$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/fde34107-f3bb-3076-bcac-4fbfc88bcf03.roa File: fde34107-f3bb-3076-bcac-4fbfc88bcf03.roa (raw, json) Hash identifier: Lp1p5AeNCuvVstOixNYg+oJVB0qMlcj/Ite6pJazre8= Subject key identifier: C1:9D:D6:57:FB:2F:C8:84:31:11:5D:37:19:08:CA:C8:1B:0C:42:B9 Certificate issuer: /CN=3efd7529-38b1-472c-9d5b-d87382d088a0 Certificate serial: 010D0C9F432858478CB68FE9A68315AAA02D4500 Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/fde34107-f3bb-3076-bcac-4fbfc88bcf03.roa Signing time: Tue 15 Oct 2024 13:00:47 +0000 ROA not before: Tue 15 Oct 2024 13:00:47 +0000 ROA not after: Mon 13 Jan 2025 14:00:47 +0000 asID: 394285 IP address blocks: 68.68.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:8c:b6:8f:e9:a6:83:15:aa:a0:2d:45:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0 Validity Not Before: Oct 15 13:00:47 2024 GMT Not After : Jan 13 14:00:47 2025 GMT Subject: CN=ecba24e5-76d2-4ed1-80f8-5818c8b8d36c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:bd:be:ee:a3:56:81:53:d7:06:a5:3f:5c:2b: 46:c6:88:ee:65:df:5e:48:23:b7:b6:f7:c0:d0:68: b6:e9:ef:51:b1:d7:c4:bb:d6:8b:00:50:bd:7f:71: 40:14:cb:5f:03:73:00:ad:3c:46:b3:92:38:88:b6: c0:a4:56:ac:f3:c6:6d:b7:54:aa:f5:06:00:91:9a: 16:49:2a:6b:9e:98:6f:1b:3f:a9:e6:45:a5:0d:ad: 6e:fd:9b:17:83:0b:6a:00:c6:a3:b8:c4:a7:95:a6: 88:70:cd:2e:0d:f0:2d:3e:57:32:cd:67:26:3a:fb: df:d8:c0:88:cb:43:e9:df:16:94:6f:4b:b2:c1:cd: e7:20:0f:66:7b:4b:67:a8:a1:58:c1:f3:b9:54:72: de:cc:0e:77:d2:67:e1:9f:9b:2e:ed:24:e6:22:85: 64:b7:fd:f5:06:12:ff:0e:e3:af:7f:a9:88:0b:b8: f6:4f:df:09:0e:59:db:f2:4b:0c:23:54:2c:43:9d: 51:fd:27:bd:71:3f:7a:59:e0:18:e7:38:e3:c2:8a: d0:66:53:c6:04:bd:0a:35:ce:95:4b:47:86:be:8c: f2:5d:08:73:c4:16:ce:dc:3f:9c:47:f3:94:02:63: 29:2d:31:e3:df:23:29:7e:c9:61:7d:2e:d6:b7:ba: bb:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:9D:D6:57:FB:2F:C8:84:31:11:5D:37:19:08:CA:C8:1B:0C:42:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/fde34107-f3bb-3076-bcac-4fbfc88bcf03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl X509v3 Authority Key Identifier: keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer sbgp-ipAddrBlock: critical IPv4: 68.68.