$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/479384b1-d41c-3e4d-83f2-176a5be6410a.roa File: 479384b1-d41c-3e4d-83f2-176a5be6410a.roa (raw, json) Hash identifier: ZQOhSHpMT47ILeL6PcE0WsWFAgm7bXCR8BvcJvjudy0= Subject key identifier: E5:45:5F:06:0A:FE:14:A8:30:24:EA:D9:82:63:8F:2A:54:D6:01:45 Certificate issuer: /CN=4c1dc90d-3e71-4350-84b3-963e65e8abde Certificate serial: 010D0C9F432858476C9DB83BBDDB87845E69EFD4 Authority key identifier: 7D:21:ED:DD:8F:E0:41:D2:CB:94:00:C8:D6:5B:4A:55:C6:97:B0:1C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/479384b1-d41c-3e4d-83f2-176a5be6410a.roa Signing time: Fri 04 Oct 2024 01:00:31 +0000 ROA not before: Fri 04 Oct 2024 01:00:31 +0000 ROA not after: Thu 02 Jan 2025 02:00:31 +0000 asID: 8987 IP address blocks: 68.71.236.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:6c:9d:b8:3b:bd:db:87:84:5e:69:ef:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c1dc90d-3e71-4350-84b3-963e65e8abde Validity Not Before: Oct 4 01:00:31 2024 GMT Not After : Jan 2 02:00:31 2025 GMT Subject: CN=1993f6c4-e409-479e-9b35-b6a3557a98c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:04:5e:8f:5c:a8:d7:4b:4e:f2:f8:8e:04:95: 66:ff:d8:61:a8:6c:54:4a:61:48:77:b6:27:c8:7f: 8c:27:b2:69:d6:1b:f5:6b:2b:33:1b:9b:d9:df:fa: 48:9d:1b:42:7b:12:1b:19:5b:61:7e:ad:7b:38:0b: 7c:06:f2:aa:00:93:5b:9a:6e:79:6b:04:82:96:3f: d8:14:70:03:c4:d9:96:e8:2a:d5:61:70:8c:ae:f7: 99:61:1f:24:26:4d:11:07:f8:d1:8d:79:59:db:01: 6a:98:cd:8a:04:d3:ec:30:3f:35:9b:5b:29:f8:cf: 5f:52:62:35:f3:c9:ea:63:dc:70:5d:62:c3:cb:e0: 5f:aa:56:a7:5f:35:68:92:fd:c2:94:a0:2d:4b:73: 9b:df:81:a4:2e:56:35:29:06:04:1e:4d:fd:57:c4: bc:dd:23:4e:3d:87:5b:3f:89:66:0e:a0:b7:c3:4e: c6:bb:35:8d:d3:4b:25:54:87:12:89:6c:e1:42:3d: 46:9e:00:64:73:dc:d3:b4:9f:66:59:e9:04:0e:6c: 55:af:aa:6c:6c:e3:80:f6:de:0a:15:10:a9:62:61: 5d:70:e3:30:df:81:cd:76:da:2e:66:f9:60:c0:2e: b6:61:ef:16:fa:23:20:0c:d0:73:57:d5:c5:d5:97: d6:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:45:5F:06:0A:FE:14:A8:30:24:EA:D9:82:63:8F:2A:54:D6:01:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/479384b1-d41c-3e4d-83f2-176a5be6410a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.crl X509v3 Authority Key Identifier: keyid:7D:21:ED:DD:8F:E0:41:D2:CB:94:00:C8:D6:5B:4A:55:C6:97:B0:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer sbgp-ipAddrBlock: critical IPv4: 68.71.236.