$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ae66dfa1-40cc-34d0-957c-9ea8c1018148.roa File: ae66dfa1-40cc-34d0-957c-9ea8c1018148.roa (raw, json) Hash identifier: EM/Jpq1L2q5Ck7tyxcoeKsUoQBpVvB7KiWvAj6I5OS8= Subject key identifier: B4:BB:D6:BB:68:96:D9:E8:05:BD:26:DE:18:27:5B:86:90:0F:A0:E0 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F432858474DE6173205ADC507D270F1E0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ae66dfa1-40cc-34d0-957c-9ea8c1018148.roa Signing time: Mon 23 Sep 2024 01:00:31 +0000 ROA not before: Mon 23 Sep 2024 01:00:31 +0000 ROA not after: Sun 22 Dec 2024 02:00:31 +0000 asID: 22773 IP address blocks: 68.225.174.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:4d:e6:17:32:05:ad:c5:07:d2:70:f1:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 23 01:00:31 2024 GMT Not After : Dec 22 02:00:31 2024 GMT Subject: CN=5eccab30-74a0-4f04-8bc2-7d8bd12b3201 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:e1:dc:87:79:d3:7d:70:f2:d6:5c:39:60:e4: 7e:b0:92:cd:63:8b:47:e7:2f:e9:30:52:ee:66:e2: 12:bc:e0:63:d2:af:f5:a1:b9:1b:32:3a:a7:2b:b0: 36:6a:5f:80:f6:45:b6:58:e4:ff:9d:23:58:dd:c5: 4f:e5:70:3c:52:2e:bc:7b:9f:24:14:d5:58:46:39: 43:7e:a6:f6:31:9e:4e:f9:33:da:18:9c:25:14:54: f6:72:20:14:ac:05:26:bf:14:77:fc:6f:f9:60:68: dd:52:0b:71:0d:40:f3:79:93:09:48:58:4a:8e:31: b5:65:ca:76:9b:a8:79:1c:7b:fd:4d:bd:56:85:80: 02:cb:6a:68:99:71:dc:a3:14:78:f6:14:ee:e3:65: 0b:ba:35:09:7d:85:d1:60:1c:cb:c6:cb:1b:aa:d1: 37:25:0c:d5:a9:5f:e8:3c:e9:76:5a:e1:3b:d5:14: 4f:59:86:ec:bd:dd:16:3d:f7:29:f4:42:9e:05:c2: bb:ab:4c:25:1d:8c:a4:cb:f4:07:c5:0d:0d:35:71: 15:2e:97:09:e0:a1:e7:9d:33:85:69:91:56:c9:cc: 52:6f:2c:a4:61:57:10:4e:69:53:3b:12:cb:a6:f1: 8e:6a:fe:f5:68:1f:5f:c7:2c:70:86:01:26:d0:d5: d1:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:BB:D6:BB:68:96:D9:E8:05:BD:26:DE:18:27:5B:86:90:0F:A0:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ae66dfa1-40cc-34d0-957c-9ea8c1018148.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.225.174.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:8a:4c:45:26:2a:30:24:78:70:c7:98:39:27:bb:59:38:0a: 94:29:fb:2f:e4:76:14:21:d4:c4:56:fc:ec:52:61:30:a0:53: 58:c2:6d:76:3d:23:1d:87:86:59:e1:37:87:58:67:29:24:72: 0b:34:19:bd:63:ad:c9:38:79:ed:35:81:34:71:87:14:52:64: fc:65:64:43:59:bf:40:dc:25:b1:b2:4d:d4:4b:3b:7f:32:c4: b8:c7:7e:81:e7:d1:10:43:c5:2b:85:ae:7c:83:d2:b8:f1:52: 31:8a:d7:de:4a:b3:2a:c8:36:95:c6:e0:36:c2:95:e4:0c:e0: f1:9d:bb:cf:a3:31:54:d5:15:f3:01:0b:4b:36:8b:49:4c:be: ba:7f:f0:bc:b6:84:ca:1e:46:d2:c4:43:90:98:07:2b:bb:06: cb:90:25:35:66:e6:6e:e4:37:33:01:52:2d:5b:8a:4e:e2:82: df:a4:e1:64:00:a4:3b:e9:fc:68:05:7c:96:75:31:f7:1b:a3: 67:05:2e:7f:76:56:89:18:b9:d1:e6:69:9c:09:95:ba:d8:3d: a2:ff:2a:4d:61:9e:1d:d2:9f:fb:7e:42:66:22:b8:65:37:f2: bd:0b:ae:fe:52:01:31:6f:4e:b8:7a:b1:de:ab:0f:d5:e6:51: a8:11:d9:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdN5hcyBa3FB9Jw8eAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI0MDkyMzAxMDAzMVoXDTI0MTIyMjAyMDAzMVowLzEtMCsGA1UEAxMk NWVjY2FiMzAtNzRhMC00ZjA0LThiYzItN2Q4YmQxMmIzMjAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAleHch3nTfXDy1lw5YOR+sJLNY4tH5y/pMFLu ZuISvOBj0q/1obkbMjqnK7A2al+A9kW2WOT/nSNY3cVP5XA8Ui68e58kFNVYRjlD fqb2MZ5O+TPaGJwlFFT2ciAUrAUmvxR3/G/5YGjdUgtxDUDzeZMJSFhKjjG1Zcp2 m6h5HHv9Tb1WhYACy2pomXHcoxR49hTu42ULujUJfYXRYBzLxssbqtE3JQzVqV/o POl2WuE71RRPWYbsvd0WPfcp9EKeBcK7q0wlHYyky/QHxQ0NNXEVLpcJ4KHnnTOF aZFWycxSbyykYVcQTmlTOxLLpvGOav71aB9fxyxwhgEm0NXR4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLS71rtoltnoBb0m3hgnW4aQD6DgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYWU2NmRmYTEtNDBjYy0z NGQwLTk1N2MtOWVhOGMxMDE4MTQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBROGuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACeKTEUmKjAkeHDHmDknu1k4CpQp+y/kdhQh1MRW/OxSYTCgU1jCbXY9 Ix2HhlnhN4dYZykkcgs0Gb1jrck4ee01gTRxhxRSZPxlZENZv0DcJbGyTdRLO38y xLjHfoHn0RBDxSuFrnyD0rjxUjGK195KsyrINpXG4DbCleQM4PGdu8+jMVTVFfMB C0s2i0lMvrp/8Ly2hMoeRtLEQ5CYByu7BsuQJTVm5m7kNzMBUi1bik7igt+k4WQA pDvp/GgFfJZ1Mfcbo2cFLn92VokYudHmaZwJlbrYPaL/Kk1hnh3Sn/t+QmYiuGU3 8r0Lrv5SATFvTrh6sd6rD9XmUagR2Q8= -----END CERTIFICATE-----Generated at Fri Nov 22 00:23:52 2024 by rpki-client on console-fra.rpki-client.org