$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/60cc5385-2a12-36d1-a6c6-e13b69d4e111.roa File: 60cc5385-2a12-36d1-a6c6-e13b69d4e111.roa (raw, json) Hash identifier: YNhTON50UdRPTqiIMC8D2x1ZASEqYjMswPQgqVBUqAU= Subject key identifier: 3A:3B:D8:96:EA:6F:44:88:92:27:87:98:9F:5F:FA:9C:B9:A4:70:85 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584734C794FAA4BBBB090F62EC80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/60cc5385-2a12-36d1-a6c6-e13b69d4e111.roa Signing time: Sat 14 Sep 2024 01:00:32 +0000 ROA not before: Sat 14 Sep 2024 01:00:32 +0000 ROA not after: Fri 13 Dec 2024 02:00:32 +0000 asID: 33668 IP address blocks: 68.43.150.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:34:c7:94:fa:a4:bb:bb:09:0f:62:ec:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 14 01:00:32 2024 GMT Not After : Dec 13 02:00:32 2024 GMT Subject: CN=0e48d2e5-d2c8-4691-a3c5-37eb76fb8f1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d7:9d:da:45:af:2c:ba:02:e9:2f:3b:97:71: 2a:ae:59:5c:43:f5:82:40:71:25:d7:2f:d8:dc:fd: 05:76:53:cf:97:58:07:8c:53:8d:22:e2:3c:61:4d: c9:a2:6b:34:87:3f:47:62:8a:5d:7a:15:58:53:49: d0:86:24:d8:4f:71:eb:55:80:51:86:c9:d7:5c:9d: e1:cf:03:44:c8:9e:ee:24:28:b4:f2:69:b4:a1:98: 9d:f1:bd:f6:9b:e6:b9:da:8c:3c:1a:6f:e3:e9:cd: 9f:7b:ed:4f:2c:d3:9d:49:a5:aa:67:8b:16:64:76: c7:c4:7c:57:6f:07:88:08:d7:89:a7:90:6b:f0:8a: 94:1a:be:ab:f3:43:73:b9:2c:a0:6b:fb:97:b1:17: 55:3f:09:55:8c:33:f0:b4:46:ad:e1:85:c7:2a:61: 2e:b3:81:8b:b2:63:65:f1:55:cb:0a:da:e1:e4:b2: 86:8c:ed:88:1d:2b:e5:5b:a1:84:2d:93:cd:11:15: 0b:de:da:28:a9:88:e1:18:b3:9d:90:0d:f2:a8:6a: 6c:17:c5:da:36:f5:02:cc:8e:bf:8e:c2:b6:ff:cd: 2a:4f:80:e6:4c:ec:47:0e:d9:e2:92:c1:12:53:e6: ec:ff:d1:32:0a:c6:18:ef:cf:f6:fa:97:e1:cc:ce: 05:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:3B:D8:96:EA:6F:44:88:92:27:87:98:9F:5F:FA:9C:B9:A4:70:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/60cc5385-2a12-36d1-a6c6-e13b69d4e111.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.43.150.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:9c:cf:71:d6:01:6d:87:58:dd:6b:29:5c:a6:16:7b:ff:24: 0e:c2:73:0e:6a:72:e7:9e:46:22:50:b3:e1:c6:6a:a8:60:cd: ec:b3:ed:97:11:44:10:7d:74:69:51:24:1b:bb:81:c6:f8:c8: cd:dd:ec:f4:fc:b6:eb:bb:80:2a:04:af:33:e3:fb:33:c2:7c: 9e:0d:67:77:aa:f9:e1:f3:30:13:fb:a6:42:fd:6d:a0:bc:9b: 67:ba:88:90:17:4b:25:06:1c:49:2b:85:8b:d5:aa:ec:40:f3: 14:af:75:af:88:af:98:a1:8f:8f:10:69:4a:ca:80:ad:dc:99: 7e:dc:87:ca:ff:5f:35:ce:fa:f1:23:ff:b3:89:50:62:f1:99: c4:c9:ff:5a:9d:95:2e:87:d4:74:b1:c5:df:73:f6:65:17:c9: 50:af:b6:a1:c8:26:6f:ae:15:97:f5:d8:19:e9:5d:d2:55:0e: d1:7e:26:71:20:97:20:ad:e7:1d:36:21:d0:43:54:1a:5b:3e: d5:6e:9a:98:9c:d0:61:02:4d:32:73:4b:81:75:55:b9:28:61: 8b:24:99:6e:07:29:37:5c:43:72:8c:ab:7c:80:9f:19:f8:3e: a0:ae:2b:5d:8e:d9:92:99:ff:3b:e9:13:cc:b1:e9:ac:0c:54: c5:e2:b3:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc0x5T6pLu7CQ9i7IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MDkxNDAxMDAzMloXDTI0MTIxMzAyMDAzMlowLzEtMCsGA1UEAxMk MGU0OGQyZTUtZDJjOC00NjkxLWEzYzUtMzdlYjc2ZmI4ZjFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNed2kWvLLoC6S87l3EqrllcQ/WCQHEl1y/Y 3P0FdlPPl1gHjFONIuI8YU3Joms0hz9HYopdehVYU0nQhiTYT3HrVYBRhsnXXJ3h zwNEyJ7uJCi08mm0oZid8b32m+a52ow8Gm/j6c2fe+1PLNOdSaWqZ4sWZHbHxHxX bweICNeJp5Br8IqUGr6r80NzuSyga/uXsRdVPwlVjDPwtEat4YXHKmEus4GLsmNl 8VXLCtrh5LKGjO2IHSvlW6GELZPNERUL3tooqYjhGLOdkA3yqGpsF8XaNvUCzI6/ jsK2/80qT4DmTOxHDtniksESU+bs/9EyCsYY78/2+pfhzM4FYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDo72Jbqb0SIkieHmJ9f+py5pHCFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjBjYzUzODUtMmExMi0z NmQxLWE2YzYtZTEzYjY5ZDRlMTExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCuWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIycz3HWAW2HWN1rKVymFnv/JA7Ccw5qcueeRiJQs+HGaqhgzeyz7ZcR RBB9dGlRJBu7gcb4yM3d7PT8tuu7gCoErzPj+zPCfJ4NZ3eq+eHzMBP7pkL9baC8 m2e6iJAXSyUGHEkrhYvVquxA8xSvda+Ir5ihj48QaUrKgK3cmX7ch8r/XzXO+vEj /7OJUGLxmcTJ/1qdlS6H1HSxxd9z9mUXyVCvtqHIJm+uFZf12BnpXdJVDtF+JnEg lyCt5x02IdBDVBpbPtVumpic0GECTTJzS4F1VbkoYYskmW4HKTdcQ3KMq3yAnxn4 PqCuK12O2ZKZ/zvpE8yx6awMVMXis3M= -----END CERTIFICATE-----Generated at Tue Nov 26 04:48:00 2024 by rpki-client on console-fra.rpki-client.org