$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/802e4f3e-477d-3343-b4df-4044a49cb54d.roa File: 802e4f3e-477d-3343-b4df-4044a49cb54d.roa (raw, json) Hash identifier: rRGrEgBTNxLWlmBRFrTop0ZKKUQpAMcFy9+CUH7CMow= Subject key identifier: 3E:75:A8:2A:4C:12:23:BC:62:3B:7C:F3:9E:1C:C6:02:B8:8B:1A:45 Certificate issuer: /CN=afc9c4c7-de4a-4066-870e-383d770d6d47 Certificate serial: 010D0C9F432858477BF6567735EA95F1EDEAB140 Authority key identifier: 5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/802e4f3e-477d-3343-b4df-4044a49cb54d.roa Signing time: Wed 09 Oct 2024 13:00:42 +0000 ROA not before: Wed 09 Oct 2024 13:00:42 +0000 ROA not after: Tue 07 Jan 2025 14:00:42 +0000 asID: 14500 IP address blocks: 68.70.144.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:7b:f6:56:77:35:ea:95:f1:ed:ea:b1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afc9c4c7-de4a-4066-870e-383d770d6d47 Validity Not Before: Oct 9 13:00:42 2024 GMT Not After : Jan 7 14:00:42 2025 GMT Subject: CN=1fc08508-96ed-4c34-8f03-17d6ce87c676 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c7:a0:29:78:bd:70:83:9d:fe:ec:82:ba:61: f3:0b:75:da:d5:fa:a4:82:a4:f8:07:b3:5c:96:5e: df:e6:b2:da:15:c8:cf:33:8a:63:56:b4:e0:4c:65: 04:6f:61:c0:68:54:af:5c:f2:7e:e8:48:f9:8c:99: 43:8e:ed:78:0a:1b:6f:5c:c8:3f:63:51:d2:69:07: 83:c1:82:0c:01:1f:ec:75:da:e9:76:69:c5:57:44: cc:ce:a4:74:b1:6a:94:2d:6a:b7:79:ae:da:67:d5: 78:0b:1b:83:f9:59:4f:7b:c0:f2:38:31:13:80:a3: 4f:bd:5c:ff:1b:35:80:34:bb:dc:30:f1:99:97:6e: 0d:f4:b6:e8:41:83:d2:94:1a:df:d3:c9:72:b4:0c: 84:40:90:1b:d1:c6:48:e0:36:5e:d9:f5:92:20:bb: e1:d4:8d:c4:bb:d1:6c:dc:d3:ff:f3:f8:08:21:a5: 3d:8f:0d:94:25:b5:f7:a8:09:88:29:87:10:0d:13: f5:1e:a3:e0:fc:36:a7:f8:b5:31:e9:f5:02:1f:32: 18:80:a0:8c:38:5a:cf:67:ef:55:cf:30:75:e0:4f: 5e:52:96:5f:6d:1b:3a:bd:34:87:17:21:79:8c:c3: c1:44:47:37:da:32:ea:ca:3b:5f:dd:b0:e6:3f:b3: 08:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:75:A8:2A:4C:12:23:BC:62:3B:7C:F3:9E:1C:C6:02:B8:8B:1A:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/802e4f3e-477d-3343-b4df-4044a49cb54d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.crl X509v3 Authority Key Identifier: keyid:5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer sbgp-ipAddrBlock: critical IPv4: 68.70.