$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/5c02e917-0b52-3069-9a4c-b8b3c8018087.roa File: 5c02e917-0b52-3069-9a4c-b8b3c8018087.roa (raw, json) Hash identifier: dKE3oo8CwlXPwi7+40cHnie5cYpox/ldnOvb2RJajns= Subject key identifier: F0:B9:00:19:60:27:2B:A8:B6:9B:D5:C0:02:29:70:96:11:EC:CA:52 Certificate issuer: /CN=4c1dc90d-3e71-4350-84b3-963e65e8abde Certificate serial: 010D0C9F432858476C9DB847B4E69EEF2ACB4300 Authority key identifier: 7D:21:ED:DD:8F:E0:41:D2:CB:94:00:C8:D6:5B:4A:55:C6:97:B0:1C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/5c02e917-0b52-3069-9a4c-b8b3c8018087.roa Signing time: Fri 04 Oct 2024 01:00:31 +0000 ROA not before: Fri 04 Oct 2024 01:00:31 +0000 ROA not after: Thu 02 Jan 2025 02:00:31 +0000 asID: 14618 IP address blocks: 68.71.228.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:6c:9d:b8:47:b4:e6:9e:ef:2a:cb:43:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c1dc90d-3e71-4350-84b3-963e65e8abde Validity Not Before: Oct 4 01:00:31 2024 GMT Not After : Jan 2 02:00:31 2025 GMT Subject: CN=fa084e48-72fa-4c82-82c7-00ccddcdc9ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c6:34:33:cb:ea:52:44:6a:48:54:06:72:d9: f2:88:36:3c:f5:98:3f:27:f2:d8:eb:9b:2d:38:25: 38:b9:68:e6:12:e0:6f:95:ff:90:5d:f0:30:f4:b9: f8:2e:66:71:dd:4f:b7:7d:87:4c:58:60:87:8d:31: 76:88:19:72:9e:fe:33:fa:57:08:5a:93:5b:19:a8: a4:76:80:cc:b4:f0:d6:87:ab:02:d1:0e:80:d1:f6: 84:66:94:f9:39:ab:f2:f1:56:4c:5a:7e:67:ca:33: 94:35:58:ec:0b:65:ab:70:ed:9c:4a:e2:02:42:62: ed:e7:a7:42:29:2a:c7:92:46:1c:cb:76:12:93:06: ee:c1:b7:c5:10:c7:03:5b:64:ec:3f:7a:bf:12:d2: 27:49:42:7d:5f:c0:3d:55:12:82:6d:92:d9:cd:e0: 55:20:38:a5:cf:90:93:f2:37:e3:cc:2f:b4:34:6f: 68:8d:9f:7f:ce:ec:21:12:40:c3:85:9d:cd:f7:71: f3:f9:78:31:21:91:37:18:0d:f5:40:f3:66:5b:2d: 3a:92:e1:75:53:a8:86:d7:1d:03:dd:9a:e4:44:d5: 01:e2:0e:aa:0e:dd:48:a6:f0:bf:a2:00:8d:7b:c0: 3e:ed:68:99:c8:68:74:85:f5:98:1c:7a:69:e9:8f: 4f:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:B9:00:19:60:27:2B:A8:B6:9B:D5:C0:02:29:70:96:11:EC:CA:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/5c02e917-0b52-3069-9a4c-b8b3c8018087.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.crl X509v3 Authority Key Identifier: keyid:7D:21:ED:DD:8F:E0:41:D2:CB:94:00:C8:D6:5B:4A:55:C6:97:B0:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer sbgp-ipAddrBlock: critical IPv4: 68.71.228.