$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/a665e37a-2264-3b19-b8a4-ae270c10d73a.roa File: a665e37a-2264-3b19-b8a4-ae270c10d73a.roa (raw, json) Hash identifier: FpZVZmDj09NdDJTUkHvgK/dwgPIFbg8lvwHt1nJkhdY= Subject key identifier: 44:34:22:2C:CC:1E:41:F4:5F:63:E5:67:F1:54:39:7E:59:23:0B:FF Certificate issuer: /CN=eb36756e-e433-4732-a707-a9fa13965624 Certificate serial: 010D0C9F43285847537B7F69BDF354CA9FEA8C60 Authority key identifier: 88:0D:F8:F5:8F:1C:0A:4E:6A:14:98:4D:4F:8F:E7:8F:C4:0F:D1:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/a665e37a-2264-3b19-b8a4-ae270c10d73a.roa Signing time: Wed 25 Sep 2024 01:00:31 +0000 ROA not before: Wed 25 Sep 2024 01:00:31 +0000 ROA not after: Tue 24 Dec 2024 02:00:31 +0000 asID: 3565 IP address blocks: 208.68.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/eb36756e-e433-4732-a707-a9fa13965624.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/eb36756e-e433-4732-a707-a9fa13965624.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:53:7b:7f:69:bd:f3:54:ca:9f:ea:8c:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb36756e-e433-4732-a707-a9fa13965624 Validity Not Before: Sep 25 01:00:31 2024 GMT Not After : Dec 24 02:00:31 2024 GMT Subject: CN=ffad5070-2151-40fe-a739-369b08fe76a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a4:25:9a:77:6e:ce:f2:c8:a1:9a:31:84:9c: bd:0c:8d:f6:6b:17:74:39:5c:0a:80:43:15:dc:c5: 3a:6e:01:8f:0b:21:30:37:cb:3c:3a:dd:a3:5e:65: ce:14:c6:33:a6:4a:08:a4:65:5b:55:d5:2b:cc:82: 51:dc:2b:89:62:1f:f7:e8:6a:c8:e2:76:13:b4:67: f4:94:57:53:51:e9:00:c1:d5:d7:46:5b:ee:98:9d: 37:62:39:b9:ef:c8:4e:aa:b0:86:e1:5c:2b:0f:4b: c7:4a:d0:b7:a1:ec:88:c6:37:ad:33:23:53:ad:a3: 47:7e:e1:20:6e:d8:27:09:36:ff:f3:63:99:30:39: 75:24:5d:03:53:19:52:e2:25:64:d2:60:ef:4b:77: 74:99:a3:c3:0a:04:5f:36:37:8c:4d:9d:f3:a1:5c: 95:3d:62:84:0a:44:cd:ce:dd:09:4d:49:bb:c9:82: 88:35:d9:5d:24:cb:49:b7:66:bf:5a:63:7b:88:4d: 4d:39:8b:2c:b5:88:70:b1:2f:4d:21:b9:f8:ad:52: 64:0a:50:3b:e1:18:54:0d:09:47:09:ed:c9:64:00: 1d:ee:fc:60:4e:42:a9:2a:15:da:fa:41:5d:35:f9: 31:af:10:a9:74:07:ae:39:47:31:80:17:93:07:b9: 8d:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:34:22:2C:CC:1E:41:F4:5F:63:E5:67:F1:54:39:7E:59:23:0B:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/a665e37a-2264-3b19-b8a4-ae270c10d73a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/eb36756e-e433-4732-a707-a9fa13965624.crl X509v3 Authority Key Identifier: keyid:88:0D:F8:F5:8F:1C:0A:4E:6A:14:98:4D:4F:8F:E7:8F:C4:0F:D1:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624.cer sbgp-ipAddrBlock: critical IPv4: 208.68.