$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/09aaf2cd-3a69-321f-9da1-f83d72d9a6af.roa File: 09aaf2cd-3a69-321f-9da1-f83d72d9a6af.roa (raw, json) Hash identifier: S+8UteWcqBNnzv0N8dkZmZ8eQJwshTs5ogpz8CqFgWQ= Subject key identifier: D8:BB:75:D3:B1:63:92:4E:FE:F6:C3:57:8E:31:D5:F0:C8:BA:E4:42 Certificate issuer: /CN=3efd7529-38b1-472c-9d5b-d87382d088a0 Certificate serial: 010D0C9F432858478CB68FFB878236C9BD93E280 Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/09aaf2cd-3a69-321f-9da1-f83d72d9a6af.roa Signing time: Tue 15 Oct 2024 13:00:47 +0000 ROA not before: Tue 15 Oct 2024 13:00:47 +0000 ROA not after: Mon 13 Jan 2025 14:00:47 +0000 asID: 394285 IP address blocks: 68.68.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:8c:b6:8f:fb:87:82:36:c9:bd:93:e2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0 Validity Not Before: Oct 15 13:00:47 2024 GMT Not After : Jan 13 14:00:47 2025 GMT Subject: CN=8a293c73-61a8-46d7-99ff-a0549ef34f86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:6f:8c:94:22:ec:0d:e0:6e:09:e7:42:4a:83: 2c:03:af:2c:84:d2:c9:ec:e5:87:e6:ac:d1:36:e9: 30:5d:49:31:2a:14:c5:09:cd:37:d5:55:80:66:2f: 9e:6a:21:2a:11:6f:c6:1f:f6:25:49:42:3b:7b:6f: 15:c2:a0:32:5a:be:3d:b0:b6:c5:12:fe:9d:6b:76: 9d:57:7e:05:d1:35:d8:5f:b5:b3:88:cc:6f:12:ae: b9:88:7d:db:bb:c3:c8:a5:83:a1:f3:0e:e4:53:63: 96:41:cd:60:71:e6:dd:9a:6c:2d:3a:4f:b7:b2:cc: 21:f6:0a:f5:07:64:0e:9b:cd:12:7a:6e:92:9c:d2: 9b:7f:a6:05:10:7e:bf:6a:aa:46:aa:ca:24:c8:61: 48:99:5f:41:16:0b:05:7b:16:e3:e8:b9:17:5a:a3: d5:14:d5:9a:48:fd:73:5e:64:77:22:b7:0c:f6:7c: 6e:7a:6b:de:9b:84:36:31:78:0f:dc:f2:ab:5f:a8: 23:3c:db:09:10:cd:cd:4f:ab:70:dc:a8:f9:8a:41: ec:95:bf:e5:49:e5:7f:9a:f2:c4:43:42:59:55:e6: fc:23:28:d8:c8:a1:f0:77:95:a2:51:2c:e0:8d:3d: 3b:e6:1c:eb:eb:89:75:63:70:35:fd:f0:49:5c:d1: 95:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:BB:75:D3:B1:63:92:4E:FE:F6:C3:57:8E:31:D5:F0:C8:BA:E4:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/09aaf2cd-3a69-321f-9da1-f83d72d9a6af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl X509v3 Authority Key Identifier: keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer sbgp-ipAddrBlock: critical IPv4: 68.68.