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:25:4e:9d:db:2a:8c:cd:18:4c:f3:85:1d:09:30:00:dc:0c: 1f:82:d3:1e:c3:ee:f9:ef:06:08:bb:d6:98:18:dd:9e:75:76: c0:06:3c:1f:62:b5:91:b6:f6:8e:99:9a:88:cf:37:af:f5:c4: 2e:56:3d:f2:77:fd:ff:25:69:60:ad:fb:a9:00:ae:27:72:ac: fe:e5:3c:67:d7:1a:d5:ad:a0:ff:1a:fd:99:e3:a0:63:a8:c3: 43:7d:d8:47:5a:43:08:91:02:d9:62:da:48:bb:f4:37:e6:42: c7:c3:5a:74:eb:32:e8:a8:4d:fd:a0:a3:98:8c:df:b3:af:e0: 04:39:00:d2:46:83:db:f8:86:06:6c:ee:b2:66:ce:42:01:ea: a5:41:26:58:21:7d:44:26:06:ed:63:e3:1f:45:99:af:05:33: d9:f3:a8:70:e6:13:f9:37:8f:6b:f8:e6:97:92:ce:5f:1f:37: 7c:b4:4f:a2:fb:27:cc:62:df:5d:de:b4:a5:de:ab:cb:c6:2e: 51:c9:dc:90:f4:7f:1c:c7:fc:cd:57:af:f3:e5:0e:e5:7e:0a: 88:ad:14:5d:55:04:52:a8:a0:be:b4:90:c3:b4:c1:b9:64:16: da:92:2c:6f:f0:0e:4a:b5:85:ca:93:99:ec:a3:a4:70:0d:f0: 00:6e:f8:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd79lZ3NeqV8e3qsUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZjOWM0YzctZGU0YS00MDY2LTg3MGUtMzgzZDc3MGQ2 ZDQ3MB4XDTI0MTAwOTEzMDA0MloXDTI1MDEwNzE0MDA0MlowLzEtMCsGA1UEAxMk MWZjMDg1MDgtOTZlZC00YzM0LThmMDMtMTdkNmNlODdjNjc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8egKXi9cIOd/uyCumHzC3Xa1fqkgqT4B7Nc ll7f5rLaFcjPM4pjVrTgTGUEb2HAaFSvXPJ+6Ej5jJlDju14ChtvXMg/Y1HSaQeD wYIMAR/sddrpdmnFV0TMzqR0sWqULWq3ea7aZ9V4CxuD+VlPe8DyODETgKNPvVz/ GzWANLvcMPGZl24N9LboQYPSlBrf08lytAyEQJAb0cZI4DZe2fWSILvh1I3Eu9Fs 3NP/8/gIIaU9jw2UJbX3qAmIKYcQDRP1HqPg/Dan+LUx6fUCHzIYgKCMOFrPZ+9V zzB14E9eUpZfbRs6vTSHFyF5jMPBREc32jLqyjtf3bDmP7MITQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD51qCpMEiO8Yjt8854cxgK4ixpFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hZmM5 YzRjNy1kZTRhLTQwNjYtODcwZS0zODNkNzcwZDZkNDcvODAyZTRmM2UtNDc3ZC0z MzQzLWI0ZGYtNDA0NGE0OWNiNTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWZjOWM0YzctZGU0YS00MDY2LTg3 MGUtMzgzZDc3MGQ2ZDQ3L2FmYzljNGM3LWRlNGEtNDA2Ni04NzBlLTM4M2Q3NzBk NmQ0Ny5jcmwwHwYDVR0jBBgwFoAUXX3Bvtm/pH6PXLAL1PiCUDDM2fIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hZmM5YzRjNy1kZTRhLTQwNjYtODcwZS0zODNk NzcwZDZkNDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCREaQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGolTp3bKozNGEzzhR0JMADcDB+C0x7D7vnvBgi71pgY3Z51dsAGPB9i tZG29o6ZmojPN6/1xC5WPfJ3/f8laWCt+6kAridyrP7lPGfXGtWtoP8a/ZnjoGOo w0N92EdaQwiRAtli2ki79DfmQsfDWnTrMuioTf2go5iM37Ov4AQ5ANJGg9v4hgZs 7rJmzkIB6qVBJlghfUQmBu1j4x9Fma8FM9nzqHDmE/k3j2v45peSzl8fN3y0T6L7 J8xi313etKXeq8vGLlHJ3JD0fxzH/M1Xr/PlDuV+CoitFF1VBFKooL60kMO0wblk FtqSLG/wDkq1hcqTmeyjpHAN8ABu+IA= -----END CERTIFICATE-----Generated at Thu Nov 21 22:40:39 2024 by rpki-client on console-fra.rpki-client.org