$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5168c06a-378a-3b4d-9c8d-5d7dac02755b.roa File: 5168c06a-378a-3b4d-9c8d-5d7dac02755b.roa (raw, json) Hash identifier: dzX3nd2MS64mrxG7lQnom2sDDiNaNCr+vmrgw4fjENk= Subject key identifier: 55:16:3C:38:C8:F7:0E:A1:20:4E:58:E7:3C:3B:3C:59:83:13:F7:D8 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584734C789618772FAA2EC282760 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5168c06a-378a-3b4d-9c8d-5d7dac02755b.roa Signing time: Sat 14 Sep 2024 01:00:32 +0000 ROA not before: Sat 14 Sep 2024 01:00:32 +0000 ROA not after: Fri 13 Dec 2024 02:00:32 +0000 asID: 33668 IP address blocks: 68.40.12.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:34:c7:89:61:87:72:fa:a2:ec:28:27:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 14 01:00:32 2024 GMT Not After : Dec 13 02:00:32 2024 GMT Subject: CN=5f6f48f5-8d17-4052-b5e8-e872feeb4a73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:9f:39:4c:f7:25:df:f6:00:02:b4:d8:d8:e7: 80:79:53:a5:83:99:30:52:ed:f8:81:96:db:78:0d: 93:14:ce:64:a3:04:0f:d5:1b:f4:25:92:a9:96:38: 2b:e3:7d:b6:e8:59:59:3a:82:2d:b3:56:85:0a:ab: 8b:20:79:bc:54:ed:c8:77:e3:8a:bd:10:80:20:60: 86:49:e8:9c:31:80:59:8b:fe:7a:1e:65:d6:37:0e: 8f:17:89:7e:e6:91:6c:2c:d7:6b:a4:6f:d6:46:52: e0:a3:3e:a9:f7:aa:01:31:16:87:85:84:04:33:0e: 6a:59:31:74:a8:4f:e5:4b:b7:25:b8:4e:02:02:7a: e4:8d:d9:5e:77:e8:9c:f8:bb:6d:f6:eb:92:6a:fb: 66:3b:a0:bc:f7:23:c7:b3:a4:b2:1d:db:2e:91:ca: fc:39:76:26:e9:0d:1a:95:3f:29:a1:dd:e6:02:24: d2:0c:26:68:e7:21:88:4d:ab:66:25:d6:5e:92:fd: a2:01:19:22:e5:4f:a5:9d:7a:e3:0e:9a:1e:af:72: a1:88:3e:79:e3:89:11:b6:97:e9:75:89:0d:24:e3: 74:cf:ed:68:b1:07:41:25:96:a9:05:12:66:44:73: 4e:3d:c8:87:2d:c3:91:ca:8e:97:f4:1b:a2:a3:cd: 41:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:16:3C:38:C8:F7:0E:A1:20:4E:58:E7:3C:3B:3C:59:83:13:F7:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5168c06a-378a-3b4d-9c8d-5d7dac02755b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.40.12.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:36:be:35:05:39:58:9a:d6:49:22:17:f9:9d:35:da:e9:67: e9:a5:63:47:2a:9c:97:c1:ea:38:5a:e4:c1:da:0c:de:ab:20: bd:98:47:dd:59:89:7c:ca:f4:5d:18:01:9a:a8:d1:87:6f:a5: fa:2e:7d:40:6b:85:96:b6:f2:38:57:73:d6:61:61:8f:d0:ae: d1:30:3c:f1:a0:06:00:22:01:33:ef:b0:ce:c7:7f:f9:ad:6a: 17:6c:45:92:76:83:70:7f:7d:c9:06:28:da:33:24:3b:2d:88: 35:20:e6:9b:8a:6b:d8:b2:80:2d:15:0a:08:f0:aa:4e:78:65: fa:d2:e3:52:99:50:b3:56:04:8c:1f:d3:b8:26:f5:34:77:9b: 0c:4f:8d:23:d9:1a:77:91:58:35:1d:50:e0:fb:9e:16:1d:53: 34:d4:b3:7d:9e:cb:b4:b0:1b:74:4a:ca:7e:4f:cd:e5:4d:e3: 33:fe:10:e5:0a:d2:10:0d:4a:b7:77:92:76:7f:89:2c:ac:3e: c5:6e:ee:40:20:9a:6a:72:d4:70:dd:d7:22:79:69:c4:66:aa: fe:66:5e:69:e6:eb:7f:bc:62:1d:e8:3b:80:91:a1:49:60:29: 6f:79:15:17:5e:a3:fe:bb:35:7f:d0:04:79:07:4a:da:d8:29: f9:e3:39:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc0x4lhh3L6ouwoJ2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MDkxNDAxMDAzMloXDTI0MTIxMzAyMDAzMlowLzEtMCsGA1UEAxMk NWY2ZjQ4ZjUtOGQxNy00MDUyLWI1ZTgtZTg3MmZlZWI0YTczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Z85TPcl3/YAArTY2OeAeVOlg5kwUu34gZbb eA2TFM5kowQP1Rv0JZKpljgr43226FlZOoIts1aFCquLIHm8VO3Id+OKvRCAIGCG SeicMYBZi/56HmXWNw6PF4l+5pFsLNdrpG/WRlLgoz6p96oBMRaHhYQEMw5qWTF0 qE/lS7cluE4CAnrkjdled+ic+Ltt9uuSavtmO6C89yPHs6SyHdsukcr8OXYm6Q0a lT8pod3mAiTSDCZo5yGITatmJdZekv2iARki5U+lnXrjDpoer3KhiD5544kRtpfp dYkNJON0z+1osQdBJZapBRJmRHNOPciHLcORyo6X9Buio81BYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFUWPDjI9w6hIE5Y5zw7PFmDE/fYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTE2OGMwNmEtMzc4YS0z YjRkLTljOGQtNWQ3ZGFjMDI3NTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCgMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJo2vjUFOVia1kkiF/mdNdrpZ+mlY0cqnJfB6jha5MHaDN6rIL2YR91Z iXzK9F0YAZqo0YdvpfoufUBrhZa28jhXc9ZhYY/QrtEwPPGgBgAiATPvsM7Hf/mt ahdsRZJ2g3B/fckGKNozJDstiDUg5puKa9iygC0VCgjwqk54ZfrS41KZULNWBIwf 07gm9TR3mwxPjSPZGneRWDUdUOD7nhYdUzTUs32ey7SwG3RKyn5PzeVN4zP+EOUK 0hANSrd3knZ/iSysPsVu7kAgmmpy1HDd1yJ5acRmqv5mXmnm63+8Yh3oO4CRoUlg KW95FRdeo/67NX/QBHkHStrYKfnjOZI= -----END CERTIFICATE-----Generated at Tue Nov 26 04:46:44 2024 by rpki-client on console-fra.rpki-client.org