$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/4138a71f-a14e-3f2f-9f5b-e8603a073470.roa File: 4138a71f-a14e-3f2f-9f5b-e8603a073470.roa (raw, json) Hash identifier: R5javVYqWKEB7O6aiWrDDGVSRTA411C+bCyXlAG7Jto= Subject key identifier: DF:08:65:A7:B0:3F:5A:64:D1:C1:3C:4B:FF:16:69:34:B2:D3:CE:80 Certificate issuer: /CN=60f3bf9e-9df6-4935-a73a-d336655a686b Certificate serial: 010D0C9F432858475DFE5C7C50F70CEE6565A180 Authority key identifier: 55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/4138a71f-a14e-3f2f-9f5b-e8603a073470.roa Signing time: Sat 28 Sep 2024 19:22:38 +0000 ROA not before: Sat 28 Sep 2024 19:22:38 +0000 ROA not after: Fri 27 Dec 2024 20:22:38 +0000 asID: 19107 IP address blocks: 216.234.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:5d:fe:5c:7c:50:f7:0c:ee:65:65:a1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60f3bf9e-9df6-4935-a73a-d336655a686b Validity Not Before: Sep 28 19:22:38 2024 GMT Not After : Dec 27 20:22:38 2024 GMT Subject: CN=b0005065-f344-4d70-b1ea-fab2c225d9cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f7:1c:2c:bc:23:03:8c:1d:43:ac:f0:e8:93: 8d:88:8e:4a:58:8e:b3:fc:82:89:1e:2b:08:eb:c6: 67:a8:ec:ad:82:4e:06:f8:c8:f9:46:f2:fa:8f:12: 0a:51:be:cb:f2:f0:58:9c:cc:2a:6f:5c:da:96:a8: 3e:be:f3:6f:c9:18:f9:ea:10:79:69:ec:af:a8:86: e7:de:42:62:39:d4:41:17:86:1b:6d:c2:07:1e:78: dd:26:90:45:19:a3:74:c3:a1:4b:22:9d:ae:55:7c: f4:5d:af:81:35:96:c5:07:bc:40:7e:b7:9d:be:54: 67:3a:a4:85:15:b4:07:c4:b3:25:68:1c:b1:eb:71: 55:e4:e9:bb:a7:6d:2a:2b:29:54:ee:21:73:41:9f: a9:a0:1a:59:4d:19:6f:8d:36:1d:42:66:17:4e:44: 17:b3:53:c8:9f:ae:8c:04:bc:c4:82:87:30:d9:33: 14:d8:c2:84:eb:0d:6e:34:d9:29:26:aa:18:38:a0: 62:01:78:56:8b:c1:74:e7:1a:64:67:82:48:de:33: fd:af:9f:69:90:f6:20:1c:e1:d2:32:b1:60:d4:64: bc:66:9d:d6:fc:2f:10:95:ca:41:4e:c4:59:8f:08: 19:e3:09:24:dc:4b:e0:9d:03:c3:d6:0e:61:56:ef: 49:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:08:65:A7:B0:3F:5A:64:D1:C1:3C:4B:FF:16:69:34:B2:D3:CE:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/4138a71f-a14e-3f2f-9f5b-e8603a073470.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl X509v3 Authority Key Identifier: keyid:55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer sbgp-ipAddrBlock: critical IPv4: 216.234.75.