$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/caa81f92-b27f-32a1-bbda-f61104514b4d.roa File: caa81f92-b27f-32a1-bbda-f61104514b4d.roa (raw, json) Hash identifier: N2xxD84ZilgBvizw2rx1gjbOA/hytoRwrf4i4qQKZz8= Subject key identifier: 3E:3B:D6:28:F5:3C:08:77:BA:DA:A7:8A:36:4E:21:CD:96:68:A0:C3 Certificate issuer: /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a Certificate serial: 010D0C9F4328584762D662E9CB6E4B368821DE00 Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/caa81f92-b27f-32a1-bbda-f61104514b4d.roa Signing time: Mon 30 Sep 2024 13:00:42 +0000 ROA not before: Mon 30 Sep 2024 13:00:42 +0000 ROA not after: Sun 29 Dec 2024 14:00:42 +0000 asID: 26744 IP address blocks: 68.170.250.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:62:d6:62:e9:cb:6e:4b:36:88:21:de:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a Validity Not Before: Sep 30 13:00:42 2024 GMT Not After : Dec 29 14:00:42 2024 GMT Subject: CN=04c8d8c8-e630-4a59-8167-88bc8e9997ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:73:c6:0a:5b:5f:7a:77:fa:97:62:e4:37:19: 99:c5:d7:38:18:05:f8:a7:23:1c:88:2a:0e:9f:fa: df:98:d9:8c:57:79:6b:3d:1d:2f:c0:46:b3:e5:d4: a2:ad:a8:e6:6c:00:22:a4:43:99:97:2f:7a:b1:52: f4:f4:dd:83:06:0f:72:96:5d:2c:9f:7f:da:7a:f7: c8:e0:93:e4:21:0c:9c:93:4b:6d:e0:cb:67:0d:34: b8:47:f4:03:3d:cb:a7:91:91:57:09:79:4a:de:0a: db:c0:2f:9d:5f:26:e0:8e:ad:90:9e:e0:88:36:ed: 5e:ea:bf:5f:21:ad:90:83:92:c6:b7:4c:ae:f8:c7: 27:af:9b:5b:12:7d:9f:b0:b7:d6:92:83:42:fb:f5: 94:5f:d3:35:34:53:ab:55:db:48:ba:1d:c7:92:59: 9f:b7:39:f6:65:cf:d0:8b:45:29:cd:aa:6a:e3:a1: 60:c1:9d:dd:41:b7:21:7e:c2:fd:bc:07:4f:8f:08: 38:99:95:7b:32:1f:40:7c:92:c4:f1:2d:6c:f3:6a: 01:7a:24:28:10:9f:9e:85:f3:05:bc:c5:ca:44:45: c5:eb:2f:11:f8:2e:ae:0f:75:af:1c:84:76:f9:78: eb:f6:8f:05:96:fc:a0:cd:44:6d:a0:d6:1e:09:ec: ad:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:3B:D6:28:F5:3C:08:77:BA:DA:A7:8A:36:4E:21:CD:96:68:A0:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/caa81f92-b27f-32a1-bbda-f61104514b4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl X509v3 Authority Key Identifier: keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer sbgp-ipAddrBlock: critical IPv4: 68.170.250.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bd:f1:13:30:d4:04:5d:a7:d3:c2:dc:9e:37:a1:66:cd:c6:ec: ba:27:b9:f4:dd:1f:5a:73:cf:39:44:92:37:79:45:22:35:01: f8:c6:91:a4:80:46:fd:1d:69:32:7f:66:62:cd:b9:92:c1:36: 0f:a0:3e:be:63:04:f4:95:ef:b4:35:1d:93:ea:07:8a:78:34: dd:82:ac:68:68:40:b1:4e:66:74:06:4d:9a:35:e9:3a:e7:0f: ea:1a:bc:cd:30:4f:ef:7e:72:40:f2:31:4c:f6:c6:62:da:cd: 5c:37:b5:2b:41:ce:23:9b:d9:13:8e:16:8f:86:04:7c:c1:8d: 50:30:ee:e0:4f:87:c7:1a:cc:0b:25:09:70:03:f2:70:29:29: e1:f0:41:dc:11:ab:c8:59:08:b5:66:17:ee:98:23:c7:4d:6d: 8c:d7:c2:30:49:1d:71:35:52:5e:9c:7b:56:74:b2:66:5b:a8: 58:a8:47:06:b0:fd:63:43:73:84:13:cc:ea:29:30:61:95:50: d9:03:52:67:8b:bc:86:d9:f8:06:7f:9c:27:75:9f:90:e3:76: 7f:3b:0d:84:b7:e8:14:77:22:e2:92:0e:d3:4e:7c:48:1a:c4: cc:18:54:97:04:1e:12:15:0e:21:91:fd:fe:ae:e4:d3:19:14: ba:32:e0:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdi1mLpy25LNogh3gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzZlODZiNTItZGQzNi00NmI3LWFmZTUtMjY2MTk1YmRj ZjFhMB4XDTI0MDkzMDEzMDA0MloXDTI0MTIyOTE0MDA0MlowLzEtMCsGA1UEAxMk MDRjOGQ4YzgtZTYzMC00YTU5LTgxNjctODhiYzhlOTk5N2VkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkHPGCltfenf6l2LkNxmZxdc4GAX4pyMciCoO n/rfmNmMV3lrPR0vwEaz5dSirajmbAAipEOZly96sVL09N2DBg9yll0sn3/aevfI 4JPkIQyck0tt4MtnDTS4R/QDPcunkZFXCXlK3grbwC+dXybgjq2QnuCINu1e6r9f Ia2Qg5LGt0yu+Mcnr5tbEn2fsLfWkoNC+/WUX9M1NFOrVdtIuh3Hklmftzn2Zc/Q i0Upzapq46FgwZ3dQbchfsL9vAdPjwg4mZV7Mh9AfJLE8S1s82oBeiQoEJ+ehfMF vMXKREXF6y8R+C6uD3WvHIR2+Xjr9o8FlvygzURtoNYeCeytxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD471ij1PAh3utqnijZOIc2WaKDDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4 NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYxOTViZGNmMWEvY2FhODFmOTItYjI3Zi0z MmExLWJiZGEtZjYxMTA0NTE0YjRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzZlODZiNTItZGQzNi00NmI3LWFm ZTUtMjY2MTk1YmRjZjFhL2M2ZTg2YjUyLWRkMzYtNDZiNy1hZmU1LTI2NjE5NWJk Y2YxYS5jcmwwHwYDVR0jBBgwFoAU9kkXDST7z7wC+LkX+qr+Tc5V5NYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYx OTViZGNmMWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRKr6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL3xEzDUBF2n08LcnjehZs3G7LonufTdH1pzzzlEkjd5RSI1AfjGkaSA Rv0daTJ/ZmLNuZLBNg+gPr5jBPSV77Q1HZPqB4p4NN2CrGhoQLFOZnQGTZo16Trn D+oavM0wT+9+ckDyMUz2xmLazVw3tStBziOb2ROOFo+GBHzBjVAw7uBPh8cazAsl CXAD8nApKeHwQdwRq8hZCLVmF+6YI8dNbYzXwjBJHXE1Ul6ce1Z0smZbqFioRwaw /WNDc4QTzOopMGGVUNkDUmeLvIbZ+AZ/nCd1n5Djdn87DYS36BR3IuKSDtNOfEga xMwYVJcEHhIVDiGR/f6u5NMZFLoy4LU= -----END CERTIFICATE-----Generated at Thu Nov 21 15:35:29 2024 by rpki-client on console-fra.rpki-client.org