$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/33e115ff-b633-3582-af61-694f0a8bdd0a.roa File: 33e115ff-b633-3582-af61-694f0a8bdd0a.roa (raw, json) Hash identifier: MTvU28+wwoX48Nz3LJr3vVHunMim5HiQOWbh9olmIXA= Subject key identifier: 49:0D:0D:E0:7D:E0:FE:F7:58:3C:23:0D:18:3A:8B:98:FD:D9:FE:08 Certificate issuer: /CN=60f3bf9e-9df6-4935-a73a-d336655a686b Certificate serial: 010D0C9F432858483E1AA3FC2FED9C5CEC76AD40 Authority key identifier: 55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/33e115ff-b633-3582-af61-694f0a8bdd0a.roa Signing time: Wed 18 Dec 2024 02:00:39 +0000 ROA not before: Wed 18 Dec 2024 02:00:39 +0000 ROA not after: Tue 18 Mar 2025 01:00:39 +0000 asID: 19107 IP address blocks: 68.235.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:3e:1a:a3:fc:2f:ed:9c:5c:ec:76:ad:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60f3bf9e-9df6-4935-a73a-d336655a686b Validity Not Before: Dec 18 02:00:39 2024 GMT Not After : Mar 18 01:00:39 2025 GMT Subject: CN=2434367e-30ec-430d-b3fc-2d6928be0a40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:01:fc:31:b2:4e:a4:44:bd:c6:d8:9e:3f:be: 40:41:8a:96:86:7a:3d:91:8c:63:54:14:29:bc:4b: e2:da:88:c1:b3:7c:85:8b:2d:99:12:77:31:51:b3: 75:fa:73:3b:a0:51:c4:0e:d4:36:6e:ca:43:a6:e4: 84:16:dc:ab:82:15:6e:1c:73:ac:96:c9:9d:85:1a: 6d:1e:77:d6:a0:b0:c4:5d:b8:a3:73:c0:02:19:fb: 35:4d:69:99:c9:fd:51:50:f5:3d:73:aa:4b:22:7d: 65:c5:e3:4c:d0:92:03:79:3e:9b:8f:75:95:45:74: 32:4b:04:c2:36:24:20:db:77:ab:4f:57:3b:d4:f4: a7:1e:f1:ef:34:e0:17:0b:58:99:ec:18:83:c3:88: 98:27:33:4e:ac:68:b1:be:6a:3d:cb:b1:40:62:64: ca:27:4f:89:84:97:a7:1c:7c:46:cb:d8:cc:b7:0d: 5e:18:81:01:9c:c2:ff:0c:8b:32:e4:b0:f9:4b:bf: 17:b5:6f:70:3a:0f:94:f6:e2:47:53:9f:ec:73:df: 45:87:ca:57:5a:1d:a1:db:ea:06:4f:13:37:96:d6: 97:9c:e5:ba:6e:8b:fa:81:4a:39:f0:d5:c6:87:df: 71:ad:98:0b:46:51:14:5f:89:17:38:ba:cc:8a:f4: 45:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:0D:0D:E0:7D:E0:FE:F7:58:3C:23:0D:18:3A:8B:98:FD:D9:FE:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/33e115ff-b633-3582-af61-694f0a8bdd0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl X509v3 Authority Key Identifier: keyid:55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer sbgp-ipAddrBlock: critical IPv4: 68.235.