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:1f:29:f1:73:e3:8d:e2:c0:6d:cc:00:f8:54:d3:45:a2:d7: 83:0a:a7:cc:db:d1:1a:c2:3f:12:7d:72:00:91:cf:95:d1:3a: 55:8f:5d:bf:13:79:dd:d1:e4:7b:5e:c1:49:e8:49:d5:75:3f: a1:31:4c:ab:ee:a1:47:9c:92:c1:c9:3a:79:a6:39:a7:7f:82: 44:81:ec:25:f3:7a:01:9b:cb:e5:e2:18:a8:e0:b0:e5:13:38: 2e:03:30:74:9e:5a:27:78:1e:59:a8:91:42:86:5f:96:e5:0c: 29:5a:ea:38:c5:76:31:fa:30:85:d6:eb:b0:3d:e5:6e:01:60: bd:b0:20:f8:29:b6:fa:87:fc:1f:f3:c2:3c:2a:3e:47:f6:d0: 9b:88:33:5d:6f:6f:9f:2f:95:8b:8a:f2:e1:e5:ce:0a:0e:35: 3c:18:e7:6c:4a:5a:83:a9:66:d9:38:4d:92:74:e0:85:b0:fd: f1:e5:b8:be:5e:14:eb:aa:d0:2a:1f:9a:d5:f9:b2:cf:98:a0: 42:cd:97:c8:6a:03:6e:fb:6c:f9:53:e7:55:d5:fc:98:64:53: 6f:42:d3:1a:a8:80:85:16:4d:64:d5:39:74:e9:04:3f:0b:b3: c6:bd:59:0f:cd:72:f4:a7:85:32:d0:0d:2d:e1:83:91:78:5a: f9:41:85:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeMto/7h4I2yb2T4oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2VmZDc1MjktMzhiMS00NzJjLTlkNWItZDg3MzgyZDA4 OGEwMB4XDTI0MTAxNTEzMDA0N1oXDTI1MDExMzE0MDA0N1owLzEtMCsGA1UEAxMk OGEyOTNjNzMtNjFhOC00NmQ3LTk5ZmYtYTA1NDllZjM0Zjg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnG+MlCLsDeBuCedCSoMsA68shNLJ7OWH5qzR NukwXUkxKhTFCc031VWAZi+eaiEqEW/GH/YlSUI7e28VwqAyWr49sLbFEv6da3ad V34F0TXYX7WziMxvEq65iH3bu8PIpYOh8w7kU2OWQc1gcebdmmwtOk+3sswh9gr1 B2QOm80Sem6SnNKbf6YFEH6/aqpGqsokyGFImV9BFgsFexbj6LkXWqPVFNWaSP1z XmR3IrcM9nxuemvem4Q2MXgP3PKrX6gjPNsJEM3NT6tw3Kj5ikHslb/lSeV/mvLE Q0JZVeb8IyjYyKHwd5WiUSzgjT075hzr64l1Y3A1/fBJXNGVIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNi7ddOxY5JO/vbDV44x1fDIuuRCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZWZk NzUyOS0zOGIxLTQ3MmMtOWQ1Yi1kODczODJkMDg4YTAvMDlhYWYyY2QtM2E2OS0z MjFmLTlkYTEtZjgzZDcyZDlhNmFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2VmZDc1MjktMzhiMS00NzJjLTlk NWItZDg3MzgyZDA4OGEwLzNlZmQ3NTI5LTM4YjEtNDcyYy05ZDViLWQ4NzM4MmQw ODhhMC5jcmwwHwYDVR0jBBgwFoAUW4MicpSIqXhZmzrb3eBIKYdqlAcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZWZkNzUyOS0zOGIxLTQ3MmMtOWQ1Yi1kODcz ODJkMDg4YTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCREScMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGQfKfFz443iwG3MAPhU00Wi14MKp8zb0RrCPxJ9cgCRz5XROlWPXb8T ed3R5HtewUnoSdV1P6ExTKvuoUecksHJOnmmOad/gkSB7CXzegGby+XiGKjgsOUT OC4DMHSeWid4HlmokUKGX5blDCla6jjFdjH6MIXW67A95W4BYL2wIPgptvqH/B/z wjwqPkf20JuIM11vb58vlYuK8uHlzgoONTwY52xKWoOpZtk4TZJ04IWw/fHluL5e FOuq0CofmtX5ss+YoELNl8hqA277bPlT51XV/JhkU29C0xqogIUWTWTVOXTpBD8L s8a9WQ/NcvSnhTLQDS3hg5F4WvlBhVs= -----END CERTIFICATE-----Generated at Fri Nov 22 04:39:33 2024 by rpki-client on console-ams.rpki-client.org