$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/a6aa7c3e-f196-3fd4-b36f-c50122c6c775.roa File: a6aa7c3e-f196-3fd4-b36f-c50122c6c775.roa (raw, json) Hash identifier: SfHfpS1D7okYw0No5xvynY44CSH2Gf7pNl2IE/0yWaQ= Subject key identifier: 31:FA:49:4D:B9:C6:55:14:B9:68:4C:6F:C4:BD:60:F6:82:B0:10:69 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F432858476C9DBE220B0DC46B66196CC0 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/a6aa7c3e-f196-3fd4-b36f-c50122c6c775.roa Signing time: Fri 04 Oct 2024 01:00:31 +0000 ROA not before: Fri 04 Oct 2024 01:00:31 +0000 ROA not after: Thu 02 Jan 2025 02:00:31 +0000 asID: 30238 IP address blocks: 68.232.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:6c:9d:be:22:0b:0d:c4:6b:66:19:6c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Oct 4 01:00:31 2024 GMT Not After : Jan 2 02:00:31 2025 GMT Subject: CN=b0971323-f2e4-4111-adaf-b91be742304d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:83:d2:f6:7c:da:22:e5:57:60:27:12:03:35: 52:d5:a6:da:0d:4b:f8:2a:d5:1c:fc:07:37:6e:7d: df:e6:06:de:db:c6:65:0e:de:d5:95:b3:98:70:af: fb:29:fb:ea:d8:b3:bb:b3:f1:e0:1b:ca:2c:1a:9b: 74:69:3e:a9:aa:63:bd:f3:89:50:9f:99:18:01:d6: 94:00:91:c3:d8:76:10:47:cd:97:66:dc:a5:dd:c3: eb:93:90:88:8b:2f:6c:73:92:bf:d7:f7:f2:45:60: cb:88:04:4f:48:a4:27:fc:1a:36:f9:9d:07:c7:4a: 65:c4:f7:78:00:14:c4:fc:77:3d:f6:0a:8b:ec:4e: c9:51:6a:e3:fd:65:d9:95:29:65:7b:1c:81:1c:0b: b6:7f:e1:21:b2:c2:36:c8:ba:a2:5d:29:f7:cc:cd: 58:11:ef:96:88:cb:09:ae:ea:64:ab:5e:2b:78:7c: 04:dd:fd:8a:03:5d:66:11:75:c8:9d:de:3b:65:34: b8:75:af:bb:04:88:e4:30:df:5d:f1:87:56:6d:7c: 72:8f:a2:f9:6f:11:12:33:6d:fa:8b:72:7b:3f:a8: e0:90:c8:07:fa:5f:40:d7:97:e6:d1:c3:a7:19:40: a2:8f:0f:5f:99:4c:ed:4d:26:d6:dd:70:96:38:33: c2:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:FA:49:4D:B9:C6:55:14:B9:68:4C:6F:C4:BD:60:F6:82:B0:10:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/a6aa7c3e-f196-3fd4-b36f-c50122c6c775.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 68.232.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:2f:63:a3:c0:d7:70:26:85:5a:37:2b:bc:43:fd:27:1c:14: 5e:51:39:2e:d7:da:4f:23:4c:70:84:e4:fa:21:ec:c2:b9:e5: c0:68:6f:04:79:96:6e:16:40:ff:e6:f9:62:cd:0b:46:b8:e5: 9b:b1:5b:27:c9:4e:b1:1c:54:be:4f:02:61:c2:72:4a:03:ab: 2e:01:23:be:77:ce:5d:e9:24:b8:79:ff:c3:81:01:d0:69:69: 41:61:53:86:76:a4:d4:ef:36:3b:1a:49:18:e3:f2:20:7a:86: e5:42:8c:4b:a1:e4:56:8d:33:c5:d9:d8:d3:6f:a0:62:72:77: 3f:3a:68:48:cf:12:9a:6a:16:18:ed:87:60:12:e8:c2:b8:85: 0b:22:48:2f:24:4e:4d:26:b1:e1:89:27:5c:25:1a:fb:a6:e9: 26:32:28:80:a6:4e:49:50:7a:d5:37:93:3e:ac:11:66:12:64: 22:48:7c:ee:16:b8:0c:d6:76:9f:82:16:a2:89:65:13:cc:7a: e2:97:7c:c9:77:4e:1c:c6:ec:52:fb:09:e3:39:c3:2d:5f:b9: 98:4b:f4:eb:f8:76:6d:d2:23:95:21:79:b5:bf:43:42:24:79: fb:25:2e:76:a3:06:39:29:a0:5c:0a:cb:af:2e:55:08:a9:5f: 4c:d5:98:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdsnb4iCw3Ea2YZbMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI0MTAwNDAxMDAzMVoXDTI1MDEwMjAyMDAzMVowLzEtMCsGA1UEAxMk YjA5NzEzMjMtZjJlNC00MTExLWFkYWYtYjkxYmU3NDIzMDRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4PS9nzaIuVXYCcSAzVS1abaDUv4KtUc/Ac3 bn3f5gbe28ZlDt7VlbOYcK/7Kfvq2LO7s/HgG8osGpt0aT6pqmO984lQn5kYAdaU AJHD2HYQR82XZtyl3cPrk5CIiy9sc5K/1/fyRWDLiARPSKQn/Bo2+Z0Hx0plxPd4 ABTE/Hc99gqL7E7JUWrj/WXZlSllexyBHAu2f+EhssI2yLqiXSn3zM1YEe+WiMsJ rupkq14reHwE3f2KA11mEXXInd47ZTS4da+7BIjkMN9d8YdWbXxyj6L5bxESM236 i3J7P6jgkMgH+l9A15fm0cOnGUCijw9fmUztTSbW3XCWODPCoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDH6SU25xlUUuWhMb8S9YPaCsBBpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvYTZhYTdjM2UtZjE5Ni0z ZmQ0LWIzNmYtYzUwMTIyYzZjNzc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROifMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADgvY6PA13AmhVo3K7xD/SccFF5ROS7X2k8jTHCE5Poh7MK55cBobwR5 lm4WQP/m+WLNC0a45ZuxWyfJTrEcVL5PAmHCckoDqy4BI753zl3pJLh5/8OBAdBp aUFhU4Z2pNTvNjsaSRjj8iB6huVCjEuh5FaNM8XZ2NNvoGJydz86aEjPEppqFhjt h2AS6MK4hQsiSC8kTk0mseGJJ1wlGvum6SYyKICmTklQetU3kz6sEWYSZCJIfO4W uAzWdp+CFqKJZRPMeuKXfMl3ThzG7FL7CeM5wy1fuZhL9Ov4dm3SI5UhebW/Q0Ik efslLnajBjkpoFwKy68uVQipX0zVmMw= -----END CERTIFICATE-----Generated at Thu Nov 21 22:40:35 2024 by rpki-client on console-fra.rpki-client.org