$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5402024b-7d23-4041-8713-daddd547282a/643c2a6d-6ccf-3d48-8c16-3bbd580aa4c1.roa File: 643c2a6d-6ccf-3d48-8c16-3bbd580aa4c1.roa (raw, json) Hash identifier: LAQ99FVbsy2xvoFzlAp9Vx8iM5Go+rr/5y94eQWGRfU= Subject key identifier: 17:B3:6D:CC:16:0C:38:91:CD:71:C7:98:B3:99:E5:33:7D:E2:00:C7 Certificate issuer: /CN=5402024b-7d23-4041-8713-daddd547282a Certificate serial: 010D0C9F4328584731FB9AAF6549957977DFF298 Authority key identifier: 2E:93:B3:23:3E:35:A4:76:5D:62:BC:8A:D1:8E:2B:42:C8:FF:D5:68 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5402024b-7d23-4041-8713-daddd547282a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5402024b-7d23-4041-8713-daddd547282a/643c2a6d-6ccf-3d48-8c16-3bbd580aa4c1.roa Signing time: Fri 13 Sep 2024 01:00:32 +0000 ROA not before: Fri 13 Sep 2024 01:00:32 +0000 ROA not after: Thu 12 Dec 2024 02:00:32 +0000 asID: 5650 IP address blocks: 68.170.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5402024b-7d23-4041-8713-daddd547282a/5402024b-7d23-4041-8713-daddd547282a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5402024b-7d23-4041-8713-daddd547282a/5402024b-7d23-4041-8713-daddd547282a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5402024b-7d23-4041-8713-daddd547282a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:31:fb:9a:af:65:49:95:79:77:df:f2:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5402024b-7d23-4041-8713-daddd547282a Validity Not Before: Sep 13 01:00:32 2024 GMT Not After : Dec 12 02:00:32 2024 GMT Subject: CN=f2528339-4a56-4e74-a5ee-c4cd91c10b78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:c3:88:59:a4:57:ee:a0:68:b6:d4:ba:df:b6: c7:24:89:8e:94:bd:19:16:5e:10:86:a3:31:8f:5a: 61:54:c1:53:19:17:c7:03:b4:ac:0f:24:f8:60:4a: 1c:05:92:fc:77:43:23:52:4e:48:ad:c9:19:cb:3e: ca:20:c3:c3:17:e8:bb:18:d5:46:9f:bc:cf:87:37: b4:b3:c8:17:23:fc:c0:53:93:42:98:85:bf:c6:ce: cd:fb:cf:b3:be:b8:05:2c:78:87:a4:f7:12:c9:3b: 13:cc:b4:f0:d4:2f:c7:8f:e9:0a:0d:4d:e4:8f:56: 0b:7d:b6:fe:8a:c5:a8:c2:1a:02:56:3e:ce:d3:ed: 0c:4b:8c:ae:7b:68:78:99:14:03:d6:c3:73:1b:ac: aa:83:65:b1:8b:f6:57:54:78:ec:9f:e0:ae:b7:d6: e0:0a:1e:bc:1e:d7:81:6d:d8:0c:aa:a8:4e:19:5b: 14:47:a1:c3:51:21:db:ed:b7:fb:68:e5:0e:6b:9c: c8:03:0b:5e:b4:f3:9a:ee:7c:77:d6:f3:0e:76:8c: 5d:12:e1:ad:10:fa:2d:04:10:1a:d9:e4:a5:59:9a: 42:11:3c:1e:9f:94:2b:55:84:ef:24:54:cf:6a:2e: 94:ff:73:79:92:db:a4:c1:8e:76:9d:be:5e:88:54: 34:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:B3:6D:CC:16:0C:38:91:CD:71:C7:98:B3:99:E5:33:7D:E2:00:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5402024b-7d23-4041-8713-daddd547282a/643c2a6d-6ccf-3d48-8c16-3bbd580aa4c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5402024b-7d23-4041-8713-daddd547282a/5402024b-7d23-4041-8713-daddd547282a.crl X509v3 Authority Key Identifier: keyid:2E:93:B3:23:3E:35:A4:76:5D:62:BC:8A:D1:8E:2B:42:C8:FF:D5:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5402024b-7d23-4041-8713-daddd547282a.cer sbgp-ipAddrBlock: critical IPv4: 68.170.