$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/3e4dc898-a5b1-33dd-83ef-2a1d76b0d2af.roa File: 3e4dc898-a5b1-33dd-83ef-2a1d76b0d2af.roa (raw, json) Hash identifier: 1zl+zYGvW4EYgtyDMmeRDmL3xGukkBD7z7cGRhDpBUg= Subject key identifier: 61:3F:08:47:CB:D0:59:6D:64:4E:2E:8D:D8:65:AC:AC:F3:9E:58:5D Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F43285844EED0096EE8FD2B54E6222A40 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/3e4dc898-a5b1-33dd-83ef-2a1d76b0d2af.roa Signing time: Sun 18 Feb 2024 14:00:30 +0000 ROA not before: Sun 18 Feb 2024 14:00:30 +0000 ROA not after: Sat 18 May 2024 13:00:30 +0000 asID: 54858 IP address blocks: 68.67.80.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 04 May 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:ee:d0:09:6e:e8:fd:2b:54:e6:22:2a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Feb 18 14:00:30 2024 GMT Not After : May 18 13:00:30 2024 GMT Subject: CN=5d2c42ec-4de3-4235-b822-c570386d9e9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:20:bb:d5:92:52:bb:8e:f7:18:ca:0b:70:3a: 5f:cc:4e:49:88:2b:ad:ff:5c:86:f5:c7:39:dd:07: 0b:3c:aa:4c:d6:9b:58:d2:1e:90:29:35:ff:68:3f: 30:de:a5:74:de:0c:80:b5:de:34:8c:cf:84:cd:00: fc:35:3f:a7:e0:27:47:1c:79:b4:33:3d:af:99:a1: 59:78:6f:2d:95:ff:11:f2:6c:56:27:49:b1:e2:13: 42:fc:da:3a:a1:fe:8b:67:66:ff:4a:20:d0:d1:11: 9b:ff:53:5b:fa:96:02:cb:3a:a7:52:90:63:c6:e1: 5c:bc:e7:54:06:c6:c3:6e:68:a3:d5:c2:a2:e7:ab: b7:0b:d9:38:ce:84:a1:0a:bd:a8:63:31:7f:4e:6f: 28:62:d1:c4:0a:e1:f1:fd:af:46:24:8f:78:c9:b6: 12:a8:c5:41:6d:02:0f:b9:7c:26:ca:b4:da:9a:f7: 81:e4:f6:1f:ee:6b:b0:ff:7e:50:d5:10:d5:8f:5f: 54:23:0e:5b:ec:9b:2c:79:31:89:c1:22:50:4f:aa: e9:75:dc:bd:6d:f3:01:98:81:84:ae:0e:69:2c:7d: 13:eb:3b:51:48:98:22:d4:af:3f:23:eb:52:5b:2e: 44:0d:78:3e:90:21:a2:a5:d9:88:34:7d:07:94:b4: ba:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:3F:08:47:CB:D0:59:6D:64:4E:2E:8D:D8:65:AC:AC:F3:9E:58:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/3e4dc898-a5b1-33dd-83ef-2a1d76b0d2af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 68.67.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:54:87:fe:0b:eb:81:e1:ef:44:5c:53:2c:5e:07:e3:b7:c8: 33:05:6d:fc:dc:e5:3d:6c:d9:8f:8b:dd:e2:cc:0e:f8:af:03: 41:49:c1:68:f1:a4:00:9c:9a:54:21:d5:01:06:9b:4c:ac:c9: ca:d8:ae:08:7a:be:3a:db:42:11:df:8d:22:a2:b7:f5:f6:c3: 7f:e1:c7:8c:53:ee:3d:6a:53:0d:97:f0:9a:ba:4c:14:fb:7f: 3b:73:36:40:95:da:d7:72:48:0c:7a:a2:99:9e:c3:d6:cb:fc: 36:1c:d3:42:3a:cb:26:d8:56:df:77:04:ed:69:3f:70:04:5b: 91:c9:19:86:53:0f:ce:54:ab:17:c4:7f:64:02:0e:3f:18:71: 80:c2:20:ed:bd:27:28:38:0e:89:31:9a:0a:80:d2:d8:82:ff: 6f:78:f6:dc:7d:2b:01:6f:5a:0b:2f:fe:9a:1b:20:9e:cb:67: fb:dc:55:b5:b2:d0:57:b8:8d:7d:7b:88:4a:8e:92:f0:d8:97: 8b:c9:af:17:98:80:3a:0c:2a:8d:f2:5f:a8:de:30:78:e1:00: 8c:92:37:b8:32:4d:6f:5a:b0:11:2e:d6:40:ef:de:4a:4c:c7: 9c:e1:25:d3:ea:4f:4e:9f:cc:54:95:61:43:93:e5:50:44:a9: 6a:eb:61:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWETu0Alu6P0rVOYiKkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI0MDIxODE0MDAzMFoXDTI0MDUxODEzMDAzMFowLzEtMCsGA1UEAxMk NWQyYzQyZWMtNGRlMy00MjM1LWI4MjItYzU3MDM4NmQ5ZTljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSC71ZJSu473GMoLcDpfzE5JiCut/1yG9cc5 3QcLPKpM1ptY0h6QKTX/aD8w3qV03gyAtd40jM+EzQD8NT+n4CdHHHm0Mz2vmaFZ eG8tlf8R8mxWJ0mx4hNC/No6of6LZ2b/SiDQ0RGb/1Nb+pYCyzqnUpBjxuFcvOdU BsbDbmij1cKi56u3C9k4zoShCr2oYzF/Tm8oYtHECuHx/a9GJI94ybYSqMVBbQIP uXwmyrTamveB5PYf7muw/35Q1RDVj19UIw5b7JsseTGJwSJQT6rpddy9bfMBmIGE rg5pLH0T6ztRSJgi1K8/I+tSWy5EDXg+kCGipdmINH0HlLS6DwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGE/CEfL0FltZE4ujdhlrKzznlhdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvM2U0ZGM4OTgtYTViMS0z M2RkLTgzZWYtMmExZDc2YjBkMmFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERENQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH9Uh/4L64Hh70RcUyxeB+O3yDMFbfzc5T1s2Y+L3eLMDvivA0FJwWjx pACcmlQh1QEGm0ysycrYrgh6vjrbQhHfjSKit/X2w3/hx4xT7j1qUw2X8Jq6TBT7 fztzNkCV2tdySAx6opmew9bL/DYc00I6yybYVt93BO1pP3AEW5HJGYZTD85UqxfE f2QCDj8YcYDCIO29Jyg4DokxmgqA0tiC/2949tx9KwFvWgsv/pobIJ7LZ/vcVbWy 0Fe4jX17iEqOkvDYl4vJrxeYgDoMKo3yX6jeMHjhAIySN7gyTW9asBEu1kDv3kpM x5zhJdPqT06fzFSVYUOT5VBEqWrrYRo= -----END CERTIFICATE-----Generated at Fri May 3 00:07:55 2024 by rpki-client on console-ams.rpki-client.org