$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/3d2884eb-84c9-34ac-97d1-34b7790d7bc2.roa File: 3d2884eb-84c9-34ac-97d1-34b7790d7bc2.roa (raw, json) Hash identifier: 5oAWyKtpf7Xz8hx+t8z+QuBI4E08kOIeRjTjS85c2RY= Subject key identifier: 64:6C:AB:E4:C4:E6:25:D3:B0:52:3E:F3:D2:5D:6C:12:F1:40:DA:FD Certificate issuer: /CN=60f3bf9e-9df6-4935-a73a-d336655a686b Certificate serial: 010D0C9F432858483E1AA4278B6BE0DC129BFFC0 Authority key identifier: 55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/3d2884eb-84c9-34ac-97d1-34b7790d7bc2.roa Signing time: Wed 18 Dec 2024 02:00:39 +0000 ROA not before: Wed 18 Dec 2024 02:00:39 +0000 ROA not after: Tue 18 Mar 2025 01:00:39 +0000 asID: 19107 IP address blocks: 68.235.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:3e:1a:a4:27:8b:6b:e0:dc:12:9b:ff:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60f3bf9e-9df6-4935-a73a-d336655a686b Validity Not Before: Dec 18 02:00:39 2024 GMT Not After : Mar 18 01:00:39 2025 GMT Subject: CN=4b836e48-cc9e-439f-b610-89e1930dd1bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:76:92:2b:6f:7e:a4:4c:ce:1a:6d:cc:9b:94: a9:d5:d4:d6:49:80:e6:5c:b2:05:e2:31:83:f4:b3: 14:da:72:0c:08:28:4f:ca:36:36:03:c4:77:96:9f: 02:33:e3:95:10:e9:a8:79:c3:d9:24:40:52:54:cc: 45:4d:33:71:a4:cc:a8:30:c9:12:f6:e4:7e:d4:cd: 81:77:53:82:5f:2e:23:bc:c3:6b:15:ed:33:64:10: a9:a8:7b:6d:8f:e7:a5:18:0e:c6:e8:ae:2d:1d:12: 72:a6:61:e8:b1:e6:c9:af:8c:32:0c:50:06:80:14: 97:f9:36:a5:1a:b8:25:6f:e6:fd:07:71:70:81:db: a5:f6:90:f5:c4:2f:fa:cc:c4:dc:2b:cc:d6:3a:cf: 15:03:7e:41:32:e2:21:6f:f1:18:2c:42:58:f2:ef: 2d:25:d8:1b:32:68:e1:65:b6:71:e8:27:47:60:63: ec:b1:61:da:d4:9e:79:9f:f4:ed:de:03:cb:46:30: 61:f6:81:67:5e:60:dd:f7:b0:33:28:28:d6:23:bc: 86:1c:18:7a:06:3d:12:9a:cd:70:8c:5a:b2:2a:89: d5:16:c5:42:f7:28:61:f7:1e:fa:76:99:a0:3e:45: 49:ec:a3:10:ad:06:91:88:5c:0f:7f:36:8e:5c:39: 8f:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:6C:AB:E4:C4:E6:25:D3:B0:52:3E:F3:D2:5D:6C:12:F1:40:DA:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/3d2884eb-84c9-34ac-97d1-34b7790d7bc2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl X509v3 Authority Key Identifier: keyid:55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer sbgp-ipAddrBlock: critical IPv4: 68.235.