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:bc:46:12:a5:96:88:47:4a:e8:10:c6:d5:9d:6b:51:3c:a1: a7:99:08:d4:b7:4a:18:20:7e:24:e8:e4:c7:87:f5:5f:94:ea: a1:fd:fd:61:58:6a:5e:68:72:7b:bb:21:7a:e2:81:42:4e:14: 86:f5:c6:a8:34:7f:b9:c0:a7:5f:e0:4a:df:24:02:0b:17:5f: 9f:0d:a6:c3:93:13:ed:8d:0a:fb:1b:0d:ed:3f:4f:24:71:08: 80:18:20:39:23:9f:ba:ae:19:9d:e1:70:93:2e:ca:ae:5a:81: 0d:34:cd:2a:6d:1e:4c:66:1e:56:fd:49:05:fc:58:2a:d1:cd: 81:b1:5f:bf:af:6a:45:f2:c9:1c:ab:10:2f:0c:98:5c:99:d0: 8d:f1:da:e3:ac:fa:c7:ed:45:fc:7a:5e:a6:62:9e:5d:e5:c1: 81:9b:8b:0f:7a:19:27:33:9b:54:50:d7:20:cf:00:1e:be:5e: 11:78:b1:d4:a8:4f:a4:17:dd:a4:5c:66:57:10:7c:bd:f8:be: 42:77:90:ce:52:c6:58:a4:2b:e1:a1:91:2a:53:bf:9c:91:1e: e8:e4:68:a5:9a:b6:c4:af:c0:39:76:00:35:3d:2a:e8:72:5a: d2:57:b6:71:b8:85:39:ee:62:12:ad:d4:8b:d3:96:ee:7e:e2: 07:c7:22:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcx+5qvZUmVeXff8pgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTQwMjAyNGItN2QyMy00MDQxLTg3MTMtZGFkZGQ1NDcy ODJhMB4XDTI0MDkxMzAxMDAzMloXDTI0MTIxMjAyMDAzMlowLzEtMCsGA1UEAxMk ZjI1MjgzMzktNGE1Ni00ZTc0LWE1ZWUtYzRjZDkxYzEwYjc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhMOIWaRX7qBottS637bHJImOlL0ZFl4QhqMx j1phVMFTGRfHA7SsDyT4YEocBZL8d0MjUk5IrckZyz7KIMPDF+i7GNVGn7zPhze0 s8gXI/zAU5NCmIW/xs7N+8+zvrgFLHiHpPcSyTsTzLTw1C/Hj+kKDU3kj1YLfbb+ isWowhoCVj7O0+0MS4yue2h4mRQD1sNzG6yqg2Wxi/ZXVHjsn+Cut9bgCh68HteB bdgMqqhOGVsUR6HDUSHb7bf7aOUOa5zIAwtetPOa7nx31vMOdoxdEuGtEPotBBAa 2eSlWZpCETwen5QrVYTvJFTPai6U/3N5ktukwY52nb5eiFQ0vQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBezbcwWDDiRzXHHmLOZ5TN94gDHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81NDAy MDI0Yi03ZDIzLTQwNDEtODcxMy1kYWRkZDU0NzI4MmEvNjQzYzJhNmQtNmNjZi0z ZDQ4LThjMTYtM2JiZDU4MGFhNGMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNTQwMjAyNGItN2QyMy00MDQxLTg3 MTMtZGFkZGQ1NDcyODJhLzU0MDIwMjRiLTdkMjMtNDA0MS04NzEzLWRhZGRkNTQ3 MjgyYS5jcmwwHwYDVR0jBBgwFoAULpOzIz41pHZdYryK0Y4rQsj/1WgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81NDAyMDI0Yi03ZDIzLTQwNDEtODcxMy1kYWRk ZDU0NzI4MmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARKoDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGK8RhKllohHSugQxtWda1E8oaeZCNS3ShggfiTo5MeH9V+U6qH9/WFY al5ocnu7IXrigUJOFIb1xqg0f7nAp1/gSt8kAgsXX58NpsOTE+2NCvsbDe0/TyRx CIAYIDkjn7quGZ3hcJMuyq5agQ00zSptHkxmHlb9SQX8WCrRzYGxX7+vakXyyRyr EC8MmFyZ0I3x2uOs+sftRfx6XqZinl3lwYGbiw96GSczm1RQ1yDPAB6+XhF4sdSo T6QX3aRcZlcQfL34vkJ3kM5SxlikK+GhkSpTv5yRHujkaKWatsSvwDl2ADU9Kuhy WtJXtnG4hTnuYhKt1IvTlu5+4gfHItE= -----END CERTIFICATE-----Generated at Thu Nov 21 16:21:47 2024 by rpki-client on console-ams.rpki-client.org