$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2a70ae61-4d1c-3dbb-a046-225f76500ee6.roa File: 2a70ae61-4d1c-3dbb-a046-225f76500ee6.roa (raw, json) Hash identifier: w1IX9M065clcIfCEdE7y6mYvxJ1x00Cs79e5qcmLHfg= Subject key identifier: 2F:09:7C:3F:61:5A:0E:16:26:C6:37:FF:2B:C7:01:10:7D:77:A7:D0 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285847E62A9B40A209B231BD997AC0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2a70ae61-4d1c-3dbb-a046-225f76500ee6.roa Signing time: Sat 16 Nov 2024 14:00:41 +0000 ROA not before: Sat 16 Nov 2024 14:00:41 +0000 ROA not after: Fri 14 Feb 2025 14:00:41 +0000 asID: 15169 IP address blocks: 208.68.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e6:2a:9b:40:a2:09:b2:31:bd:99:7a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Nov 16 14:00:41 2024 GMT Not After : Feb 14 14:00:41 2025 GMT Subject: CN=9765d035-dc84-49a5-95c1-4d6345afd969 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:ce:53:0d:c3:92:f0:8d:59:94:71:fb:ba:1b: d3:0d:e1:40:20:1e:d1:db:77:23:ad:bf:08:14:9f: 61:ee:ac:a6:74:c1:81:50:1e:07:f9:f7:c2:0c:5a: af:65:5d:c1:4e:db:aa:4d:8b:99:1b:7b:35:a6:47: 55:5b:85:d7:c1:ef:0a:e9:8e:39:32:2a:db:39:f6: ae:bb:3b:5c:ef:b2:3e:57:6e:f5:0b:42:71:db:f0: d3:fb:6c:09:07:ff:2a:f8:01:41:bd:e8:e3:07:4e: b5:b5:0a:e2:e4:da:6b:c9:b2:3e:00:b4:e7:8c:57: 61:c1:6a:de:12:b2:28:8c:47:cb:c0:06:28:78:44: 28:71:9c:ee:10:4c:8d:95:53:34:2d:ee:dd:94:f3: da:68:b1:40:d6:b5:c3:39:24:bf:7e:f1:4c:5f:e0: 2c:bd:e3:04:c3:d8:22:72:75:96:7e:43:33:71:fe: 41:cd:c8:41:15:36:20:a4:34:5e:fe:dc:9e:e7:94: 77:51:82:7e:ac:d6:35:8f:be:83:42:a8:06:e7:b2: ec:37:c3:54:fc:87:2f:4e:85:b2:e8:17:66:1d:2c: 69:54:1b:b0:5d:86:0c:60:2f:6b:9e:b8:62:d7:0c: 0d:e5:4e:81:3b:62:0a:37:4f:04:e4:13:c1:a5:f3: 9b:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:09:7C:3F:61:5A:0E:16:26:C6:37:FF:2B:C7:01:10:7D:77:A7:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2a70ae61-4d1c-3dbb-a046-225f76500ee6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 208.68.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:82:7a:38:4d:a0:1c:9d:d8:8a:2c:af:1d:3e:63:55:4d:66: a4:cc:bd:8b:24:76:e1:64:a1:d5:28:0c:1a:0f:97:e9:79:f1: 21:8e:51:98:df:87:5a:18:9f:35:11:fd:da:45:7a:6d:c1:9a: 3b:5e:49:85:76:e2:ed:6f:fe:85:f5:9c:eb:46:cf:44:b5:56: d2:a0:bb:de:17:ad:57:c3:98:ac:1b:88:01:ef:c7:26:9e:07: e8:3c:75:68:14:e2:2d:0b:a0:af:b5:85:38:10:32:93:67:e4: 61:41:34:03:d3:5e:bb:7a:ca:44:02:3b:fe:d6:f4:f0:40:45: a3:ba:f9:e8:5d:de:5c:28:8d:8b:d8:42:c8:cf:61:54:b1:8e: 27:aa:f2:cb:ca:8d:58:bd:2f:c8:ab:0f:67:a5:41:21:c0:04: a0:6b:5c:cf:86:77:05:38:21:a2:57:c4:7d:36:68:80:2c:c1: 55:f1:f6:80:6b:73:db:fa:2c:e3:06:b6:62:17:fd:32:b6:3d: 53:49:b5:a8:d1:77:cd:0e:f9:ac:2f:69:83:8b:ad:7b:78:03: 74:72:70:68:79:48:94:ae:bb:21:d5:81:88:4c:6b:b2:d1:49: 9d:54:bf:17:c5:7b:a6:78:bc:45:38:a9:dc:2c:64:70:cf:6b: a7:b8:46:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKptAogmyMb2ZesAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk OTc2NWQwMzUtZGM4NC00OWE1LTk1YzEtNGQ2MzQ1YWZkOTY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAls5TDcOS8I1ZlHH7uhvTDeFAIB7R23cjrb8I FJ9h7qymdMGBUB4H+ffCDFqvZV3BTtuqTYuZG3s1pkdVW4XXwe8K6Y45MirbOfau uztc77I+V271C0Jx2/DT+2wJB/8q+AFBvejjB061tQri5NprybI+ALTnjFdhwWre ErIojEfLwAYoeEQocZzuEEyNlVM0Le7dlPPaaLFA1rXDOSS/fvFMX+AsveMEw9gi cnWWfkMzcf5BzchBFTYgpDRe/tye55R3UYJ+rNY1j76DQqgG57LsN8NU/IcvToWy 6BdmHSxpVBuwXYYMYC9rnrhi1wwN5U6BO2IKN08E5BPBpfObnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC8JfD9hWg4WJsY3/yvHARB9d6fQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMmE3MGFlNjEtNGQxYy0z ZGJiLWEwNDYtMjI1Zjc2NTAwZWU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ERtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAyCejhNoByd2Iosrx0+Y1VNZqTMvYskduFkodUoDBoPl+l58SGOUZjf h1oYnzUR/dpFem3BmjteSYV24u1v/oX1nOtGz0S1VtKgu94XrVfDmKwbiAHvxyae B+g8dWgU4i0LoK+1hTgQMpNn5GFBNAPTXrt6ykQCO/7W9PBARaO6+ehd3lwojYvY QsjPYVSxjieq8svKjVi9L8irD2elQSHABKBrXM+GdwU4IaJXxH02aIAswVXx9oBr c9v6LOMGtmIX/TK2PVNJtajRd80O+awvaYOLrXt4A3RycGh5SJSuuyHVgYhMa7LR SZ1UvxfFe6Z4vEU4qdwsZHDPa6e4Rtc= -----END CERTIFICATE-----Generated at Sun Nov 24 23:59:12 2024 by rpki-client on console-fra.rpki-client.org