$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/1b19f8c5-3cd1-3ecc-82a4-2046e39f9586.roa File: 1b19f8c5-3cd1-3ecc-82a4-2046e39f9586.roa (raw, json) Hash identifier: rwhYydZEYMqXihAd448/d7zJ31b0TesSMmfBFaTXfXM= Subject key identifier: 5C:F7:79:B3:29:2D:05:A0:17:A6:C4:5B:1D:43:E6:5A:05:AC:0A:F5 Certificate issuer: /CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff Certificate serial: 010D0C9F43285847ED24C85DE73D402FCE19DF80 Authority key identifier: 61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/1b19f8c5-3cd1-3ecc-82a4-2046e39f9586.roa Signing time: Tue 19 Nov 2024 02:00:27 +0000 ROA not before: Tue 19 Nov 2024 02:00:27 +0000 ROA not after: Mon 17 Feb 2025 02:00:27 +0000 asID: 16509 IP address blocks: 68.233.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ed:24:c8:5d:e7:3d:40:2f:ce:19:df:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff Validity Not Before: Nov 19 02:00:27 2024 GMT Not After : Feb 17 02:00:27 2025 GMT Subject: CN=20ce03f7-3a42-431e-89cc-1a747c5800c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:7f:8f:0c:5c:3a:6c:03:2c:3d:50:56:31:82: 03:49:1d:29:f1:53:fc:30:8c:94:3d:23:1e:ef:40: c4:a9:ee:d5:7f:37:46:f3:c6:02:a1:fa:05:af:74: 93:a9:b3:90:ca:ae:37:5d:81:cd:b1:87:08:63:12: e7:81:00:3f:e7:10:66:dc:1a:1a:02:e1:41:f8:ed: c3:d2:50:2f:17:8f:80:ca:de:4f:03:ed:c7:e4:58: c9:90:33:72:fa:16:1f:11:9d:70:9a:51:a2:ed:47: f9:8c:b2:97:1f:20:e4:42:c3:3f:e8:4e:4f:10:02: 8d:18:51:8a:ea:81:a9:da:6d:82:28:1b:16:0e:5f: 15:f7:63:f9:5d:09:4b:57:78:2d:8e:35:ef:f0:64: 4b:94:44:41:04:43:00:df:d4:39:4d:26:3d:95:ca: c1:89:9d:56:96:9a:ee:9e:f0:0c:e6:47:14:62:81: b7:51:f4:e4:e3:bd:05:66:bd:4f:bf:c5:af:cd:77: c3:38:0f:8e:bc:46:8e:e3:8a:37:fe:ea:ec:5c:ac: 77:1c:18:14:de:aa:37:1a:d6:32:a1:73:32:11:6f: 62:65:9d:cf:a9:3e:f4:00:91:be:d7:15:30:8b:01: c7:66:96:a7:e5:52:0c:70:81:65:0d:cf:f5:99:11: 53:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:F7:79:B3:29:2D:05:A0:17:A6:C4:5B:1D:43:E6:5A:05:AC:0A:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/1b19f8c5-3cd1-3ecc-82a4-2046e39f9586.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl X509v3 Authority Key Identifier: keyid:61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer sbgp-ipAddrBlock: critical IPv4: 68.233.