$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/960e110b-8a58-4e15-a2f1-8d907656427c/d1611d76-7950-3bfa-94ae-dd866a3c540e.roa File: d1611d76-7950-3bfa-94ae-dd866a3c540e.roa (raw, json) Hash identifier: Q5I9QvgOdtfuPr42RPBfweZnvcdFJz8YfCmG5vB5tvQ= Subject key identifier: 70:33:20:95:F0:FD:94:AD:92:BC:55:3E:F8:77:EF:E5:CE:A5:B9:4A Certificate issuer: /CN=960e110b-8a58-4e15-a2f1-8d907656427c Certificate serial: 010D0C9F432858472C65D6EDC4BE0D214B318BC0 Authority key identifier: 1B:8B:A7:24:1A:10:34:E8:30:A4:63:8A:E8:A3:A7:8D:0E:5D:9D:BC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/960e110b-8a58-4e15-a2f1-8d907656427c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/960e110b-8a58-4e15-a2f1-8d907656427c/d1611d76-7950-3bfa-94ae-dd866a3c540e.roa Signing time: Wed 11 Sep 2024 01:00:31 +0000 ROA not before: Wed 11 Sep 2024 01:00:31 +0000 ROA not after: Tue 10 Dec 2024 02:00:31 +0000 asID: 16509 IP address blocks: 69.10.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/960e110b-8a58-4e15-a2f1-8d907656427c/960e110b-8a58-4e15-a2f1-8d907656427c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/960e110b-8a58-4e15-a2f1-8d907656427c/960e110b-8a58-4e15-a2f1-8d907656427c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/960e110b-8a58-4e15-a2f1-8d907656427c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:2c:65:d6:ed:c4:be:0d:21:4b:31:8b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=960e110b-8a58-4e15-a2f1-8d907656427c Validity Not Before: Sep 11 01:00:31 2024 GMT Not After : Dec 10 02:00:31 2024 GMT Subject: CN=7c4f20cf-98dd-466e-b273-b80870366888 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:d0:01:b3:d5:2a:b3:70:cc:49:44:f3:d0:50: d1:07:99:7e:cd:00:aa:62:9d:f2:66:8c:8d:93:af: 2a:f0:a2:6f:23:d4:95:3b:9b:f5:f1:e9:de:d1:ec: 10:d8:c5:24:92:00:0b:26:c6:8c:1a:51:ec:f8:27: af:19:28:5f:7e:72:82:78:1c:bf:40:d8:25:63:b7: a4:d6:a8:79:5a:93:6a:64:c1:33:c9:89:3e:4b:9a: c8:0d:7d:f6:1d:9d:24:5d:81:c2:cb:62:c2:e1:06: 30:63:34:0a:f1:d1:d3:0c:ba:3a:bf:03:7c:99:df: 35:34:88:a0:4e:1c:f0:c4:cd:d9:d1:d0:37:5a:c4: 03:bc:b6:06:ef:b4:53:ce:9b:b8:96:09:ed:42:7b: 69:5b:ac:4c:1c:bf:de:d5:f3:ae:46:1c:3a:c6:9a: a2:14:a0:dd:1b:33:92:f3:2b:da:39:68:14:4e:c6: da:41:99:00:2e:a8:0a:00:65:29:5c:9b:62:35:8f: 1e:21:3e:9c:e0:ba:e6:32:cf:54:19:f7:9e:27:ca: e4:42:ec:f8:f1:4e:09:58:05:4d:7e:22:eb:82:29: 8e:91:d1:04:2c:01:b2:a6:ab:61:f0:16:73:3c:35: 1f:a0:87:36:0f:b2:26:80:74:aa:56:07:35:1d:82: 7d:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:33:20:95:F0:FD:94:AD:92:BC:55:3E:F8:77:EF:E5:CE:A5:B9:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/960e110b-8a58-4e15-a2f1-8d907656427c/d1611d76-7950-3bfa-94ae-dd866a3c540e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/960e110b-8a58-4e15-a2f1-8d907656427c/960e110b-8a58-4e15-a2f1-8d907656427c.crl X509v3 Authority Key Identifier: keyid:1B:8B:A7:24:1A:10:34:E8:30:A4:63:8A:E8:A3:A7:8D:0E:5D:9D:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/960e110b-8a58-4e15-a2f1-8d907656427c.cer sbgp-ipAddrBlock: critical IPv4: 69.10.25.