$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/3a38966e-0be5-3cc3-9aa2-4cb0883bba5b.roa File: 3a38966e-0be5-3cc3-9aa2-4cb0883bba5b.roa (raw, json) Hash identifier: jUJ5H4exUXvy85NSsANAwVe7RPFBPZQAJTr9NtEdCvU= Subject key identifier: A4:35:2C:DA:2D:DA:1A:39:B2:C8:1C:03:CA:55:36:11:DD:6E:02:40 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584726D08890952A67DC2B676100 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/3a38966e-0be5-3cc3-9aa2-4cb0883bba5b.roa Signing time: Mon 09 Sep 2024 01:00:31 +0000 ROA not before: Mon 09 Sep 2024 01:00:31 +0000 ROA not after: Sun 08 Dec 2024 02:00:31 +0000 asID: 16417 IP address blocks: 68.232.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:26:d0:88:90:95:2a:67:dc:2b:67:61:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Sep 9 01:00:31 2024 GMT Not After : Dec 8 02:00:31 2024 GMT Subject: CN=3d41dc86-98cc-42a9-9ec4-a32d97e51cf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:aa:d7:9d:29:41:b9:02:ba:02:d1:18:b2:42: 56:4d:96:36:fa:a2:f0:b5:e4:90:df:ba:6a:90:f0: 5a:f1:17:8c:48:28:ce:e2:a7:8a:44:96:e2:f8:37: 24:13:2b:53:9f:f0:a0:3f:93:01:94:35:ca:c2:fd: 59:f9:7d:e0:30:57:fc:b1:7c:c2:4f:35:83:1a:66: 9f:3e:3b:07:e8:c3:d4:86:15:e1:53:2c:e7:d4:9f: 17:a6:42:10:40:e3:4d:5f:81:cf:12:31:18:c4:20: 7e:f6:9e:ad:58:d0:f0:9f:c9:d4:b4:24:c1:19:12: 4d:07:d3:a1:10:e5:dc:3a:04:40:58:0f:bb:4f:e9: db:35:2b:e7:d7:2a:c3:4d:c2:5f:87:ad:2c:c8:5e: fb:44:f5:e6:2c:79:92:ce:d1:90:64:10:17:60:9f: 90:6f:41:ba:17:4f:00:59:5f:f8:ee:b3:11:19:dc: cb:59:27:d7:27:5f:35:c2:2a:6c:e1:4d:3d:44:f6: a8:25:99:b0:50:b4:5d:5c:88:2a:d8:7e:24:db:16: d2:b7:e0:28:09:cc:5b:56:bb:4b:9a:00:b0:00:9b: eb:eb:1b:80:d8:c3:81:b6:d3:d5:4b:c2:fb:d7:b3: d4:8f:5f:41:7d:24:a0:b1:97:f9:18:fa:db:55:3d: 9c:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:35:2C:DA:2D:DA:1A:39:B2:C8:1C:03:CA:55:36:11:DD:6E:02:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/3a38966e-0be5-3cc3-9aa2-4cb0883bba5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 68.232.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:db:83:88:f0:dc:4b:d6:27:0b:b2:47:34:2f:70:56:09:44: 1f:4f:de:87:da:7a:ca:cc:0e:e7:a3:d1:34:95:3a:a9:89:22: 4d:5e:0b:5e:b6:b5:89:b1:fe:28:00:91:ab:f4:5b:ff:56:dc: 85:ca:d2:5c:b8:b6:91:0c:d7:9a:c6:a9:47:ec:52:96:57:49: 2d:d3:7b:ef:50:f2:99:7c:b0:8e:98:81:0a:67:c5:c0:dd:01: 45:c1:ce:41:56:2c:7f:bb:51:3f:79:1a:ea:28:f6:64:14:8f: bf:35:34:dd:83:2c:7b:12:05:ca:a6:9d:d5:b0:a2:ff:58:fe: 06:7c:32:77:4e:03:e5:77:74:47:cc:41:5f:dd:c0:39:66:eb: 12:90:22:91:1e:38:b9:f7:0c:35:42:a1:53:f4:98:31:4e:80: 37:08:00:09:d7:a4:e8:ef:70:ed:88:73:1d:9a:39:cc:60:2a: 85:31:03:20:d7:c7:b8:83:d3:81:d1:d3:b4:a4:60:70:dc:85: 6d:af:1d:71:f4:e2:d0:a1:18:3d:c0:ab:38:93:0c:86:2e:9b: 04:01:4d:9f:4e:42:af:65:85:4d:16:a7:ad:91:5c:5b:8a:6e: dc:7f:d9:09:9b:4f:33:25:96:3a:ac:e1:0c:5d:12:58:7b:72: c5:f2:fa:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcm0IiQlSpn3CtnYQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI0MDkwOTAxMDAzMVoXDTI0MTIwODAyMDAzMVowLzEtMCsGA1UEAxMk M2Q0MWRjODYtOThjYy00MmE5LTllYzQtYTMyZDk3ZTUxY2Y0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKrXnSlBuQK6AtEYskJWTZY2+qLwteSQ37pq kPBa8ReMSCjO4qeKRJbi+DckEytTn/CgP5MBlDXKwv1Z+X3gMFf8sXzCTzWDGmaf PjsH6MPUhhXhUyzn1J8XpkIQQONNX4HPEjEYxCB+9p6tWNDwn8nUtCTBGRJNB9Oh EOXcOgRAWA+7T+nbNSvn1yrDTcJfh60syF77RPXmLHmSztGQZBAXYJ+Qb0G6F08A WV/47rMRGdzLWSfXJ181wips4U09RPaoJZmwULRdXIgq2H4k2xbSt+AoCcxbVrtL mgCwAJvr6xuA2MOBttPVS8L717PUj19BfSSgsZf5GPrbVT2clwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKQ1LNot2ho5ssgcA8pVNhHdbgJAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvM2EzODk2NmUtMGJlNS0z Y2MzLTlhYTItNGNiMDg4M2JiYTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCROiAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIzbg4jw3EvWJwuyRzQvcFYJRB9P3ofaesrMDuej0TSVOqmJIk1eC162 tYmx/igAkav0W/9W3IXK0ly4tpEM15rGqUfsUpZXSS3Te+9Q8pl8sI6YgQpnxcDd AUXBzkFWLH+7UT95Guoo9mQUj781NN2DLHsSBcqmndWwov9Y/gZ8MndOA+V3dEfM QV/dwDlm6xKQIpEeOLn3DDVCoVP0mDFOgDcIAAnXpOjvcO2Icx2aOcxgKoUxAyDX x7iD04HR07SkYHDchW2vHXH04tChGD3AqziTDIYumwQBTZ9OQq9lhU0Wp62RXFuK btx/2QmbTzMlljqs4QxdElh7csXy+pk= -----END CERTIFICATE-----Generated at Thu Nov 21 22:40:34 2024 by rpki-client on console-fra.rpki-client.org