$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/af84c3f0-fbb0-3e47-9f93-18c96df2b368.roa File: af84c3f0-fbb0-3e47-9f93-18c96df2b368.roa (raw, json) Hash identifier: +jpJNVu1UxesyL14d6qd2uC5mIgzwUnOXMCZh/dxKWM= Subject key identifier: 21:B7:B2:AD:B2:96:34:BC:8F:C8:4A:C7:DB:F6:46:F2:DF:1A:CA:28 Certificate issuer: /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58 Certificate serial: 010D0C9F432858454AD2C68C08591256BEBD5EC0 Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/af84c3f0-fbb0-3e47-9f93-18c96df2b368.roa Signing time: Fri 22 Mar 2024 13:00:34 +0000 ROA not before: Fri 22 Mar 2024 13:00:34 +0000 ROA not after: Thu 20 Jun 2024 13:00:34 +0000 asID: 55293 IP address blocks: 68.66.224.0/20 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 04 May 2024 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:4a:d2:c6:8c:08:59:12:56:be:bd:5e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58 Validity Not Before: Mar 22 13:00:34 2024 GMT Not After : Jun 20 13:00:34 2024 GMT Subject: CN=0f9b0fb3-ab5d-460b-8506-35af02480b2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:d9:2a:77:48:7b:02:a7:0d:33:f6:96:3e:35: 64:3b:5e:8e:91:21:16:66:fb:92:a8:0f:9f:7f:40: ad:09:12:4b:7f:d1:d4:f4:e7:8e:1d:09:81:a2:f3: 93:3a:9a:94:09:a6:bd:77:9c:a9:17:91:16:1e:15: a2:a4:89:31:26:2c:dc:ce:3b:b5:16:0b:ba:1c:4c: f9:9a:c8:40:28:1c:5f:25:1d:67:fb:5b:a7:5c:79: b9:0b:00:50:36:5c:bf:d0:0a:93:c3:51:2a:9b:31: bc:f0:48:08:7b:05:19:46:6c:dd:5b:78:be:fc:4a: 96:60:7f:8f:a6:51:f4:9d:3b:45:92:5c:0a:b8:6b: 92:82:23:89:ca:69:47:68:ed:bc:f7:de:d4:48:da: 8a:f5:38:13:95:21:d5:0d:4f:c3:ab:50:6f:2b:61: fd:7b:47:b3:4f:1a:5e:f9:10:74:41:e5:0b:aa:75: 6c:28:32:95:ab:b6:5c:01:6e:3a:d3:30:aa:0e:d8: 90:f7:f0:da:5a:41:5a:f3:53:a9:7f:e9:22:96:85: a1:2f:07:cf:50:65:c3:85:c3:d0:17:a9:dd:e7:0b: 9d:57:b0:52:db:dd:9b:68:76:0d:40:5a:30:3b:54: 80:a4:e4:10:71:07:fe:a7:31:4f:b0:c0:07:c2:a6: ef:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:B7:B2:AD:B2:96:34:BC:8F:C8:4A:C7:DB:F6:46:F2:DF:1A:CA:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/af84c3f0-fbb0-3e47-9f93-18c96df2b368.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl X509v3 Authority Key Identifier: keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer sbgp-ipAddrBlock: critical IPv4: 68.66.