAV0Pix8xpzWyYu/zqGuUcXAS w0Ke+e/zzZDDAqS5qRSruhCAQJUnCFsHsd8XEWsqlfTp4yYM2juQndCYi1mpW0af Nf/C/SrWK7i6XTa50WG7+AdWqyBj21TUmIuclTUQ/rGxd08N76U4Y9JV+2ZOelEq t8KIqch8YV0TJjQ2aAxrVVvjprS/G5uHdA03sA24Kh6GwKdITY5gT/g3V3/IpPXE sKdYpkXupVdKTSO5jj9P1ybDunPKPeA= -----END CERTIFICATE-----Generated at Sat May 11 15:30:46 2024 by rpki-client on console-fra.rpki-client.org