$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ab06b10-1d03-4fa9-b22c-bb98590313d3/48314f3e-e2ad-3d66-a359-8ccfd8d258e2.roa File: 48314f3e-e2ad-3d66-a359-8ccfd8d258e2.roa (raw, json) Hash identifier: DVRwslHw6U8rMAHZrAG+sTS4Do6Gy0SYiQMSrPbTYH0= Subject key identifier: E9:65:34:F7:BC:E7:B3:DC:87:19:0C:05:C8:1C:69:95:C2:76:86:69 Certificate issuer: /CN=3ab06b10-1d03-4fa9-b22c-bb98590313d3 Certificate serial: 010D0C9F43285847D6CF4BA6E0F096DE0023A880 Authority key identifier: 33:D9:DA:BC:31:08:D5:AA:CF:ED:B1:BB:45:09:22:0F:00:1C:C5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ab06b10-1d03-4fa9-b22c-bb98590313d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ab06b10-1d03-4fa9-b22c-bb98590313d3/48314f3e-e2ad-3d66-a359-8ccfd8d258e2.roa Signing time: Mon 11 Nov 2024 02:00:27 +0000 ROA not before: Mon 11 Nov 2024 02:00:27 +0000 ROA not after: Sun 09 Feb 2025 02:00:27 +0000 asID: 25222 IP address blocks: 68.67.0.0/22 maxlen: 24 173.243.96.0/22 maxlen: 24 173.243.106.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ab06b10-1d03-4fa9-b22c-bb98590313d3/3ab06b10-1d03-4fa9-b22c-bb98590313d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ab06b10-1d03-4fa9-b22c-bb98590313d3/3ab06b10-1d03-4fa9-b22c-bb98590313d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ab06b10-1d03-4fa9-b22c-bb98590313d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:d6:cf:4b:a6:e0:f0:96:de:00:23:a8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ab06b10-1d03-4fa9-b22c-bb98590313d3 Validity Not Before: Nov 11 02:00:27 2024 GMT Not After : Feb 9 02:00:27 2025 GMT Subject: CN=9c68ebc6-1528-4e60-aaa4-2d3cf623c9d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:da:f6:8d:06:97:08:bd:f9:3f:db:a8:df:bc: fd:4e:4c:8a:bd:f2:2e:01:b2:3f:81:d1:c6:00:b8: 60:7b:5e:71:01:ab:76:f5:12:5e:b4:f2:37:7b:f4: 66:f9:81:ff:4a:03:59:2c:78:48:ec:5e:a3:82:78: 92:6b:84:5c:71:53:14:3e:da:a8:5f:99:d7:df:98: 08:2a:f6:c3:f2:28:da:7d:c0:b2:60:91:e3:c8:3b: 7f:b8:12:7d:91:a3:a3:74:26:e8:e1:e6:0b:4e:ba: 31:86:23:94:4c:7d:43:c6:0c:34:c7:56:c8:02:27: 9b:c3:a5:b0:fd:3c:44:f8:2d:c3:65:d7:57:4a:11: 79:79:1a:99:b5:23:e3:4c:10:24:03:8f:5e:1a:d2: 40:81:4f:27:5f:b9:61:09:f9:08:74:c6:cd:cc:aa: 98:75:87:bb:76:1a:c6:81:8d:de:6a:26:2c:b4:b0: 59:c8:9f:2b:93:9a:3a:64:2c:94:49:fb:de:0e:7e: 83:f2:bc:c1:49:91:fc:b9:8b:90:4f:ee:82:12:43: 9d:f3:6d:de:e1:64:0c:c4:de:7c:9f:84:44:c7:c3: 46:ea:06:60:59:ca:d7:74:15:89:9c:b5:bf:a6:e9: 78:d8:9f:de:23:b6:79:15:4a:28:6f:93:2a:7a:2a: 5d:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:65:34:F7:BC:E7:B3:DC:87:19:0C:05:C8:1C:69:95:C2:76:86:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ab06b10-1d03-4fa9-b22c-bb98590313d3/48314f3e-e2ad-3d66-a359-8ccfd8d258e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ab06b10-1d03-4fa9-b22c-bb98590313d3/3ab06b10-1d03-4fa9-b22c-bb98590313d3.crl X509v3 Authority Key Identifier: keyid:33:D9:DA:BC:31:08:D5:AA:CF:ED:B1:BB:45:09:22:0F:00:1C:C5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ab06b10-1d03-4fa9-b22c-bb98590313d3.cer sbgp-ipAddrBlock: critical IPv4: 68.67.0.0/22 173.243.96.0/22 173.243.106.