$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d1f3fb34-9d61-4476-8110-8ca2876e7928/8ab98763-57d8-3406-a6ea-f78fae4ed6ca.roa File: 8ab98763-57d8-3406-a6ea-f78fae4ed6ca.roa (raw, json) Hash identifier: RkV9ZOHL8F7pnuRuD69B6hBR4ZFyLG7P1hHl3oVKeWU= Subject key identifier: AC:C3:C4:0D:A7:BF:F5:56:C0:22:B2:7E:00:44:07:49:5C:BD:7F:8D Certificate issuer: /CN=d1f3fb34-9d61-4476-8110-8ca2876e7928 Certificate serial: 010D0C9F4328584733609A5F4D718899F0FDB460 Authority key identifier: 1D:5C:6D:97:7B:0E:D0:8B:17:07:49:4E:9F:2D:CF:14:CE:B9:8A:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d1f3fb34-9d61-4476-8110-8ca2876e7928.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d1f3fb34-9d61-4476-8110-8ca2876e7928/8ab98763-57d8-3406-a6ea-f78fae4ed6ca.roa Signing time: Fri 13 Sep 2024 13:00:41 +0000 ROA not before: Fri 13 Sep 2024 13:00:41 +0000 ROA not after: Thu 12 Dec 2024 14:00:41 +0000 asID: 14618 IP address blocks: 68.70.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d1f3fb34-9d61-4476-8110-8ca2876e7928/d1f3fb34-9d61-4476-8110-8ca2876e7928.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d1f3fb34-9d61-4476-8110-8ca2876e7928/d1f3fb34-9d61-4476-8110-8ca2876e7928.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d1f3fb34-9d61-4476-8110-8ca2876e7928.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:33:60:9a:5f:4d:71:88:99:f0:fd:b4:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1f3fb34-9d61-4476-8110-8ca2876e7928 Validity Not Before: Sep 13 13:00:41 2024 GMT Not After : Dec 12 14:00:41 2024 GMT Subject: CN=ff852136-48aa-42c3-803d-daf7bbf85c4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:36:9e:e6:e5:01:98:a6:3b:1b:b5:2e:c7:d9: 78:a6:a0:cc:1f:bd:c7:5c:b3:13:f1:6f:d3:28:a1: 77:3f:09:9e:dd:88:1f:64:a5:fe:f2:d7:42:5c:85: 22:cf:fd:2b:65:88:1f:88:00:8d:d6:cc:a9:50:72: fd:d0:77:4e:ac:36:ef:6c:61:e9:86:d8:5e:3c:14: bb:e6:ae:dc:af:75:b8:82:90:7e:a0:46:d8:e3:d9: cc:e8:20:0e:8e:4d:92:e1:22:75:59:fe:d5:58:74: d8:cb:49:82:5d:3e:e2:a0:a8:0d:01:0c:cd:89:0a: df:4c:b5:68:20:52:79:b5:e1:8e:ce:e2:f8:76:87: 67:aa:4e:05:3e:32:a7:b7:46:c3:33:bb:98:b8:26: 62:4f:90:79:fb:dc:8d:f5:c0:38:cd:ce:7c:0d:cf: 77:24:18:cc:e7:aa:b8:96:b8:a8:3c:81:f3:44:25: 78:8e:a0:ad:1b:77:96:1a:cd:f2:7b:62:58:a6:dc: 3d:10:ef:75:18:1b:95:70:bc:aa:18:fa:12:bd:47: 6c:f3:6c:47:cc:ea:95:fc:3c:ee:9f:9f:e5:1d:fb: 38:e6:b1:52:c3:6a:63:55:ae:3f:45:e4:ed:cd:d0: 1b:6b:18:79:28:5c:35:ba:b8:f7:bc:07:99:d9:b7: ca:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:C3:C4:0D:A7:BF:F5:56:C0:22:B2:7E:00:44:07:49:5C:BD:7F:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d1f3fb34-9d61-4476-8110-8ca2876e7928/8ab98763-57d8-3406-a6ea-f78fae4ed6ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d1f3fb34-9d61-4476-8110-8ca2876e7928/d1f3fb34-9d61-4476-8110-8ca2876e7928.crl X509v3 Authority Key Identifier: keyid:1D:5C:6D:97:7B:0E:D0:8B:17:07:49:4E:9F:2D:CF:14:CE:B9:8A:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d1f3fb34-9d61-4476-8110-8ca2876e7928.cer sbgp-ipAddrBlock: critical IPv4: 68.70.