$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86/68f9233d-e645-3fca-90c5-a19337299804.roa File: 68f9233d-e645-3fca-90c5-a19337299804.roa (raw, json) Hash identifier: 7UJOCI14VZhr7hegAYabLIZYlgOEw9j1HFc3bZPTwLA= Subject key identifier: 13:3A:6C:2F:85:17:C8:0E:5D:6E:50:E4:0E:DB:8E:A7:46:D6:9A:79 Certificate issuer: /CN=860b4c38-2ca6-4edd-80ef-1173a8d7ef86 Certificate serial: 010D0C9F43285847818BC2112E1C0672D90B9A10 Authority key identifier: 9C:1A:0A:7B:40:6D:41:FC:4E:99:70:8A:78:C9:86:84:99:7C:78:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86/68f9233d-e645-3fca-90c5-a19337299804.roa Signing time: Fri 11 Oct 2024 13:00:41 +0000 ROA not before: Fri 11 Oct 2024 13:00:41 +0000 ROA not after: Thu 09 Jan 2025 14:00:41 +0000 asID: 20326 IP address blocks: 67.209.52.0/22 maxlen: 32 74.118.136.0/21 maxlen: 32 141.98.216.0/22 maxlen: 32 202.8.8.0/22 maxlen: 32 204.16.240.0/21 maxlen: 32 208.91.104.0/21 maxlen: 32 2607:fdc0::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86/860b4c38-2ca6-4edd-80ef-1173a8d7ef86.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86/860b4c38-2ca6-4edd-80ef-1173a8d7ef86.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:81:8b:c2:11:2e:1c:06:72:d9:0b:9a:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=860b4c38-2ca6-4edd-80ef-1173a8d7ef86 Validity Not Before: Oct 11 13:00:41 2024 GMT Not After : Jan 9 14:00:41 2025 GMT Subject: CN=72a827e3-2c57-4c91-bb4d-8223fb0e5d38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:69:05:c9:3b:a1:07:8f:83:55:5e:7a:16:49: e9:90:bb:28:d6:c6:48:54:6f:12:53:4d:1e:6f:bb: f8:38:f3:17:34:8f:e6:30:b0:43:a6:fa:f6:32:34: 32:82:e5:7b:7e:95:71:54:fb:1b:fd:c2:ae:17:b2: 96:15:a6:31:b0:05:ea:06:b0:c4:66:f9:83:81:bb: 33:30:01:e9:c4:f6:b6:8d:2b:fc:91:46:4f:22:4c: 1f:33:37:be:c8:15:25:9d:ab:e1:e3:9b:70:78:0c: 13:41:e6:76:33:aa:5d:a1:72:df:bc:fa:1d:6b:99: ee:08:29:d0:0a:58:ad:a5:c9:17:13:54:77:2f:75: 80:45:b3:13:f3:f8:4c:0e:1a:b8:81:da:c2:2f:fa: b5:ca:65:52:f7:62:75:fa:b5:f0:61:8e:15:5a:d3: 7a:60:63:34:60:22:32:ae:2a:59:00:58:cd:f6:53: d7:f2:e5:09:eb:07:fe:6a:64:12:dc:ed:2f:53:3c: 03:b0:c9:13:37:60:03:a6:d8:bb:d7:61:95:9d:8a: 43:b0:8c:d7:e0:ce:f8:0f:b6:31:5c:61:3d:eb:17: 5d:d0:35:25:52:de:e0:68:1e:c2:9e:b3:f1:29:21: f0:0d:c6:96:ac:08:78:d2:c2:40:ad:87:5b:c2:9f: 53:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:3A:6C:2F:85:17:C8:0E:5D:6E:50:E4:0E:DB:8E:A7:46:D6:9A:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86/68f9233d-e645-3fca-90c5-a19337299804.