$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/0d868be8-3913-3e46-9d8f-a0cb7bd1234a.roa File: 0d868be8-3913-3e46-9d8f-a0cb7bd1234a.roa (raw, json) Hash identifier: i3k1bQdO9Gf2j4OMWQJA+lpb7Sbs+lmHekBDYPKyRLA= Subject key identifier: 8E:A9:1D:38:7E:C0:85:15:75:5A:10:98:12:B2:E2:3F:85:47:B7:26 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F43285845628E0F61F3E3A1DC5D3DDA80 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/0d868be8-3913-3e46-9d8f-a0cb7bd1234a.roa Signing time: Sun 31 Mar 2024 01:00:26 +0000 ROA not before: Sun 31 Mar 2024 01:00:26 +0000 ROA not after: Sat 29 Jun 2024 01:00:26 +0000 asID: 20115 IP address blocks: 68.191.248.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:62:8e:0f:61:f3:e3:a1:dc:5d:3d:da:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Mar 31 01:00:26 2024 GMT Not After : Jun 29 01:00:26 2024 GMT Subject: CN=5035e6a5-2bb6-423c-9143-758420f4ad6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:e9:79:c9:d3:3f:7c:4a:85:58:e4:da:2c:55: c1:bd:78:7d:28:e9:d8:84:12:6f:41:75:1d:1c:05: bb:9e:1a:e0:88:c5:06:f5:6e:cc:52:36:0b:1d:f8: 48:34:12:db:29:d1:47:0d:6b:92:80:0a:25:f6:d5: c4:58:99:42:5b:1b:5f:02:a6:02:30:5f:87:c8:6b: 45:f6:1b:4f:3a:81:c0:46:90:83:fd:35:e6:da:4d: bc:53:5e:5e:e5:75:a7:47:06:23:11:64:80:0c:1c: d9:9e:62:8d:1f:f1:5d:77:29:2b:bb:2b:a1:74:8b: e4:df:5a:75:cc:47:76:40:9c:82:e2:b5:c8:be:ce: 2b:bc:63:39:ee:b0:f2:de:75:9a:39:e4:3e:45:ee: ff:e8:96:69:b1:04:01:cc:47:f3:3b:fa:bc:ab:bf: d4:90:1a:23:21:a5:8d:52:72:de:72:4d:b2:8e:66: d5:41:0c:a7:90:cd:5c:72:d3:25:19:b6:1e:70:71: 9f:4e:c7:44:5d:ed:63:df:a8:ac:92:67:5d:38:5b: 54:f4:ac:c1:e0:2e:c7:69:84:e4:d6:cf:ce:eb:71: aa:e1:0e:35:1e:6e:48:91:36:bd:c4:e1:0a:7a:05: 49:6a:b7:f8:d7:d3:8e:c7:8e:f4:26:d9:01:2c:99: d0:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:A9:1D:38:7E:C0:85:15:75:5A:10:98:12:B2:E2:3F:85:47:B7:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/0d868be8-3913-3e46-9d8f-a0cb7bd1234a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 68.191.248.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:da:05:09:68:07:84:36:a4:40:5a:d5:4c:c3:b2:d3:4f:6f: d7:8e:09:37:dc:52:f5:ad:09:d3:fc:0f:44:cc:d5:a8:80:33: 9e:29:08:bf:d6:b7:7d:ff:4f:5e:8d:22:34:db:b3:98:8e:96: aa:5f:19:3a:6f:1e:b4:ee:98:67:a0:a2:54:77:0c:43:6a:d6: 93:11:0b:3b:9c:ee:7d:9e:3c:3a:90:30:5f:bf:15:4a:64:4e: 2b:69:bc:4e:6e:91:5d:6d:65:6d:cf:79:12:79:27:a0:8f:b0: 55:d8:94:20:08:89:92:c8:6f:51:1b:70:9f:9b:b3:f7:ad:36: b6:83:ec:f2:8a:af:cb:57:23:46:36:7d:76:5a:37:d7:ab:d7: 39:ff:fc:9f:c5:99:86:bb:a3:4f:83:14:1f:c7:e7:59:d5:79: bb:4d:1a:f4:92:61:42:5d:34:81:c8:40:f1:44:97:40:a7:e3: 66:cf:cf:40:06:34:d2:83:04:fe:dd:27:8f:d8:63:a4:e3:f1: f9:93:85:bf:52:71:cd:04:df:65:57:ca:b5:85:e4:9c:bc:30: 08:2d:42:58:53:63:8a:c9:16:b5:8d:21:a1:89:c7:ac:ae:c6: 35:f8:a9:7e:4e:97:68:1a:17:59:16:44:3d:34:10:52:70:89: 7b:d9:be:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVijg9h8+Oh3F092oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI0MDMzMTAxMDAyNloXDTI0MDYyOTAxMDAyNlowLzEtMCsGA1UEAxMk NTAzNWU2YTUtMmJiNi00MjNjLTkxNDMtNzU4NDIwZjRhZDZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3el5ydM/fEqFWOTaLFXBvXh9KOnYhBJvQXUd HAW7nhrgiMUG9W7MUjYLHfhINBLbKdFHDWuSgAol9tXEWJlCWxtfAqYCMF+HyGtF 9htPOoHARpCD/TXm2k28U15e5XWnRwYjEWSADBzZnmKNH/FddykruyuhdIvk31p1 zEd2QJyC4rXIvs4rvGM57rDy3nWaOeQ+Re7/6JZpsQQBzEfzO/q8q7/UkBojIaWN UnLeck2yjmbVQQynkM1cctMlGbYecHGfTsdEXe1j36iskmddOFtU9KzB4C7HaYTk 1s/O63Gq4Q41Hm5IkTa9xOEKegVJarf419OOx470JtkBLJnQPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI6pHTh+wIUVdVoQmBKy4j+FR7cmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvMGQ4NjhiZTgtMzkxMy0z ZTQ2LTlkOGYtYTBjYjdiZDEyMzRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRL/4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIHaBQloB4Q2pEBa1UzDstNPb9eOCTfcUvWtCdP8D0TM1aiAM54pCL/W t33/T16NIjTbs5iOlqpfGTpvHrTumGegolR3DENq1pMRCzuc7n2ePDqQMF+/FUpk TitpvE5ukV1tZW3PeRJ5J6CPsFXYlCAIiZLIb1EbcJ+bs/etNraD7PKKr8tXI0Y2 fXZaN9er1zn//J/FmYa7o0+DFB/H51nVebtNGvSSYUJdNIHIQPFEl0Cn42bPz0AG NNKDBP7dJ4/YY6Tj8fmThb9Scc0E32VXyrWF5Jy8MAgtQlhTY4rJFrWNIaGJx6yu xjX4qX5Ol2gaF1kWRD00EFJwiXvZvsg= -----END CERTIFICATE-----Generated at Mon May 13 01:44:56 2024 by rpki-client on console-ams.rpki-client.org