$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/d0843c5d-c232-3c52-a28c-e504b426fab2.roa File: d0843c5d-c232-3c52-a28c-e504b426fab2.roa (raw, json) Hash identifier: kH0T8WDAL2eQT0k+2ZW3liDf35n58C4xILnchl8CnIw= Subject key identifier: 19:5F:4D:B9:6F:C0:52:5D:0F:BB:4B:65:30:2E:5C:17:B0:DB:33:6A Certificate issuer: /CN=60f3bf9e-9df6-4935-a73a-d336655a686b Certificate serial: 010D0C9F432858483E1AA43C275ED2713E809700 Authority key identifier: 55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/d0843c5d-c232-3c52-a28c-e504b426fab2.roa Signing time: Wed 18 Dec 2024 02:00:39 +0000 ROA not before: Wed 18 Dec 2024 02:00:39 +0000 ROA not after: Tue 18 Mar 2025 01:00:39 +0000 asID: 19107 IP address blocks: 68.235.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:3e:1a:a4:3c:27:5e:d2:71:3e:80:97:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60f3bf9e-9df6-4935-a73a-d336655a686b Validity Not Before: Dec 18 02:00:39 2024 GMT Not After : Mar 18 01:00:39 2025 GMT Subject: CN=40b34084-dbd1-4d85-a3e6-c2761d5b8ccc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:0d:97:97:6c:f5:e1:ff:d9:2b:8a:5a:3c:48: 0b:f4:a6:4a:d9:df:02:7b:7c:b0:a6:b1:a3:11:b7: fd:0c:01:92:07:89:0a:5f:5e:61:08:08:72:9d:75: f1:7d:e3:65:5b:dc:f3:76:b2:bb:a1:d8:ec:4a:9a: 1c:7b:a7:7e:57:fb:c6:c3:14:16:f4:43:ab:e8:7e: 44:cf:61:12:e7:d1:59:e4:54:c9:02:0f:00:40:4e: 59:49:98:3a:c4:fd:4f:21:83:f1:2b:fb:c7:45:fb: 70:f7:87:f7:19:71:32:d0:66:e3:eb:60:ff:9f:9b: bf:d3:41:c6:9b:2c:5a:c2:4f:e7:d2:32:36:12:82: 11:6d:fd:b6:5d:4b:f7:75:32:eb:4b:c1:7f:3c:a7: 69:2e:1d:1d:14:75:91:37:a3:1d:48:ea:6a:d5:fe: 33:aa:4a:72:0f:2d:b4:5a:6e:2c:93:68:24:d9:92: 0a:de:d0:53:8a:2e:19:8e:f9:b8:17:d4:09:d8:ba: 7f:7a:89:9c:aa:e2:e5:ac:7a:6b:3d:e2:16:df:02: 0d:22:a8:da:d5:9f:cf:6b:a0:b5:e4:30:50:ea:1b: 2b:3a:58:d6:18:79:b6:cd:b8:b8:09:99:32:d1:52: 46:f6:cf:ff:73:ee:5b:ac:4e:3b:82:b3:f1:c3:a0: 5c:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:5F:4D:B9:6F:C0:52:5D:0F:BB:4B:65:30:2E:5C:17:B0:DB:33:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/d0843c5d-c232-3c52-a28c-e504b426fab2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl X509v3 Authority Key Identifier: keyid:55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer sbgp-ipAddrBlock: critical IPv4: 68.235.15.