$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/babed18c-2177-38a5-9603-73cb0b55a6ec.roa File: babed18c-2177-38a5-9603-73cb0b55a6ec.roa (raw, json) Hash identifier: DUYNuzdJS5/xEyF6D7PcJTok+/LKB+t4rKWLNapd8RA= Subject key identifier: 03:9E:A1:0C:06:03:F6:A4:19:D2:3E:05:68:BB:57:39:D0:8D:D8:26 Certificate issuer: /CN=ffdee3f8-e368-45ea-9a0a-033c591b4971 Certificate serial: 010D0C9F4328584733609B1E1DA61712796161B0 Authority key identifier: A3:3B:F1:C6:C8:61:74:0E:9A:FC:71:51:07:84:15:A7:06:B3:DA:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/babed18c-2177-38a5-9603-73cb0b55a6ec.roa Signing time: Fri 13 Sep 2024 13:00:41 +0000 ROA not before: Fri 13 Sep 2024 13:00:41 +0000 ROA not after: Thu 12 Dec 2024 14:00:41 +0000 asID: 11650 IP address blocks: 68.235.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:33:60:9b:1e:1d:a6:17:12:79:61:61:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffdee3f8-e368-45ea-9a0a-033c591b4971 Validity Not Before: Sep 13 13:00:41 2024 GMT Not After : Dec 12 14:00:41 2024 GMT Subject: CN=d3fc7351-df48-497d-b36f-c73c88ff9805 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:90:8a:29:26:20:33:e9:81:23:f1:5a:37:86: c6:9a:20:02:65:f4:15:c1:76:c8:97:72:c1:72:c8: 55:8c:99:5f:11:34:2f:9d:af:b0:fc:34:15:f8:f0: 6c:6e:76:a2:40:2a:b5:2b:53:b3:82:aa:a6:7f:66: 49:a1:6c:9c:d2:bf:98:5b:df:ef:57:c2:cd:1d:f5: d7:3b:61:1e:7f:1a:fe:3f:15:7c:84:d1:ca:2f:81: e3:87:ac:2f:95:7c:a8:fc:e8:98:a9:2c:22:d6:c7: 9d:45:33:b7:c5:51:fb:da:71:5b:36:40:3a:1a:12: 5b:b6:a6:0b:5f:dd:d8:58:3b:62:fd:0b:9c:56:02: a9:0d:f6:a7:f6:d6:d8:5b:86:91:5e:d8:8b:20:94: 15:e9:7a:8f:b0:b7:af:16:c6:4f:e2:1f:b4:f2:91: 5a:93:3d:04:e1:e2:0f:d5:fe:21:23:11:50:da:f2: c6:78:10:80:52:3d:be:96:71:10:c8:68:0a:65:16: 39:17:41:d0:f5:15:d7:3b:65:14:e6:58:ec:81:1f: 2d:25:3a:b0:62:d3:3d:97:88:16:01:cb:78:f7:53: 63:96:a6:68:81:ad:02:e4:64:8d:c3:16:20:d9:c9: fe:0e:fa:48:e2:6c:c7:eb:33:13:7b:74:32:c6:d1: 85:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:9E:A1:0C:06:03:F6:A4:19:D2:3E:05:68:BB:57:39:D0:8D:D8:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/babed18c-2177-38a5-9603-73cb0b55a6ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.crl X509v3 Authority Key Identifier: keyid:A3:3B:F1:C6:C8:61:74:0E:9A:FC:71:51:07:84:15:A7:06:B3:DA:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer sbgp-ipAddrBlock: critical IPv4: 68.235.