$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/2928b3e5-3758-38df-b7af-e739bfc0498e.roa File: 2928b3e5-3758-38df-b7af-e739bfc0498e.roa (raw, json) Hash identifier: 2cP3KDVP4QqEDn4A573vlDHbdfjcTJvNlRdN99YJ0dA= Subject key identifier: BA:76:82:D2:9F:87:4A:91:DE:E1:FC:C6:BD:36:06:8C:7A:28:EC:E5 Certificate issuer: /CN=afc9c4c7-de4a-4066-870e-383d770d6d47 Certificate serial: 010D0C9F432858477BF6568E02A321186A7BAD80 Authority key identifier: 5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/2928b3e5-3758-38df-b7af-e739bfc0498e.roa Signing time: Wed 09 Oct 2024 13:00:42 +0000 ROA not before: Wed 09 Oct 2024 13:00:42 +0000 ROA not after: Tue 07 Jan 2025 14:00:42 +0000 asID: 14500 IP address blocks: 68.70.148.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:7b:f6:56:8e:02:a3:21:18:6a:7b:ad:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afc9c4c7-de4a-4066-870e-383d770d6d47 Validity Not Before: Oct 9 13:00:42 2024 GMT Not After : Jan 7 14:00:42 2025 GMT Subject: CN=c2b3ff31-f8e4-498d-a6da-4ed3abb6d8d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:76:60:7f:36:61:51:54:15:b0:07:60:55:4d: 7b:33:f9:d2:a1:9e:cb:f8:df:ea:5d:6f:af:7c:4f: f3:62:6d:df:52:c6:26:91:bf:80:38:e4:fb:38:80: ee:a4:f9:ac:5f:da:b5:0a:cd:20:1a:f4:38:10:c7: 1a:53:d1:6b:22:e7:ba:2b:72:f9:0f:c4:d6:c3:18: ec:c5:19:dd:86:01:85:5a:e4:c9:c5:19:ca:79:cd: 13:c8:68:00:b4:8f:b9:06:10:76:cc:ce:6f:95:4a: 66:2f:5b:ca:85:58:c5:a5:1c:5a:b8:94:0b:3b:6d: 19:42:5e:37:24:4e:aa:3f:70:89:ff:c9:07:27:02: 9e:e5:73:9e:24:ec:b5:0d:e1:c9:6c:ad:3b:9c:8c: 9a:e9:06:cf:31:22:f3:41:71:26:65:f8:c0:94:56: e0:55:9a:d9:fa:44:37:fb:46:8d:1c:42:88:04:42: ac:e8:46:1a:ea:c2:15:d4:56:f2:cd:c0:46:54:16: 20:37:c1:d3:1a:5d:3d:f3:c4:92:71:e0:37:c2:99: f0:0d:70:c7:bf:c4:4c:2e:50:c9:32:cf:b4:cd:c5: 2d:77:ca:cb:7d:2f:d3:b9:b5:76:3a:12:86:02:9a: 28:cd:c9:32:48:6e:59:6b:c4:ec:5e:61:44:74:c0: 6e:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:76:82:D2:9F:87:4A:91:DE:E1:FC:C6:BD:36:06:8C:7A:28:EC:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/2928b3e5-3758-38df-b7af-e739bfc0498e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.crl X509v3 Authority Key Identifier: keyid:5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer sbgp-ipAddrBlock: critical IPv4: 68.70.