$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5402024b-7d23-4041-8713-daddd547282a/a3f07b56-eec9-37b7-ad92-ca847a17047b.roa File: a3f07b56-eec9-37b7-ad92-ca847a17047b.roa (raw, json) Hash identifier: 7BcaZ3BpCSe9bRYS+jTPIG0qBINZ63PJMS6E6bHfes8= Subject key identifier: 25:2D:CD:0B:37:D0:04:7B:AE:36:67:F6:06:93:92:FA:75:E4:12:4F Certificate issuer: /CN=5402024b-7d23-4041-8713-daddd547282a Certificate serial: 010D0C9F4328584731FB9AA03BC390A8DB3E0880 Authority key identifier: 2E:93:B3:23:3E:35:A4:76:5D:62:BC:8A:D1:8E:2B:42:C8:FF:D5:68 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5402024b-7d23-4041-8713-daddd547282a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5402024b-7d23-4041-8713-daddd547282a/a3f07b56-eec9-37b7-ad92-ca847a17047b.roa Signing time: Fri 13 Sep 2024 01:00:32 +0000 ROA not before: Fri 13 Sep 2024 01:00:32 +0000 ROA not after: Thu 12 Dec 2024 02:00:32 +0000 asID: 2914 IP address blocks: 68.170.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5402024b-7d23-4041-8713-daddd547282a/5402024b-7d23-4041-8713-daddd547282a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5402024b-7d23-4041-8713-daddd547282a/5402024b-7d23-4041-8713-daddd547282a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5402024b-7d23-4041-8713-daddd547282a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:31:fb:9a:a0:3b:c3:90:a8:db:3e:08:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5402024b-7d23-4041-8713-daddd547282a Validity Not Before: Sep 13 01:00:32 2024 GMT Not After : Dec 12 02:00:32 2024 GMT Subject: CN=24076474-8fef-456e-9133-11af0baeab8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:41:5b:35:3e:f3:2c:e5:23:b4:bc:a1:0a:1d: 6c:cb:7e:0c:f3:87:01:11:50:3a:8e:c9:68:57:73: 2b:d3:b4:89:d4:b6:70:b3:72:49:8b:2f:44:43:49: f7:88:24:ca:de:3e:3b:79:5b:9f:fb:52:55:ee:49: 03:fc:b1:09:5d:2c:59:18:ef:e6:95:2d:e2:f5:a6: 53:c3:67:98:67:7c:56:21:ec:78:bf:eb:e2:a2:d4: 0c:1d:5f:bf:58:34:2f:c9:a2:c4:7d:86:b1:7b:40: cc:d8:32:5f:a4:5f:51:c4:88:c7:c8:d3:6e:88:85: a2:fc:e3:64:31:d3:6a:bb:87:b2:ab:9e:f2:cf:5f: af:1f:98:6f:9d:2f:5a:c4:f2:0b:48:da:56:e4:c0: 27:ce:f0:6e:a6:e5:46:35:93:a6:54:f1:04:18:a1: 76:50:4d:db:ac:b8:18:46:a3:6d:80:2e:ed:64:66: 7b:00:80:45:10:73:11:15:a6:d2:de:ec:50:16:99: 44:d0:61:4b:a0:8f:48:11:d2:c5:42:90:51:de:26: 05:48:97:a0:85:c4:f0:32:84:20:9d:8a:a6:d3:ef: 03:e9:74:c4:e8:73:1e:9d:eb:d9:3d:2c:b3:70:d3: fd:23:47:a6:89:c7:b9:4e:83:38:7a:56:dc:12:d6: 4f:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:2D:CD:0B:37:D0:04:7B:AE:36:67:F6:06:93:92:FA:75:E4:12:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5402024b-7d23-4041-8713-daddd547282a/a3f07b56-eec9-37b7-ad92-ca847a17047b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5402024b-7d23-4041-8713-daddd547282a/5402024b-7d23-4041-8713-daddd547282a.crl X509v3 Authority Key Identifier: keyid:2E:93:B3:23:3E:35:A4:76:5D:62:BC:8A:D1:8E:2B:42:C8:FF:D5:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5402024b-7d23-4041-8713-daddd547282a.cer sbgp-ipAddrBlock: critical IPv4: 68.170.