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:b1:29:92:2a:6c:d5:77:8a:5f:27:b1:82:31:d9:66:5e:8f: e4:26:96:75:74:f5:44:ef:74:5f:5e:6b:ba:07:21:79:80:56: 75:0d:a7:9e:93:78:60:c8:fb:78:e5:f6:08:73:ce:84:4e:7b: 3b:e2:c1:fe:89:7b:a3:5d:0f:b7:18:5b:10:67:11:ef:20:ef: 8c:d8:34:bd:5f:21:70:4c:3b:99:15:24:26:c5:2e:c4:e8:fc: ca:ab:ed:3c:71:64:22:96:07:f4:39:e9:cb:63:81:19:0e:86: f8:47:b7:01:c3:bd:8e:de:41:57:a3:e1:2e:65:ce:84:6a:2d: 42:6d:76:5e:14:88:00:ed:f7:49:18:7c:07:f5:a0:91:a2:2d: 00:03:86:3c:23:94:2b:94:6b:29:06:b0:b3:a8:61:c3:23:3f: 4a:43:d5:ef:5d:7a:fd:6d:6e:b0:c0:15:04:00:14:62:ae:96: 27:d4:08:21:cf:b1:c1:55:5b:3f:8c:fd:69:6e:4f:ec:d8:fc: 5f:2d:37:42:a2:06:f5:cd:18:a0:b3:52:87:0c:6b:b0:fe:0d: 72:2f:a4:63:98:c3:a5:8e:81:0e:1e:1b:92:7a:73:21:a1:61: f5:43:c7:49:dc:24:9a:17:d4:b3:72:95:5a:2a:07:3b:dd:52: 20:33:57:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdd/lx8UPcM7mVloYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjBmM2JmOWUtOWRmNi00OTM1LWE3M2EtZDMzNjY1NWE2 ODZiMB4XDTI0MDkyODE5MjIzOFoXDTI0MTIyNzIwMjIzOFowLzEtMCsGA1UEAxMk YjAwMDUwNjUtZjM0NC00ZDcwLWIxZWEtZmFiMmMyMjVkOWNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPccLLwjA4wdQ6zw6JONiI5KWI6z/IKJHisI 68ZnqOytgk4G+Mj5RvL6jxIKUb7L8vBYnMwqb1zalqg+vvNvyRj56hB5aeyvqIbn 3kJiOdRBF4YbbcIHHnjdJpBFGaN0w6FLIp2uVXz0Xa+BNZbFB7xAfredvlRnOqSF FbQHxLMlaByx63FV5Om7p20qKylU7iFzQZ+poBpZTRlvjTYdQmYXTkQXs1PIn66M BLzEgocw2TMU2MKE6w1uNNkpJqoYOKBiAXhWi8F05xpkZ4JI3jP9r59pkPYgHOHS MrFg1GS8Zp3W/C8QlcpBTsRZjwgZ4wkk3EvgnQPD1g5hVu9JtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN8IZaewP1pk0cE8S/8WaTSy086AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82MGYz YmY5ZS05ZGY2LTQ5MzUtYTczYS1kMzM2NjU1YTY4NmIvNDEzOGE3MWYtYTE0ZS0z ZjJmLTlmNWItZTg2MDNhMDczNDcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNjBmM2JmOWUtOWRmNi00OTM1LWE3 M2EtZDMzNjY1NWE2ODZiLzYwZjNiZjllLTlkZjYtNDkzNS1hNzNhLWQzMzY2NTVh Njg2Yi5jcmwwHwYDVR0jBBgwFoAUVfHKkOB81lVG152g0waaF/ajOFIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS82MGYzYmY5ZS05ZGY2LTQ5MzUtYTczYS1kMzM2 NjU1YTY4NmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2OpLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIqxKZIqbNV3il8nsYIx2WZej+QmlnV09UTvdF9ea7oHIXmAVnUNp56T eGDI+3jl9ghzzoROezviwf6Je6NdD7cYWxBnEe8g74zYNL1fIXBMO5kVJCbFLsTo /Mqr7TxxZCKWB/Q56ctjgRkOhvhHtwHDvY7eQVej4S5lzoRqLUJtdl4UiADt90kY fAf1oJGiLQADhjwjlCuUaykGsLOoYcMjP0pD1e9dev1tbrDAFQQAFGKulifUCCHP scFVWz+M/WluT+zY/F8tN0KiBvXNGKCzUocMa7D+DXIvpGOYw6WOgQ4eG5J6cyGh YfVDx0ncJJoX1LNylVoqBzvdUiAzV1g= -----END CERTIFICATE-----Generated at Thu Nov 21 23:37:22 2024 by rpki-client on console-ams.rpki-client.org