$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d47a94a4-ac39-4383-91f3-389070353c6d/95b95446-035a-3b2b-aefd-734f3fb5f220.roa File: 95b95446-035a-3b2b-aefd-734f3fb5f220.roa (raw, json) Hash identifier: sSG1AikMZY2m3ZA3FawLEz7tk0oGQJx4nXRGOktcfOs= Subject key identifier: 24:12:C1:D1:B7:9D:54:DA:39:3D:B5:E3:EE:A3:21:31:93:ED:EC:CE Certificate issuer: /CN=d47a94a4-ac39-4383-91f3-389070353c6d Certificate serial: 010D0C9F4328584726D0892EE0568F7961061E80 Authority key identifier: 3E:0C:D4:A2:7F:33:8F:7F:84:15:BB:CA:33:D1:2E:95:B9:EA:73:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d47a94a4-ac39-4383-91f3-389070353c6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d47a94a4-ac39-4383-91f3-389070353c6d/95b95446-035a-3b2b-aefd-734f3fb5f220.roa Signing time: Mon 09 Sep 2024 01:00:31 +0000 ROA not before: Mon 09 Sep 2024 01:00:31 +0000 ROA not after: Sun 08 Dec 2024 02:00:31 +0000 asID: 397293 IP address blocks: 68.69.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d47a94a4-ac39-4383-91f3-389070353c6d/d47a94a4-ac39-4383-91f3-389070353c6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d47a94a4-ac39-4383-91f3-389070353c6d/d47a94a4-ac39-4383-91f3-389070353c6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d47a94a4-ac39-4383-91f3-389070353c6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Nov 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:26:d0:89:2e:e0:56:8f:79:61:06:1e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d47a94a4-ac39-4383-91f3-389070353c6d Validity Not Before: Sep 9 01:00:31 2024 GMT Not After : Dec 8 02:00:31 2024 GMT Subject: CN=b959cb2c-d137-464c-8eb3-26cd59b4bb79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b8:cb:02:1e:95:af:4a:5c:f0:da:7d:ae:2f: ac:87:f2:2d:69:18:9a:75:c0:34:43:58:f6:c1:b5: 04:a1:90:24:79:1b:fc:a3:b3:c3:ed:17:9f:46:20: ee:b1:26:7f:31:7c:bb:40:d8:a1:31:97:27:92:87: 3f:d2:5d:b7:6d:56:f2:c9:ba:7b:72:a4:03:42:6e: 9b:58:af:f0:c9:c8:c4:9a:88:c4:14:56:f9:2c:7c: 32:78:44:51:49:9b:47:ec:13:16:53:2e:09:cf:62: 7b:f2:f2:4a:9a:76:b0:73:72:4e:1f:9a:c9:07:d9: f1:fb:5f:13:33:31:da:81:15:9a:80:33:1e:35:61: a6:11:c2:b3:7f:cc:b7:69:81:9c:8d:65:7d:17:fc: 6e:eb:c1:03:f5:a3:7b:e5:7e:17:af:28:f6:bb:3d: 86:b6:56:cd:68:c5:a4:d0:3e:b4:a1:eb:6d:81:e6: 7e:d0:d4:4d:69:60:80:90:f6:d9:b2:da:c6:71:3e: 70:3a:5a:9c:be:e0:fd:1f:30:9c:ad:62:98:c2:54: 1d:78:c3:3a:f3:18:8e:18:19:92:81:ec:58:18:54: 26:70:45:a4:92:a8:68:72:d5:cb:cb:ef:a7:91:c5: aa:46:fc:46:20:0e:d3:f0:6f:47:33:4e:f3:70:d6: 22:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:12:C1:D1:B7:9D:54:DA:39:3D:B5:E3:EE:A3:21:31:93:ED:EC:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d47a94a4-ac39-4383-91f3-389070353c6d/95b95446-035a-3b2b-aefd-734f3fb5f220.