$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/2a107519-0ec5-30d7-9c54-2f762d58dd15.roa File: 2a107519-0ec5-30d7-9c54-2f762d58dd15.roa (raw, json) Hash identifier: zaxsBkRP60dC18Oi/H1Axj3ew5p6ftqrQOZSt1Jv2YM= Subject key identifier: 4F:70:69:C7:F0:A2:1C:BC:33:73:28:B9:F0:FC:06:2E:B8:A7:93:83 Certificate issuer: /CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3 Certificate serial: 010D0C9F4328584586D87767DDB2D03D699F9280 Authority key identifier: BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/2a107519-0ec5-30d7-9c54-2f762d58dd15.roa Signing time: Sat 13 Apr 2024 01:00:25 +0000 ROA not before: Sat 13 Apr 2024 01:00:25 +0000 ROA not after: Fri 12 Jul 2024 01:00:25 +0000 asID: 22765 IP address blocks: 68.170.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 May 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:86:d8:77:67:dd:b2:d0:3d:69:9f:92:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3 Validity Not Before: Apr 13 01:00:25 2024 GMT Not After : Jul 12 01:00:25 2024 GMT Subject: CN=6b95e7e1-b64a-4fbf-b6b4-54f2aadfd848 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:53:0a:85:e0:78:ac:fc:b2:c5:13:50:55:ed: a0:a0:f1:de:c8:d5:b1:99:ea:6d:7d:4f:c8:82:5e: 14:96:82:ad:8f:19:32:be:e1:1f:4f:fb:b3:55:c4: 74:b9:d7:e5:f6:87:d1:db:91:ae:c2:3d:91:37:b7: 03:bf:59:d8:02:27:e0:1e:ab:70:eb:cb:3a:3b:cb: 14:56:85:6c:b1:61:29:70:b2:f1:a4:c4:d0:f3:48: 39:36:6d:ff:21:99:27:28:fb:64:bb:88:48:cb:c6: 39:73:b7:9c:a2:1f:61:a8:ea:44:6a:a2:3b:7a:a3: 79:32:ab:2b:7f:bc:ae:39:d7:ac:3a:40:d9:1a:c4: 6b:5b:19:37:e5:b1:03:22:f8:46:cc:73:e2:f0:94: 56:eb:ca:8e:43:12:a4:a3:b8:b5:2c:f9:1b:43:e7: 62:ee:5f:c6:fd:f2:74:2e:d9:17:98:55:bf:00:b9: be:d8:b3:2e:d3:84:be:58:77:e6:fc:72:44:78:07: 93:65:e2:ff:3b:34:d9:ba:4f:f9:97:3c:55:f6:1d: 19:dd:9e:f6:70:8b:7a:9c:8b:0c:e3:29:8c:1e:d9: 1c:ce:f3:cb:bc:96:ad:b2:8f:3c:1a:f7:fa:39:68: 9d:4c:6a:c0:8a:81:d6:db:42:ff:84:c6:4e:0a:8a: f2:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:70:69:C7:F0:A2:1C:BC:33:73:28:B9:F0:FC:06:2E:B8:A7:93:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/2a107519-0ec5-30d7-9c54-2f762d58dd15.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.crl X509v3 Authority Key Identifier: keyid:BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer sbgp-ipAddrBlock: critical IPv4: 68.170.202.