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:ee:6f:f7:22:f7:24:69:2b:16:07:86:9c:68:fd:d6:50:7d: de:34:94:02:9d:1a:7a:88:d6:58:8f:f8:a2:cd:85:44:71:32: e8:4e:9b:82:b6:df:b8:50:77:11:a7:c3:ac:03:fe:b0:ba:24: 80:37:a0:a0:ac:e6:3c:12:b3:bf:3d:f5:e0:e4:6b:37:7f:3e: 02:58:04:41:01:c8:cc:37:cb:9c:d5:09:b6:37:c3:ad:d8:fa: 7d:4f:24:2d:1c:52:db:ae:aa:bc:7a:f5:d7:f8:4b:90:03:0a: a2:b6:cc:92:bd:94:f1:86:31:75:68:2d:f1:16:3a:c5:9e:72: 4c:da:e0:57:a2:2d:ea:45:e3:ce:53:57:16:55:a6:6a:d3:9a: df:9f:e7:a5:c6:64:57:aa:16:fe:ff:37:f3:aa:43:26:e7:53: 0f:f2:dd:5f:7e:40:c4:e4:14:8c:06:8e:87:bb:9d:6c:44:59: d8:a6:2a:ee:9a:7e:44:83:c8:7d:f0:39:41:2b:53:d8:92:5c: d2:cb:79:56:4f:c4:d7:80:dd:5e:c6:6a:69:3a:0a:e9:05:f4: 18:4e:57:b1:43:9f:43:44:6a:ce:09:ed:c8:8f:a6:4f:51:7c: 61:c2:08:ca:f5:b2:c7:03:8f:9b:01:13:f8:90:7d:27:54:52: 2b:62:35:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd79laOAqMhGGp7rYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZjOWM0YzctZGU0YS00MDY2LTg3MGUtMzgzZDc3MGQ2 ZDQ3MB4XDTI0MTAwOTEzMDA0MloXDTI1MDEwNzE0MDA0MlowLzEtMCsGA1UEAxMk YzJiM2ZmMzEtZjhlNC00OThkLWE2ZGEtNGVkM2FiYjZkOGQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHZgfzZhUVQVsAdgVU17M/nSoZ7L+N/qXW+v fE/zYm3fUsYmkb+AOOT7OIDupPmsX9q1Cs0gGvQ4EMcaU9FrIue6K3L5D8TWwxjs xRndhgGFWuTJxRnKec0TyGgAtI+5BhB2zM5vlUpmL1vKhVjFpRxauJQLO20ZQl43 JE6qP3CJ/8kHJwKe5XOeJOy1DeHJbK07nIya6QbPMSLzQXEmZfjAlFbgVZrZ+kQ3 +0aNHEKIBEKs6EYa6sIV1FbyzcBGVBYgN8HTGl0988SSceA3wpnwDXDHv8RMLlDJ Ms+0zcUtd8rLfS/TubV2OhKGApoozckySG5Za8TsXmFEdMBuGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLp2gtKfh0qR3uH8xr02Box6KOzlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hZmM5 YzRjNy1kZTRhLTQwNjYtODcwZS0zODNkNzcwZDZkNDcvMjkyOGIzZTUtMzc1OC0z OGRmLWI3YWYtZTczOWJmYzA0OThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWZjOWM0YzctZGU0YS00MDY2LTg3 MGUtMzgzZDc3MGQ2ZDQ3L2FmYzljNGM3LWRlNGEtNDA2Ni04NzBlLTM4M2Q3NzBk NmQ0Ny5jcmwwHwYDVR0jBBgwFoAUXX3Bvtm/pH6PXLAL1PiCUDDM2fIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hZmM5YzRjNy1kZTRhLTQwNjYtODcwZS0zODNk NzcwZDZkNDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCREaUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAnub/ci9yRpKxYHhpxo/dZQfd40lAKdGnqI1liP+KLNhURxMuhOm4K2 37hQdxGnw6wD/rC6JIA3oKCs5jwSs7899eDkazd/PgJYBEEByMw3y5zVCbY3w63Y +n1PJC0cUtuuqrx69df4S5ADCqK2zJK9lPGGMXVoLfEWOsWeckza4FeiLepF485T VxZVpmrTmt+f56XGZFeqFv7/N/OqQybnUw/y3V9+QMTkFIwGjoe7nWxEWdimKu6a fkSDyH3wOUErU9iSXNLLeVZPxNeA3V7Gamk6CukF9BhOV7FDn0NEas4J7ciPpk9R fGHCCMr1sscDj5sBE/iQfSdUUitiNSY= -----END CERTIFICATE-----Generated at Thu Nov 21 22:40:39 2024 by rpki-client on console-fra.rpki-client.org