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:a7:08:b6:c1:2b:a6:3e:c8:fb:6f:8b:8a:01:cf:3a:89:28: 0c:da:6b:a9:5a:de:4b:ca:66:3d:46:cc:45:74:9b:5b:4f:38: 94:9e:a1:a1:bd:00:13:e9:54:cb:34:19:71:82:40:19:bd:7b: d7:37:63:ce:3c:39:dc:d3:35:97:68:70:11:18:46:ca:5b:40: 5e:9c:f7:de:c1:e7:c3:91:8a:eb:2f:7c:7d:22:f3:51:45:41: b3:29:00:7d:a8:83:ae:33:ac:a9:6e:f6:48:bb:a3:d1:5b:d2: 27:46:a6:ad:03:bb:bd:d8:04:9d:e3:a3:0b:6b:c1:a1:15:b6: ef:e8:0c:87:1c:cd:59:80:bd:a2:e4:30:f3:42:56:3b:da:37: a5:07:bc:5c:7e:e5:56:d7:f9:1b:0f:31:47:58:12:1f:84:5d: 56:a1:4f:3a:bd:4d:69:ec:12:05:5f:75:b5:fe:53:93:e1:c6: 4e:19:cc:3a:79:ac:bb:72:a1:90:ce:7a:97:ab:30:f6:fb:35: c4:d9:cc:35:5a:76:db:da:15:a5:fa:f2:3d:92:48:53:f2:d5: 81:ba:6a:c7:5c:d8:9c:9a:f3:30:bc:59:c5:17:ca:15:67:5f: a5:4e:7c:06:fd:7f:4a:f8:f5:ef:73:16:e7:b2:17:00:72:94: 4a:bf:08:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg+GqQ8J17ScT6AlwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjBmM2JmOWUtOWRmNi00OTM1LWE3M2EtZDMzNjY1NWE2 ODZiMB4XDTI0MTIxODAyMDAzOVoXDTI1MDMxODAxMDAzOVowLzEtMCsGA1UEAxMk NDBiMzQwODQtZGJkMS00ZDg1LWEzZTYtYzI3NjFkNWI4Y2NjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1A2Xl2z14f/ZK4paPEgL9KZK2d8Ce3ywprGj Ebf9DAGSB4kKX15hCAhynXXxfeNlW9zzdrK7odjsSpoce6d+V/vGwxQW9EOr6H5E z2ES59FZ5FTJAg8AQE5ZSZg6xP1PIYPxK/vHRftw94f3GXEy0Gbj62D/n5u/00HG myxawk/n0jI2EoIRbf22XUv3dTLrS8F/PKdpLh0dFHWRN6MdSOpq1f4zqkpyDy20 Wm4sk2gk2ZIK3tBTii4Zjvm4F9QJ2Lp/eomcquLlrHprPeIW3wINIqja1Z/Pa6C1 5DBQ6hsrOljWGHm2zbi4CZky0VJG9s//c+5brE47grPxw6BcGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBlfTblvwFJdD7tLZTAuXBew2zNqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82MGYz YmY5ZS05ZGY2LTQ5MzUtYTczYS1kMzM2NjU1YTY4NmIvZDA4NDNjNWQtYzIzMi0z YzUyLWEyOGMtZTUwNGI0MjZmYWIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNjBmM2JmOWUtOWRmNi00OTM1LWE3 M2EtZDMzNjY1NWE2ODZiLzYwZjNiZjllLTlkZjYtNDkzNS1hNzNhLWQzMzY2NTVh Njg2Yi5jcmwwHwYDVR0jBBgwFoAUVfHKkOB81lVG152g0waaF/ajOFIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS82MGYzYmY5ZS05ZGY2LTQ5MzUtYTczYS1kMzM2 NjU1YTY4NmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROsPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFunCLbBK6Y+yPtvi4oBzzqJKAzaa6la3kvKZj1GzEV0m1tPOJSeoaG9 ABPpVMs0GXGCQBm9e9c3Y848OdzTNZdocBEYRspbQF6c997B58ORiusvfH0i81FF QbMpAH2og64zrKlu9ki7o9Fb0idGpq0Du73YBJ3jowtrwaEVtu/oDIcczVmAvaLk MPNCVjvaN6UHvFx+5VbX+RsPMUdYEh+EXVahTzq9TWnsEgVfdbX+U5Phxk4ZzDp5 rLtyoZDOeperMPb7NcTZzDVadtvaFaX68j2SSFPy1YG6asdc2Jya8zC8WcUXyhVn X6VOfAb9f0r49e9zFueyFwBylEq/CKM= -----END CERTIFICATE-----Generated at Sun Feb 16 15:35:10 2025 by rpki-client