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:43:cc:8d:f9:94:81:05:ba:56:04:fe:18:50:d6:8f:59:a4: 6f:20:bc:5c:15:76:62:40:ff:ab:2d:90:e1:29:7e:e8:be:15: 0f:b8:f0:cd:4c:2c:95:4d:04:0b:07:6f:03:09:c3:a0:df:0c: c6:ee:f5:12:bf:e0:de:c6:77:3a:5b:bf:36:b3:8f:2c:ba:1a: db:81:40:da:68:4f:4b:aa:81:31:5d:fd:48:7a:cc:42:2b:36: 3e:bf:61:ab:85:5f:a1:24:d3:fa:3e:86:23:fb:80:02:47:f9: e8:dc:af:fa:12:f5:29:eb:3f:79:b4:9e:0f:65:1b:e5:2d:eb: f3:9f:ba:de:0d:e3:0e:53:6c:ee:21:be:dd:9c:45:19:f3:d9: 70:70:60:a4:f0:d6:a6:82:b5:78:60:a6:c8:cf:e4:15:61:23: 6a:33:0c:67:2c:90:e0:c9:e0:a3:3e:ab:23:53:cc:52:2b:a7: 10:b1:91:79:ff:a5:6a:cd:5e:3d:62:2a:9f:6c:63:5c:03:a0: 2a:2f:54:aa:33:87:75:6c:46:19:b0:78:e1:d2:fc:48:a9:b8: 23:b7:89:bf:ea:cc:7a:e8:62:9d:71:54:7b:51:05:02:28:2a: b6:ad:76:94:ff:55:54:02:73:d0:dd:44:60:e9:72:51:0a:f0: a2:fa:9d:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEczYJseHaYXEnlhYbAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmZkZWUzZjgtZTM2OC00NWVhLTlhMGEtMDMzYzU5MWI0 OTcxMB4XDTI0MDkxMzEzMDA0MVoXDTI0MTIxMjE0MDA0MVowLzEtMCsGA1UEAxMk ZDNmYzczNTEtZGY0OC00OTdkLWIzNmYtYzczYzg4ZmY5ODA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5CKKSYgM+mBI/FaN4bGmiACZfQVwXbIl3LB cshVjJlfETQvna+w/DQV+PBsbnaiQCq1K1Ozgqqmf2ZJoWyc0r+YW9/vV8LNHfXX O2Eefxr+PxV8hNHKL4Hjh6wvlXyo/OiYqSwi1sedRTO3xVH72nFbNkA6GhJbtqYL X93YWDti/QucVgKpDfan9tbYW4aRXtiLIJQV6XqPsLevFsZP4h+08pFakz0E4eIP 1f4hIxFQ2vLGeBCAUj2+lnEQyGgKZRY5F0HQ9RXXO2UU5ljsgR8tJTqwYtM9l4gW Act491NjlqZoga0C5GSNwxYg2cn+DvpI4mzH6zMTe3QyxtGFRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAOeoQwGA/akGdI+BWi7VznQjdgmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mZmRl ZTNmOC1lMzY4LTQ1ZWEtOWEwYS0wMzNjNTkxYjQ5NzEvYmFiZWQxOGMtMjE3Ny0z OGE1LTk2MDMtNzNjYjBiNTVhNmVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZmZkZWUzZjgtZTM2OC00NWVhLTlh MGEtMDMzYzU5MWI0OTcxL2ZmZGVlM2Y4LWUzNjgtNDVlYS05YTBhLTAzM2M1OTFi NDk3MS5jcmwwHwYDVR0jBBgwFoAUozvxxshhdA6a/HFRB4QVpwaz2l8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mZmRlZTNmOC1lMzY4LTQ1ZWEtOWEwYS0wMzNj NTkxYjQ5NzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFROuAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACdDzI35lIEFulYE/hhQ1o9ZpG8gvFwVdmJA/6stkOEpfui+FQ+48M1M LJVNBAsHbwMJw6DfDMbu9RK/4N7Gdzpbvzazjyy6GtuBQNpoT0uqgTFd/Uh6zEIr Nj6/YauFX6Ek0/o+hiP7gAJH+ejcr/oS9SnrP3m0ng9lG+Ut6/Ofut4N4w5TbO4h vt2cRRnz2XBwYKTw1qaCtXhgpsjP5BVhI2ozDGcskODJ4KM+qyNTzFIrpxCxkXn/ pWrNXj1iKp9sY1wDoCovVKozh3VsRhmweOHS/EipuCO3ib/qzHroYp1xVHtRBQIo KratdpT/VVQCc9DdRGDpclEK8KL6nQ0= -----END CERTIFICATE-----Generated at Thu Nov 21 16:22:24 2024 by rpki-client on console-ams.rpki-client.org