$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/a1bfb361-9899-3482-a213-5e754c1091f7.roa File: a1bfb361-9899-3482-a213-5e754c1091f7.roa (raw, json) Hash identifier: 2h3tgQa6gMkZY4SfToSRTuvm4w2wmwpr9cOPkoWVHTY= Subject key identifier: C0:4F:45:B2:74:17:0F:5F:86:10:0B:E4:B2:30:73:B9:4D:46:2D:8B Certificate issuer: /CN=eb36756e-e433-4732-a707-a9fa13965624 Certificate serial: 010D0C9F43285847537B7F57567D997E25805300 Authority key identifier: 88:0D:F8:F5:8F:1C:0A:4E:6A:14:98:4D:4F:8F:E7:8F:C4:0F:D1:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/a1bfb361-9899-3482-a213-5e754c1091f7.roa Signing time: Wed 25 Sep 2024 01:00:31 +0000 ROA not before: Wed 25 Sep 2024 01:00:31 +0000 ROA not after: Tue 24 Dec 2024 02:00:31 +0000 asID: 3565 IP address blocks: 208.68.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/eb36756e-e433-4732-a707-a9fa13965624.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/eb36756e-e433-4732-a707-a9fa13965624.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:53:7b:7f:57:56:7d:99:7e:25:80:53:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb36756e-e433-4732-a707-a9fa13965624 Validity Not Before: Sep 25 01:00:31 2024 GMT Not After : Dec 24 02:00:31 2024 GMT Subject: CN=1bc7400b-8644-4c45-8f3c-738182ea93a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ab:c7:e3:64:71:9f:54:9a:58:85:cc:21:aa: 00:9c:d3:8e:cd:c3:9c:cc:db:f8:0b:8c:9d:42:c9: cd:2d:eb:2c:16:8f:0e:be:d1:1c:06:ad:67:db:b2: c3:fe:97:3a:35:28:6b:6a:56:93:1e:a2:3c:2b:bd: 2a:9e:9f:c5:15:d7:e2:88:67:a6:6f:70:0a:03:97: 15:b1:c0:d4:45:eb:ef:12:81:f3:54:e2:a5:58:21: fc:0c:97:c1:9a:f2:a9:08:5d:f7:e9:08:bf:a5:f2: 41:82:a8:a4:5c:cc:d0:22:9f:7a:52:e1:23:33:00: c1:8f:23:b0:6a:dd:0f:7e:7c:e8:4f:15:de:58:10: a8:6b:fa:62:3d:28:54:08:b1:02:3b:40:6d:e7:18: e8:cd:1d:e4:f3:6b:f8:fc:30:1c:19:fc:87:1f:d3: 0a:b5:19:40:b6:3e:82:29:6d:d1:5d:86:f1:87:3a: 23:f6:f5:bc:4a:a2:53:be:e1:11:f1:9b:22:90:ac: bb:64:e0:e3:b0:6e:9f:29:c3:6e:ab:90:8a:0f:c8: 1c:12:db:8e:55:e1:7b:7d:81:22:62:54:2d:1a:5e: e1:87:7d:f3:b1:1e:75:30:94:5b:06:7b:ed:1b:d7: e7:03:da:80:30:f1:91:10:04:55:a3:72:4f:60:d3: 2d:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:4F:45:B2:74:17:0F:5F:86:10:0B:E4:B2:30:73:B9:4D:46:2D:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/a1bfb361-9899-3482-a213-5e754c1091f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/eb36756e-e433-4732-a707-a9fa13965624.crl X509v3 Authority Key Identifier: keyid:88:0D:F8:F5:8F:1C:0A:4E:6A:14:98:4D:4F:8F:E7:8F:C4:0F:D1:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624.cer sbgp-ipAddrBlock: critical IPv4: 208.68.