$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86/00609a35-bead-30ca-9315-4eb627491d30.roa File: 00609a35-bead-30ca-9315-4eb627491d30.roa (raw, json) Hash identifier: v1Z8LBweO0IWpqgJp0c8NuWhexCtSLT8oJEp/Xd8vKM= Subject key identifier: 13:74:8E:08:0E:E7:36:6F:8E:48:4F:0D:03:E4:BD:8B:5F:D1:34:16 Certificate issuer: /CN=860b4c38-2ca6-4edd-80ef-1173a8d7ef86 Certificate serial: 010D0C9F432858475EA6206427CB22D91192F400 Authority key identifier: 9C:1A:0A:7B:40:6D:41:FC:4E:99:70:8A:78:C9:86:84:99:7C:78:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86/00609a35-bead-30ca-9315-4eb627491d30.roa Signing time: Sun 29 Sep 2024 01:00:32 +0000 ROA not before: Sun 29 Sep 2024 01:00:32 +0000 ROA not after: Sat 28 Dec 2024 02:00:32 +0000 asID: 20326 IP address blocks: 67.209.52.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86/860b4c38-2ca6-4edd-80ef-1173a8d7ef86.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86/860b4c38-2ca6-4edd-80ef-1173a8d7ef86.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:5e:a6:20:64:27:cb:22:d9:11:92:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=860b4c38-2ca6-4edd-80ef-1173a8d7ef86 Validity Not Before: Sep 29 01:00:32 2024 GMT Not After : Dec 28 02:00:32 2024 GMT Subject: CN=2bd9988b-afc1-4651-9853-06d64a7e494b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:1f:a3:2d:55:16:d4:f9:34:82:b7:77:4a:0b: 44:4a:e6:e5:b3:34:2e:20:10:cd:8f:1c:30:95:e6: a1:5f:e0:62:06:e5:f2:81:40:36:c5:38:fe:f1:d8: 31:90:e0:23:21:d6:d8:41:88:58:f7:5d:44:4a:85: a1:4a:75:18:62:83:89:9f:8c:60:60:21:36:fe:83: 8a:4d:62:71:3b:19:08:50:81:5d:3c:d7:49:1f:5f: 1f:2a:de:55:cf:2f:56:03:cb:44:96:dc:4c:2f:72: db:bb:cc:b1:12:d0:f5:c3:06:d2:44:06:3a:75:3d: 2d:91:f5:5e:51:03:24:da:49:1d:55:9a:7a:94:5b: 59:d2:75:6d:37:77:fa:d8:8e:d1:92:e9:e0:70:92: 12:25:6a:db:39:fe:db:cb:37:6c:5e:99:fc:90:c3: 53:30:19:bf:5f:85:a5:d6:40:71:2c:3c:c3:eb:e8: 32:d9:95:24:62:ce:eb:b0:64:a4:5c:72:3e:a6:99: 34:2a:ea:10:c2:39:86:5d:76:b7:36:bc:c2:d8:3f: 50:a4:98:94:68:9c:98:2d:48:99:48:8b:e5:cc:86: e1:48:62:46:2c:94:cc:57:a5:0d:5a:93:f7:90:6d: a5:cd:a9:24:9f:cc:7e:1a:1a:ba:4a:5a:8b:a6:87: 22:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:74:8E:08:0E:E7:36:6F:8E:48:4F:0D:03:E4:BD:8B:5F:D1:34:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86/00609a35-bead-30ca-9315-4eb627491d30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86/860b4c38-2ca6-4edd-80ef-1173a8d7ef86.crl X509v3 Authority Key Identifier: keyid:9C:1A:0A:7B:40:6D:41:FC:4E:99:70:8A:78:C9:86:84:99:7C:78:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86.cer sbgp-ipAddrBlock: critical IPv4: 67.209.