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:39:df:4f:45:ff:7d:4f:9d:db:f9:1f:fd:fd:73:9e:49:6f: 20:e5:cf:40:d6:39:2d:d5:1d:ea:bc:84:c4:e5:32:df:0f:75: 54:96:be:65:18:10:c5:bd:67:d2:62:78:b8:aa:6c:cb:53:eb: c9:c7:ac:f9:ec:92:9a:28:17:9d:78:e1:53:c2:c9:7c:4b:13: 46:ca:44:9a:d2:c0:74:4a:80:47:64:a6:fa:b2:a2:20:b2:79: e4:84:fa:d3:8d:31:89:bd:67:cb:35:2f:34:a7:69:f3:37:68: 44:fe:11:05:d5:66:b3:2d:eb:00:fa:78:72:57:be:17:13:f4: 77:8d:78:87:89:a1:a0:ab:0a:29:b1:0c:06:5e:a8:cd:35:3e: d2:2b:d6:d2:3b:90:b4:b4:90:97:3c:46:72:e4:a7:c6:c3:40: d5:33:9f:87:d8:21:b8:9c:50:8a:4d:27:14:21:4d:e1:dd:ce: 87:0c:e4:e6:21:e8:b9:3c:4b:8b:e3:9e:4b:94:e1:37:ad:a2: f9:3d:39:d2:57:d0:6b:fe:7f:77:c5:85:48:c6:b3:c8:02:45: e5:34:f1:b5:ae:f9:d0:92:77:5f:3a:9f:37:c1:f0:b3:b1:06: 6e:f0:37:e3:51:6d:39:4e:f7:2c:b1:29:e0:8a:67:1c:f5:39: 66:10:b0:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcsZdbtxL4NIUsxi8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTYwZTExMGItOGE1OC00ZTE1LWEyZjEtOGQ5MDc2NTY0 MjdjMB4XDTI0MDkxMTAxMDAzMVoXDTI0MTIxMDAyMDAzMVowLzEtMCsGA1UEAxMk N2M0ZjIwY2YtOThkZC00NjZlLWIyNzMtYjgwODcwMzY2ODg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAidABs9Uqs3DMSUTz0FDRB5l+zQCqYp3yZoyN k68q8KJvI9SVO5v18ene0ewQ2MUkkgALJsaMGlHs+CevGShffnKCeBy/QNglY7ek 1qh5WpNqZMEzyYk+S5rIDX32HZ0kXYHCy2LC4QYwYzQK8dHTDLo6vwN8md81NIig ThzwxM3Z0dA3WsQDvLYG77RTzpu4lgntQntpW6xMHL/e1fOuRhw6xpqiFKDdGzOS 8yvaOWgUTsbaQZkALqgKAGUpXJtiNY8eIT6c4LrmMs9UGfeeJ8rkQuz48U4JWAVN fiLrgimOkdEELAGypqth8BZzPDUfoIc2D7ImgHSqVgc1HYJ9DwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHAzIJXw/ZStkrxVPvh37+XOpblKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85NjBl MTEwYi04YTU4LTRlMTUtYTJmMS04ZDkwNzY1NjQyN2MvZDE2MTFkNzYtNzk1MC0z YmZhLTk0YWUtZGQ4NjZhM2M1NDBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTYwZTExMGItOGE1OC00ZTE1LWEy ZjEtOGQ5MDc2NTY0MjdjLzk2MGUxMTBiLThhNTgtNGUxNS1hMmYxLThkOTA3NjU2 NDI3Yy5jcmwwHwYDVR0jBBgwFoAUG4unJBoQNOgwpGOK6KOnjQ5dnbwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85NjBlMTEwYi04YTU4LTRlMTUtYTJmMS04ZDkw NzY1NjQyN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARQoZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIY5309F/31Pndv5H/39c55JbyDlz0DWOS3VHeq8hMTlMt8PdVSWvmUY EMW9Z9JieLiqbMtT68nHrPnskpooF5144VPCyXxLE0bKRJrSwHRKgEdkpvqyoiCy eeSE+tONMYm9Z8s1LzSnafM3aET+EQXVZrMt6wD6eHJXvhcT9HeNeIeJoaCrCimx DAZeqM01PtIr1tI7kLS0kJc8RnLkp8bDQNUzn4fYIbicUIpNJxQhTeHdzocM5OYh 6Lk8S4vjnkuU4Tetovk9OdJX0Gv+f3fFhUjGs8gCReU08bWu+dCSd186nzfB8LOx Bm7wN+NRbTlO9yyxKeCKZxz1OWYQsLc= -----END CERTIFICATE-----Generated at Thu Nov 21 22:40:36 2024 by rpki-client on console-fra.rpki-client.org