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:07:d5:69:1b:ad:c2:9e:32:41:20:5b:55:54:9b:1b:c5:65: fa:c6:8d:98:58:5c:9b:52:81:26:16:c9:1f:de:ae:f3:11:68: 90:75:22:43:bc:d0:80:cb:e9:ce:af:07:9f:3d:19:3d:23:5d: 06:46:5c:f3:00:8f:c9:d5:f3:03:1d:8f:98:b3:33:b9:b4:36: 59:e3:36:b6:8b:e7:dc:ed:17:7e:16:10:23:c5:de:a4:06:f2: 03:34:6c:df:45:ac:10:fb:4f:bc:09:b8:dc:da:28:e6:c9:ba: 90:9a:69:0b:82:b1:f7:0c:ea:42:6a:66:c3:79:94:6c:4c:d5: 31:5e:18:45:75:28:11:92:59:d5:0f:11:ce:03:8a:07:a0:75: b6:17:31:c1:f2:13:e9:3d:4a:6c:f9:90:07:9a:bd:c5:a9:e2: 31:67:8e:a8:59:07:a8:06:d1:82:be:d1:38:0a:1b:af:94:4a: 3b:43:64:53:e0:b5:f7:a1:8d:3f:3d:05:c9:90:ae:6f:3b:df: 6c:58:dc:b8:87:19:f0:f6:1c:47:ca:bd:ec:dd:0f:0f:26:19: 00:7d:7c:a5:e6:79:0f:7e:b1:af:9f:b8:0b:7f:26:89:75:39: ec:2f:cd:2f:6a:03:65:be:e7:4b:60:4e:e5:e9:61:02:3d:3b: 20:c1:1e:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdsnbg7vduHhF5p79QwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGMxZGM5MGQtM2U3MS00MzUwLTg0YjMtOTYzZTY1ZThh YmRlMB4XDTI0MTAwNDAxMDAzMVoXDTI1MDEwMjAyMDAzMVowLzEtMCsGA1UEAxMk MTk5M2Y2YzQtZTQwOS00NzllLTliMzUtYjZhMzU1N2E5OGMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhARej1yo10tO8viOBJVm/9hhqGxUSmFId7Yn yH+MJ7Jp1hv1ayszG5vZ3/pInRtCexIbGVthfq17OAt8BvKqAJNbmm55awSClj/Y FHADxNmW6CrVYXCMrveZYR8kJk0RB/jRjXlZ2wFqmM2KBNPsMD81m1sp+M9fUmI1 88nqY9xwXWLDy+BfqlanXzVokv3ClKAtS3Ob34GkLlY1KQYEHk39V8S83SNOPYdb P4lmDqC3w07GuzWN00slVIcSiWzhQj1GngBkc9zTtJ9mWekEDmxVr6psbOOA9t4K FRCpYmFdcOMw34HNdtouZvlgwC62Ye8W+iMgDNBzV9XF1ZfWDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOVFXwYK/hSoMCTq2YJjjypU1gFFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80YzFk YzkwZC0zZTcxLTQzNTAtODRiMy05NjNlNjVlOGFiZGUvNDc5Mzg0YjEtZDQxYy0z ZTRkLTgzZjItMTc2YTViZTY0MTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNGMxZGM5MGQtM2U3MS00MzUwLTg0 YjMtOTYzZTY1ZThhYmRlLzRjMWRjOTBkLTNlNzEtNDM1MC04NGIzLTk2M2U2NWU4 YWJkZS5jcmwwHwYDVR0jBBgwFoAUfSHt3Y/gQdLLlADI1ltKVcaXsBwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80YzFkYzkwZC0zZTcxLTQzNTAtODRiMy05NjNl NjVlOGFiZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBREfsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABYH1WkbrcKeMkEgW1VUmxvFZfrGjZhYXJtSgSYWyR/ervMRaJB1IkO8 0IDL6c6vB589GT0jXQZGXPMAj8nV8wMdj5izM7m0NlnjNraL59ztF34WECPF3qQG 8gM0bN9FrBD7T7wJuNzaKObJupCaaQuCsfcM6kJqZsN5lGxM1TFeGEV1KBGSWdUP Ec4DigegdbYXMcHyE+k9Smz5kAeavcWp4jFnjqhZB6gG0YK+0TgKG6+USjtDZFPg tfehjT89BcmQrm8732xY3LiHGfD2HEfKvezdDw8mGQB9fKXmeQ9+sa+fuAt/Jol1 OewvzS9qA2W+50tgTuXpYQI9OyDBHqs= -----END CERTIFICATE-----Generated at Thu Nov 21 18:55:53 2024 by rpki-client on console-ams.rpki-client.org