$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/1a65fa07-fa6e-3114-97f6-2903ccad3f48.roa File: 1a65fa07-fa6e-3114-97f6-2903ccad3f48.roa (raw, json) Hash identifier: upDiPAisgU6gz+wjONqG0OWHUdr7q67zvRYNW0Wf3u4= Subject key identifier: 63:4F:8C:FD:BD:3A:66:26:B2:9C:61:79:9D:23:C3:04:20:B1:56:58 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F43285845628EAB864FF6185DE7062B80 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/1a65fa07-fa6e-3114-97f6-2903ccad3f48.roa Signing time: Sun 31 Mar 2024 01:00:26 +0000 ROA not before: Sun 31 Mar 2024 01:00:26 +0000 ROA not after: Sat 29 Jun 2024 01:00:26 +0000 asID: 20115 IP address blocks: 68.185.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 May 2024 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:62:8e:ab:86:4f:f6:18:5d:e7:06:2b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Mar 31 01:00:26 2024 GMT Not After : Jun 29 01:00:26 2024 GMT Subject: CN=c8f3f4e2-f98a-419c-8b9d-f8a57dc93e7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:43:f1:05:b1:33:cc:bb:8d:9f:bd:6b:8f:30: 61:75:d2:cb:77:6c:e2:af:9e:8a:95:2b:1f:f1:f7: b4:ba:67:98:5f:94:13:1e:10:e4:35:4b:0f:09:68: 27:62:36:79:15:31:15:89:94:e9:02:8c:11:ee:3b: c9:5b:6f:78:41:ca:0f:3b:4d:90:0b:2e:81:ba:4e: d8:cd:e7:10:c7:b4:54:85:27:d0:e4:2f:b5:22:d6: d8:b1:7f:09:89:77:3c:2f:19:37:02:fd:c8:2d:8b: 35:f2:59:fd:e1:0d:1d:b3:1d:24:7e:27:79:c1:35: cb:1c:b8:93:d8:42:04:67:6e:20:96:80:09:6d:78: 6a:cb:53:8c:42:ff:db:32:ab:97:5b:18:1d:60:e1: 77:16:4a:7e:46:d3:6c:f2:5e:e3:18:af:9e:7e:d7: 00:32:0c:99:2d:b5:e6:94:7a:64:c1:ba:47:aa:81: 5e:e2:3c:4a:a9:c3:12:35:36:76:27:b5:95:ec:b8: b4:5a:32:03:8b:d5:d0:9d:d1:34:16:a0:4e:0e:13: 6b:07:30:5b:d1:4e:9a:d2:d9:b1:c2:ca:46:a2:db: 35:3b:2d:03:13:bc:59:63:8c:1f:ab:ea:25:db:33: 42:d5:d6:6e:8e:a2:e4:c7:6f:7b:3e:75:e0:17:d1: 43:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:4F:8C:FD:BD:3A:66:26:B2:9C:61:79:9D:23:C3:04:20:B1:56:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/1a65fa07-fa6e-3114-97f6-2903ccad3f48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 68.185.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:7b:2c:5c:82:8d:92:42:82:26:31:d3:b1:82:68:e9:1e:ae: 66:5a:54:29:f4:80:ee:45:d9:66:ef:6d:4d:0d:0b:ac:3e:59: d6:73:9e:b3:19:b6:dc:c8:43:a1:37:e9:b1:e9:eb:7f:d2:be: e5:ab:de:f4:cd:83:6d:3c:38:b3:04:09:21:90:d9:c8:30:b4: 44:7e:a9:89:04:a9:ae:3d:f3:05:10:cc:ad:6c:31:e4:8c:e8: db:f3:d4:5d:c1:96:22:90:d5:47:1f:e9:f4:33:b8:1c:ad:98: 4e:af:bd:6f:b7:1f:9d:d6:02:3f:34:62:9b:ae:68:a1:85:ae: 13:23:86:33:21:46:75:e4:c7:5b:c1:b0:bf:96:e0:8b:fd:6a: 4a:84:b8:e1:4a:c4:87:a9:4c:ab:7b:c3:a4:68:e6:8c:5e:52: 2f:08:fc:f5:80:18:b3:18:79:01:4a:3e:46:02:69:e5:bf:3b: e4:98:71:ba:e8:21:17:41:a0:ad:a9:4f:6e:87:4a:af:9e:02: 1b:2f:f8:f1:30:e6:85:50:b3:36:60:a3:bd:e6:6a:a4:37:89: 76:fd:0d:ac:9c:f8:3f:84:cd:35:0e:d4:cf:99:46:72:5e:98: cb:85:a8:1f:92:c4:b1:b3:ef:59:78:e0:89:96:7c:89:c3:29: 89:a2:e1:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVijquGT/YYXecGK4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI0MDMzMTAxMDAyNloXDTI0MDYyOTAxMDAyNlowLzEtMCsGA1UEAxMk YzhmM2Y0ZTItZjk4YS00MTljLThiOWQtZjhhNTdkYzkzZTdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh0PxBbEzzLuNn71rjzBhddLLd2zir56KlSsf 8fe0umeYX5QTHhDkNUsPCWgnYjZ5FTEViZTpAowR7jvJW294QcoPO02QCy6Buk7Y zecQx7RUhSfQ5C+1ItbYsX8JiXc8Lxk3Av3ILYs18ln94Q0dsx0kfid5wTXLHLiT 2EIEZ24gloAJbXhqy1OMQv/bMquXWxgdYOF3Fkp+RtNs8l7jGK+eftcAMgyZLbXm lHpkwbpHqoFe4jxKqcMSNTZ2J7WV7Li0WjIDi9XQndE0FqBODhNrBzBb0U6a0tmx wspGots1Oy0DE7xZY4wfq+ol2zNC1dZujqLkx297PnXgF9FDPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGNPjP29OmYmspxheZ0jwwQgsVZYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvMWE2NWZhMDctZmE2ZS0z MTE0LTk3ZjYtMjkwM2NjYWQzZjQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERLnwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAB7LFyCjZJCgiYx07GCaOkermZaVCn0gO5F2WbvbU0NC6w+WdZznrMZ ttzIQ6E36bHp63/SvuWr3vTNg208OLMECSGQ2cgwtER+qYkEqa498wUQzK1sMeSM 6Nvz1F3BliKQ1Ucf6fQzuBytmE6vvW+3H53WAj80YpuuaKGFrhMjhjMhRnXkx1vB sL+W4Iv9akqEuOFKxIepTKt7w6Ro5oxeUi8I/PWAGLMYeQFKPkYCaeW/O+SYcbro IRdBoK2pT26HSq+eAhsv+PEw5oVQszZgo73maqQ3iXb9Dayc+D+EzTUO1M+ZRnJe mMuFqB+SxLGz71l44ImWfInDKYmi4Sw= -----END CERTIFICATE-----Generated at Sun May 12 15:25:26 2024 by rpki-client on console-ams.rpki-client.org