$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d47a94a4-ac39-4383-91f3-389070353c6d/95b95446-035a-3b2b-aefd-734f3fb5f220.roa File: 95b95446-035a-3b2b-aefd-734f3fb5f220.roa (raw, json) Hash identifier: qXRu0C0nsuLDHPDwxzLTZCsh+DNnMJ1EdhjC9AJ/jzs= Subject key identifier: 22:32:0F:F7:F0:56:D3:CE:CE:B9:C2:CE:15:52:E7:69:FC:68:67:62 Certificate issuer: /CN=d47a94a4-ac39-4383-91f3-389070353c6d Certificate serial: 010D0C9F432858456797E78E37D4D93E88FE73B0 Authority key identifier: 3E:0C:D4:A2:7F:33:8F:7F:84:15:BB:CA:33:D1:2E:95:B9:EA:73:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d47a94a4-ac39-4383-91f3-389070353c6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d47a94a4-ac39-4383-91f3-389070353c6d/95b95446-035a-3b2b-aefd-734f3fb5f220.roa Signing time: Mon 01 Apr 2024 20:20:24 +0000 ROA not before: Mon 01 Apr 2024 20:20:24 +0000 ROA not after: Sun 30 Jun 2024 20:20:24 +0000 asID: 397293 IP address blocks: 68.69.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d47a94a4-ac39-4383-91f3-389070353c6d/d47a94a4-ac39-4383-91f3-389070353c6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d47a94a4-ac39-4383-91f3-389070353c6d/d47a94a4-ac39-4383-91f3-389070353c6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d47a94a4-ac39-4383-91f3-389070353c6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:67:97:e7:8e:37:d4:d9:3e:88:fe:73:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d47a94a4-ac39-4383-91f3-389070353c6d Validity Not Before: Apr 1 20:20:24 2024 GMT Not After : Jun 30 20:20:24 2024 GMT Subject: CN=031d7256-454c-40fb-b881-a931c5be5797 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:73:6e:56:e4:f5:9b:e7:18:5e:2d:e6:e9:39: 4c:01:74:dc:e1:34:6a:cd:47:8c:b7:7a:13:14:d3: fd:3b:0d:f1:80:06:8e:cb:1d:e2:8a:39:78:4d:9c: dc:21:47:e3:e2:4b:cc:90:6f:e3:4a:ce:81:05:f5: 9f:64:ca:97:e3:19:97:04:01:85:8a:08:a9:75:65: 37:ec:c9:51:39:29:c5:1e:85:cf:03:82:5f:5e:47: 00:c8:41:00:79:49:60:ce:b0:fc:16:0c:67:25:51: 39:a8:94:34:51:39:d9:0b:2d:bb:f9:f8:f7:8a:e9: 69:3b:4e:5c:f3:2a:7c:8e:c0:5c:7f:f5:c0:ee:a7: 6f:66:07:f3:f0:67:fe:ed:e5:f9:a8:32:7b:f6:93: ed:3b:17:29:e4:c3:52:45:40:ab:48:d0:bb:2f:07: c1:d6:a9:42:33:ef:51:81:aa:ed:ab:73:db:c9:2c: 67:8d:61:f7:c8:28:52:86:de:76:2f:6f:0a:23:a9: 32:68:c0:50:63:d7:0f:c2:83:04:a7:e0:40:85:6c: 28:52:62:ae:1c:b5:19:f0:45:e7:3c:bc:32:e1:ae: b5:1d:99:a6:50:0b:90:5a:db:ec:9a:8d:60:7a:6a: ad:0d:41:11:5d:e5:e5:c8:b8:4c:f7:59:81:54:76: 2c:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:32:0F:F7:F0:56:D3:CE:CE:B9:C2:CE:15:52:E7:69:FC:68:67:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d47a94a4-ac39-4383-91f3-389070353c6d/95b95446-035a-3b2b-aefd-734f3fb5f220.