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:03:a6:50:6d:32:59:fe:85:4f:a4:64:6a:ba:48:e3:d5:83: 5a:0a:aa:28:90:9d:58:fb:8d:a7:06:78:87:19:d9:e2:b8:b3: 5c:76:0f:89:6d:d2:ee:6a:4f:1a:45:9b:a1:b2:bb:61:68:a1: aa:e9:0d:75:58:33:94:1d:a2:62:2f:94:11:39:91:e0:62:94: b9:2e:a9:12:4e:7e:58:50:ab:37:fb:77:00:13:e1:f1:77:d1: c9:50:66:19:4e:e1:eb:92:b1:c8:c1:c0:1c:97:03:9a:32:5f: 8a:83:ad:c0:de:9b:10:da:c2:b8:0d:20:65:9c:69:7d:fb:f6: 07:56:7c:e9:3c:4e:fd:81:28:16:9a:48:c6:86:76:f1:5a:6f: 33:d4:08:4b:6b:3b:78:f8:95:14:0b:99:03:b2:bf:cd:27:54: 1d:da:af:14:0c:da:07:ce:5e:22:b4:e9:24:d6:a7:d9:00:81: 0e:2d:22:02:aa:ec:b0:ed:e0:1d:48:91:30:14:93:28:84:6e: 8b:18:6a:81:fd:27:b4:cc:8b:54:e6:49:0e:9e:0f:cf:49:bc: 1c:3b:24:5c:c5:4f:0f:6f:b4:0a:41:96:53:ce:37:d9:bc:65: e7:d7:69:31:a7:ce:91:47:ef:7c:57:6b:c0:c6:8a:19:41:e2: d8:0f:ce:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdsnbhHtOae7yrLQwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGMxZGM5MGQtM2U3MS00MzUwLTg0YjMtOTYzZTY1ZThh YmRlMB4XDTI0MTAwNDAxMDAzMVoXDTI1MDEwMjAyMDAzMVowLzEtMCsGA1UEAxMk ZmEwODRlNDgtNzJmYS00YzgyLTgyYzctMDBjY2RkY2RjOWVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscY0M8vqUkRqSFQGctnyiDY89Zg/J/LY65st OCU4uWjmEuBvlf+QXfAw9Ln4LmZx3U+3fYdMWGCHjTF2iBlynv4z+lcIWpNbGaik doDMtPDWh6sC0Q6A0faEZpT5Oavy8VZMWn5nyjOUNVjsC2WrcO2cSuICQmLt56dC KSrHkkYcy3YSkwbuwbfFEMcDW2TsP3q/EtInSUJ9X8A9VRKCbZLZzeBVIDilz5CT 8jfjzC+0NG9ojZ9/zuwhEkDDhZ3N93Hz+XgxIZE3GA31QPNmWy06kuF1U6iG1x0D 3ZrkRNUB4g6qDt1IpvC/ogCNe8A+7WiZyGh0hfWYHHpp6Y9PJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPC5ABlgJyuotpvVwAIpcJYR7MpSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80YzFk YzkwZC0zZTcxLTQzNTAtODRiMy05NjNlNjVlOGFiZGUvNWMwMmU5MTctMGI1Mi0z MDY5LTlhNGMtYjhiM2M4MDE4MDg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNGMxZGM5MGQtM2U3MS00MzUwLTg0 YjMtOTYzZTY1ZThhYmRlLzRjMWRjOTBkLTNlNzEtNDM1MC04NGIzLTk2M2U2NWU4 YWJkZS5jcmwwHwYDVR0jBBgwFoAUfSHt3Y/gQdLLlADI1ltKVcaXsBwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80YzFkYzkwZC0zZTcxLTQzNTAtODRiMy05NjNl NjVlOGFiZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBREfkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAcDplBtMln+hU+kZGq6SOPVg1oKqiiQnVj7jacGeIcZ2eK4s1x2D4lt 0u5qTxpFm6Gyu2FooarpDXVYM5QdomIvlBE5keBilLkuqRJOflhQqzf7dwAT4fF3 0clQZhlO4euSscjBwByXA5oyX4qDrcDemxDawrgNIGWcaX379gdWfOk8Tv2BKBaa SMaGdvFabzPUCEtrO3j4lRQLmQOyv80nVB3arxQM2gfOXiK06STWp9kAgQ4tIgKq 7LDt4B1IkTAUkyiEbosYaoH9J7TMi1TmSQ6eD89JvBw7JFzFTw9vtApBllPON9m8 ZefXaTGnzpFH73xXa8DGihlB4tgPzrg= -----END CERTIFICATE-----Generated at Thu Nov 21 18:55:53 2024 by rpki-client on console-ams.rpki-client.org