$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/7f033aa1-0f64-3d37-895b-8a4c9a9473d0.roa File: 7f033aa1-0f64-3d37-895b-8a4c9a9473d0.roa (raw, json) Hash identifier: bjTlkAM412J1LT6S+VT2/mLSG3VP3gt9gQzsN0FTfLI= Subject key identifier: 40:C6:44:B5:C7:6C:66:35:64:68:DD:9B:D5:5D:5E:5F:9A:50:89:6E Certificate issuer: /CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Certificate serial: 010D0C9F4328584770CB9AD564854BC7487B6040 Authority key identifier: E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/7f033aa1-0f64-3d37-895b-8a4c9a9473d0.roa Signing time: Sat 05 Oct 2024 13:00:42 +0000 ROA not before: Sat 05 Oct 2024 13:00:42 +0000 ROA not after: Fri 03 Jan 2025 14:00:42 +0000 asID: 53291 IP address blocks: 68.168.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:70:cb:9a:d5:64:85:4b:c7:48:7b:60:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Validity Not Before: Oct 5 13:00:42 2024 GMT Not After : Jan 3 14:00:42 2025 GMT Subject: CN=d75013ca-2361-40cd-8ce4-d687543b05bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:cb:00:10:81:af:47:ca:96:06:28:59:75:de: d7:ef:b4:fa:d2:c9:2b:46:8f:b0:b7:f6:eb:1e:1c: 16:71:e3:9a:b4:27:22:25:40:ce:14:3d:a5:c1:69: 84:52:a5:e3:e7:f3:7c:10:fc:44:00:c3:26:54:1a: 01:89:6e:5e:4b:30:b7:e1:5a:a0:d6:b8:44:63:30: d3:18:33:ca:e2:a5:63:46:53:94:bf:a3:8f:22:db: 30:58:5b:d7:d5:57:78:41:76:14:f3:e3:13:b6:d1: f3:b1:ad:2e:8c:6e:1e:90:da:e1:5d:23:e1:2f:ed: c8:6b:c0:88:13:3e:ab:ab:c1:d7:b2:d6:07:6e:72: 5f:60:d6:c8:e3:c5:c9:d1:c6:8f:78:17:f3:ca:d6: 2d:2a:5f:09:f5:58:09:20:c4:b6:d7:85:75:09:ed: 7b:a9:20:c5:8d:79:6a:6b:ef:5c:9f:38:94:2e:05: 9c:2f:51:49:3f:40:b5:21:24:49:cf:ab:3f:80:e4: a6:87:23:70:78:85:b7:24:0c:4f:91:a7:4a:0a:33: 8f:46:db:ee:49:6f:1b:f6:68:50:c9:eb:4c:ba:69: 2b:c7:5d:45:fc:4f:9c:e3:8c:88:b1:6d:ab:2b:20: a1:3a:7f:29:fd:8d:08:45:08:96:51:59:d5:65:e3: 38:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:C6:44:B5:C7:6C:66:35:64:68:DD:9B:D5:5D:5E:5F:9A:50:89:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/7f033aa1-0f64-3d37-895b-8a4c9a9473d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl X509v3 Authority Key Identifier: keyid:E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer sbgp-ipAddrBlock: critical IPv4: 68.168.95.