$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3fe932c1-3970-3a17-96ef-7343494ea5e5.roa File: 3fe932c1-3970-3a17-96ef-7343494ea5e5.roa (raw, json) Hash identifier: 4/z8IRZruFXIf8e2XpqVWFopS4wKHyT7XyBPzbhNcE4= Subject key identifier: 0E:50:80:16:15:05:A5:9C:25:3F:BA:A5:85:B7:B6:00:A2:9E:E6:A3 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858479D76C913EF16A2461BB20560 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3fe932c1-3970-3a17-96ef-7343494ea5e5.roa Signing time: Mon 21 Oct 2024 13:00:41 +0000 ROA not before: Mon 21 Oct 2024 13:00:41 +0000 ROA not after: Sun 19 Jan 2025 14:00:41 +0000 asID: 701 IP address blocks: 68.237.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:9d:76:c9:13:ef:16:a2:46:1b:b2:05:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 21 13:00:41 2024 GMT Not After : Jan 19 14:00:41 2025 GMT Subject: CN=e0f48428-d168-4b57-8f7f-f938552eeea8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:12:6a:78:d0:40:10:65:85:b7:e9:60:46:e9: 57:2e:13:c5:18:2b:7a:f0:dc:2f:d2:ba:a6:68:2f: 09:02:d3:7c:72:c8:36:8c:5b:b5:08:d6:ac:90:ed: 9a:cc:1e:85:15:05:2b:d2:be:05:1d:a8:b2:7b:cb: 76:e6:7b:5a:51:45:17:bd:b2:96:02:c8:2d:e5:6c: 1d:82:08:1a:d3:6f:a5:b9:3a:d1:64:ef:f6:38:32: 46:52:56:a5:24:d8:f1:f3:85:05:49:92:ef:bc:c4: 74:9b:b6:80:b9:c6:89:14:d2:61:cb:ee:f7:e3:e8: d7:d8:d0:b5:58:a0:e3:de:6b:68:b4:09:e7:c4:d6: ed:d3:b9:a8:77:62:e0:86:e9:54:be:ef:c2:23:30: 6b:b8:3a:77:bc:73:39:21:2b:c8:53:b1:19:a2:b2: 6d:cf:6e:0c:f2:73:99:17:67:d9:9f:c7:c9:87:42: a4:d0:77:a2:c3:6e:e3:d4:66:35:0a:53:63:2f:21: b4:35:15:3d:ca:f8:90:5c:d4:54:fc:56:47:98:8c: 61:0c:73:b6:9e:83:4b:2c:d2:38:f3:ee:ea:62:3c: 03:15:46:36:e7:da:f0:13:7b:f5:01:6b:e7:9e:63: c9:6c:ac:f1:17:c0:61:ba:77:47:bf:23:00:0b:22: 76:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:50:80:16:15:05:A5:9C:25:3F:BA:A5:85:B7:B6:00:A2:9E:E6:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3fe932c1-3970-3a17-96ef-7343494ea5e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 68.237.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:c4:02:e4:f9:62:12:7d:ce:b7:9b:60:c2:8a:ea:5a:47:79: b0:8e:c8:94:8b:c3:70:35:4f:f4:cb:5d:4e:2b:8c:57:0f:4e: ba:0e:c6:49:bd:9d:f9:44:2f:04:79:d5:b4:2c:c7:d7:f5:57: b5:f0:21:be:3b:7c:a2:c0:86:44:b7:b9:f2:66:9b:51:73:e2: 86:a3:5e:d1:44:a0:61:95:5a:b2:43:25:8f:da:5f:21:c8:a3: fd:e4:75:90:35:65:92:fe:14:90:15:bd:42:7a:79:c3:4c:53: 3a:44:4c:6f:6c:05:e2:5e:92:a0:a1:fb:5f:d7:f4:7d:df:0d: 26:7b:fa:d4:fb:0a:de:3c:bd:ef:99:c6:ad:a2:17:79:fe:2b: e6:07:cb:9f:9c:39:d3:3a:59:86:6c:49:8c:4b:90:da:a5:23: 0c:a2:2c:87:15:9f:25:67:6a:98:8f:77:b1:15:45:da:37:31: 2c:5b:d8:01:1f:00:78:bc:b0:1c:37:96:ba:c5:b7:e4:86:61: 9e:b2:7f:7b:b5:a7:8c:61:1c:8c:b4:fb:2d:52:64:27:c4:a8: 24:c2:40:2a:7a:57:ac:17:92:8f:af:a8:ce:c0:dc:ae:50:3d: f6:80:f5:78:ce:0d:9b:c6:95:2d:76:43:ed:bd:a7:86:89:32: 9a:1f:8b:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeddskT7xaiRhuyBWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI0MTAyMTEzMDA0MVoXDTI1MDExOTE0MDA0MVowLzEtMCsGA1UEAxMk ZTBmNDg0MjgtZDE2OC00YjU3LThmN2YtZjkzODU1MmVlZWE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBJqeNBAEGWFt+lgRulXLhPFGCt68Nwv0rqm aC8JAtN8csg2jFu1CNaskO2azB6FFQUr0r4FHaiye8t25ntaUUUXvbKWAsgt5Wwd ggga02+luTrRZO/2ODJGUlalJNjx84UFSZLvvMR0m7aAucaJFNJhy+734+jX2NC1 WKDj3mtotAnnxNbt07mod2LghulUvu/CIzBruDp3vHM5ISvIU7EZorJtz24M8nOZ F2fZn8fJh0Kk0Heiw27j1GY1ClNjLyG0NRU9yviQXNRU/FZHmIxhDHO2noNLLNI4 8+7qYjwDFUY259rwE3v1AWvnnmPJbKzxF8BhundHvyMACyJ2DwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA5QgBYVBaWcJT+6pYW3tgCinuajMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvM2ZlOTMyYzEtMzk3MC0z YTE3LTk2ZWYtNzM0MzQ5NGVhNWU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARO2hMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKPEAuT5YhJ9zrebYMKK6lpHebCOyJSLw3A1T/TLXU4rjFcPTroOxkm9 nflELwR51bQsx9f1V7XwIb47fKLAhkS3ufJmm1Fz4oajXtFEoGGVWrJDJY/aXyHI o/3kdZA1ZZL+FJAVvUJ6ecNMUzpETG9sBeJekqCh+1/X9H3fDSZ7+tT7Ct48ve+Z xq2iF3n+K+YHy5+cOdM6WYZsSYxLkNqlIwyiLIcVnyVnapiPd7EVRdo3MSxb2AEf AHi8sBw3lrrFt+SGYZ6yf3u1p4xhHIy0+y1SZCfEqCTCQCp6V6wXko+vqM7A3K5Q PfaA9XjODZvGlS12Q+29p4aJMpofi+M= -----END CERTIFICATE-----Generated at Thu Nov 21 23:41:22 2024 by rpki-client on console-ams.rpki-client.org