$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/ccaf4e02-9e30-3f29-bf04-4ee0a5e9e204.roa File: ccaf4e02-9e30-3f29-bf04-4ee0a5e9e204.roa (raw, json) Hash identifier: oAoOa3DjZfCvXg4cjjJkLHvXR5k8zmeWTf02KzTHPnE= Subject key identifier: 21:31:32:C0:4C:DB:72:9A:CC:9D:3B:B2:3A:AE:5A:F2:1C:0B:A3:5F Certificate issuer: /CN=86fea470-b380-45c0-9f6b-033b7d884388 Certificate serial: 010D0C9F43285847A4336770D20074DC82F40680 Authority key identifier: 08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/ccaf4e02-9e30-3f29-bf04-4ee0a5e9e204.roa Signing time: Wed 23 Oct 2024 22:56:06 +0000 ROA not before: Wed 23 Oct 2024 22:56:06 +0000 ROA not after: Tue 21 Jan 2025 23:56:06 +0000 asID: 63150 IP address blocks: 68.168.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:a4:33:67:70:d2:00:74:dc:82:f4:06:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86fea470-b380-45c0-9f6b-033b7d884388 Validity Not Before: Oct 23 22:56:06 2024 GMT Not After : Jan 21 23:56:06 2025 GMT Subject: CN=189b85ac-fdf5-4122-b799-056d2fa053ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:9d:5d:6d:85:3b:27:89:f7:eb:78:de:6b:4d: 8c:ec:32:15:08:87:90:88:ce:95:2a:87:95:b0:f6: 73:5f:39:69:c2:2b:62:e9:93:74:3a:e7:66:61:2d: d0:65:de:6a:fc:ec:3f:d2:fd:4c:f0:bb:96:59:ab: d9:08:17:60:d8:50:58:ca:35:1d:d9:6f:46:41:c7: 63:1b:5a:db:96:f1:cc:75:86:b0:e5:a9:0e:d4:89: e3:c0:d9:e4:d5:4c:67:dd:78:46:db:95:ce:c8:f9: bc:4c:01:9f:a2:62:52:dc:d5:83:57:57:b8:7a:b6: fb:df:46:b2:67:54:89:49:65:16:78:a5:a1:d7:b0: fb:d2:9b:0b:58:24:88:ec:0f:73:b5:8a:1d:3f:27: dd:a4:ca:c0:25:72:bd:2e:c4:6d:09:00:3f:c3:b1: 43:2c:3d:8c:b2:fa:c1:72:be:dd:9e:26:a8:87:79: 54:04:e5:81:0b:f2:c4:83:93:ce:65:9d:10:ee:56: 8e:78:59:3c:e1:ae:10:85:72:2e:7b:77:87:c0:0a: 1c:c9:46:59:c6:5f:5f:10:0b:75:ef:8e:76:10:a8: a2:f3:58:e0:73:7d:9b:41:b7:f9:28:8c:24:e4:1c: 8e:2a:fa:ce:90:ce:22:d4:ca:e7:98:6e:6e:e2:2a: 48:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:31:32:C0:4C:DB:72:9A:CC:9D:3B:B2:3A:AE:5A:F2:1C:0B:A3:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/ccaf4e02-9e30-3f29-bf04-4ee0a5e9e204.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl X509v3 Authority Key Identifier: keyid:08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer sbgp-ipAddrBlock: critical IPv4: 68.168.