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:bf:69:82:1d:7d:01:f0:16:96:23:b0:0a:a9:7e:cc:91:8e: 53:0e:fe:49:c9:9e:c0:85:aa:7d:e6:10:c7:de:b6:e9:fd:64: ae:5d:45:da:74:dd:aa:95:6a:d9:62:a5:27:ac:ce:50:41:87: 7a:d5:23:98:d0:72:93:d6:be:d5:e6:03:21:bb:f0:54:42:67: cc:60:fa:a3:08:16:4f:43:78:a2:6e:c4:22:1a:0a:02:1d:1b: 1f:6c:d6:19:d3:59:05:aa:a3:32:0b:48:4f:7d:48:9d:ce:d0: c4:18:f1:ad:dd:9b:8a:93:9e:d3:0d:16:18:95:e8:d7:c5:0b: 8f:0e:a0:f9:83:09:76:05:28:bf:ac:03:28:fc:22:d3:5d:4f: 18:fd:f5:05:25:fe:d5:ca:1f:60:bc:45:c9:c1:4f:b8:04:15: 58:41:39:cd:09:11:d5:89:9f:bb:70:19:32:0e:10:64:57:5b: 0b:bb:3a:f9:67:39:a7:c9:16:56:33:8e:7c:cc:a9:1d:b7:f6: f7:9e:7e:5b:e6:a2:6d:40:a0:e2:6f:af:10:8d:60:3c:2a:33: 24:14:a2:5d:9c:7e:09:7f:6a:60:cf:30:66:37:80:9e:db:3d: 61:fa:3a:30:ab:ff:f2:91:2a:02:49:1e:c6:1b:40:d6:ed:34: dc:03:3e:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEczYJpfTXGImfD9tGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDFmM2ZiMzQtOWQ2MS00NDc2LTgxMTAtOGNhMjg3NmU3 OTI4MB4XDTI0MDkxMzEzMDA0MVoXDTI0MTIxMjE0MDA0MVowLzEtMCsGA1UEAxMk ZmY4NTIxMzYtNDhhYS00MmMzLTgwM2QtZGFmN2JiZjg1YzRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTae5uUBmKY7G7Uux9l4pqDMH73HXLMT8W/T KKF3Pwme3YgfZKX+8tdCXIUiz/0rZYgfiACN1sypUHL90HdOrDbvbGHphthePBS7 5q7cr3W4gpB+oEbY49nM6CAOjk2S4SJ1Wf7VWHTYy0mCXT7ioKgNAQzNiQrfTLVo IFJ5teGOzuL4dodnqk4FPjKnt0bDM7uYuCZiT5B5+9yN9cA4zc58Dc93JBjM56q4 lrioPIHzRCV4jqCtG3eWGs3ye2JYptw9EO91GBuVcLyqGPoSvUds82xHzOqV/Dzu n5/lHfs45rFSw2pjVa4/ReTtzdAbaxh5KFw1urj3vAeZ2bfK4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKzDxA2nv/VWwCKyfgBEB0lcvX+NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kMWYz ZmIzNC05ZDYxLTQ0NzYtODExMC04Y2EyODc2ZTc5MjgvOGFiOTg3NjMtNTdkOC0z NDA2LWE2ZWEtZjc4ZmFlNGVkNmNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZDFmM2ZiMzQtOWQ2MS00NDc2LTgx MTAtOGNhMjg3NmU3OTI4L2QxZjNmYjM0LTlkNjEtNDQ3Ni04MTEwLThjYTI4NzZl NzkyOC5jcmwwHwYDVR0jBBgwFoAUHVxtl3sO0IsXB0lOny3PFM65iiYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kMWYzZmIzNC05ZDYxLTQ0NzYtODExMC04Y2Ey ODc2ZTc5MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAREZ/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJi/aYIdfQHwFpYjsAqpfsyRjlMO/knJnsCFqn3mEMfetun9ZK5dRdp0 3aqVatlipSeszlBBh3rVI5jQcpPWvtXmAyG78FRCZ8xg+qMIFk9DeKJuxCIaCgId Gx9s1hnTWQWqozILSE99SJ3O0MQY8a3dm4qTntMNFhiV6NfFC48OoPmDCXYFKL+s Ayj8ItNdTxj99QUl/tXKH2C8RcnBT7gEFVhBOc0JEdWJn7twGTIOEGRXWwu7Ovln OafJFlYzjnzMqR239veeflvmom1AoOJvrxCNYDwqMyQUol2cfgl/amDPMGY3gJ7b PWH6OjCr//KRKgJJHsYbQNbtNNwDPgE= -----END CERTIFICATE-----Generated at Sun Nov 24 23:59:19 2024 by rpki-client on console-fra.rpki-client.org