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:f2:ad:ed:d8:bc:aa:29:5e:74:61:d2:6e:99:85:8b:c7:68: 97:a3:e6:69:9d:a3:6f:d6:8c:85:19:20:8a:d3:3c:fc:28:8c: 59:c0:e6:0d:ff:2f:ed:de:9a:b6:47:15:ab:ba:09:b2:6d:2d: 54:dc:1f:e9:6e:4f:ff:f4:bc:e6:6f:04:91:03:71:ba:a6:1e: 22:67:7f:69:5a:27:26:03:a2:51:6b:e9:de:a5:13:bf:5c:dd: 6a:38:a4:d8:dd:ad:30:d0:20:e8:07:be:0d:1a:9e:dd:bc:a3: d5:71:69:f2:e1:04:1c:f1:de:57:3b:af:2d:bc:e2:1b:a6:d0: 6e:9c:d0:48:ff:7d:44:ad:ef:25:96:8e:44:f1:45:b5:bf:c1: e6:8d:4a:9e:ed:89:0b:5f:b5:15:76:99:e2:31:3f:d7:db:b0: 4f:e3:93:f3:64:e3:10:31:3d:e0:6c:b6:a3:f8:77:90:7b:c6: 36:ac:27:89:1e:17:a6:5b:0a:46:07:c6:c9:1d:c7:13:f0:f0: 9b:ba:9e:18:10:e8:c5:db:e1:81:8e:18:9b:5e:ef:4a:32:04: 1a:99:1f:c4:15:c0:74:4f:3c:0a:c0:0e:f4:23:db:e1:31:78: 85:04:a8:79:7c:bc:14:54:94:4d:d9:17:be:71:2a:68:09:bc: 31:dc:87:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg+GqQni2vg3BKb/8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjBmM2JmOWUtOWRmNi00OTM1LWE3M2EtZDMzNjY1NWE2 ODZiMB4XDTI0MTIxODAyMDAzOVoXDTI1MDMxODAxMDAzOVowLzEtMCsGA1UEAxMk NGI4MzZlNDgtY2M5ZS00MzlmLWI2MTAtODllMTkzMGRkMWJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHaSK29+pEzOGm3Mm5Sp1dTWSYDmXLIF4jGD 9LMU2nIMCChPyjY2A8R3lp8CM+OVEOmoecPZJEBSVMxFTTNxpMyoMMkS9uR+1M2B d1OCXy4jvMNrFe0zZBCpqHttj+elGA7G6K4tHRJypmHosebJr4wyDFAGgBSX+Tal Grglb+b9B3Fwgdul9pD1xC/6zMTcK8zWOs8VA35BMuIhb/EYLEJY8u8tJdgbMmjh ZbZx6CdHYGPssWHa1J55n/Tt3gPLRjBh9oFnXmDd97AzKCjWI7yGHBh6Bj0Sms1w jFqyKonVFsVC9yhh9x76dpmgPkVJ7KMQrQaRiFwPfzaOXDmPgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGRsq+TE5iXTsFI+89JdbBLxQNr9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82MGYz YmY5ZS05ZGY2LTQ5MzUtYTczYS1kMzM2NjU1YTY4NmIvM2QyODg0ZWItODRjOS0z NGFjLTk3ZDEtMzRiNzc5MGQ3YmMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNjBmM2JmOWUtOWRmNi00OTM1LWE3 M2EtZDMzNjY1NWE2ODZiLzYwZjNiZjllLTlkZjYtNDkzNS1hNzNhLWQzMzY2NTVh Njg2Yi5jcmwwHwYDVR0jBBgwFoAUVfHKkOB81lVG152g0waaF/ajOFIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS82MGYzYmY5ZS05ZGY2LTQ5MzUtYTczYS1kMzM2 NjU1YTY4NmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROsOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAzyre3YvKopXnRh0m6ZhYvHaJej5mmdo2/WjIUZIIrTPPwojFnA5g3/ L+3emrZHFau6CbJtLVTcH+luT//0vOZvBJEDcbqmHiJnf2laJyYDolFr6d6lE79c 3Wo4pNjdrTDQIOgHvg0ant28o9VxafLhBBzx3lc7ry284hum0G6c0Ej/fUSt7yWW jkTxRbW/weaNSp7tiQtftRV2meIxP9fbsE/jk/Nk4xAxPeBstqP4d5B7xjasJ4ke F6ZbCkYHxskdxxPw8Ju6nhgQ6MXb4YGOGJte70oyBBqZH8QVwHRPPArADvQj2+Ex eIUEqHl8vBRUlE3ZF75xKmgJvDHch6o= -----END CERTIFICATE-----Generated at Sun Feb 16 15:38:16 2025 by rpki-client