$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/6475ebe4-9b44-3dc9-9db6-0c7de00e2bbe.roa File: 6475ebe4-9b44-3dc9-9db6-0c7de00e2bbe.roa (raw, json) Hash identifier: 4LB7jPmvo1UFjZxPAyUEpRtwp20XfdeXgkcAXlZl/WQ= Subject key identifier: 33:AB:9B:73:9C:C0:AB:9B:E5:DB:4F:80:4D:9A:CA:99:99:F0:98:C4 Certificate issuer: /CN=60f3bf9e-9df6-4935-a73a-d336655a686b Certificate serial: 010D0C9F432858483E1AA330EB9F5DF04207FA80 Authority key identifier: 55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/6475ebe4-9b44-3dc9-9db6-0c7de00e2bbe.roa Signing time: Wed 18 Dec 2024 02:00:39 +0000 ROA not before: Wed 18 Dec 2024 02:00:39 +0000 ROA not after: Tue 18 Mar 2025 01:00:39 +0000 asID: 19107 IP address blocks: 68.235.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:3e:1a:a3:30:eb:9f:5d:f0:42:07:fa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60f3bf9e-9df6-4935-a73a-d336655a686b Validity Not Before: Dec 18 02:00:39 2024 GMT Not After : Mar 18 01:00:39 2025 GMT Subject: CN=34d1adc1-5e6a-41bf-add0-629bbc8826fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:7a:02:74:a8:63:55:e8:b6:4a:e2:b1:cf:ce: a4:b1:57:ff:6a:dc:cb:2d:88:05:87:93:e0:05:b7: 75:02:eb:08:02:e6:6d:0d:e9:f2:8d:4a:05:be:47: 62:7d:47:7e:a9:d3:4a:c3:a2:1b:83:8d:a8:84:17: 49:9d:9a:8c:28:37:44:0f:7f:3a:4f:4a:64:6e:ba: d0:a9:da:b7:c7:e9:13:b3:44:82:fe:44:b1:8c:31: 8c:bb:dd:c1:0f:92:e3:c6:22:46:1c:1e:b4:ec:eb: 21:b2:1c:80:40:2d:b0:8e:9d:48:2d:52:e2:93:69: 25:4a:81:f1:ba:f8:bd:b9:94:64:e5:d3:41:07:c2: 06:32:09:94:3c:f6:0d:cb:f6:c7:67:86:3f:3d:36: 91:0f:f6:21:fd:10:0b:9e:28:f1:e9:97:5f:00:4a: 78:1b:0d:41:25:34:cb:86:ea:a8:99:a2:b7:5b:d5: f0:04:a7:7d:51:43:ee:05:bb:13:aa:d4:70:c1:03: 60:05:3d:ea:57:78:9b:c7:14:70:0c:41:a7:fe:26: c3:26:e4:dc:a6:54:04:57:35:61:b7:4c:d6:f4:f7: 9a:0d:a1:d4:9a:f2:a7:28:43:03:85:2d:48:f6:16: df:5b:ec:ca:35:40:7f:25:e3:4b:79:3d:6e:41:6e: c8:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:AB:9B:73:9C:C0:AB:9B:E5:DB:4F:80:4D:9A:CA:99:99:F0:98:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/6475ebe4-9b44-3dc9-9db6-0c7de00e2bbe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl X509v3 Authority Key Identifier: keyid:55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer sbgp-ipAddrBlock: critical IPv4: 68.235.