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:65:e6:3e:cb:02:77:5d:d4:31:be:ec:d9:92:8d:87:38:b4: 58:d1:f7:3e:fe:70:dd:6e:8d:f5:94:9c:c8:97:e4:92:3d:fb: c1:df:04:79:73:d8:70:c0:1e:58:47:f0:7a:52:cf:87:85:82: fd:f4:39:76:d0:cf:a5:87:47:3f:69:cc:94:43:d2:e4:32:1a: 51:c5:d1:8d:f4:0e:bb:2d:75:5d:7b:2a:f3:30:b5:59:43:74: 3e:56:02:81:d3:45:fa:15:95:9b:82:c8:2a:01:5e:d1:05:16: b4:32:15:8b:d6:ad:6e:b0:ba:3d:59:21:f0:0c:c2:98:ab:8d: f5:17:b8:92:c7:0a:1d:f3:1c:b7:13:4d:0a:39:e4:37:41:2e: 90:3d:61:be:93:4d:97:c8:b6:c7:12:ca:65:a2:71:45:3f:64: a6:2d:71:d6:78:31:ae:e6:da:79:eb:2f:d3:d1:e0:41:5f:59: f4:79:6a:9a:03:8e:b3:8c:d5:74:bf:8f:50:0a:a1:cf:42:11: 1d:ff:72:a2:b6:3b:6c:86:6d:9a:d4:81:66:e5:56:2f:ba:24: d8:52:59:19:1c:e0:86:40:b3:7d:ca:32:88:13:77:e5:3b:4e: d4:64:f4:53:48:b2:14:f9:0a:d6:00:f8:e3:dd:53:46:55:67: 00:0c:46:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdTe39XVn2ZfiWAUwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWIzNjc1NmUtZTQzMy00NzMyLWE3MDctYTlmYTEzOTY1 NjI0MB4XDTI0MDkyNTAxMDAzMVoXDTI0MTIyNDAyMDAzMVowLzEtMCsGA1UEAxMk MWJjNzQwMGItODY0NC00YzQ1LThmM2MtNzM4MTgyZWE5M2E5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKvH42Rxn1SaWIXMIaoAnNOOzcOczNv4C4yd QsnNLessFo8OvtEcBq1n27LD/pc6NShralaTHqI8K70qnp/FFdfiiGemb3AKA5cV scDURevvEoHzVOKlWCH8DJfBmvKpCF336Qi/pfJBgqikXMzQIp96UuEjMwDBjyOw at0PfnzoTxXeWBCoa/piPShUCLECO0Bt5xjozR3k82v4/DAcGfyHH9MKtRlAtj6C KW3RXYbxhzoj9vW8SqJTvuER8ZsikKy7ZODjsG6fKcNuq5CKD8gcEtuOVeF7fYEi YlQtGl7hh33zsR51MJRbBnvtG9fnA9qAMPGREARVo3JPYNMtCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMBPRbJ0Fw9fhhAL5LIwc7lNRi2LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9lYjM2 NzU2ZS1lNDMzLTQ3MzItYTcwNy1hOWZhMTM5NjU2MjQvYTFiZmIzNjEtOTg5OS0z NDgyLWEyMTMtNWU3NTRjMTA5MWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZWIzNjc1NmUtZTQzMy00NzMyLWE3 MDctYTlmYTEzOTY1NjI0L2ViMzY3NTZlLWU0MzMtNDczMi1hNzA3LWE5ZmExMzk2 NTYyNC5jcmwwHwYDVR0jBBgwFoAUiA349Y8cCk5qFJhNT4/nj8QP0TIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9lYjM2NzU2ZS1lNDMzLTQ3MzItYTcwNy1hOWZh MTM5NjU2MjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ETfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACJl5j7LAndd1DG+7NmSjYc4tFjR9z7+cN1ujfWUnMiX5JI9+8HfBHlz 2HDAHlhH8HpSz4eFgv30OXbQz6WHRz9pzJRD0uQyGlHF0Y30DrstdV17KvMwtVlD dD5WAoHTRfoVlZuCyCoBXtEFFrQyFYvWrW6wuj1ZIfAMwpirjfUXuJLHCh3zHLcT TQo55DdBLpA9Yb6TTZfItscSymWicUU/ZKYtcdZ4Ma7m2nnrL9PR4EFfWfR5apoD jrOM1XS/j1AKoc9CER3/cqK2O2yGbZrUgWblVi+6JNhSWRkc4IZAs33KMogTd+U7 TtRk9FNIshT5CtYA+OPdU0ZVZwAMRt8= -----END CERTIFICATE-----Generated at Thu Nov 21 17:29:59 2024 by rpki-client on console-fra.rpki-client.org