$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/4d1caa7e-bc43-3eea-8cd1-913f8700410c.roa File: 4d1caa7e-bc43-3eea-8cd1-913f8700410c.roa (raw, json) Hash identifier: R90NyQqMCM0cIRm1btb+lMNFT+FsykbhhAhGe0J2Bbg= Subject key identifier: 38:2D:90:42:FE:AD:EC:C6:47:85:87:C6:1F:9B:A5:83:85:C2:46:89 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F432858474DE5F54CA4A0F4F97C382800 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/4d1caa7e-bc43-3eea-8cd1-913f8700410c.roa Signing time: Mon 23 Sep 2024 01:00:31 +0000 ROA not before: Mon 23 Sep 2024 01:00:31 +0000 ROA not after: Sun 22 Dec 2024 02:00:31 +0000 asID: 21723 IP address blocks: 68.182.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:4d:e5:f5:4c:a4:a0:f4:f9:7c:38:28:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 23 01:00:31 2024 GMT Not After : Dec 22 02:00:31 2024 GMT Subject: CN=8c9ed5a2-9e90-4e87-a0b9-8eb195f9d2ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:45:19:9e:d6:78:4e:1a:49:2d:f3:34:9d:7a: 90:b7:9b:72:32:1d:85:e6:d0:56:07:c0:26:18:2e: 54:37:a6:bf:51:d6:00:02:92:fb:95:35:2c:98:b6: 29:82:c7:d6:4e:e2:59:7a:e0:84:88:fa:b0:c3:80: 85:0b:23:61:d6:f3:30:c7:7d:c7:d9:6b:0c:a0:53: f7:00:d8:87:ab:d3:7c:20:99:9a:24:d9:f0:21:43: b5:80:ee:bc:c9:77:49:60:8a:97:d7:05:85:26:4e: 79:b7:e1:ea:81:3a:fe:69:f7:3e:f9:f8:bc:53:7f: 14:41:7e:4e:4d:a2:ae:22:f9:01:a3:a7:b2:70:68: 31:1b:53:8f:20:57:ec:25:c6:c6:17:03:ef:e8:29: b5:88:9e:d5:00:e1:c0:da:10:6d:d3:02:30:72:0f: 64:38:d1:05:01:8b:21:3b:07:9f:26:47:a2:b5:34: 27:2b:02:25:09:75:66:0f:18:40:f2:c9:30:4e:30: 83:9c:03:97:52:86:ee:04:77:24:4c:fd:31:a9:62: 6c:fe:e3:fc:8b:47:09:1a:70:f2:2a:93:65:2e:a5: ba:e9:a4:3a:74:9b:d0:11:f7:e0:f6:3e:7f:83:20: e1:c3:55:94:0d:a2:85:cc:5c:9a:2c:d0:8c:de:4e: 42:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:2D:90:42:FE:AD:EC:C6:47:85:87:C6:1F:9B:A5:83:85:C2:46:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/4d1caa7e-bc43-3eea-8cd1-913f8700410c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 68.182.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:c0:1e:bc:2f:5f:d1:fe:41:4c:f3:f2:d9:ed:9e:f0:21:13: 9d:7e:9a:bd:13:c8:69:14:2c:43:ad:08:21:90:87:a4:5a:e0: 64:ad:41:20:05:4d:6a:d3:f1:c6:be:a4:8d:4e:b5:11:70:83: 60:29:fa:88:72:13:bc:a5:93:a2:4e:e7:e5:5f:cf:e4:bc:4e: da:f3:b7:90:a2:2c:85:f0:74:d0:59:79:52:75:60:f2:74:3e: ca:45:0b:c7:5c:92:41:72:18:76:65:d2:bf:8a:fc:51:4e:56: b4:bc:78:46:ff:1c:61:1b:68:73:5f:17:74:50:56:d9:b4:18: 0a:ed:e9:87:97:7f:61:77:6a:99:4c:f5:72:c7:d0:42:47:29: 52:ce:f6:f1:7d:5b:34:c9:38:3b:6a:3f:66:8b:5a:f5:ad:a2: 59:5a:1c:e2:78:04:a9:d8:db:c0:1f:cf:1a:7a:0d:47:44:22: c7:cc:6e:37:54:7a:32:9b:c4:12:6b:97:3b:23:d3:01:15:18: 08:c3:fb:a9:ad:7b:4b:f8:24:d1:69:f9:df:fb:43:e7:7b:71: ed:4f:55:b1:b8:ac:7d:f3:9a:7c:84:69:06:c1:87:ac:b9:52: 8f:84:c4:41:22:88:f8:93:72:38:9e:78:e8:3f:94:af:91:b3: 0f:ce:a0:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdN5fVMpKD0+Xw4KAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI0MDkyMzAxMDAzMVoXDTI0MTIyMjAyMDAzMVowLzEtMCsGA1UEAxMk OGM5ZWQ1YTItOWU5MC00ZTg3LWEwYjktOGViMTk1ZjlkMmVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjUUZntZ4ThpJLfM0nXqQt5tyMh2F5tBWB8Am GC5UN6a/UdYAApL7lTUsmLYpgsfWTuJZeuCEiPqww4CFCyNh1vMwx33H2WsMoFP3 ANiHq9N8IJmaJNnwIUO1gO68yXdJYIqX1wWFJk55t+HqgTr+afc++fi8U38UQX5O TaKuIvkBo6eycGgxG1OPIFfsJcbGFwPv6Cm1iJ7VAOHA2hBt0wIwcg9kONEFAYsh OwefJkeitTQnKwIlCXVmDxhA8skwTjCDnAOXUobuBHckTP0xqWJs/uP8i0cJGnDy KpNlLqW66aQ6dJvQEffg9j5/gyDhw1WUDaKFzFyaLNCM3k5CZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDgtkEL+rezGR4WHxh+bpYOFwkaJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvNGQxY2FhN2UtYmM0My0z ZWVhLThjZDEtOTEzZjg3MDA0MTBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERLbgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACbAHrwvX9H+QUzz8tntnvAhE51+mr0TyGkULEOtCCGQh6Ra4GStQSAF TWrT8ca+pI1OtRFwg2Ap+ohyE7ylk6JO5+Vfz+S8Ttrzt5CiLIXwdNBZeVJ1YPJ0 PspFC8dckkFyGHZl0r+K/FFOVrS8eEb/HGEbaHNfF3RQVtm0GArt6YeXf2F3aplM 9XLH0EJHKVLO9vF9WzTJODtqP2aLWvWtollaHOJ4BKnY28Afzxp6DUdEIsfMbjdU ejKbxBJrlzsj0wEVGAjD+6mte0v4JNFp+d/7Q+d7ce1PVbG4rH3zmnyEaQbBh6y5 Uo+ExEEiiPiTcjieeOg/lK+Rsw/OoBA= -----END CERTIFICATE-----Generated at Mon Nov 25 18:04:48 2024 by rpki-client on console-fra.rpki-client.org