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:00:43:a3:b6:08:33:79:00:98:35:10:19:5c:d0:09:95:ca: cd:98:80:c0:a2:55:40:db:eb:75:11:e2:cd:9e:86:66:29:16: 2e:1a:bb:c8:c7:44:ff:cb:41:2b:3f:f6:89:f8:c5:bc:80:e7: 91:05:2a:30:a2:a4:ff:2f:37:4a:5c:7f:1b:69:5f:fc:fb:b3: ca:16:06:7b:dd:00:8b:f7:a8:e1:aa:df:59:7f:40:70:14:c3: bc:8d:43:be:aa:0d:ec:df:ca:26:05:b9:e1:08:c2:2b:ec:f0: 16:44:71:da:cf:97:23:51:48:64:a3:ce:51:b0:8b:73:70:80: 0d:27:de:9c:52:3c:50:ca:5f:9d:98:46:90:2b:61:fb:b2:e2: 97:2f:c4:77:cb:4c:16:b3:c0:2d:45:b9:6c:9a:20:30:13:cc: d9:b9:f4:dc:44:54:7f:35:6d:32:78:3f:5e:2c:53:d7:73:62: 50:dc:1b:77:de:64:57:4f:5f:58:50:73:10:39:ef:8e:29:32: 2c:60:62:5f:26:b1:bb:13:50:ee:6a:99:05:1f:1f:5f:7b:de: aa:fd:1c:3d:d5:3e:70:8e:39:1a:d2:12:97:e5:11:92:61:99: 2f:be:af:5a:00:dd:1d:8f:a3:05:84:df:54:3b:5f:fe:65:fb: 84:f4:18:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdepiBkJ8si2RGS9AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODYwYjRjMzgtMmNhNi00ZWRkLTgwZWYtMTE3M2E4ZDdl Zjg2MB4XDTI0MDkyOTAxMDAzMloXDTI0MTIyODAyMDAzMlowLzEtMCsGA1UEAxMk MmJkOTk4OGItYWZjMS00NjUxLTk4NTMtMDZkNjRhN2U0OTRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzR+jLVUW1Pk0grd3SgtESublszQuIBDNjxww leahX+BiBuXygUA2xTj+8dgxkOAjIdbYQYhY911ESoWhSnUYYoOJn4xgYCE2/oOK TWJxOxkIUIFdPNdJH18fKt5Vzy9WA8tEltxML3Lbu8yxEtD1wwbSRAY6dT0tkfVe UQMk2kkdVZp6lFtZ0nVtN3f62I7RkungcJISJWrbOf7byzdsXpn8kMNTMBm/X4Wl 1kBxLDzD6+gy2ZUkYs7rsGSkXHI+ppk0KuoQwjmGXXa3NrzC2D9QpJiUaJyYLUiZ SIvlzIbhSGJGLJTMV6UNWpP3kG2lzakkn8x+Ghq6SlqLpocigQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBN0jggO5zZvjkhPDQPkvYtf0TQWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84NjBi NGMzOC0yY2E2LTRlZGQtODBlZi0xMTczYThkN2VmODYvMDA2MDlhMzUtYmVhZC0z MGNhLTkzMTUtNGViNjI3NDkxZDMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODYwYjRjMzgtMmNhNi00ZWRkLTgw ZWYtMTE3M2E4ZDdlZjg2Lzg2MGI0YzM4LTJjYTYtNGVkZC04MGVmLTExNzNhOGQ3 ZWY4Ni5jcmwwHwYDVR0jBBgwFoAUnBoKe0BtQfxOmXCKeMmGhJl8eI0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84NjBiNGMzOC0yY2E2LTRlZGQtODBlZi0xMTcz YThkN2VmODYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQ9E0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACEAQ6O2CDN5AJg1EBlc0AmVys2YgMCiVUDb63UR4s2ehmYpFi4au8jH RP/LQSs/9on4xbyA55EFKjCipP8vN0pcfxtpX/z7s8oWBnvdAIv3qOGq31l/QHAU w7yNQ76qDezfyiYFueEIwivs8BZEcdrPlyNRSGSjzlGwi3NwgA0n3pxSPFDKX52Y RpArYfuy4pcvxHfLTBazwC1FuWyaIDATzNm59NxEVH81bTJ4P14sU9dzYlDcG3fe ZFdPX1hQcxA5744pMixgYl8msbsTUO5qmQUfH1973qr9HD3VPnCOORrSEpflEZJh mS++r1oA3R2PowWE31Q7X/5l+4T0GAs= -----END CERTIFICATE-----Generated at Thu Nov 21 23:42:36 2024 by rpki-client on console-ams.rpki-client.org