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86/860b4c38-2ca6-4edd-80ef-1173a8d7ef86.crl X509v3 Authority Key Identifier: keyid:9C:1A:0A:7B:40:6D:41:FC:4E:99:70:8A:78:C9:86:84:99:7C:78:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86.cer sbgp-ipAddrBlock: critical IPv4: 67.209.52.0/22 74.118.136.0/21 141.98.216.0/22 202.8.8.0/22 204.16.240.0/21 208.91.104.0/21 IPv6: 2607:fdc0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:ff:f3:f2:97:f1:9d:66:ae:b0:c3:95:03:64:af:49:c9:28: f7:16:06:3d:f6:94:c5:4f:f0:f3:10:38:8a:18:21:db:c7:f1: d0:f6:9b:ac:c5:f2:49:50:ae:aa:2a:3a:a5:ce:d8:eb:26:c4: 3c:7d:77:4d:31:1b:c8:17:1b:f7:8d:3d:66:24:78:12:d7:70: db:98:fb:87:86:4f:32:d9:a5:60:f7:bf:9c:2f:33:ee:32:ff: a0:b4:a5:70:02:2b:e6:5f:ea:39:3a:12:96:c8:34:61:0c:5c: 89:ee:08:64:a9:95:be:2b:9c:de:17:b5:63:6d:56:55:a0:fe: 27:d3:d8:89:77:3d:79:cf:d3:15:71:b6:14:6a:48:b5:fd:13: 7f:77:dc:3b:aa:9a:94:64:e1:a3:b8:60:d4:67:6b:dc:cc:7a: 0c:a1:38:ce:57:76:87:b7:c3:0b:58:bc:d0:34:4f:2f:f9:df: 3f:fe:2c:16:5c:95:12:9d:5e:97:03:fd:db:1b:31:31:98:a5: fd:7f:c2:94:68:86:48:7b:84:d9:0f:2e:ab:b5:1a:af:8a:76: 43:6f:38:e3:a6:72:31:17:b7:ee:04:20:8f:ed:10:8d:dc:8e: 52:7c:3d:4a:d3:5b:01:39:2f:cc:e3:3e:7e:4d:17:52:a6:04: 6f:33:0b:5c -----BEGIN CERTIFICATE----- MIIGcDCCBVigAwIBAgIUAQ0Mn0MoWEeBi8IRLhwGctkLmhAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODYwYjRjMzgtMmNhNi00ZWRkLTgwZWYtMTE3M2E4ZDdl Zjg2MB4XDTI0MTAxMTEzMDA0MVoXDTI1MDEwOTE0MDA0MVowLzEtMCsGA1UEAxMk NzJhODI3ZTMtMmM1Ny00YzkxLWJiNGQtODIyM2ZiMGU1ZDM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzmkFyTuhB4+DVV56FknpkLso1sZIVG8SU00e b7v4OPMXNI/mMLBDpvr2MjQyguV7fpVxVPsb/cKuF7KWFaYxsAXqBrDEZvmDgbsz MAHpxPa2jSv8kUZPIkwfMze+yBUlnavh45tweAwTQeZ2M6pdoXLfvPoda5nuCCnQ ClitpckXE1R3L3WARbMT8/hMDhq4gdrCL/q1ymVS92J1+rXwYY4VWtN6YGM0YCIy ripZAFjN9lPX8uUJ6wf+amQS3O0vUzwDsMkTN2ADpti712GVnYpDsIzX4M74D7Yx XGE96xdd0DUlUt7gaB7CnrPxKSHwDcaWrAh40sJArYdbwp9TmQIDAQABo4IDgjCC A34wHQYDVR0OBBYEFBM6bC+FF8gOXW5Q5A7bjqdG1pp5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84NjBi NGMzOC0yY2E2LTRlZGQtODBlZi0xMTczYThkN2VmODYvNjhmOTIzM2QtZTY0NS0z ZmNhLTkwYzUtYTE5MzM3Mjk5ODA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODYwYjRjMzgtMmNhNi00ZWRkLTgw ZWYtMTE3M2E4ZDdlZjg2Lzg2MGI0YzM4LTJjYTYtNGVkZC04MGVmLTExNzNhOGQ3 ZWY4Ni5jcmwwHwYDVR0jBBgwFoAUnBoKe0BtQfxOmXCKeMmGhJl8eI0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84NjBiNGMzOC0yY2E2LTRlZGQtODBlZi0xMTcz YThkN2VmODYuY2VyMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQCQ9E0AwQD SnaIAwQCjWLYAwQCyggIAwQDzBDwAwQD0FtoMA0EAgACMAcDBQAmB/3AMFQGA1Ud IAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cu YXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQAD ggEBAIz/8/KX8Z1mrrDDlQNkr0nJKPcWBj32lMVP8PMQOIoYIdvH8dD2m6zF8klQ rqoqOqXO2OsmxDx9d00xG8gXG/eNPWYkeBLXcNuY+4eGTzLZpWD3v5wvM+4y/6C0 pXACK+Zf6jk6EpbINGEMXInuCGSplb4rnN4XtWNtVlWg/ifT2Il3PXnP0xVxthRq SLX9E3933DuqmpRk4aO4YNRna9zMegyhOM5Xdoe3wwtYvNA0Ty/53z/+LBZclRKd XpcD/dsbMTGYpf1/wpRohkh7hNkPLqu1Gq+KdkNvOOOmcjEXt+4EII/tEI3cjlJ8 PUrTWwE5L8zjPn5NF1KmBG8zC1w= -----END CERTIFICATE-----Generated at Thu Nov 21 23:42:36 2024 by rpki-client on console-ams.rpki-client.org