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:7b:55:0d:cc:bb:ed:8a:c6:81:e2:70:de:4d:6a:39:02:5b: de:90:4b:b8:d5:89:3f:f9:df:ee:9c:ae:a4:7f:c1:6c:29:2c: 65:57:e4:5d:cc:c6:0a:3f:43:a0:cd:1c:bf:97:89:93:0f:42: 53:9c:1a:33:6f:e2:9e:c8:78:af:aa:d4:e3:ed:bd:17:27:32: 4d:cd:81:d1:00:97:4d:67:dc:08:48:ee:f8:e4:7c:64:81:9d: d6:03:ef:c5:ed:a2:24:ba:05:99:9d:6c:a2:89:d6:76:3e:5b: 9a:04:75:5b:bc:0a:74:30:70:d7:53:1b:37:c0:84:b1:c5:b1: ee:00:3a:44:af:52:e3:9e:67:31:37:5a:72:d8:1f:45:6f:18: d2:b7:92:10:6f:94:93:7e:8a:b3:8d:50:7b:da:56:a3:02:23: 01:b6:77:3c:48:1e:d8:cc:b0:0f:91:9c:55:fc:4c:a8:c3:67: 64:d1:f0:d9:89:5f:01:0c:5e:20:d7:38:33:ea:0e:51:de:a8: 6c:c5:bb:1f:d8:ca:b5:09:2f:a9:19:2d:4d:cb:b0:e2:c2:4e: fe:c2:36:60:6d:2e:bc:a1:a0:68:9d:6d:90:62:27:99:ac:70: b0:f0:62:f5:d2:82:78:68:23:7a:d2:60:50:4d:af:6e:d6:63: 3c:20:c2:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEekM2dw0gB03IL0BoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZmZWE0NzAtYjM4MC00NWMwLTlmNmItMDMzYjdkODg0 Mzg4MB4XDTI0MTAyMzIyNTYwNloXDTI1MDEyMTIzNTYwNlowLzEtMCsGA1UEAxMk MTg5Yjg1YWMtZmRmNS00MTIyLWI3OTktMDU2ZDJmYTA1M2FiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJ1dbYU7J4n363jea02M7DIVCIeQiM6VKoeV sPZzXzlpwiti6ZN0OudmYS3QZd5q/Ow/0v1M8LuWWavZCBdg2FBYyjUd2W9GQcdj G1rblvHMdYaw5akO1InjwNnk1Uxn3XhG25XOyPm8TAGfomJS3NWDV1e4erb730ay Z1SJSWUWeKWh17D70psLWCSI7A9ztYodPyfdpMrAJXK9LsRtCQA/w7FDLD2MsvrB cr7dniaoh3lUBOWBC/LEg5POZZ0Q7laOeFk84a4QhXIue3eHwAocyUZZxl9fEAt1 7452EKii81jgc32bQbf5KIwk5ByOKvrOkM4i1MrnmG5u4ipIxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCExMsBM23KazJ07sjquWvIcC6NfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84NmZl YTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNiN2Q4ODQzODgvY2NhZjRlMDItOWUzMC0z ZjI5LWJmMDQtNGVlMGE1ZTllMjA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODZmZWE0NzAtYjM4MC00NWMwLTlm NmItMDMzYjdkODg0Mzg4Lzg2ZmVhNDcwLWIzODAtNDVjMC05ZjZiLTAzM2I3ZDg4 NDM4OC5jcmwwHwYDVR0jBBgwFoAUCHSKMQk8LElEoS6K1lyekgQBzxYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84NmZlYTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNi N2Q4ODQzODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARKgUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACx7VQ3Mu+2KxoHicN5NajkCW96QS7jViT/53+6crqR/wWwpLGVX5F3M xgo/Q6DNHL+XiZMPQlOcGjNv4p7IeK+q1OPtvRcnMk3NgdEAl01n3AhI7vjkfGSB ndYD78XtoiS6BZmdbKKJ1nY+W5oEdVu8CnQwcNdTGzfAhLHFse4AOkSvUuOeZzE3 WnLYH0VvGNK3khBvlJN+irONUHvaVqMCIwG2dzxIHtjMsA+RnFX8TKjDZ2TR8NmJ XwEMXiDXODPqDlHeqGzFux/YyrUJL6kZLU3LsOLCTv7CNmBtLryhoGidbZBiJ5ms cLDwYvXSgnhoI3rSYFBNr27WYzwgwmk= -----END CERTIFICATE-----Generated at Fri Nov 22 02:37:23 2024 by rpki-client on console-fra.rpki-client.org