$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/524ae170-b28a-36e5-a920-d65b545312e1.roa File: 524ae170-b28a-36e5-a920-d65b545312e1.roa (raw, json) Hash identifier: hYaY1eqFosVBFffTqp291KKNhKF1+gYWEkf8A7gwbpw= Subject key identifier: 0D:70:81:6C:9E:2B:FA:CF:7E:0B:6E:58:57:0B:52:58:C3:09:E1:8A Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584776610A333788C4A189712CB4 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/524ae170-b28a-36e5-a920-d65b545312e1.roa Signing time: Mon 07 Oct 2024 13:00:40 +0000 ROA not before: Mon 07 Oct 2024 13:00:40 +0000 ROA not after: Sun 05 Jan 2025 14:00:40 +0000 asID: 22773 IP address blocks: 68.226.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:76:61:0a:33:37:88:c4:a1:89:71:2c:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 7 13:00:40 2024 GMT Not After : Jan 5 14:00:40 2025 GMT Subject: CN=45bc5a75-1ecc-48c2-93d9-ec6ccdaea675 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:0f:c5:69:99:90:9a:d1:5c:ce:96:3e:8b:58: fa:9e:a9:c9:3a:ce:29:f0:f4:39:4b:ef:f5:a5:ff: fb:ad:68:e1:f0:18:02:54:fe:58:57:f0:fe:f4:a3: 26:24:58:1d:7a:5e:cf:bf:5c:ab:76:33:d7:c4:db: 26:6b:11:2e:04:3b:03:ee:56:b8:48:dd:b3:aa:0c: 22:a9:6d:cd:a1:b0:ef:58:86:f6:bc:17:31:f2:49: e0:ff:a6:51:9d:bf:f9:00:e2:38:ea:c9:8c:c5:23: 07:3b:ba:e3:87:3c:9d:eb:5d:7b:90:61:f4:fe:7d: 71:62:06:3a:5f:47:74:9e:e1:9f:bd:18:14:35:7d: ee:1d:68:21:ec:cc:0e:76:91:1d:2e:24:ee:4d:93: a1:c7:54:e8:a3:f7:b8:40:25:91:11:5c:91:f9:11: cd:41:df:54:ae:8a:8d:cb:c5:f0:45:42:96:ff:01: dd:a7:cb:25:97:d2:7f:ce:3d:02:f3:08:96:ef:07: 60:08:fd:8b:04:81:c2:7c:f4:cf:02:e9:a0:f0:10: 69:7c:35:34:b8:54:e5:dd:82:4c:ae:31:9a:72:a4: 00:58:ce:54:7b:5b:2b:c5:03:61:21:64:0d:41:fc: 60:61:38:e0:75:90:50:38:3e:9d:3b:10:ae:70:4f: 70:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:70:81:6C:9E:2B:FA:CF:7E:0B:6E:58:57:0B:52:58:C3:09:E1:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/524ae170-b28a-36e5-a920-d65b545312e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.226.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:c5:01:e0:e4:e8:46:2a:3c:5c:da:23:e8:b5:35:c5:5d:30: 73:db:13:1a:54:98:5a:a3:e9:77:54:aa:28:4b:c6:6d:7a:2b: f4:ae:34:e5:92:69:57:09:5b:0d:b4:fd:93:82:9d:75:03:6a: 21:d5:1b:58:dc:1c:97:8e:a7:ab:b6:c4:2b:23:d6:12:fb:72: 22:30:e0:b4:4b:63:ec:ec:b2:5d:b7:41:ca:af:8f:a9:87:43: 0b:15:2a:72:82:68:7b:80:c0:45:1a:06:8e:ba:e7:36:df:02: 87:1a:7e:75:ca:79:f2:44:61:c0:1b:18:80:2a:a8:d7:6a:9b: 3d:91:16:71:4e:4e:fd:8a:64:c3:76:61:f9:e4:c6:6f:d5:2a: e7:8d:2c:d1:84:fc:97:aa:8a:00:3b:2f:dc:53:42:97:74:4c: 9b:e8:10:9d:03:b6:da:0b:ce:3c:a7:9a:60:83:7c:49:dd:2e: c6:b4:b1:2f:ef:ab:7b:48:36:64:15:27:b8:81:d2:e5:3b:ff: 5c:3d:21:45:16:df:74:73:71:18:ad:b9:85:25:71:ce:db:71: 9d:f5:f5:d4:15:02:2b:77:9e:14:d9:e1:4c:4a:a0:20:6b:e4: 4d:7c:9d:91:b5:79:dd:78:73:56:31:c9:84:b9:0f:8d:0d:c3: 4d:86:89:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd2YQozN4jEoYlxLLQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI0MTAwNzEzMDA0MFoXDTI1MDEwNTE0MDA0MFowLzEtMCsGA1UEAxMk NDViYzVhNzUtMWVjYy00OGMyLTkzZDktZWM2Y2NkYWVhNjc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiw/FaZmQmtFczpY+i1j6nqnJOs4p8PQ5S+/1 pf/7rWjh8BgCVP5YV/D+9KMmJFgdel7Pv1yrdjPXxNsmaxEuBDsD7la4SN2zqgwi qW3NobDvWIb2vBcx8kng/6ZRnb/5AOI46smMxSMHO7rjhzyd6117kGH0/n1xYgY6 X0d0nuGfvRgUNX3uHWgh7MwOdpEdLiTuTZOhx1Too/e4QCWREVyR+RHNQd9UroqN y8XwRUKW/wHdp8sll9J/zj0C8wiW7wdgCP2LBIHCfPTPAumg8BBpfDU0uFTl3YJM rjGacqQAWM5Ue1srxQNhIWQNQfxgYTjgdZBQOD6dOxCucE9wVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA1wgWyeK/rPfgtuWFcLUljDCeGKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNTI0YWUxNzAtYjI4YS0z NmU1LWE5MjAtZDY1YjU0NTMxMmUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDROIAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIrFAeDk6EYqPFzaI+i1NcVdMHPbExpUmFqj6XdUqihLxm16K/SuNOWS aVcJWw20/ZOCnXUDaiHVG1jcHJeOp6u2xCsj1hL7ciIw4LRLY+zssl23Qcqvj6mH QwsVKnKCaHuAwEUaBo665zbfAocafnXKefJEYcAbGIAqqNdqmz2RFnFOTv2KZMN2 Yfnkxm/VKueNLNGE/JeqigA7L9xTQpd0TJvoEJ0DttoLzjynmmCDfEndLsa0sS/v q3tINmQVJ7iB0uU7/1w9IUUW33RzcRituYUlcc7bcZ319dQVAit3nhTZ4UxKoCBr 5E18nZG1ed14c1YxyYS5D40Nw02GiUk= -----END CERTIFICATE-----Generated at Sun Nov 24 21:47:39 2024 by rpki-client on console-ams.rpki-client.org