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:28:50:93:0f:b6:72:c3:35:7b:94:e5:e5:af:d1:62:27:35: 72:c6:d5:94:e9:3b:95:74:4e:cd:e0:49:d3:03:ad:33:74:b3: 47:b6:bf:96:29:a1:e8:0b:62:3f:eb:f4:f0:1c:39:5b:91:7c: 15:da:06:3a:12:0e:33:48:47:19:d0:1c:19:77:cb:de:a3:1b: 0a:06:49:e5:71:57:0f:07:ff:1b:bd:09:f3:33:8b:ea:64:ca: 1e:76:22:fb:e6:13:37:7c:44:da:d2:ab:37:db:74:3c:91:80: ca:35:aa:ba:ef:f1:f9:a8:e8:4e:69:68:53:00:17:3e:61:e4: 10:11:a8:e8:5e:a8:fb:ff:76:b5:d1:ba:3a:75:f7:c3:21:ae: 3b:39:84:72:ac:77:45:6f:63:ae:51:85:e0:c9:a3:c4:b5:f6: 67:a1:8e:eb:b5:54:0e:e7:00:01:ec:55:1f:ee:de:05:53:96: b6:d2:3e:b8:86:9c:31:cb:15:f8:ed:2c:6b:a6:fa:91:78:2e: 5a:7d:21:4c:d8:4c:1f:aa:87:30:fb:4b:1b:1a:78:85:36:2f: 0a:81:bc:46:77:29:e5:77:7c:d7:54:dd:54:e4:c4:f2:09:f3: 64:57:a0:a6:cb:48:a9:54:3d:d3:0a:f8:e4:c2:26:06:b3:3c: 83:16:18:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVK0saMCFkSVr69XsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2M5MzgzZTQtMmM1MS00ZmZkLWJmZTktNjllOWZkNmM1 YjU4MB4XDTI0MDMyMjEzMDAzNFoXDTI0MDYyMDEzMDAzNFowLzEtMCsGA1UEAxMk MGY5YjBmYjMtYWI1ZC00NjBiLTg1MDYtMzVhZjAyNDgwYjJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndkqd0h7AqcNM/aWPjVkO16OkSEWZvuSqA+f f0CtCRJLf9HU9OeOHQmBovOTOpqUCaa9d5ypF5EWHhWipIkxJizczju1Fgu6HEz5 mshAKBxfJR1n+1unXHm5CwBQNly/0AqTw1EqmzG88EgIewUZRmzdW3i+/EqWYH+P plH0nTtFklwKuGuSgiOJymlHaO28997USNqK9TgTlSHVDU/Dq1BvK2H9e0ezTxpe +RB0QeULqnVsKDKVq7ZcAW460zCqDtiQ9/DaWkFa81Opf+kiloWhLwfPUGXDhcPQ F6nd5wudV7BS292baHYNQFowO1SApOQQcQf+pzFPsMAHwqbvZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCG3sq2yljS8j8hKx9v2RvLfGsooMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jYzkz ODNlNC0yYzUxLTRmZmQtYmZlOS02OWU5ZmQ2YzViNTgvYWY4NGMzZjAtZmJiMC0z ZTQ3LTlmOTMtMThjOTZkZjJiMzY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvY2M5MzgzZTQtMmM1MS00ZmZkLWJm ZTktNjllOWZkNmM1YjU4L2NjOTM4M2U0LTJjNTEtNGZmZC1iZmU5LTY5ZTlmZDZj NWI1OC5jcmwwHwYDVR0jBBgwFoAUJtGbtQL9y3VNYKC7ao9HB+JMFzswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9jYzkzODNlNC0yYzUxLTRmZmQtYmZlOS02OWU5 ZmQ2YzViNTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERELgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADAoUJMPtnLDNXuU5eWv0WInNXLG1ZTpO5V0Ts3gSdMDrTN0s0e2v5Yp oegLYj/r9PAcOVuRfBXaBjoSDjNIRxnQHBl3y96jGwoGSeVxVw8H/xu9CfMzi+pk yh52IvvmEzd8RNrSqzfbdDyRgMo1qrrv8fmo6E5paFMAFz5h5BARqOheqPv/drXR ujp198Mhrjs5hHKsd0VvY65RheDJo8S19mehjuu1VA7nAAHsVR/u3gVTlrbSPriG nDHLFfjtLGum+pF4Llp9IUzYTB+qhzD7SxsaeIU2LwqBvEZ3KeV3fNdU3VTkxPIJ 82RXoKbLSKlUPdMK+OTCJgazPIMWGE4= -----END CERTIFICATE-----Generated at Fri May 3 01:53:50 2024 by rpki-client on console-fra.rpki-client.org