$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/4af6f342-bf2b-317a-8c6c-9da6e4e46c6b.roa File: 4af6f342-bf2b-317a-8c6c-9da6e4e46c6b.roa (raw, json) Hash identifier: 57aEuCejABWlbIH/b1itvXI5ssGPZTVMsk4HMCf/9VE= Subject key identifier: 29:99:4F:F6:54:6B:30:59:0F:C0:E2:5D:22:09:9E:2D:50:8C:AD:20 Certificate issuer: /CN=60f3bf9e-9df6-4935-a73a-d336655a686b Certificate serial: 010D0C9F432858483E1AA35D5A9E929892850340 Authority key identifier: 55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/4af6f342-bf2b-317a-8c6c-9da6e4e46c6b.roa Signing time: Wed 18 Dec 2024 02:00:39 +0000 ROA not before: Wed 18 Dec 2024 02:00:39 +0000 ROA not after: Tue 18 Mar 2025 01:00:39 +0000 asID: 19107 IP address blocks: 68.235.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:3e:1a:a3:5d:5a:9e:92:98:92:85:03:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60f3bf9e-9df6-4935-a73a-d336655a686b Validity Not Before: Dec 18 02:00:39 2024 GMT Not After : Mar 18 01:00:39 2025 GMT Subject: CN=f3d4417f-6ab7-4a64-9080-15e24b1ab906 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:12:ee:e8:59:d3:76:22:f3:0c:ab:73:ee:e2: 95:f5:d2:1d:80:17:f3:9b:ac:5a:05:9a:7d:1b:56: 51:f8:cc:0c:3d:6e:a4:39:8c:e7:b7:92:4a:3b:95: 3e:d5:96:8c:7a:07:92:91:30:74:bb:a1:2a:1a:3d: f4:f5:1a:d1:ba:3a:0a:dc:b2:c5:d0:0a:db:7d:7b: 70:54:6e:c4:8f:be:47:de:ab:16:31:8f:99:b1:af: 3d:3d:b0:2e:16:21:e1:ca:03:dd:e2:af:7d:6e:a2: d3:17:ee:0c:5a:74:a2:0f:52:ec:dd:ab:ee:08:3e: 19:9f:84:3d:53:a3:6a:7d:2a:62:94:6b:df:e3:e6: e8:89:3e:b5:08:5f:d4:27:da:37:93:78:1c:f8:bd: ae:df:2e:17:39:66:2b:9e:1a:fc:2f:a9:88:eb:e8: 4c:af:65:9c:41:88:a7:d3:f5:ed:0d:0a:39:16:81: 28:99:cf:61:d0:3d:e6:6d:b6:a1:e5:58:67:f0:5d: 6d:26:09:f3:72:d1:03:16:48:1d:51:94:d2:21:62: 7b:83:e0:0f:0e:36:ea:12:e0:6f:8b:2d:0f:57:e8: 2c:9b:27:df:07:1b:77:b1:8f:fa:4e:6c:d8:49:66: 91:7c:ea:25:fd:1b:79:38:15:0c:65:78:cb:0f:52: 1f:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:99:4F:F6:54:6B:30:59:0F:C0:E2:5D:22:09:9E:2D:50:8C:AD:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/4af6f342-bf2b-317a-8c6c-9da6e4e46c6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl X509v3 Authority Key Identifier: keyid:55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer sbgp-ipAddrBlock: critical IPv4: 68.235.