$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/f670fa0a-c221-3b1c-bd47-9821b1a8e9d0.roa File: f670fa0a-c221-3b1c-bd47-9821b1a8e9d0.roa (raw, json) Hash identifier: xhRw5ersGIf1YorRUN9qFdnrybiaEFlzLakOPh9Ur4g= Subject key identifier: AB:E9:92:44:94:4D:94:13:09:F8:60:34:81:01:68:E7:AE:26:15:37 Certificate issuer: /CN=1d639366-c044-456e-b8c8-0de04a543a0c Certificate serial: 010D0C9F43285847299B2BAD4166B62574241280 Authority key identifier: FC:35:57:C9:0E:3D:B5:19:05:85:A4:A7:E7:10:E9:65:6A:04:67:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/f670fa0a-c221-3b1c-bd47-9821b1a8e9d0.roa Signing time: Tue 10 Sep 2024 01:00:30 +0000 ROA not before: Tue 10 Sep 2024 01:00:30 +0000 ROA not after: Mon 09 Dec 2024 02:00:30 +0000 asID: 23115 IP address blocks: 216.68.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:29:9b:2b:ad:41:66:b6:25:74:24:12:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d639366-c044-456e-b8c8-0de04a543a0c Validity Not Before: Sep 10 01:00:30 2024 GMT Not After : Dec 9 02:00:30 2024 GMT Subject: CN=9325951c-4e5c-4018-a9e3-aa32eb7eb685 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:95:2d:41:b0:f3:c9:28:7c:86:75:00:dc:38: bc:6b:9a:ee:36:0d:79:86:5b:03:a8:c6:c2:92:8a: a6:8f:e7:f6:f8:0a:f7:59:b0:95:12:76:c9:45:95: 8e:97:92:5d:61:17:4c:e5:db:21:81:85:74:e1:91: 42:a5:a6:69:06:79:69:17:54:a3:03:69:1f:aa:55: 26:a4:48:5f:93:c1:9c:78:e3:89:57:21:f9:54:02: e9:84:09:61:94:c6:c8:b5:ee:c9:6b:e8:99:f2:b6: 77:34:ec:9d:5d:f9:78:0e:72:4b:a2:72:4c:8a:c0: 85:51:2c:f3:13:00:ba:4d:72:e5:d7:d7:02:48:fe: f8:08:15:9a:a0:7b:0f:65:fb:77:11:7e:c2:8c:aa: 76:fa:af:30:2e:6d:5a:1f:53:bc:46:09:27:8a:f6: 50:44:7d:c7:b4:07:d5:7d:9f:33:67:fd:7e:05:c4: 2c:66:34:e7:7e:33:07:aa:4f:50:cb:c0:f1:a1:b1: 06:f9:15:06:b6:e9:31:56:a8:87:78:50:48:95:11: 94:5c:bc:75:68:1d:3f:b1:6b:40:c8:f3:6f:12:e7: e2:a6:a7:5a:f3:d4:63:95:20:8c:0c:a8:bc:ee:37: ca:7f:cb:4a:1a:30:77:66:74:54:90:90:e6:50:a8: e9:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:E9:92:44:94:4D:94:13:09:F8:60:34:81:01:68:E7:AE:26:15:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/f670fa0a-c221-3b1c-bd47-9821b1a8e9d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.crl X509v3 Authority Key Identifier: keyid:FC:35:57:C9:0E:3D:B5:19:05:85:A4:A7:E7:10:E9:65:6A:04:67:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer sbgp-ipAddrBlock: critical IPv4: 216.68.