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:d0:b7:39:0f:eb:b3:01:a0:df:7e:39:11:1c:61:2e:9a:af: 6a:97:14:ba:f1:f8:df:c3:c8:b2:5f:a0:58:15:f7:71:86:0f: 1d:48:7a:1b:e8:a5:01:10:e9:b6:e9:fe:d5:17:53:c3:60:39: 14:d4:44:79:07:ba:cc:4c:ce:21:87:6b:b0:b5:36:6a:63:00: f2:79:e8:50:70:ab:24:bb:f8:3c:fd:e2:f0:b8:48:f3:7f:42: 63:c2:74:d4:02:9d:7c:0a:69:62:6f:32:0a:aa:e7:cf:3e:15: e3:13:05:2b:9a:2f:05:9c:34:1b:39:2c:5c:09:f2:62:df:5b: fa:dc:9f:c4:da:05:0d:c4:c4:34:bb:d6:78:8f:9a:6a:ab:81: 90:39:fc:37:77:85:3f:1c:ba:7d:65:44:58:4e:0b:ec:a3:7f: e9:1f:57:9a:f2:e2:f8:7f:30:90:f9:39:6a:5d:1f:e9:7f:c9: 49:8f:6f:5d:45:57:24:7a:7b:ab:c9:a4:a9:19:c9:f0:2f:e6: 8f:f7:39:17:58:55:51:54:83:ed:17:69:9c:48:ee:16:bc:71: 9c:bc:12:77:d1:fd:16:9c:72:92:a2:09:88:46:c7:56:c0:e9: be:8d:1a:8b:c0:34:9f:26:1a:5e:9d:8f:60:de:61:91:a3:e2: 99:42:d6:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg+GqP8L+2cXOx2rUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjBmM2JmOWUtOWRmNi00OTM1LWE3M2EtZDMzNjY1NWE2 ODZiMB4XDTI0MTIxODAyMDAzOVoXDTI1MDMxODAxMDAzOVowLzEtMCsGA1UEAxMk MjQzNDM2N2UtMzBlYy00MzBkLWIzZmMtMmQ2OTI4YmUwYTQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgH8MbJOpES9xtieP75AQYqWhno9kYxjVBQp vEvi2ojBs3yFiy2ZEncxUbN1+nM7oFHEDtQ2bspDpuSEFtyrghVuHHOslsmdhRpt HnfWoLDEXbijc8ACGfs1TWmZyf1RUPU9c6pLIn1lxeNM0JIDeT6bj3WVRXQySwTC NiQg23erT1c71PSnHvHvNOAXC1iZ7BiDw4iYJzNOrGixvmo9y7FAYmTKJ0+JhJen HHxGy9jMtw1eGIEBnML/DIsy5LD5S78XtW9wOg+U9uJHU5/sc99Fh8pXWh2h2+oG TxM3ltaXnOW6bov6gUo58NXGh99xrZgLRlEUX4kXOLrMivRFiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEkNDeB94P73WDwjDRg6i5j92f4IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82MGYz YmY5ZS05ZGY2LTQ5MzUtYTczYS1kMzM2NjU1YTY4NmIvMzNlMTE1ZmYtYjYzMy0z NTgyLWFmNjEtNjk0ZjBhOGJkZDBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNjBmM2JmOWUtOWRmNi00OTM1LWE3 M2EtZDMzNjY1NWE2ODZiLzYwZjNiZjllLTlkZjYtNDkzNS1hNzNhLWQzMzY2NTVh Njg2Yi5jcmwwHwYDVR0jBBgwFoAUVfHKkOB81lVG152g0waaF/ajOFIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS82MGYzYmY5ZS05ZGY2LTQ5MzUtYTczYS1kMzM2 NjU1YTY4NmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROsLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGHQtzkP67MBoN9+OREcYS6ar2qXFLrx+N/DyLJfoFgV93GGDx1Iehvo pQEQ6bbp/tUXU8NgORTURHkHusxMziGHa7C1NmpjAPJ56FBwqyS7+Dz94vC4SPN/ QmPCdNQCnXwKaWJvMgqq588+FeMTBSuaLwWcNBs5LFwJ8mLfW/rcn8TaBQ3ExDS7 1niPmmqrgZA5/Dd3hT8cun1lRFhOC+yjf+kfV5ry4vh/MJD5OWpdH+l/yUmPb11F VyR6e6vJpKkZyfAv5o/3ORdYVVFUg+0XaZxI7ha8cZy8EnfR/RaccpKiCYhGx1bA 6b6NGovANJ8mGl6dj2DeYZGj4plC1g8= -----END CERTIFICATE-----Generated at Sun Feb 16 15:05:47 2025 by rpki-client