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:39:8e:43:00:bd:0a:63:72:24:57:34:fc:d6:38:de:55:7d: 81:57:4e:72:e6:32:54:65:25:2d:04:2e:ee:1f:b1:fd:d1:83: 83:22:a4:ec:e6:60:30:12:fa:c4:d8:18:a6:02:19:22:0f:e3: 1c:f6:ed:17:b7:ad:b3:e1:f9:47:01:f9:f9:50:cb:95:5b:a8: cc:33:97:49:a1:90:e7:07:17:98:14:18:1d:e2:c2:b4:df:29: ab:1b:46:69:1f:90:38:67:d8:e4:6f:3c:09:f6:39:a6:29:48: 7f:4d:c7:6a:84:2d:1f:81:1c:37:67:eb:f2:95:0f:2a:f6:b7: 66:2e:8c:5b:c7:76:e2:b1:0a:f0:d8:23:98:fb:8c:74:d6:3a: d1:2b:46:64:ac:fd:b6:68:86:00:3e:d4:14:81:5b:1e:b6:45: 89:65:54:9d:65:19:a9:0b:e0:0a:72:d0:7f:b2:5c:63:48:8a: ee:f5:1a:b2:12:26:dc:66:31:96:c3:9e:19:6c:f2:c9:a9:1a: 3d:28:39:ce:06:a8:74:2e:20:bb:15:b6:84:1a:35:97:fa:bc: e0:6f:0e:de:8b:95:f5:37:57:6e:ee:cc:9f:aa:fa:a2:76:54: 90:09:e6:22:6e:33:d3:ed:9c:e5:cb:48:59:67:75:7a:ef:8d: bb:47:0a:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcx+5qgO8OQqNs+CIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTQwMjAyNGItN2QyMy00MDQxLTg3MTMtZGFkZGQ1NDcy ODJhMB4XDTI0MDkxMzAxMDAzMloXDTI0MTIxMjAyMDAzMlowLzEtMCsGA1UEAxMk MjQwNzY0NzQtOGZlZi00NTZlLTkxMzMtMTFhZjBiYWVhYjhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhkFbNT7zLOUjtLyhCh1sy34M84cBEVA6jslo V3Mr07SJ1LZws3JJiy9EQ0n3iCTK3j47eVuf+1JV7kkD/LEJXSxZGO/mlS3i9aZT w2eYZ3xWIex4v+viotQMHV+/WDQvyaLEfYaxe0DM2DJfpF9RxIjHyNNuiIWi/ONk MdNqu4eyq57yz1+vH5hvnS9axPILSNpW5MAnzvBupuVGNZOmVPEEGKF2UE3brLgY RqNtgC7tZGZ7AIBFEHMRFabS3uxQFplE0GFLoI9IEdLFQpBR3iYFSJeghcTwMoQg nYqm0+8D6XTE6HMenevZPSyzcNP9I0emice5ToM4elbcEtZPnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCUtzQs30AR7rjZn9gaTkvp15BJPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81NDAy MDI0Yi03ZDIzLTQwNDEtODcxMy1kYWRkZDU0NzI4MmEvYTNmMDdiNTYtZWVjOS0z N2I3LWFkOTItY2E4NDdhMTcwNDdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNTQwMjAyNGItN2QyMy00MDQxLTg3 MTMtZGFkZGQ1NDcyODJhLzU0MDIwMjRiLTdkMjMtNDA0MS04NzEzLWRhZGRkNTQ3 MjgyYS5jcmwwHwYDVR0jBBgwFoAULpOzIz41pHZdYryK0Y4rQsj/1WgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81NDAyMDI0Yi03ZDIzLTQwNDEtODcxMy1kYWRk ZDU0NzI4MmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARKoCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHE5jkMAvQpjciRXNPzWON5VfYFXTnLmMlRlJS0ELu4fsf3Rg4MipOzm YDAS+sTYGKYCGSIP4xz27Re3rbPh+UcB+flQy5VbqMwzl0mhkOcHF5gUGB3iwrTf KasbRmkfkDhn2ORvPAn2OaYpSH9Nx2qELR+BHDdn6/KVDyr2t2YujFvHduKxCvDY I5j7jHTWOtErRmSs/bZohgA+1BSBWx62RYllVJ1lGakL4Apy0H+yXGNIiu71GrIS JtxmMZbDnhls8smpGj0oOc4GqHQuILsVtoQaNZf6vOBvDt6LlfU3V27uzJ+q+qJ2 VJAJ5iJuM9PtnOXLSFlndXrvjbtHCnk= -----END CERTIFICATE-----Generated at Thu Nov 21 15:35:20 2024 by rpki-client on console-fra.rpki-client.org