$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/65ede538-d23e-3756-95dc-e6dbd41373e3.roa File: 65ede538-d23e-3756-95dc-e6dbd41373e3.roa (raw, json) Hash identifier: AVEbgcypkldkaOrg4zlHvDbNUXftmRvAcx/Qwu5Gybc= Subject key identifier: 1E:CD:E6:65:FE:9B:BE:5E:86:72:7C:BD:B2:32:F2:A6:70:DA:08:35 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584797E12DEB76A4730146A75080 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/65ede538-d23e-3756-95dc-e6dbd41373e3.roa Signing time: Sat 19 Oct 2024 13:00:42 +0000 ROA not before: Sat 19 Oct 2024 13:00:42 +0000 ROA not after: Fri 17 Jan 2025 14:00:42 +0000 asID: 31898 IP address blocks: 68.64.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:97:e1:2d:eb:76:a4:73:01:46:a7:50:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Oct 19 13:00:42 2024 GMT Not After : Jan 17 14:00:42 2025 GMT Subject: CN=8dfd47fa-2a80-4597-b86d-ffbc2265a198 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:db:84:9c:58:0d:ce:14:cd:4e:9e:28:f9:14: a9:1b:7a:eb:7d:9d:76:87:2c:1d:04:6a:6d:75:56: 05:40:d9:02:24:ca:01:e6:a0:47:b7:c3:4b:f9:19: d2:b6:18:18:0a:0e:93:b9:be:2c:67:78:56:b7:75: cc:87:92:e9:71:ce:24:3a:fa:19:b6:1a:41:a6:ec: 43:a5:b2:ad:b8:31:51:e4:30:1b:8e:7c:54:e2:01: 39:ad:f4:47:b8:d0:54:b1:54:45:8f:50:ab:aa:f3: f6:63:66:12:4a:fb:3c:af:8c:52:23:3f:a6:c2:ac: c1:d2:37:a6:ad:81:e8:1e:4e:7f:5a:1e:55:29:6b: 07:9b:2c:52:ea:4c:a8:b8:d3:0e:92:e2:6f:ba:98: ea:fc:d9:eb:b2:7b:cd:74:f9:d2:7a:96:bc:28:ea: d2:95:4c:d8:c7:00:27:4f:6c:30:73:fb:3d:b9:23: 7d:23:95:a6:f6:62:13:b2:b5:ab:15:26:48:0c:26: 05:a4:9f:1b:b8:b0:e8:ff:45:25:23:f6:9d:f6:6e: 77:e4:65:b0:90:81:5a:1c:5a:02:1a:55:7d:90:58: 9d:cb:6e:ed:36:c4:ad:da:af:c5:bc:9a:13:bf:a0: ab:92:fa:52:88:47:c9:52:0e:22:00:1f:54:f6:c1: cd:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:CD:E6:65:FE:9B:BE:5E:86:72:7C:BD:B2:32:F2:A6:70:DA:08:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/65ede538-d23e-3756-95dc-e6dbd41373e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 68.64.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:2e:75:1d:19:0a:d5:b6:e9:91:e7:76:fa:cf:7d:1a:8c:3b: 71:5b:46:fa:9e:dd:44:fe:e2:14:a8:bc:77:a6:5e:41:c0:b9: 7b:9e:e6:95:29:32:b1:74:1b:17:71:32:53:63:3b:72:eb:a5: 5b:c0:11:23:2f:98:c5:ac:62:b3:9e:54:53:6c:a9:eb:ce:7c: ae:c6:53:a9:71:24:ba:7d:84:93:1b:9d:60:3c:46:08:11:1f: b9:f8:73:fa:60:3b:11:89:82:30:49:6e:8a:52:bc:26:b0:b1: b5:b0:ac:38:f7:f2:a9:50:fe:95:1e:b8:3e:c2:58:7a:a2:03: b8:3a:4d:c3:7d:bb:d3:f6:4a:7c:fd:e5:ed:8e:a9:e2:00:22: 1c:ff:f0:e9:96:6a:07:16:ce:3d:70:cc:d2:04:6f:4b:da:4d: 4a:c7:06:3e:bd:ca:34:64:a0:d6:a7:9e:84:d4:cb:6c:cb:03: 48:94:de:d3:0e:e0:e8:64:96:5c:e0:43:d4:b4:e2:4c:2d:a4: 6a:a4:79:b3:40:29:44:a3:4a:f3:87:46:e9:e0:d3:72:30:96: e7:e2:56:bf:ce:e2:71:13:5b:68:15:ff:5a:10:24:07:b5:aa: 0b:77:11:0a:15:78:f4:5d:29:d3:5d:a8:86:9b:ff:8e:f0:db: 42:3b:ba:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeX4S3rdqRzAUanUIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI0MTAxOTEzMDA0MloXDTI1MDExNzE0MDA0MlowLzEtMCsGA1UEAxMk OGRmZDQ3ZmEtMmE4MC00NTk3LWI4NmQtZmZiYzIyNjVhMTk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttuEnFgNzhTNTp4o+RSpG3rrfZ12hywdBGpt dVYFQNkCJMoB5qBHt8NL+RnSthgYCg6Tub4sZ3hWt3XMh5Lpcc4kOvoZthpBpuxD pbKtuDFR5DAbjnxU4gE5rfRHuNBUsVRFj1CrqvP2Y2YSSvs8r4xSIz+mwqzB0jem rYHoHk5/Wh5VKWsHmyxS6kyouNMOkuJvupjq/NnrsnvNdPnSepa8KOrSlUzYxwAn T2wwc/s9uSN9I5Wm9mITsrWrFSZIDCYFpJ8buLDo/0UlI/ad9m535GWwkIFaHFoC GlV9kFidy27tNsSt2q/FvJoTv6CrkvpSiEfJUg4iAB9U9sHN2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB7N5mX+m75ehnJ8vbIy8qZw2gg1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvNjVlZGU1MzgtZDIzZS0z NzU2LTk1ZGMtZTZkYmQ0MTM3M2UzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAREAQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKIudR0ZCtW26ZHndvrPfRqMO3FbRvqe3UT+4hSovHemXkHAuXue5pUp MrF0GxdxMlNjO3LrpVvAESMvmMWsYrOeVFNsqevOfK7GU6lxJLp9hJMbnWA8RggR H7n4c/pgOxGJgjBJbopSvCawsbWwrDj38qlQ/pUeuD7CWHqiA7g6TcN9u9P2Snz9 5e2OqeIAIhz/8OmWagcWzj1wzNIEb0vaTUrHBj69yjRkoNannoTUy2zLA0iU3tMO 4OhkllzgQ9S04kwtpGqkebNAKUSjSvOHRung03IwlufiVr/O4nETW2gV/1oQJAe1 qgt3EQoVePRdKdNdqIab/47w20I7utM= -----END CERTIFICATE-----Generated at Thu Nov 21 22:40:38 2024 by rpki-client on console-fra.rpki-client.org