$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/ef6ef0be-d7e9-316c-ac17-32c51d629568.roa File: ef6ef0be-d7e9-316c-ac17-32c51d629568.roa (raw, json) Hash identifier: ZK4gkGZ4PjqpeF4OLVd876oCAGKbRDe7dALZe/q4wTE= Subject key identifier: 98:C8:FB:DC:A9:BE:41:9C:70:B8:DA:85:21:24:32:85:55:F0:0A:28 Certificate issuer: /CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Certificate serial: 010D0C9F4328584770CB9AA977905632FF395C20 Authority key identifier: E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/ef6ef0be-d7e9-316c-ac17-32c51d629568.roa Signing time: Sat 05 Oct 2024 13:00:42 +0000 ROA not before: Sat 05 Oct 2024 13:00:42 +0000 ROA not after: Fri 03 Jan 2025 14:00:42 +0000 asID: 25843 IP address blocks: 68.168.93.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:70:cb:9a:a9:77:90:56:32:ff:39:5c:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Validity Not Before: Oct 5 13:00:42 2024 GMT Not After : Jan 3 14:00:42 2025 GMT Subject: CN=c19f48a8-a206-44ac-ab5b-ca556478fd2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:85:72:7f:d4:ad:2a:61:4b:54:29:05:2e:eb: 38:8b:4c:f3:3a:b2:48:c9:b9:74:e9:a9:bc:33:ca: 8c:ae:05:ab:b1:75:79:e4:29:86:98:07:f3:75:63: 80:4a:8e:c8:35:1d:51:73:6a:06:25:9b:00:d6:2f: 5d:e1:b5:c9:de:0f:a1:8d:a7:0b:eb:7a:a3:70:7a: 57:c9:64:c3:ad:ca:80:55:e6:c9:c3:7e:46:92:5c: 60:bb:32:2c:f9:66:b3:bf:45:71:bc:a6:3e:f2:ca: f4:c9:f2:03:d2:c0:13:88:c2:6f:92:be:6b:82:e1: ce:6c:3d:23:b9:97:1a:8d:68:21:3d:1f:ee:50:70: 9d:54:ca:b4:ff:65:6d:e6:22:02:3e:d6:4e:b3:1b: 29:5a:67:e8:94:46:f0:17:04:c3:f4:9d:f0:43:e2: 99:c0:aa:a9:87:86:1a:4a:27:c9:90:bc:c8:bd:b4: 1d:fa:97:5f:3f:cd:89:ac:84:66:f2:0f:9c:a8:5d: 50:fb:9c:8c:d1:ca:e5:ae:ae:7a:8c:bd:4a:a3:96: ae:6d:75:61:e7:78:81:f8:4b:f3:96:aa:49:00:aa: b3:ec:e7:77:52:03:33:f6:42:66:d8:80:62:4c:fc: 7c:2d:c6:44:09:46:7f:12:ba:ee:6a:54:f5:83:b4: 3b:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:C8:FB:DC:A9:BE:41:9C:70:B8:DA:85:21:24:32:85:55:F0:0A:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/ef6ef0be-d7e9-316c-ac17-32c51d629568.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl X509v3 Authority Key Identifier: keyid:E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer sbgp-ipAddrBlock: critical IPv4: 68.168.93.