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:d0:8b:52:f8:d2:1c:ea:55:0a:e2:29:5b:c5:7f:55:e0:ad: c5:3a:8a:49:c2:e0:0c:21:0f:8d:62:0e:9d:f9:84:18:34:2a: c8:cb:b0:8e:66:16:22:27:31:c0:d6:d5:22:7d:88:bc:54:29: 72:66:e8:e9:51:fd:58:d5:c5:3d:81:cf:62:61:2d:d3:6e:5b: 5e:7e:47:0a:a4:ea:37:2d:4f:92:a4:b5:9a:8f:c5:0d:1c:11: f8:80:af:95:dd:5b:e0:a4:1d:10:05:58:ed:bd:8f:28:e1:4d: cc:97:b8:08:83:73:25:94:fd:ff:1e:5f:7d:da:8a:9b:73:01: d0:28:79:a1:bc:4d:98:fc:22:31:4c:0f:b2:eb:03:4b:1e:19: 31:97:15:6e:ae:19:27:53:6c:62:95:7c:5a:c7:56:50:22:6c: 7d:a6:53:f5:f6:25:63:f1:c9:b6:ae:c4:7b:75:f4:df:fe:d9: 1e:83:b1:a3:03:92:9e:b4:fb:ad:0a:3e:63:d6:c6:8e:e9:3d: db:42:18:e6:f4:4c:d9:c8:30:c3:c8:86:d0:8b:36:b5:95:33: ee:36:58:08:7e:56:a6:38:65:4f:23:61:09:8d:a2:60:94:54: d3:fd:8f:7a:69:c3:21:f8:c1:0c:e9:0b:06:2f:4e:27:31:2c: aa:2c:24:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcpmyutQWa2JXQkEoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQ2MzkzNjYtYzA0NC00NTZlLWI4YzgtMGRlMDRhNTQz YTBjMB4XDTI0MDkxMDAxMDAzMFoXDTI0MTIwOTAyMDAzMFowLzEtMCsGA1UEAxMk OTMyNTk1MWMtNGU1Yy00MDE4LWE5ZTMtYWEzMmViN2ViNjg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhpUtQbDzySh8hnUA3Di8a5ruNg15hlsDqMbC koqmj+f2+Ar3WbCVEnbJRZWOl5JdYRdM5dshgYV04ZFCpaZpBnlpF1SjA2kfqlUm pEhfk8GceOOJVyH5VALphAlhlMbIte7Ja+iZ8rZ3NOydXfl4DnJLonJMisCFUSzz EwC6TXLl19cCSP74CBWaoHsPZft3EX7CjKp2+q8wLm1aH1O8RgknivZQRH3HtAfV fZ8zZ/1+BcQsZjTnfjMHqk9Qy8DxobEG+RUGtukxVqiHeFBIlRGUXLx1aB0/sWtA yPNvEufipqda89RjlSCMDKi87jfKf8tKGjB3ZnRUkJDmUKjpDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKvpkkSUTZQTCfhgNIEBaOeuJhU3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZDYz OTM2Ni1jMDQ0LTQ1NmUtYjhjOC0wZGUwNGE1NDNhMGMvZjY3MGZhMGEtYzIyMS0z YjFjLWJkNDctOTgyMWIxYThlOWQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWQ2MzkzNjYtYzA0NC00NTZlLWI4 YzgtMGRlMDRhNTQzYTBjLzFkNjM5MzY2LWMwNDQtNDU2ZS1iOGM4LTBkZTA0YTU0 M2EwYy5jcmwwHwYDVR0jBBgwFoAU/DVXyQ49tRkFhaSn5xDpZWoEZ4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZDYzOTM2Ni1jMDQ0LTQ1NmUtYjhjOC0wZGUw NGE1NDNhMGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2ERDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABjQi1L40hzqVQriKVvFf1XgrcU6iknC4AwhD41iDp35hBg0KsjLsI5m FiInMcDW1SJ9iLxUKXJm6OlR/VjVxT2Bz2JhLdNuW15+Rwqk6jctT5KktZqPxQ0c EfiAr5XdW+CkHRAFWO29jyjhTcyXuAiDcyWU/f8eX33aiptzAdAoeaG8TZj8IjFM D7LrA0seGTGXFW6uGSdTbGKVfFrHVlAibH2mU/X2JWPxybauxHt19N/+2R6DsaMD kp60+60KPmPWxo7pPdtCGOb0TNnIMMPIhtCLNrWVM+42WAh+VqY4ZU8jYQmNomCU VNP9j3ppwyH4wQzpCwYvTicxLKosJKk= -----END CERTIFICATE-----Generated at Sun Nov 24 18:29:04 2024 by rpki-client on console-ams.rpki-client.org