$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/cb84e6c5-c969-3183-94a3-d4009b317b7c.roa File: cb84e6c5-c969-3183-94a3-d4009b317b7c.roa (raw, json) Hash identifier: XLdh8i/dSMD8Wc6E350vSnkXzizJU7s28QJ4QqnLTHA= Subject key identifier: 8E:68:AB:F6:58:F3:4C:75:39:16:3D:52:22:49:45:A4:12:BD:60:06 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F432858454F02C4621DDE6FC37B5F1180 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/cb84e6c5-c969-3183-94a3-d4009b317b7c.roa Signing time: Sun 24 Mar 2024 01:00:24 +0000 ROA not before: Sun 24 Mar 2024 01:00:24 +0000 ROA not after: Sat 22 Jun 2024 01:00:24 +0000 asID: 54879 IP address blocks: 68.66.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 04 May 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:4f:02:c4:62:1d:de:6f:c3:7b:5f:11:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Mar 24 01:00:24 2024 GMT Not After : Jun 22 01:00:24 2024 GMT Subject: CN=33610151-66d8-43c1-927b-9839a8916e93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:7e:56:06:d5:07:cd:bf:23:1a:e8:c8:64:4f: 88:51:de:c0:ec:9e:39:83:95:c7:90:84:c9:fc:cb: 20:5a:b6:82:4c:97:95:ce:dd:df:af:1a:c4:1a:56: 1d:83:d7:0f:09:8e:ec:82:70:c2:1f:c3:48:88:db: 8b:3f:50:87:ce:fc:0f:5a:37:81:c7:91:ff:9e:c0: 33:3a:0e:ac:82:be:f3:fb:ca:2b:56:c2:5a:4f:4a: 1b:d4:14:26:65:f1:1f:27:6a:fb:b3:a2:48:71:f8: 90:74:f8:b4:a8:4d:c9:fd:a0:09:ee:72:72:e8:68: 5d:1d:21:b0:10:41:89:59:9c:dc:7e:7c:3c:fc:5e: 3f:ec:dd:cb:3b:f1:df:05:62:bc:c5:08:cc:8d:9e: d9:dd:ce:71:0d:23:c5:86:7b:e7:8e:39:3f:e4:c9: e5:72:bc:25:52:f8:1a:f4:20:fb:ea:3e:7b:16:99: 08:90:29:e2:98:5f:2c:9d:c6:bf:0b:30:6b:18:d5: d1:e3:67:31:10:ca:dd:54:6d:a4:ce:c4:01:55:d3: b9:b7:ec:5b:da:87:66:6c:9d:31:d5:35:57:f4:3f: 7a:dc:97:45:b2:05:fd:22:12:3d:79:c7:67:d9:e9: 16:0a:62:d8:5f:4d:b6:be:af:c1:4f:c5:0c:e9:0a: d7:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:68:AB:F6:58:F3:4C:75:39:16:3D:52:22:49:45:A4:12:BD:60:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/cb84e6c5-c969-3183-94a3-d4009b317b7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 68.66.151.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:e1:7d:44:76:79:6b:89:3c:60:ef:ee:24:d6:c3:3e:c1:3e: 68:a9:76:05:ce:b3:e6:e1:bd:74:db:ca:92:0d:24:5e:da:02: ab:26:2d:99:9a:5b:c9:98:84:c3:d7:b0:c1:43:4a:3b:d7:de: 35:bf:79:69:49:57:25:25:dc:c8:c8:b0:75:1c:24:f1:2a:d6: bd:30:66:0a:06:43:0b:fc:0c:1b:f4:a3:f0:96:bb:53:d0:06: 6c:7b:34:76:e2:62:8d:aa:3c:34:88:63:53:4b:13:83:28:4d: 44:2f:a7:51:bf:9d:d6:54:1b:6a:42:50:e3:1e:6b:72:ec:b0: a9:38:45:b0:d1:16:99:25:d3:e5:c3:b5:33:d6:db:05:3e:ef: 53:40:75:6d:b3:dd:29:89:11:7c:e2:e4:6d:eb:f9:b1:f5:80: 34:9a:44:75:d6:5a:b2:39:d3:d9:b3:32:56:5b:ef:d4:54:55: 96:b6:1e:4f:ce:25:25:ef:72:09:c5:9f:26:55:29:f3:98:ad: 89:b9:37:3d:b0:41:35:50:ae:8a:b8:4d:d6:c9:9e:25:bd:88: 7b:31:a3:63:82:7b:23:d4:c0:7a:33:db:77:ec:ca:33:18:71: 21:ef:2c:8a:5f:18:be:c7:b4:a7:f6:7e:2e:82:69:ba:5c:fb: 76:29:fb:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVPAsRiHd5vw3tfEYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI0MDMyNDAxMDAyNFoXDTI0MDYyMjAxMDAyNFowLzEtMCsGA1UEAxMk MzM2MTAxNTEtNjZkOC00M2MxLTkyN2ItOTgzOWE4OTE2ZTkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmn5WBtUHzb8jGujIZE+IUd7A7J45g5XHkITJ /MsgWraCTJeVzt3frxrEGlYdg9cPCY7sgnDCH8NIiNuLP1CHzvwPWjeBx5H/nsAz Og6sgr7z+8orVsJaT0ob1BQmZfEfJ2r7s6JIcfiQdPi0qE3J/aAJ7nJy6GhdHSGw EEGJWZzcfnw8/F4/7N3LO/HfBWK8xQjMjZ7Z3c5xDSPFhnvnjjk/5MnlcrwlUvga 9CD76j57FpkIkCnimF8snca/CzBrGNXR42cxEMrdVG2kzsQBVdO5t+xb2odmbJ0x 1TVX9D963JdFsgX9IhI9ecdn2ekWCmLYX022vq/BT8UM6QrXHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI5oq/ZY80x1ORY9UiJJRaQSvWAGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvY2I4NGU2YzUtYzk2OS0z MTgzLTk0YTMtZDQwMDliMzE3YjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAREKXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHnhfUR2eWuJPGDv7iTWwz7BPmipdgXOs+bhvXTbypINJF7aAqsmLZma W8mYhMPXsMFDSjvX3jW/eWlJVyUl3MjIsHUcJPEq1r0wZgoGQwv8DBv0o/CWu1PQ Bmx7NHbiYo2qPDSIY1NLE4MoTUQvp1G/ndZUG2pCUOMea3LssKk4RbDRFpkl0+XD tTPW2wU+71NAdW2z3SmJEXzi5G3r+bH1gDSaRHXWWrI509mzMlZb79RUVZa2Hk/O JSXvcgnFnyZVKfOYrYm5Nz2wQTVQroq4TdbJniW9iHsxo2OCeyPUwHoz23fsyjMY cSHvLIpfGL7HtKf2fi6Cabpc+3Yp+1g= -----END CERTIFICATE-----Generated at Fri May 3 00:07:55 2024 by rpki-client on console-ams.rpki-client.org