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:25:03:28:79:5e:58:0f:0d:77:99:6b:56:06:5f:6a:8e:f0: 56:23:ad:3a:2f:37:db:54:ce:9f:c1:72:7e:62:8e:7a:9d:fc: 02:d3:9c:28:76:1c:61:2d:32:d8:66:74:1e:38:8a:76:77:61: a4:ee:5d:ed:bb:bc:8a:f7:44:8a:c5:d9:a1:be:c6:19:44:b0: 37:5f:1c:46:d6:05:83:cf:e9:d7:9c:f7:fc:1f:c1:0c:1b:da: 79:15:5c:29:41:60:7c:a5:bd:df:99:6a:62:5d:73:ae:a3:fe: 70:0f:9c:29:f1:27:65:40:f4:00:88:3c:0a:08:4e:6d:82:3f: 6c:d5:a3:27:bd:19:b3:7b:4b:6b:35:6a:95:33:72:6a:10:7d: 5b:3e:97:7c:8e:63:cd:06:7f:ae:da:3c:a0:b8:ca:95:4f:78: f0:20:4b:76:eb:bc:90:0b:30:2b:5b:b6:4e:c0:54:ac:09:28: a0:2a:b3:da:65:fb:5f:d2:cf:e8:fb:e5:00:5c:25:30:6d:7c: f1:b6:9a:38:e1:7f:fb:b3:3f:70:9f:08:46:ab:e7:47:38:9c: 32:47:13:fd:a3:f1:06:22:b3:bc:a1:08:ce:a5:99:a1:8b:1c: 3c:bd:9e:83:ea:e6:38:76:36:be:ad:e5:db:68:69:3e:bf:a6: 43:1f:3e:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdwy5qpd5BWMv85XCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWRkOGJlOGEtYmVhZC00ZDViLWE4MTgtNGQxNDgyZjQ3 OWZmMB4XDTI0MTAwNTEzMDA0MloXDTI1MDEwMzE0MDA0MlowLzEtMCsGA1UEAxMk YzE5ZjQ4YTgtYTIwNi00NGFjLWFiNWItY2E1NTY0NzhmZDJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4Vyf9StKmFLVCkFLus4i0zzOrJIybl06am8 M8qMrgWrsXV55CmGmAfzdWOASo7INR1Rc2oGJZsA1i9d4bXJ3g+hjacL63qjcHpX yWTDrcqAVebJw35GklxguzIs+Wazv0VxvKY+8sr0yfID0sATiMJvkr5rguHObD0j uZcajWghPR/uUHCdVMq0/2Vt5iICPtZOsxspWmfolEbwFwTD9J3wQ+KZwKqph4Ya SifJkLzIvbQd+pdfP82JrIRm8g+cqF1Q+5yM0crlrq56jL1Ko5aubXVh53iB+Evz lqpJAKqz7Od3UgMz9kJm2IBiTPx8LcZECUZ/ErrualT1g7Q7AwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJjI+9ypvkGccLjahSEkMoVV8AooMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4 YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0ODJmNDc5ZmYvZWY2ZWYwYmUtZDdlOS0z MTZjLWFjMTctMzJjNTFkNjI5NTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWRkOGJlOGEtYmVhZC00ZDViLWE4 MTgtNGQxNDgyZjQ3OWZmLzFkZDhiZThhLWJlYWQtNGQ1Yi1hODE4LTRkMTQ4MmY0 NzlmZi5jcmwwHwYDVR0jBBgwFoAU4yhAhJRGSB1vsr1QLE5krzJWszcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0 ODJmNDc5ZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARKhdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADUlAyh5XlgPDXeZa1YGX2qO8FYjrTovN9tUzp/Bcn5ijnqd/ALTnCh2 HGEtMthmdB44inZ3YaTuXe27vIr3RIrF2aG+xhlEsDdfHEbWBYPP6dec9/wfwQwb 2nkVXClBYHylvd+ZamJdc66j/nAPnCnxJ2VA9ACIPAoITm2CP2zVoye9GbN7S2s1 apUzcmoQfVs+l3yOY80Gf67aPKC4ypVPePAgS3brvJALMCtbtk7AVKwJKKAqs9pl +1/Sz+j75QBcJTBtfPG2mjjhf/uzP3CfCEar50c4nDJHE/2j8QYis7yhCM6lmaGL HDy9noPq5jh2Nr6t5dtoaT6/pkMfPmk= -----END CERTIFICATE-----Generated at Thu Nov 21 21:45:10 2024 by rpki-client on console-ams.rpki-client.org