$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4cca9e6f-b651-337a-a853-6ae4a3de1de8.roa File: 4cca9e6f-b651-337a-a853-6ae4a3de1de8.roa (raw, json) Hash identifier: bz4N8TttW1lCBxmcoNHhaVhPGNcwbF5myb6FGxnaoOk= Subject key identifier: BD:61:F5:93:83:59:C9:3A:A3:F2:9A:F7:DE:36:29:81:5A:BE:CA:72 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285847340CEB5088826A23B8F92AC0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4cca9e6f-b651-337a-a853-6ae4a3de1de8.roa Signing time: Fri 13 Sep 2024 18:48:01 +0000 ROA not before: Fri 13 Sep 2024 18:48:01 +0000 ROA not after: Thu 12 Dec 2024 19:48:01 +0000 asID: 22773 IP address blocks: 68.107.236.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:34:0c:eb:50:88:82:6a:23:b8:f9:2a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 13 18:48:01 2024 GMT Not After : Dec 12 19:48:01 2024 GMT Subject: CN=4a628b3c-453c-46ae-b8bf-063b267613c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:31:5c:2f:40:13:ba:6c:ad:b6:43:7c:62:90: 64:32:fe:57:16:23:14:2f:c9:e4:05:fd:2f:e6:21: 4d:32:4b:4d:20:fd:ca:0a:4c:0e:87:1f:f8:ce:ea: 88:a6:93:8f:c3:69:a0:4e:3b:ae:a7:b9:c8:0d:1c: 95:26:ea:fe:3e:85:c6:bb:8e:8d:4f:99:f6:92:0d: 37:aa:8a:b2:58:4d:4d:ec:b1:3d:40:38:df:3b:40: 9f:67:7b:08:1e:c4:d1:f7:49:4c:d3:9a:d8:54:b7: ba:ee:6b:a3:6f:57:35:63:9c:b8:f6:6d:a1:7b:67: 01:08:70:ad:75:89:a6:19:10:99:60:cc:c4:bd:e6: a4:63:4e:c8:ce:5d:46:9c:35:e5:e6:19:da:d2:c4: 24:cd:3f:e0:da:e6:10:72:69:c6:b6:70:6a:fd:a6: 3d:cc:1b:f3:08:6b:52:3d:50:f7:10:db:0f:95:41: 9b:e7:58:b4:08:da:9d:2a:ff:c1:cb:f2:0b:62:30: 18:33:3a:01:a6:1a:a2:a2:9d:d1:23:27:8f:81:cd: cb:b0:fc:24:1b:b8:a6:8e:47:39:c5:ed:81:4b:8c: f1:10:e9:53:ca:e3:0e:a5:03:59:94:1a:78:f0:bf: 56:83:05:d1:9d:5f:6f:19:5f:1b:32:73:05:02:7f: 47:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:61:F5:93:83:59:C9:3A:A3:F2:9A:F7:DE:36:29:81:5A:BE:CA:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4cca9e6f-b651-337a-a853-6ae4a3de1de8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.107.236.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:d8:24:bf:1e:d2:40:29:69:4a:f4:50:b6:92:67:fc:19:83: 1a:94:7d:b6:59:40:05:d3:9d:f7:32:9d:50:71:df:0c:1b:0f: 1d:f2:dd:ce:ae:64:8d:e8:b0:d5:8b:2d:f7:82:40:2d:fb:c8: 25:9c:64:b5:aa:77:03:7f:01:96:fc:01:dd:d4:05:dd:2a:94: b0:88:c7:43:c7:3b:16:11:ba:ad:df:f7:40:2a:51:e2:9c:55: 9b:18:17:f6:bf:d3:f4:db:5d:45:24:51:85:cb:63:2a:1a:a4: 40:59:25:c3:5a:bd:b0:70:86:de:54:73:19:38:09:f2:00:3d: 36:8e:75:8c:a9:79:94:43:72:71:0c:71:01:20:ea:2b:86:f4: c2:33:d5:14:4f:18:12:85:d7:be:60:00:5f:94:94:80:0d:06: 8c:2f:02:92:b0:5d:d0:55:5f:64:a9:78:bd:c9:94:62:a5:27: d6:08:d2:09:b0:79:d3:1d:fe:0f:7b:fe:fa:c5:36:0e:7d:fb: 31:c5:2a:d3:97:18:76:f9:20:85:e7:95:c8:76:aa:f8:13:b3: e8:6a:26:a5:e3:03:94:61:2f:02:0f:ee:87:76:7c:42:8d:05: 57:46:87:53:b6:75:dd:aa:85:fd:33:d5:dd:5b:38:9a:60:9a: 26:8c:41:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc0DOtQiIJqI7j5KsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI0MDkxMzE4NDgwMVoXDTI0MTIxMjE5NDgwMVowLzEtMCsGA1UEAxMk NGE2MjhiM2MtNDUzYy00NmFlLWI4YmYtMDYzYjI2NzYxM2M1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3jFcL0ATumyttkN8YpBkMv5XFiMUL8nkBf0v 5iFNMktNIP3KCkwOhx/4zuqIppOPw2mgTjuup7nIDRyVJur+PoXGu46NT5n2kg03 qoqyWE1N7LE9QDjfO0CfZ3sIHsTR90lM05rYVLe67mujb1c1Y5y49m2he2cBCHCt dYmmGRCZYMzEveakY07Izl1GnDXl5hna0sQkzT/g2uYQcmnGtnBq/aY9zBvzCGtS PVD3ENsPlUGb51i0CNqdKv/By/ILYjAYMzoBphqiop3RIyePgc3LsPwkG7imjkc5 xe2BS4zxEOlTyuMOpQNZlBp48L9WgwXRnV9vGV8bMnMFAn9HJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL1h9ZODWck6o/Ka9942KYFavspyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNGNjYTllNmYtYjY1MS0z MzdhLWE4NTMtNmFlNGEzZGUxZGU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRGvsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA/YJL8e0kApaUr0ULaSZ/wZgxqUfbZZQAXTnfcynVBx3wwbDx3y3c6u ZI3osNWLLfeCQC37yCWcZLWqdwN/AZb8Ad3UBd0qlLCIx0PHOxYRuq3f90AqUeKc VZsYF/a/0/TbXUUkUYXLYyoapEBZJcNavbBwht5Ucxk4CfIAPTaOdYypeZRDcnEM cQEg6iuG9MIz1RRPGBKF175gAF+UlIANBowvApKwXdBVX2SpeL3JlGKlJ9YI0gmw edMd/g97/vrFNg59+zHFKtOXGHb5IIXnlch2qvgTs+hqJqXjA5RhLwIP7od2fEKN BVdGh1O2dd2qhf0z1d1bOJpgmiaMQQ4= -----END CERTIFICATE-----Generated at Sun Nov 24 21:00:02 2024 by rpki-client on console-fra.rpki-client.org