$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/af522695-ec47-3eb5-8cbf-0203a049e14b.roa File: af522695-ec47-3eb5-8cbf-0203a049e14b.roa (raw, json) Hash identifier: AxPgk5dhjZZdEAwfNOjVgxHuLHQBSgDJk0Siqbew4B0= Subject key identifier: 22:53:5F:CE:38:CC:83:2F:6C:C1:66:4E:A4:3B:96:0B:EE:51:40:B4 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F43285845628EA51CCF71B9950D581800 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/af522695-ec47-3eb5-8cbf-0203a049e14b.roa Signing time: Sun 31 Mar 2024 01:00:26 +0000 ROA not before: Sun 31 Mar 2024 01:00:26 +0000 ROA not after: Sat 29 Jun 2024 01:00:26 +0000 asID: 20115 IP address blocks: 68.117.96.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:62:8e:a5:1c:cf:71:b9:95:0d:58:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Mar 31 01:00:26 2024 GMT Not After : Jun 29 01:00:26 2024 GMT Subject: CN=50bdc733-5eb7-4131-9bdc-7022198a9872 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:87:8b:10:51:2f:f4:57:0a:e5:0c:3d:ec:bd: f7:0a:d6:68:c0:4a:4f:aa:61:77:cf:92:19:51:c0: 24:40:4f:29:90:3b:02:f1:2e:64:a6:57:3e:a8:b7: 22:cc:5e:c7:c5:cc:62:be:71:b9:d7:d2:a1:73:0b: 53:b4:e4:6e:e8:e8:1d:58:a5:ae:d5:12:f0:d0:45: c6:63:0c:a8:8a:e8:5b:63:45:ca:f2:c5:36:6d:b4: 79:fc:7d:26:88:3c:49:4b:2a:7a:0b:b8:3a:fb:27: b0:6f:c4:9c:c3:ab:07:67:ce:f3:2d:89:f4:7e:5a: d8:a2:51:eb:60:d6:68:ab:27:83:1e:48:82:72:0a: 09:c2:42:3f:e9:59:98:92:10:eb:fb:16:36:9f:66: d3:d7:0a:35:e2:4e:ab:49:41:39:40:77:69:e5:dc: 29:3d:44:ca:77:3b:ad:4b:cc:5a:78:28:73:95:b7: 17:7c:56:53:e3:f6:38:ed:ae:68:67:76:b1:98:0c: fb:ab:85:04:7d:48:56:55:de:88:74:76:04:f9:3b: 95:d6:88:43:6c:c6:57:b9:09:82:ca:1c:13:1c:7c: be:e5:82:ad:f9:a9:eb:fd:b5:ea:47:a1:ba:45:d3: f9:ac:ca:df:26:45:14:c6:bf:76:73:08:24:a4:a9: b4:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:53:5F:CE:38:CC:83:2F:6C:C1:66:4E:A4:3B:96:0B:EE:51:40:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/af522695-ec47-3eb5-8cbf-0203a049e14b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 68.117.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:b9:dc:f0:28:78:4e:0a:61:13:8d:42:71:fd:26:c5:be:16: be:f0:ee:d3:33:10:d5:d1:c5:61:d5:d9:64:b7:12:b0:ec:c6: 28:a0:ae:67:a6:e7:0d:76:df:e2:c5:78:91:92:a0:43:01:61: a0:34:bb:60:fc:7d:f4:7a:5c:f3:a2:09:7f:9a:8e:7a:c0:66: 58:a7:e1:0a:ad:94:f1:3f:27:da:d7:bc:70:40:00:3d:f2:7a: 01:22:00:4d:24:7e:69:6e:b8:ed:83:c5:db:70:3b:fb:d1:65: 10:f2:a8:f7:f5:24:78:e8:f4:b2:db:4d:45:e3:2c:bb:bc:17: 24:3d:01:e5:3f:da:6b:b0:91:64:ff:1b:1e:fd:0d:6b:d0:41: 45:74:de:5b:02:15:74:f8:5c:89:b4:bf:a6:7d:dd:7e:74:1b: e0:8a:9e:af:9d:33:9b:6e:d1:1f:9b:18:73:23:89:67:f4:83: 75:54:ea:0f:a6:43:26:56:56:90:03:98:36:72:e2:dd:3b:1c: 11:80:c0:34:7c:87:19:5a:b5:39:03:3b:77:28:d9:6c:94:5e: 45:cf:15:86:bd:a4:8f:7d:9a:60:ce:a3:a0:e4:9a:e0:97:2e: 77:9e:5b:eb:6e:fd:98:61:fd:ed:de:c6:33:b2:04:84:98:37: 98:0c:be:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVijqUcz3G5lQ1YGAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI0MDMzMTAxMDAyNloXDTI0MDYyOTAxMDAyNlowLzEtMCsGA1UEAxMk NTBiZGM3MzMtNWViNy00MTMxLTliZGMtNzAyMjE5OGE5ODcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1IeLEFEv9FcK5Qw97L33CtZowEpPqmF3z5IZ UcAkQE8pkDsC8S5kplc+qLcizF7HxcxivnG519KhcwtTtORu6OgdWKWu1RLw0EXG YwyoiuhbY0XK8sU2bbR5/H0miDxJSyp6C7g6+yewb8Scw6sHZ87zLYn0flrYolHr YNZoqyeDHkiCcgoJwkI/6VmYkhDr+xY2n2bT1wo14k6rSUE5QHdp5dwpPUTKdzut S8xaeChzlbcXfFZT4/Y47a5oZ3axmAz7q4UEfUhWVd6IdHYE+TuV1ohDbMZXuQmC yhwTHHy+5YKt+anr/bXqR6G6RdP5rMrfJkUUxr92cwgkpKm0HwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCJTX844zIMvbMFmTqQ7lgvuUUC0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvYWY1MjI2OTUtZWM0Ny0z ZWI1LThjYmYtMDIwM2EwNDllMTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRHVgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF253PAoeE4KYRONQnH9JsW+Fr7w7tMzENXRxWHV2WS3ErDsxiigrmem 5w123+LFeJGSoEMBYaA0u2D8ffR6XPOiCX+ajnrAZlin4QqtlPE/J9rXvHBAAD3y egEiAE0kfmluuO2DxdtwO/vRZRDyqPf1JHjo9LLbTUXjLLu8FyQ9AeU/2muwkWT/ Gx79DWvQQUV03lsCFXT4XIm0v6Z93X50G+CKnq+dM5tu0R+bGHMjiWf0g3VU6g+m QyZWVpADmDZy4t07HBGAwDR8hxlatTkDO3co2WyUXkXPFYa9pI99mmDOo6DkmuCX LneeW+tu/Zhh/e3exjOyBISYN5gMvgk= -----END CERTIFICATE-----Generated at Mon May 13 17:12:09 2024 by rpki-client on console-ams.rpki-client.org