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:9e:95:fa:09:c3:1b:9f:1f:e2:ae:4e:19:5b:fd:db:08:be: 68:4c:e6:97:db:d1:d3:15:22:93:75:77:5e:83:23:c3:e9:2b: db:ea:b4:e5:38:4d:af:82:40:e6:a1:fa:43:33:ee:ef:b9:16: eb:42:43:a1:24:93:66:e6:28:2e:cb:cb:66:81:7b:df:aa:69: f4:d6:bb:ed:e3:85:c4:cc:2b:40:67:d1:18:91:72:98:72:f0: f4:f5:8a:4b:87:ef:eb:c7:a8:d9:8e:aa:09:4f:c7:11:a3:f1: 77:28:2d:72:ed:ec:a8:ae:22:a7:6c:91:81:4b:dd:9c:96:d2: f8:12:0b:40:12:ed:5e:20:04:2b:f7:f7:ca:c4:66:c3:34:39: b2:b8:13:f1:ef:d3:ec:b0:11:4e:3e:b4:e6:d1:2a:ce:96:59: 48:71:83:08:63:d6:c1:ef:39:dd:e3:39:b5:5f:c5:93:29:96: e7:27:a5:80:17:09:a6:3e:6b:2d:2e:20:7a:63:08:9e:43:c7: 84:90:89:96:e3:92:e9:71:ba:59:1b:6e:e6:b3:eb:b3:3f:84: 02:d8:fc:0b:1e:e3:88:1d:6c:24:71:02:1b:69:28:fa:83:6f: 99:59:65:84:3d:18:1d:75:df:c1:9f:a1:00:4d:d5:ff:09:39: 9b:8b:7d:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg+GqMw659d8EIH+oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjBmM2JmOWUtOWRmNi00OTM1LWE3M2EtZDMzNjY1NWE2 ODZiMB4XDTI0MTIxODAyMDAzOVoXDTI1MDMxODAxMDAzOVowLzEtMCsGA1UEAxMk MzRkMWFkYzEtNWU2YS00MWJmLWFkZDAtNjI5YmJjODgyNmZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHoCdKhjVei2SuKxz86ksVf/atzLLYgFh5Pg Bbd1AusIAuZtDenyjUoFvkdifUd+qdNKw6Ibg42ohBdJnZqMKDdED386T0pkbrrQ qdq3x+kTs0SC/kSxjDGMu93BD5LjxiJGHB607OshshyAQC2wjp1ILVLik2klSoHx uvi9uZRk5dNBB8IGMgmUPPYNy/bHZ4Y/PTaRD/Yh/RALnijx6ZdfAEp4Gw1BJTTL huqomaK3W9XwBKd9UUPuBbsTqtRwwQNgBT3qV3ibxxRwDEGn/ibDJuTcplQEVzVh t0zW9PeaDaHUmvKnKEMDhS1I9hbfW+zKNUB/JeNLeT1uQW7IsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDOrm3OcwKub5dtPgE2aypmZ8JjEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82MGYz YmY5ZS05ZGY2LTQ5MzUtYTczYS1kMzM2NjU1YTY4NmIvNjQ3NWViZTQtOWI0NC0z ZGM5LTlkYjYtMGM3ZGUwMGUyYmJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNjBmM2JmOWUtOWRmNi00OTM1LWE3 M2EtZDMzNjY1NWE2ODZiLzYwZjNiZjllLTlkZjYtNDkzNS1hNzNhLWQzMzY2NTVh Njg2Yi5jcmwwHwYDVR0jBBgwFoAUVfHKkOB81lVG152g0waaF/ajOFIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS82MGYzYmY5ZS05ZGY2LTQ5MzUtYTczYS1kMzM2 NjU1YTY4NmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROsAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKuelfoJwxufH+KuThlb/dsIvmhM5pfb0dMVIpN1d16DI8PpK9vqtOU4 Ta+CQOah+kMz7u+5FutCQ6Ekk2bmKC7Ly2aBe9+qafTWu+3jhcTMK0Bn0RiRcphy 8PT1ikuH7+vHqNmOqglPxxGj8XcoLXLt7KiuIqdskYFL3ZyW0vgSC0AS7V4gBCv3 98rEZsM0ObK4E/Hv0+ywEU4+tObRKs6WWUhxgwhj1sHvOd3jObVfxZMplucnpYAX CaY+ay0uIHpjCJ5Dx4SQiZbjkulxulkbbuaz67M/hALY/Ase44gdbCRxAhtpKPqD b5lZZYQ9GB1138GfoQBN1f8JOZuLfQ4= -----END CERTIFICATE-----Generated at Sun Feb 16 15:15:16 2025 by rpki-client