$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8d17c9e8-cc80-3e47-be57-1a2dcade844b.roa File: 8d17c9e8-cc80-3e47-be57-1a2dcade844b.roa (raw, json) Hash identifier: cf3eh1zqTdQ6jwtNpX2tay94pjFDpIyTLCK/3vyTj/0= Subject key identifier: 66:CE:C7:CC:36:3A:AF:5F:66:ED:04:E3:D7:92:9D:14:BF:89:0C:47 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285844FE2AD31C9489493BDD0B0380 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8d17c9e8-cc80-3e47-be57-1a2dcade844b.roa Signing time: Sat 24 Feb 2024 02:00:26 +0000 ROA not before: Sat 24 Feb 2024 02:00:26 +0000 ROA not after: Fri 24 May 2024 01:00:26 +0000 asID: 701 IP address blocks: 68.161.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:fe:2a:d3:1c:94:89:49:3b:dd:0b:03:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Feb 24 02:00:26 2024 GMT Not After : May 24 01:00:26 2024 GMT Subject: CN=b497b368-886a-4e99-b063-6edeb6436c8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:41:85:de:da:3b:67:6d:1d:e9:a4:52:53:1f: 3f:21:7b:5b:c0:ab:cc:fe:7c:ca:b0:f1:03:a3:ac: e6:60:bd:46:0c:4a:9a:68:83:f1:98:b7:67:d3:79: a9:40:b7:33:59:ab:5b:6b:d7:bb:64:06:62:17:71: 7d:ad:2e:8a:6f:ff:cb:82:e7:a1:27:7d:74:43:3b: 94:fa:38:73:b9:ba:39:d1:7c:71:c7:37:90:ff:1c: d3:30:83:20:0b:6b:96:06:d1:a9:89:d7:b8:8b:d9: f5:f3:b1:25:b8:c4:89:96:84:63:2e:31:58:b5:73: 1d:3f:64:f6:93:a5:2d:f3:46:66:22:c9:c8:91:68: 5a:bc:53:c9:30:5c:e4:74:25:2c:cc:3c:f8:31:12: de:71:a5:4a:81:46:44:75:b9:71:32:74:9d:03:a1: b3:8c:2c:7e:8a:c7:44:55:76:5a:89:93:89:06:0d: 87:9c:3c:c9:15:1a:bc:4c:4f:67:4c:5e:cd:b4:84: 91:d4:44:d2:f0:e0:80:2a:88:60:16:4c:cf:c1:65: 49:f2:f4:a9:02:4a:41:ee:f1:da:5f:8c:1b:ce:b2: e1:bc:99:da:41:4a:42:94:e2:f3:df:12:32:a1:fc: 47:b3:ee:e8:82:3a:18:16:8e:d6:d5:c1:14:ce:c6: df:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:CE:C7:CC:36:3A:AF:5F:66:ED:04:E3:D7:92:9D:14:BF:89:0C:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8d17c9e8-cc80-3e47-be57-1a2dcade844b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 68.161.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:f3:c6:6a:29:e5:a4:a0:12:9e:62:86:c6:fe:f2:cf:69:c7: f6:35:1a:13:8b:6e:21:80:34:37:86:cc:a9:01:75:81:20:69: e5:1c:26:95:ce:11:1a:58:31:0f:62:bb:b7:13:d1:50:c1:73: d1:33:e8:d0:bc:1b:7f:8c:02:df:49:3b:6d:cf:77:ce:03:f2: 20:f4:6b:84:da:93:62:56:47:d3:f5:a8:fd:6f:07:d2:63:ca: 8d:d3:a5:1f:c8:33:2c:a4:0d:6e:04:98:b2:66:71:6f:91:f6: 95:8b:17:54:bb:24:2e:a9:da:44:ae:ec:b6:25:7b:5d:16:13: b3:d6:f9:c3:b8:c7:48:b6:05:d1:b3:22:56:49:bc:20:18:23: 21:fa:ef:db:38:b1:ff:9e:58:85:77:85:43:91:b2:aa:d2:c7: 0f:00:7c:5c:4d:d0:ea:1c:20:8f:a3:b1:d7:ba:5d:9d:af:81: 20:b3:40:d8:e8:ee:23:ef:6b:98:9a:af:43:fd:2b:37:e3:f8: 1d:92:93:33:95:1d:20:43:64:41:cf:fc:26:a3:b1:e0:26:e1: 76:62:6a:6d:d5:e1:d8:fb:f1:77:98:e7:d7:a7:5f:65:ff:15: 17:c3:25:d6:b6:2d:2e:38:10:0d:4d:43:08:7e:36:ea:0b:d1: 17:a9:c4:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWET+KtMclIlJO90LA4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI0MDIyNDAyMDAyNloXDTI0MDUyNDAxMDAyNlowLzEtMCsGA1UEAxMk YjQ5N2IzNjgtODg2YS00ZTk5LWIwNjMtNmVkZWI2NDM2YzhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjEGF3to7Z20d6aRSUx8/IXtbwKvM/nzKsPED o6zmYL1GDEqaaIPxmLdn03mpQLczWatba9e7ZAZiF3F9rS6Kb//LguehJ310QzuU +jhzubo50XxxxzeQ/xzTMIMgC2uWBtGpide4i9n187EluMSJloRjLjFYtXMdP2T2 k6Ut80ZmIsnIkWhavFPJMFzkdCUszDz4MRLecaVKgUZEdblxMnSdA6GzjCx+isdE VXZaiZOJBg2HnDzJFRq8TE9nTF7NtISR1ETS8OCAKohgFkzPwWVJ8vSpAkpB7vHa X4wbzrLhvJnaQUpClOLz3xIyofxHs+7ogjoYFo7W1cEUzsbfiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGbOx8w2Oq9fZu0E49eSnRS/iQxHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOGQxN2M5ZTgtY2M4MC0z ZTQ3LWJlNTctMWEyZGNhZGU4NDRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARKEAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH3zxmop5aSgEp5ihsb+8s9px/Y1GhOLbiGANDeGzKkBdYEgaeUcJpXO ERpYMQ9iu7cT0VDBc9Ez6NC8G3+MAt9JO23Pd84D8iD0a4Tak2JWR9P1qP1vB9Jj yo3TpR/IMyykDW4EmLJmcW+R9pWLF1S7JC6p2kSu7LYle10WE7PW+cO4x0i2BdGz IlZJvCAYIyH679s4sf+eWIV3hUORsqrSxw8AfFxN0OocII+jsde6XZ2vgSCzQNjo 7iPva5iar0P9Kzfj+B2SkzOVHSBDZEHP/CajseAm4XZiam3V4dj78XeY59enX2X/ FRfDJda2LS44EA1NQwh+NuoL0RepxKw= -----END CERTIFICATE-----Generated at Thu May 9 01:32:27 2024 by rpki-client on console-ams.rpki-client.org