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:0f:ae:82:b0:9d:4f:18:20:e4:ac:ed:ad:82:7d:b9:c0:87: 1a:92:43:17:7a:87:78:3d:f4:97:31:d0:6e:9a:1b:41:a8:f7: 63:0e:3d:95:99:e2:7a:7e:00:0e:0f:56:4b:17:de:60:6b:fc: f2:2e:26:c3:2e:64:8b:9c:b7:e6:c0:5b:d7:5c:1b:67:e2:d2: 91:df:59:41:ac:1c:aa:65:13:fc:fc:d6:a9:5e:f7:68:f9:2d: 94:f2:08:7b:fd:2a:6d:f6:e3:bc:61:d5:18:e7:14:d8:2f:6c: b6:cd:39:bb:17:25:0c:09:fa:ba:89:db:4e:e9:3d:61:39:17: a6:09:cd:87:37:57:88:2f:4f:b2:c6:c2:d8:a7:37:2c:eb:c2: 73:55:a9:9c:d2:cb:75:c7:45:41:cf:3f:9c:3a:d7:e7:1b:8a: c9:2d:0b:37:08:cc:73:61:49:b6:30:b4:02:47:32:e3:72:60: a9:27:68:ca:f8:36:77:84:ce:41:d1:94:0e:81:e4:37:74:ce: 07:83:18:97:96:87:7c:dd:5f:e6:85:30:55:80:ae:fd:5b:0b: 2f:3f:7f:bf:44:ce:fa:64:a8:3a:ac:57:20:b0:e2:2d:c5:c3: db:dd:e9:00:97:2e:d5:18:c9:37:6c:b7:d2:8b:b7:43:91:2a: c3:e7:ab:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdTe39pvfNUyp/qjGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWIzNjc1NmUtZTQzMy00NzMyLWE3MDctYTlmYTEzOTY1 NjI0MB4XDTI0MDkyNTAxMDAzMVoXDTI0MTIyNDAyMDAzMVowLzEtMCsGA1UEAxMk ZmZhZDUwNzAtMjE1MS00MGZlLWE3MzktMzY5YjA4ZmU3NmE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqQlmnduzvLIoZoxhJy9DI32axd0OVwKgEMV 3MU6bgGPCyEwN8s8Ot2jXmXOFMYzpkoIpGVbVdUrzIJR3CuJYh/36GrI4nYTtGf0 lFdTUekAwdXXRlvumJ03Yjm578hOqrCG4VwrD0vHStC3oeyIxjetMyNTraNHfuEg btgnCTb/82OZMDl1JF0DUxlS4iVk0mDvS3d0maPDCgRfNjeMTZ3zoVyVPWKECkTN zt0JTUm7yYKINdldJMtJt2a/WmN7iE1NOYsstYhwsS9NIbn4rVJkClA74RhUDQlH Ce3JZAAd7vxgTkKpKhXa+kFdNfkxrxCpdAeuOUcxgBeTB7mNvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEQ0IizMHkH0X2PlZ/FUOX5ZIwv/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9lYjM2 NzU2ZS1lNDMzLTQ3MzItYTcwNy1hOWZhMTM5NjU2MjQvYTY2NWUzN2EtMjI2NC0z YjE5LWI4YTQtYWUyNzBjMTBkNzNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZWIzNjc1NmUtZTQzMy00NzMyLWE3 MDctYTlmYTEzOTY1NjI0L2ViMzY3NTZlLWU0MzMtNDczMi1hNzA3LWE5ZmExMzk2 NTYyNC5jcmwwHwYDVR0jBBgwFoAUiA349Y8cCk5qFJhNT4/nj8QP0TIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9lYjM2NzU2ZS1lNDMzLTQ3MzItYTcwNy1hOWZh MTM5NjU2MjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ETcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEYProKwnU8YIOSs7a2CfbnAhxqSQxd6h3g99Jcx0G6aG0Go92MOPZWZ 4np+AA4PVksX3mBr/PIuJsMuZIuct+bAW9dcG2fi0pHfWUGsHKplE/z81qle92j5 LZTyCHv9Km3247xh1RjnFNgvbLbNObsXJQwJ+rqJ207pPWE5F6YJzYc3V4gvT7LG wtinNyzrwnNVqZzSy3XHRUHPP5w61+cbisktCzcIzHNhSbYwtAJHMuNyYKknaMr4 NneEzkHRlA6B5Dd0zgeDGJeWh3zdX+aFMFWArv1bCy8/f79EzvpkqDqsVyCw4i3F w9vd6QCXLtUYyTdst9KLt0ORKsPnqy4= -----END CERTIFICATE-----Generated at Thu Nov 21 18:55:05 2024 by rpki-client on console-ams.rpki-client.org