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d47a94a4-ac39-4383-91f3-389070353c6d/d47a94a4-ac39-4383-91f3-389070353c6d.crl X509v3 Authority Key Identifier: keyid:3E:0C:D4:A2:7F:33:8F:7F:84:15:BB:CA:33:D1:2E:95:B9:EA:73:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d47a94a4-ac39-4383-91f3-389070353c6d.cer sbgp-ipAddrBlock: critical IPv4: 68.69.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:7a:9e:55:e7:e1:09:1d:9c:f5:01:69:1c:85:32:65:c7:67: 9b:5f:03:7d:d7:bc:c7:c8:b6:18:bd:fa:68:96:74:4d:ad:d9: 22:36:3b:e2:6b:05:1e:6b:d4:98:4f:81:36:8d:df:48:30:82: 82:2a:62:76:e3:c9:26:b6:c2:d7:3a:41:ce:3b:96:1b:a8:2c: 87:a7:a7:77:25:03:0f:fd:2c:16:cc:42:e0:8d:c7:58:35:d5: eb:8a:1a:32:cd:3f:0f:84:84:cb:44:1c:63:77:cc:3f:c2:ca: 47:d9:95:a5:15:89:ec:74:36:fa:20:5b:70:c7:f7:23:4d:75: 50:d3:86:c6:e9:49:e3:b4:86:5f:0c:83:a6:91:f4:99:c0:82: f5:f8:58:ec:cb:b7:50:2f:de:ae:3b:89:b3:1e:b0:2a:04:df: d1:6a:af:4f:b5:b1:f4:7c:8b:30:31:56:ef:2b:c8:11:1a:f0: b5:2e:05:28:96:7b:1e:16:eb:70:6d:01:ff:fc:db:d8:78:26: ba:5c:fd:70:b9:c3:d6:2d:c5:1e:9a:1c:74:78:b3:bb:37:52: d0:98:ce:2e:c5:c8:9c:82:70:f0:57:ec:6b:d6:fa:00:2a:b0: 20:3e:10:69:7b:f0:83:8f:03:48:76:91:4d:35:47:91:e4:44: 47:50:7f:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVnl+eON9TZPoj+c7AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ3YTk0YTQtYWMzOS00MzgzLTkxZjMtMzg5MDcwMzUz YzZkMB4XDTI0MDQwMTIwMjAyNFoXDTI0MDYzMDIwMjAyNFowLzEtMCsGA1UEAxMk MDMxZDcyNTYtNDU0Yy00MGZiLWI4ODEtYTkzMWM1YmU1Nzk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjHNuVuT1m+cYXi3m6TlMAXTc4TRqzUeMt3oT FNP9Ow3xgAaOyx3iijl4TZzcIUfj4kvMkG/jSs6BBfWfZMqX4xmXBAGFigipdWU3 7MlROSnFHoXPA4JfXkcAyEEAeUlgzrD8FgxnJVE5qJQ0UTnZCy27+fj3iulpO05c 8yp8jsBcf/XA7qdvZgfz8Gf+7eX5qDJ79pPtOxcp5MNSRUCrSNC7LwfB1qlCM+9R gartq3PbySxnjWH3yChSht52L28KI6kyaMBQY9cPwoMEp+BAhWwoUmKuHLUZ8EXn PLwy4a61HZmmUAuQWtvsmo1gemqtDUERXeXlyLhM91mBVHYsSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCIyD/fwVtPOzrnCzhVS52n8aGdiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kNDdh OTRhNC1hYzM5LTQzODMtOTFmMy0zODkwNzAzNTNjNmQvOTViOTU0NDYtMDM1YS0z YjJiLWFlZmQtNzM0ZjNmYjVmMjIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZDQ3YTk0YTQtYWMzOS00MzgzLTkx ZjMtMzg5MDcwMzUzYzZkL2Q0N2E5NGE0LWFjMzktNDM4My05MWYzLTM4OTA3MDM1 M2M2ZC5jcmwwHwYDVR0jBBgwFoAUPgzUon8zj3+EFbvKM9Eulbnqc40wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kNDdhOTRhNC1hYzM5LTQzODMtOTFmMy0zODkw NzAzNTNjNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCREUIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEt6nlXn4QkdnPUBaRyFMmXHZ5tfA33XvMfIthi9+miWdE2t2SI2O+Jr BR5r1JhPgTaN30gwgoIqYnbjySa2wtc6Qc47lhuoLIenp3clAw/9LBbMQuCNx1g1 1euKGjLNPw+EhMtEHGN3zD/CykfZlaUViex0NvogW3DH9yNNdVDThsbpSeO0hl8M g6aR9JnAgvX4WOzLt1Av3q47ibMesCoE39Fqr0+1sfR8izAxVu8ryBEa8LUuBSiW ex4W63BtAf/829h4Jrpc/XC5w9YtxR6aHHR4s7s3UtCYzi7FyJyCcPBX7GvW+gAq sCA+EGl78IOPA0h2kU01R5HkREdQfxk= -----END CERTIFICATE-----Generated at Wed May 8 02:22:37 2024 by rpki-client on console-ams.rpki-client.org