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:16:f9:95:1d:7d:66:5e:d2:7c:19:2f:99:5f:bf:3e:99:cc: 7d:f4:9f:89:07:6f:d6:3b:a4:30:bb:3d:0f:88:5b:48:31:e1: a1:36:f1:1f:25:c9:bc:78:95:f5:e5:d3:5f:a3:bb:a9:25:56: f8:83:50:75:30:e0:eb:4d:60:c2:fc:b1:5a:cf:ae:52:b5:eb: 5c:d0:f0:44:1d:5d:51:b1:24:1f:cd:31:5f:d8:ee:76:7a:db: e0:b9:97:58:4c:e0:1a:1b:1b:d6:75:55:78:2e:f8:9b:10:9d: 3b:ae:d1:73:30:1b:68:6f:14:92:68:4d:c0:1a:bb:79:a9:35: 28:d4:e9:98:58:b2:6f:a4:13:0e:c8:10:01:5d:7c:88:7c:21: 29:7e:54:94:c4:88:08:25:72:4d:9a:36:e6:da:d8:55:63:8f: d2:a0:4e:8c:b0:68:0d:aa:dc:73:91:ae:20:cb:42:58:3c:1c: f3:ff:81:cb:99:46:fc:0b:e8:2f:42:bf:76:8d:3f:36:a7:2c: 1e:5f:8d:2f:04:ed:56:93:c8:af:41:23:61:87:41:e7:d2:03: 53:cf:ef:12:14:96:3a:a7:cb:15:d9:ac:d5:d1:49:8e:2f:a6: 2b:45:87:93:37:97:b3:a7:5b:f1:6f:59:2c:e5:c8:7f:c3:50: 0e:29:62:e5 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEfWz0um4PCW3gAjqIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2FiMDZiMTAtMWQwMy00ZmE5LWIyMmMtYmI5ODU5MDMx M2QzMB4XDTI0MTExMTAyMDAyN1oXDTI1MDIwOTAyMDAyN1owLzEtMCsGA1UEAxMk OWM2OGViYzYtMTUyOC00ZTYwLWFhYTQtMmQzY2Y2MjNjOWQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdr2jQaXCL35P9uo37z9TkyKvfIuAbI/gdHG ALhge15xAat29RJetPI3e/Rm+YH/SgNZLHhI7F6jgniSa4RccVMUPtqoX5nX35gI KvbD8ijafcCyYJHjyDt/uBJ9kaOjdCbo4eYLTroxhiOUTH1Dxgw0x1bIAiebw6Ww /TxE+C3DZddXShF5eRqZtSPjTBAkA49eGtJAgU8nX7lhCfkIdMbNzKqYdYe7dhrG gY3eaiYstLBZyJ8rk5o6ZCyUSfveDn6D8rzBSZH8uYuQT+6CEkOd823e4WQMxN58 n4REx8NG6gZgWcrXdBWJnLW/pul42J/eI7Z5FUoob5MqeipdmwIDAQABo4IDYTCC A10wHQYDVR0OBBYEFOllNPe857PchxkMBcgcaZXCdoZpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zYWIw NmIxMC0xZDAzLTRmYTktYjIyYy1iYjk4NTkwMzEzZDMvNDgzMTRmM2UtZTJhZC0z ZDY2LWEzNTktOGNjZmQ4ZDI1OGUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvM2FiMDZiMTAtMWQwMy00ZmE5LWIy MmMtYmI5ODU5MDMxM2QzLzNhYjA2YjEwLTFkMDMtNGZhOS1iMjJjLWJiOTg1OTAz MTNkMy5jcmwwHwYDVR0jBBgwFoAUM9navDEI1arP7bG7RQkiDwAcxU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zYWIwNmIxMC0xZDAzLTRmYTktYjIyYy1iYjk4 NTkwMzEzZDMuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCREMAAwQC rfNgAwQBrfNqMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAF8W+ZUdfWZe0nwZL5lfvz6ZzH30n4kHb9Y7pDC7 PQ+IW0gx4aE28R8lybx4lfXl01+ju6klVviDUHUw4OtNYML8sVrPrlK161zQ8EQd XVGxJB/NMV/Y7nZ62+C5l1hM4BobG9Z1VXgu+JsQnTuu0XMwG2hvFJJoTcAau3mp NSjU6ZhYsm+kEw7IEAFdfIh8ISl+VJTEiAglck2aNuba2FVjj9KgToywaA2q3HOR riDLQlg8HPP/gcuZRvwL6C9Cv3aNPzanLB5fjS8E7VaTyK9BI2GHQefSA1PP7xIU ljqnyxXZrNXRSY4vpitFh5M3l7OnW/FvWSzlyH/DUA4pYuU= -----END CERTIFICATE-----Generated at Fri Nov 22 04:20:53 2024 by rpki-client on console-fra.rpki-client.org