$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0f7fee68-23de-3d18-888d-814b05e3513d.roa File: 0f7fee68-23de-3d18-888d-814b05e3513d.roa (raw, json) Hash identifier: bcLVzJh2uHuUoqm39H5F5/G44yjSoeS6r9DW6y/GhcI= Subject key identifier: D8:00:73:4C:B1:7F:3A:62:17:60:D2:C2:9C:0C:C1:3D:8B:33:41:72 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285847BEF83807A35CDD9C0E3ACD80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0f7fee68-23de-3d18-888d-814b05e3513d.roa Signing time: Sat 02 Nov 2024 13:00:42 +0000 ROA not before: Sat 02 Nov 2024 13:00:42 +0000 ROA not after: Fri 31 Jan 2025 14:00:42 +0000 asID: 22909 IP address blocks: 68.53.36.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 23 Dec 2024 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:be:f8:38:07:a3:5c:dd:9c:0e:3a:cd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Nov 2 13:00:42 2024 GMT Not After : Jan 31 14:00:42 2025 GMT Subject: CN=86685038-f643-479c-aaf6-7e724fa4fa22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:9f:c9:b4:fb:6d:19:5c:b2:65:b3:87:fb:48: cb:e1:0a:95:a7:68:69:ad:05:05:d6:95:5e:65:57: ee:a4:50:cd:45:74:a1:0f:6f:1d:a2:ce:5d:92:11: a3:a7:44:c7:8d:ac:39:39:4b:f2:7f:cf:2c:19:6b: 5f:32:f7:ba:66:90:a8:db:a7:7c:ae:2a:2a:61:3e: ef:aa:f2:10:69:fd:bb:eb:41:c1:05:66:74:0f:ec: c7:46:a4:e5:8d:dc:4c:fa:b0:29:c7:f4:17:22:28: 2e:b8:0c:8a:38:93:77:d6:ff:07:a7:48:94:23:7f: b8:d8:1f:ee:b6:50:e1:c7:9c:bd:8e:89:2d:a8:92: e3:34:ea:df:c5:c8:86:c8:13:69:ae:cc:87:48:74: 82:13:70:a1:08:37:ff:2c:dc:86:a0:94:53:91:30: b7:49:77:9d:52:49:22:b7:0f:1f:dc:de:a0:3d:60: 53:b6:51:4f:b3:cc:fd:a3:2c:e1:ad:43:f3:bd:38: 56:9f:d0:42:b7:e9:28:b2:98:6b:10:ae:73:34:f3: 95:88:d0:51:85:31:d3:81:6e:02:84:a6:50:6c:3c: b5:7c:14:8a:90:72:be:bd:16:4e:4c:4a:5e:79:5a: 46:bc:f9:ed:cc:bf:64:b3:26:09:66:c2:dc:6f:92: d1:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:00:73:4C:B1:7F:3A:62:17:60:D2:C2:9C:0C:C1:3D:8B:33:41:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0f7fee68-23de-3d18-888d-814b05e3513d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.53.36.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:7f:94:dd:d0:15:a6:88:d3:72:a2:65:e9:9c:40:ec:0c:f3: 5e:cb:3b:87:73:56:d1:6d:7f:a4:23:46:00:c6:ba:9d:06:1f: 8c:09:dd:50:89:f1:58:b3:d3:de:71:95:fe:f5:c7:92:23:9d: 4d:9a:68:be:0b:03:db:b6:ed:61:97:d3:c0:9d:e5:00:80:52: 80:a6:a9:06:e4:85:3a:f7:c1:bd:e2:fe:4c:82:be:60:8e:f1: 4c:d6:f0:79:58:3c:ff:58:c2:8a:ad:67:52:55:b1:c3:cb:5d: 3b:58:99:44:6e:12:ce:7d:4a:5f:f3:98:45:88:91:29:c3:15: 00:43:34:5d:d8:f8:d7:86:76:02:9c:ba:08:e6:36:7e:ac:0b: b7:12:8a:65:c8:98:7a:74:84:c3:47:76:43:3c:4c:63:05:5d: 3c:f8:ee:e8:d0:07:a9:23:3d:9c:3a:4e:5e:3b:be:ef:a7:24: a4:73:70:0b:e4:8c:ca:4e:ae:ce:a0:1f:99:b9:f3:c0:c5:2f: 52:c5:b0:69:d0:b2:b1:a7:22:1e:ba:76:c3:f1:f1:28:5c:39: dc:4e:ed:ae:16:a8:36:85:40:ab:b9:6e:21:93:ec:be:f2:4d: ac:15:66:72:7d:9a:7c:b3:17:36:28:4e:76:6d:40:eb:12:05: a3:fd:6d:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe++DgHo1zdnA46zYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MTEwMjEzMDA0MloXDTI1MDEzMTE0MDA0MlowLzEtMCsGA1UEAxMk ODY2ODUwMzgtZjY0My00NzljLWFhZjYtN2U3MjRmYTRmYTIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgZ/JtPttGVyyZbOH+0jL4QqVp2hprQUF1pVe ZVfupFDNRXShD28dos5dkhGjp0THjaw5OUvyf88sGWtfMve6ZpCo26d8rioqYT7v qvIQaf2760HBBWZ0D+zHRqTljdxM+rApx/QXIiguuAyKOJN31v8Hp0iUI3+42B/u tlDhx5y9joktqJLjNOrfxciGyBNprsyHSHSCE3ChCDf/LNyGoJRTkTC3SXedUkki tw8f3N6gPWBTtlFPs8z9oyzhrUPzvThWn9BCt+kosphrEK5zNPOViNBRhTHTgW4C hKZQbDy1fBSKkHK+vRZOTEpeeVpGvPntzL9ksyYJZsLcb5LRcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNgAc0yxfzpiF2DSwpwMwT2LM0FyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMGY3ZmVlNjgtMjNkZS0z ZDE4LTg4OGQtODE0YjA1ZTM1MTNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRDUkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAx/lN3QFaaI03KiZemcQOwM817LO4dzVtFtf6QjRgDGup0GH4wJ3VCJ 8Viz095xlf71x5IjnU2aaL4LA9u27WGX08Cd5QCAUoCmqQbkhTr3wb3i/kyCvmCO 8UzW8HlYPP9YwoqtZ1JVscPLXTtYmURuEs59Sl/zmEWIkSnDFQBDNF3Y+NeGdgKc ugjmNn6sC7cSimXImHp0hMNHdkM8TGMFXTz47ujQB6kjPZw6Tl47vu+nJKRzcAvk jMpOrs6gH5m588DFL1LFsGnQsrGnIh66dsPx8ShcOdxO7a4WqDaFQKu5biGT7L7y TawVZnJ9mnyzFzYoTnZtQOsSBaP9bQE= -----END CERTIFICATE-----Generated at Sun Dec 22 03:34:44 2024 by rpki-client on console-fra.rpki-client.org