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:26:f7:6c:c0:7f:4f:03:80:69:a9:c6:ed:20:43:b7:4a:68: a5:06:e4:ae:5f:f4:5c:0b:4c:ab:2d:57:ce:5d:55:24:b7:c8: 41:8c:b1:68:d0:61:88:c8:18:2a:6d:84:78:7d:90:f8:ea:4c: eb:6b:76:7d:9a:f3:98:a8:d6:ec:48:6c:ec:f3:08:a0:34:99: 91:34:31:72:b2:7f:34:30:c5:5b:1c:53:a6:02:6b:2b:64:e5: 6a:0a:d9:52:79:b0:75:82:57:90:29:54:4e:cd:85:fc:2e:f7: e4:5b:a6:6e:3a:79:22:dc:a9:dd:23:24:49:5b:39:35:44:28: fd:a9:49:5b:2e:58:82:88:03:26:ae:2c:88:16:fc:aa:14:ba: 8e:98:f8:1b:51:93:32:cb:5f:02:6b:5f:ff:b8:f5:3a:a9:8b: 03:4b:84:b4:5e:7f:94:32:bb:bf:f4:07:ff:0d:7e:1f:7f:40: b6:f2:17:72:28:7c:18:a9:e2:d0:48:66:b4:6a:a9:df:f4:c2: 1c:c7:57:a6:fa:c6:48:36:a2:fa:a8:7a:dd:9e:eb:28:5f:3a: 32:43:b5:d7:e1:e2:f8:1b:6a:76:23:ff:d7:96:5b:31:a3:0c: 3a:ab:23:01:60:b5:3f:0d:4e:87:0c:e4:11:bc:cc:93:20:74: 68:aa:42:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWG2Hdn3bLQPWmfkoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTZhMjMzNDYtNWEwZS00OTc2LTliMzMtM2I0ZDFkOTBj ZmEzMB4XDTI0MDQxMzAxMDAyNVoXDTI0MDcxMjAxMDAyNVowLzEtMCsGA1UEAxMk NmI5NWU3ZTEtYjY0YS00ZmJmLWI2YjQtNTRmMmFhZGZkODQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVMKheB4rPyyxRNQVe2goPHeyNWxmeptfU/I gl4UloKtjxkyvuEfT/uzVcR0udfl9ofR25Guwj2RN7cDv1nYAifgHqtw68s6O8sU VoVssWEpcLLxpMTQ80g5Nm3/IZknKPtku4hIy8Y5c7ecoh9hqOpEaqI7eqN5Mqsr f7yuOdesOkDZGsRrWxk35bEDIvhGzHPi8JRW68qOQxKko7i1LPkbQ+di7l/G/fJ0 LtkXmFW/ALm+2LMu04S+WHfm/HJEeAeTZeL/OzTZuk/5lzxV9h0Z3Z72cIt6nIsM 4ymMHtkczvPLvJatso88Gvf6OWidTGrAioHW20L/hMZOCoryWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE9wacfwohy8M3MoufD8Bi64p5ODMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81NmEy MzM0Ni01YTBlLTQ5NzYtOWIzMy0zYjRkMWQ5MGNmYTMvMmExMDc1MTktMGVjNS0z MGQ3LTljNTQtMmY3NjJkNThkZDE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNTZhMjMzNDYtNWEwZS00OTc2LTli MzMtM2I0ZDFkOTBjZmEzLzU2YTIzMzQ2LTVhMGUtNDk3Ni05YjMzLTNiNGQxZDkw Y2ZhMy5jcmwwHwYDVR0jBBgwFoAUvyAy5XvXgcfAsCmYszNV0WIz6JkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81NmEyMzM0Ni01YTBlLTQ5NzYtOWIzMy0zYjRk MWQ5MGNmYTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARKrKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFom92zAf08DgGmpxu0gQ7dKaKUG5K5f9FwLTKstV85dVSS3yEGMsWjQ YYjIGCpthHh9kPjqTOtrdn2a85io1uxIbOzzCKA0mZE0MXKyfzQwxVscU6YCaytk 5WoK2VJ5sHWCV5ApVE7Nhfwu9+Rbpm46eSLcqd0jJElbOTVEKP2pSVsuWIKIAyau LIgW/KoUuo6Y+BtRkzLLXwJrX/+49TqpiwNLhLRef5Qyu7/0B/8Nfh9/QLbyF3Io fBip4tBIZrRqqd/0whzHV6b6xkg2ovqoet2e6yhfOjJDtdfh4vgbanYj/9eWWzGj DDqrIwFgtT8NTocM5BG8zJMgdGiqQnA= -----END CERTIFICATE-----Generated at Mon May 20 15:19:39 2024 by rpki-client on console-fra.rpki-client.org