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d47a94a4-ac39-4383-91f3-389070353c6d/d47a94a4-ac39-4383-91f3-389070353c6d.crl X509v3 Authority Key Identifier: keyid:3E:0C:D4:A2:7F:33:8F:7F:84:15:BB:CA:33:D1:2E:95:B9:EA:73:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d47a94a4-ac39-4383-91f3-389070353c6d.cer sbgp-ipAddrBlock: critical IPv4: 68.69.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:14:a2:13:2b:50:16:d2:5b:02:10:b6:7e:4d:9e:30:de:7a: 4f:14:8c:f8:ec:76:00:fb:68:dc:34:0f:e4:c1:e0:28:7a:d4: e4:0b:47:6e:18:ee:89:e1:77:80:87:a0:23:84:06:69:d2:c1: 39:12:01:75:56:bd:c7:65:10:60:7e:46:3b:ab:0a:ea:82:7d: fd:3e:98:66:13:f4:be:ed:06:81:be:e8:c1:8d:a4:b3:3e:e8: 4a:5c:f9:53:42:65:60:8e:06:bc:0c:89:0c:21:de:28:01:59: 6f:8e:2b:68:5f:b5:cc:8a:dd:9b:5f:e9:a6:e1:1a:3f:4f:90: 08:5e:a4:3a:32:16:22:c4:41:eb:5a:88:da:26:9f:44:a3:61: 32:ec:e1:58:ee:6d:48:76:8c:20:e7:c3:c1:6a:81:f7:d6:e2: ac:de:c9:28:12:30:76:2c:fd:7e:12:3d:e9:60:b1:d1:aa:f6: 82:ac:ad:6e:04:4b:6f:9c:9d:36:f0:20:65:b2:42:e2:b5:00: b6:2c:98:40:28:ce:b0:f5:df:eb:55:5f:90:07:1b:da:14:83: 0b:28:ec:24:f5:de:4c:bd:8e:64:7b:1c:5a:65:53:fe:6a:37: 31:e0:4c:fe:09:46:b4:e7:37:b8:cd:6e:5c:1a:85:b6:03:e7: 48:61:a8:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcm0Iku4FaPeWEGHoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ3YTk0YTQtYWMzOS00MzgzLTkxZjMtMzg5MDcwMzUz YzZkMB4XDTI0MDkwOTAxMDAzMVoXDTI0MTIwODAyMDAzMVowLzEtMCsGA1UEAxMk Yjk1OWNiMmMtZDEzNy00NjRjLThlYjMtMjZjZDU5YjRiYjc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLjLAh6Vr0pc8Np9ri+sh/ItaRiadcA0Q1j2 wbUEoZAkeRv8o7PD7RefRiDusSZ/MXy7QNihMZcnkoc/0l23bVbyybp7cqQDQm6b WK/wycjEmojEFFb5LHwyeERRSZtH7BMWUy4Jz2J78vJKmnawc3JOH5rJB9nx+18T MzHagRWagDMeNWGmEcKzf8y3aYGcjWV9F/xu68ED9aN75X4Xryj2uz2GtlbNaMWk 0D60oettgeZ+0NRNaWCAkPbZstrGcT5wOlqcvuD9HzCcrWKYwlQdeMM68xiOGBmS gexYGFQmcEWkkqhoctXLy++nkcWqRvxGIA7T8G9HM07zcNYiswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCQSwdG3nVTaOT214+6jITGT7ezOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kNDdh OTRhNC1hYzM5LTQzODMtOTFmMy0zODkwNzAzNTNjNmQvOTViOTU0NDYtMDM1YS0z YjJiLWFlZmQtNzM0ZjNmYjVmMjIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZDQ3YTk0YTQtYWMzOS00MzgzLTkx ZjMtMzg5MDcwMzUzYzZkL2Q0N2E5NGE0LWFjMzktNDM4My05MWYzLTM4OTA3MDM1 M2M2ZC5jcmwwHwYDVR0jBBgwFoAUPgzUon8zj3+EFbvKM9Eulbnqc40wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kNDdhOTRhNC1hYzM5LTQzODMtOTFmMy0zODkw NzAzNTNjNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCREUIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEwUohMrUBbSWwIQtn5NnjDeek8UjPjsdgD7aNw0D+TB4Ch61OQLR24Y 7onhd4CHoCOEBmnSwTkSAXVWvcdlEGB+RjurCuqCff0+mGYT9L7tBoG+6MGNpLM+ 6Epc+VNCZWCOBrwMiQwh3igBWW+OK2hftcyK3Ztf6abhGj9PkAhepDoyFiLEQeta iNomn0SjYTLs4VjubUh2jCDnw8FqgffW4qzeySgSMHYs/X4SPelgsdGq9oKsrW4E S2+cnTbwIGWyQuK1ALYsmEAozrD13+tVX5AHG9oUgwso7CT13ky9jmR7HFplU/5q NzHgTP4JRrTnN7jNblwahbYD50hhqNc= -----END CERTIFICATE-----Generated at Fri Nov 22 17:32:09 2024 by rpki-client on console-ams.rpki-client.org