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:b2:a5:c1:aa:74:08:49:c0:0d:d1:79:62:0b:9b:53:3e:df: 98:6e:58:33:ba:9e:97:ed:89:f3:6c:d9:fe:12:03:f2:f2:60: d5:03:5a:54:ef:0e:7e:d6:bb:60:17:a8:72:48:9e:af:4b:ec: 49:40:df:3f:d3:28:6b:04:df:35:be:16:73:52:0d:df:46:03: 54:0c:c8:49:dc:a8:70:76:2b:6f:dc:d0:25:9a:66:b1:65:47: 01:51:81:36:b9:96:56:e1:cf:bb:ba:c8:ba:d5:75:27:19:f6: d7:76:3b:cd:0f:84:56:9e:ae:33:06:69:f6:e7:4c:20:f7:94: 8e:d6:33:e6:dc:d7:82:86:17:4a:11:73:df:5c:6c:3e:f3:a1: 01:7a:6e:4f:b2:f3:58:49:26:cf:83:6c:2c:77:ba:6e:48:1f: 45:72:8b:ef:90:e1:6b:c1:c9:8f:78:36:6a:da:a4:7a:8b:ad: 74:d8:c4:94:69:c1:db:98:3b:5e:0b:c4:7e:1d:6d:90:0f:d9: ed:9a:d8:2a:0d:0b:4b:20:df:f3:36:3a:c0:7b:fd:2e:8c:06: a1:5a:40:75:7d:e4:8a:08:5c:ed:79:ac:a8:06:c9:c0:95:b2: da:68:00:48:ba:2f:a5:bc:b5:32:f7:b0:8f:1e:cf:d9:0b:a8: ee:06:05:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeMto/ppoMVqqAtRQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2VmZDc1MjktMzhiMS00NzJjLTlkNWItZDg3MzgyZDA4 OGEwMB4XDTI0MTAxNTEzMDA0N1oXDTI1MDExMzE0MDA0N1owLzEtMCsGA1UEAxMk ZWNiYTI0ZTUtNzZkMi00ZWQxLTgwZjgtNTgxOGM4YjhkMzZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgr2+7qNWgVPXBqU/XCtGxojuZd9eSCO3tvfA 0Gi26e9RsdfEu9aLAFC9f3FAFMtfA3MArTxGs5I4iLbApFas88Ztt1Sq9QYAkZoW SSprnphvGz+p5kWlDa1u/ZsXgwtqAMajuMSnlaaIcM0uDfAtPlcyzWcmOvvf2MCI y0Pp3xaUb0uywc3nIA9me0tnqKFYwfO5VHLezA530mfhn5su7STmIoVkt/31BhL/ DuOvf6mIC7j2T98JDlnb8ksMI1QsQ51R/Se9cT96WeAY5zjjworQZlPGBL0KNc6V S0eGvozyXQhzxBbO3D+cR/OUAmMpLTHj3yMpfslhfS7Wt7q7BQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMGd1lf7L8iEMRFdNxkIysgbDEK5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZWZk NzUyOS0zOGIxLTQ3MmMtOWQ1Yi1kODczODJkMDg4YTAvZmRlMzQxMDctZjNiYi0z MDc2LWJjYWMtNGZiZmM4OGJjZjAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2VmZDc1MjktMzhiMS00NzJjLTlk NWItZDg3MzgyZDA4OGEwLzNlZmQ3NTI5LTM4YjEtNDcyYy05ZDViLWQ4NzM4MmQw ODhhMC5jcmwwHwYDVR0jBBgwFoAUW4MicpSIqXhZmzrb3eBIKYdqlAcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZWZkNzUyOS0zOGIxLTQ3MmMtOWQ1Yi1kODcz ODJkMDg4YTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRESYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHCypcGqdAhJwA3ReWILm1M+35huWDO6npftifNs2f4SA/LyYNUDWlTv Dn7Wu2AXqHJInq9L7ElA3z/TKGsE3zW+FnNSDd9GA1QMyEncqHB2K2/c0CWaZrFl RwFRgTa5llbhz7u6yLrVdScZ9td2O80PhFaerjMGafbnTCD3lI7WM+bc14KGF0oR c99cbD7zoQF6bk+y81hJJs+DbCx3um5IH0Vyi++Q4WvByY94NmrapHqLrXTYxJRp wduYO14LxH4dbZAP2e2a2CoNC0sg3/M2OsB7/S6MBqFaQHV95IoIXO15rKgGycCV stpoAEi6L6W8tTL3sI8ez9kLqO4GBXc= -----END CERTIFICATE-----Generated at Fri Nov 22 04:39:34 2024 by rpki-client on console-ams.rpki-client.org