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:41:ae:cc:ed:1a:37:60:c9:d6:7c:0f:e1:8b:68:eb:62:00: 06:b0:bb:b2:36:dd:96:14:42:f9:35:05:d5:e8:f8:28:ac:ba: 9c:a9:85:f8:71:39:8d:35:90:3f:e8:54:30:94:ba:57:d7:90: 0c:cc:a6:bc:58:a4:4b:81:17:d9:c2:2e:28:e9:16:19:97:4a: 58:98:80:3f:7e:c0:fb:88:34:54:82:a4:e1:10:25:25:7d:ac: 2c:03:28:8a:4a:76:58:1a:24:17:60:82:d3:1a:bf:e8:86:a5: bc:ef:8d:d9:a7:3c:8d:3f:ce:f7:78:95:6c:1b:a7:64:7e:ac: 63:1b:80:07:3f:e9:bb:ed:72:5d:0e:7b:bc:e3:3a:50:0c:74: 14:20:95:89:e0:c7:bf:57:27:d1:9e:9e:53:a4:11:e1:99:3e: e3:fb:b0:27:ce:2a:bd:26:14:29:f9:73:6e:9b:4f:2d:9c:5d: 70:6c:32:cd:63:f5:d3:b7:b2:d1:ae:cb:40:b6:df:df:23:43: a8:f4:96:e8:2f:30:4e:32:c5:a3:94:7a:86:37:bd:8c:0d:30: c2:0b:03:2a:be:e2:05:84:61:b3:51:26:89:bb:8d:8d:70:d8: d4:35:8c:05:b6:d6:fa:04:60:9f:b5:12:da:88:34:54:e3:34: 56:ca:f2:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEftJMhd5z1AL84Z34AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGJkNWJjMWEtNWY0OC00Y2U3LWI5NTItYjk0YjhlY2U4 N2ZmMB4XDTI0MTExOTAyMDAyN1oXDTI1MDIxNzAyMDAyN1owLzEtMCsGA1UEAxMk MjBjZTAzZjctM2E0Mi00MzFlLTg5Y2MtMWE3NDdjNTgwMGM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk3+PDFw6bAMsPVBWMYIDSR0p8VP8MIyUPSMe 70DEqe7VfzdG88YCofoFr3STqbOQyq43XYHNsYcIYxLngQA/5xBm3BoaAuFB+O3D 0lAvF4+Ayt5PA+3H5FjJkDNy+hYfEZ1wmlGi7Uf5jLKXHyDkQsM/6E5PEAKNGFGK 6oGp2m2CKBsWDl8V92P5XQlLV3gtjjXv8GRLlERBBEMA39Q5TSY9lcrBiZ1Wlpru nvAM5kcUYoG3UfTk470FZr1Pv8WvzXfDOA+OvEaO44o3/ursXKx3HBgU3qo3GtYy oXMyEW9iZZ3PqT70AJG+1xUwiwHHZpan5VIMcIFlDc/1mRFTDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFz3ebMpLQWgF6bEWx1D5loFrAr1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84YmQ1 YmMxYS01ZjQ4LTRjZTctYjk1Mi1iOTRiOGVjZTg3ZmYvMWIxOWY4YzUtM2NkMS0z ZWNjLTgyYTQtMjA0NmUzOWY5NTg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGJkNWJjMWEtNWY0OC00Y2U3LWI5 NTItYjk0YjhlY2U4N2ZmLzhiZDViYzFhLTVmNDgtNGNlNy1iOTUyLWI5NGI4ZWNl ODdmZi5jcmwwHwYDVR0jBBgwFoAUYaLNU5TNbnVpVnI59gs0FWwcdYcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84YmQ1YmMxYS01ZjQ4LTRjZTctYjk1Mi1iOTRi OGVjZTg3ZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROkoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA1BrsztGjdgydZ8D+GLaOtiAAawu7I23ZYUQvk1BdXo+Cisupyphfhx OY01kD/oVDCUulfXkAzMprxYpEuBF9nCLijpFhmXSliYgD9+wPuINFSCpOEQJSV9 rCwDKIpKdlgaJBdggtMav+iGpbzvjdmnPI0/zvd4lWwbp2R+rGMbgAc/6bvtcl0O e7zjOlAMdBQglYngx79XJ9GenlOkEeGZPuP7sCfOKr0mFCn5c26bTy2cXXBsMs1j 9dO3stGuy0C2398jQ6j0lugvME4yxaOUeoY3vYwNMMILAyq+4gWEYbNRJom7jY1w 2NQ1jAW21voEYJ+1EtqINFTjNFbK8rg= -----END CERTIFICATE-----Generated at Fri Nov 22 00:24:39 2024 by rpki-client on console-fra.rpki-client.org