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:db:51:36:24:34:27:71:13:13:1e:ea:1d:92:64:3f:c3:89: cc:84:b0:1f:e9:11:66:d8:88:4a:47:60:84:29:e3:7f:e9:07: 06:ca:30:fa:8f:aa:bf:f1:d5:a0:e8:5f:f7:70:13:a9:e0:bb: 01:de:83:ac:06:75:d4:0a:b8:ae:8d:64:e6:43:57:58:c0:3e: cf:85:a3:a6:3b:8b:c6:eb:9e:9a:4d:e6:bc:93:82:db:8b:c6: c1:92:cd:25:f1:5d:9c:a1:22:cb:31:72:73:3e:79:20:ac:5e: d1:d9:2a:ca:4a:b4:04:29:a6:80:01:22:8e:8f:29:00:f0:6d: 51:bd:09:d5:14:54:ed:54:02:b4:2e:20:66:48:11:d0:02:08: f3:80:d0:75:38:e6:b0:51:48:85:09:41:bd:01:78:9f:f6:4f: 24:4c:ce:90:29:6e:45:69:54:47:34:f1:6c:6f:fb:62:a9:38: 47:5a:52:e2:3c:00:ce:30:1a:db:a9:1a:1a:10:ef:57:c5:33: a7:31:87:b2:bb:4f:a4:21:80:f1:85:43:e7:95:bd:4c:b3:de: f0:2c:2a:bc:f7:5c:ef:67:61:78:b5:3e:2f:18:09:29:64:e2: 36:98:5f:8a:d0:32:07:39:b9:30:47:7c:c4:3e:2c:d9:e3:fe: 7d:4a:5b:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg+GqNdWp6SmJKFA0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjBmM2JmOWUtOWRmNi00OTM1LWE3M2EtZDMzNjY1NWE2 ODZiMB4XDTI0MTIxODAyMDAzOVoXDTI1MDMxODAxMDAzOVowLzEtMCsGA1UEAxMk ZjNkNDQxN2YtNmFiNy00YTY0LTkwODAtMTVlMjRiMWFiOTA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhhLu6FnTdiLzDKtz7uKV9dIdgBfzm6xaBZp9 G1ZR+MwMPW6kOYznt5JKO5U+1ZaMegeSkTB0u6EqGj309RrRujoK3LLF0ArbfXtw VG7Ej75H3qsWMY+Zsa89PbAuFiHhygPd4q99bqLTF+4MWnSiD1Ls3avuCD4Zn4Q9 U6NqfSpilGvf4+boiT61CF/UJ9o3k3gc+L2u3y4XOWYrnhr8L6mI6+hMr2WcQYin 0/XtDQo5FoEomc9h0D3mbbah5Vhn8F1tJgnzctEDFkgdUZTSIWJ7g+APDjbqEuBv iy0PV+gsmyffBxt3sY/6TmzYSWaRfOol/Rt5OBUMZXjLD1If7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCmZT/ZUazBZD8DiXSIJni1QjK0gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82MGYz YmY5ZS05ZGY2LTQ5MzUtYTczYS1kMzM2NjU1YTY4NmIvNGFmNmYzNDItYmYyYi0z MTdhLThjNmMtOWRhNmU0ZTQ2YzZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNjBmM2JmOWUtOWRmNi00OTM1LWE3 M2EtZDMzNjY1NWE2ODZiLzYwZjNiZjllLTlkZjYtNDkzNS1hNzNhLWQzMzY2NTVh Njg2Yi5jcmwwHwYDVR0jBBgwFoAUVfHKkOB81lVG152g0waaF/ajOFIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS82MGYzYmY5ZS05ZGY2LTQ5MzUtYTczYS1kMzM2 NjU1YTY4NmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROsEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFzbUTYkNCdxExMe6h2SZD/DicyEsB/pEWbYiEpHYIQp43/pBwbKMPqP qr/x1aDoX/dwE6nguwHeg6wGddQKuK6NZOZDV1jAPs+Fo6Y7i8brnppN5ryTgtuL xsGSzSXxXZyhIssxcnM+eSCsXtHZKspKtAQppoABIo6PKQDwbVG9CdUUVO1UArQu IGZIEdACCPOA0HU45rBRSIUJQb0BeJ/2TyRMzpApbkVpVEc08Wxv+2KpOEdaUuI8 AM4wGtupGhoQ71fFM6cxh7K7T6QhgPGFQ+eVvUyz3vAsKrz3XO9nYXi1Pi8YCSlk 4jaYX4rQMgc5uTBHfMQ+LNnj/n1KW3s= -----END CERTIFICATE-----Generated at Sun Feb 16 15:26:40 2025 by rpki-client