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:d6:ff:c2:a2:51:3b:36:fa:33:0d:61:53:d8:81:2a:9b:a2: cf:45:f8:31:0b:31:a1:fa:64:98:df:04:ab:65:c7:1e:a8:16: 26:d6:95:f2:90:e0:db:86:15:30:21:59:4d:86:c8:33:8c:52: 3e:21:de:67:f7:2a:82:ee:f1:c1:01:4a:6e:c0:7b:0c:67:a3: 4a:90:3d:49:fc:d6:aa:66:b4:b6:8a:a1:9f:5d:70:34:e7:e8: 9c:dd:4a:c6:1c:2c:01:8e:21:a2:6a:3a:b6:f3:fa:44:a5:3c: 0f:97:18:c2:5b:57:6c:1d:2e:88:b2:29:6d:66:3e:a6:c2:84: ba:5d:96:c2:b3:f1:92:3b:97:b1:ac:08:00:ec:4e:9a:bf:e8: 7c:ed:93:4c:08:46:fd:ab:2f:4c:9b:f1:b2:39:6a:35:c2:33: 26:e6:bd:73:f2:5e:bf:7f:5d:e7:81:fc:ca:4a:dd:7b:6f:77: 63:b7:25:01:fc:41:d9:62:33:0f:12:73:a2:56:59:38:0e:31: 68:9d:79:43:4e:8b:e1:80:5b:22:2c:32:83:39:c2:cb:ae:e5: 00:d8:89:bb:ec:3b:75:d8:e7:18:81:de:ca:fe:87:10:81:44: d0:0f:7a:fe:49:8a:ef:e2:23:ed:71:cc:c4:e3:60:fa:49:4f: db:89:22:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdwy5rVZIVLx0h7YEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWRkOGJlOGEtYmVhZC00ZDViLWE4MTgtNGQxNDgyZjQ3 OWZmMB4XDTI0MTAwNTEzMDA0MloXDTI1MDEwMzE0MDA0MlowLzEtMCsGA1UEAxMk ZDc1MDEzY2EtMjM2MS00MGNkLThjZTQtZDY4NzU0M2IwNWJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjcsAEIGvR8qWBihZdd7X77T60skrRo+wt/br HhwWceOatCciJUDOFD2lwWmEUqXj5/N8EPxEAMMmVBoBiW5eSzC34Vqg1rhEYzDT GDPK4qVjRlOUv6OPItswWFvX1Vd4QXYU8+MTttHzsa0ujG4ekNrhXSPhL+3Ia8CI Ez6rq8HXstYHbnJfYNbI48XJ0caPeBfzytYtKl8J9VgJIMS214V1Ce17qSDFjXlq a+9cnziULgWcL1FJP0C1ISRJz6s/gOSmhyNweIW3JAxPkadKCjOPRtvuSW8b9mhQ yetMumkrx11F/E+c44yIsW2rKyChOn8p/Y0IRQiWUVnVZeM4wwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEDGRLXHbGY1ZGjdm9VdXl+aUIluMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4 YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0ODJmNDc5ZmYvN2YwMzNhYTEtMGY2NC0z ZDM3LTg5NWItOGE0YzlhOTQ3M2QwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWRkOGJlOGEtYmVhZC00ZDViLWE4 MTgtNGQxNDgyZjQ3OWZmLzFkZDhiZThhLWJlYWQtNGQ1Yi1hODE4LTRkMTQ4MmY0 NzlmZi5jcmwwHwYDVR0jBBgwFoAU4yhAhJRGSB1vsr1QLE5krzJWszcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0 ODJmNDc5ZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARKhfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFzW/8KiUTs2+jMNYVPYgSqbos9F+DELMaH6ZJjfBKtlxx6oFibWlfKQ 4NuGFTAhWU2GyDOMUj4h3mf3KoLu8cEBSm7Aewxno0qQPUn81qpmtLaKoZ9dcDTn 6JzdSsYcLAGOIaJqOrbz+kSlPA+XGMJbV2wdLoiyKW1mPqbChLpdlsKz8ZI7l7Gs CADsTpq/6Hztk0wIRv2rL0yb8bI5ajXCMybmvXPyXr9/XeeB/MpK3Xtvd2O3JQH8 QdliMw8Sc6JWWTgOMWideUNOi+GAWyIsMoM5wsuu5QDYibvsO3XY5xiB3sr+hxCB RNAPev5Jiu/iI+1xzMTjYPpJT9uJIqM= -----END CERTIFICATE-----Generated at Thu Nov 21 21:07:03 2024 by rpki-client on console-fra.rpki-client.org