$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/21bd1296-c71c-3c5f-a52f-10b2a82e9b6e.roa File: 21bd1296-c71c-3c5f-a52f-10b2a82e9b6e.roa (raw, json) Hash identifier: JfCWxwdBbkGksDRCdqKKPISQYEaRKKMibblz3k9+2fs= Subject key identifier: D9:61:83:11:0B:BB:C8:30:86:4C:3D:51:12:D0:7F:EC:46:2C:B3:D3 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285847BEFBC416DD7C04F909ABCBC0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/21bd1296-c71c-3c5f-a52f-10b2a82e9b6e.roa Signing time: Sat 02 Nov 2024 13:00:42 +0000 ROA not before: Sat 02 Nov 2024 13:00:42 +0000 ROA not after: Fri 31 Jan 2025 14:00:42 +0000 asID: 33491 IP address blocks: 68.87.232.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 25 Dec 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:be:fb:c4:16:dd:7c:04:f9:09:ab:cb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Nov 2 13:00:42 2024 GMT Not After : Jan 31 14:00:42 2025 GMT Subject: CN=4d67353e-b215-4595-9720-9db4ec7eca97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f3:36:56:db:54:4d:2c:41:9e:86:8e:05:e0: 08:be:b2:7e:08:0b:58:d2:2d:2e:b5:84:14:af:40: d9:f1:08:fc:07:6d:fe:67:19:d2:bc:90:f6:93:a5: 40:0e:8a:e0:82:d0:4c:d7:7c:b4:1e:8c:ab:10:5d: 9b:13:0d:76:17:be:44:7e:7d:3d:98:ff:b4:b9:a9: a4:a6:aa:3f:bc:c8:10:24:cf:5e:60:4e:17:3a:b7: 75:a5:ca:a4:8d:fa:e2:ad:78:a2:e4:8e:04:e9:73: 05:38:02:f9:5e:53:c8:06:d6:0c:c7:3f:a9:3f:57: c1:24:e6:e2:af:f2:94:86:10:27:56:6f:1c:c3:bb: 00:5a:8a:ac:38:cd:eb:53:65:1c:8f:9e:36:71:1d: aa:39:48:ad:0f:ea:26:60:da:a3:46:b3:40:e9:bb: d9:2d:59:55:a3:23:0c:42:02:a7:bb:a6:5d:bf:93: 18:ec:2d:cf:5e:35:fe:30:9f:23:43:7a:fb:0f:90: 8d:96:f1:5c:9c:c9:ce:d9:36:37:1b:bb:81:10:89: e4:21:fb:e1:2f:a4:b2:ea:58:b9:52:30:1a:66:96: 18:2b:79:97:5a:91:19:43:0e:11:db:dd:37:32:7f: 7f:33:30:ea:d9:76:5a:f0:3d:16:f1:e6:c7:e7:2b: ca:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:61:83:11:0B:BB:C8:30:86:4C:3D:51:12:D0:7F:EC:46:2C:B3:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/21bd1296-c71c-3c5f-a52f-10b2a82e9b6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.87.232.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:00:88:3d:05:2d:44:30:9d:05:6c:8a:1c:d7:45:b4:5f:d8: 60:5c:c4:b8:07:85:11:4f:f5:9a:5f:81:84:8b:aa:5d:05:80: 2a:5f:34:81:ba:a8:7c:15:33:2c:2b:da:dc:00:0c:15:22:a0: 15:5f:27:12:f4:ff:82:61:0e:b6:51:04:ff:b3:37:b4:d7:21: 2c:c7:c6:78:6e:f1:a1:ce:54:b3:a7:19:42:3b:8d:6a:4d:5d: c8:ca:1a:f2:46:44:fe:fa:07:08:e6:ee:6d:fc:f3:24:e7:49: 83:10:d6:fd:d3:dc:36:f9:64:08:a3:80:1c:90:31:a3:a0:e7: cd:2c:a8:0e:92:e9:68:3d:16:6d:59:da:f8:29:e7:d3:f1:a6: ca:dd:fb:0c:39:f4:4e:6b:c8:e2:76:c4:5a:8e:ed:72:2a:2c: d6:5a:9e:7d:2b:cc:74:37:87:5c:10:59:2b:97:29:d5:ac:fd: bf:00:37:f9:e2:0b:97:54:99:9a:b6:44:b0:6e:c9:5e:d1:c5: ec:09:61:94:44:14:9b:f2:8b:58:53:e0:8f:81:65:ad:84:80: b4:5c:d4:c5:21:d5:27:55:fe:e2:aa:5c:8b:3e:76:15:1e:ed: d9:77:d1:1d:ac:c5:26:4c:20:88:a7:b8:66:a9:b5:5c:dc:47: 79:c5:8c:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe++8QW3XwE+Qmry8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MTEwMjEzMDA0MloXDTI1MDEzMTE0MDA0MlowLzEtMCsGA1UEAxMk NGQ2NzM1M2UtYjIxNS00NTk1LTk3MjAtOWRiNGVjN2VjYTk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/M2VttUTSxBnoaOBeAIvrJ+CAtY0i0utYQU r0DZ8Qj8B23+ZxnSvJD2k6VADorggtBM13y0HoyrEF2bEw12F75Efn09mP+0uamk pqo/vMgQJM9eYE4XOrd1pcqkjfrirXii5I4E6XMFOAL5XlPIBtYMxz+pP1fBJObi r/KUhhAnVm8cw7sAWoqsOM3rU2Ucj542cR2qOUitD+omYNqjRrNA6bvZLVlVoyMM QgKnu6Zdv5MY7C3PXjX+MJ8jQ3r7D5CNlvFcnMnO2TY3G7uBEInkIfvhL6Sy6li5 UjAaZpYYK3mXWpEZQw4R2903Mn9/MzDq2XZa8D0W8ebH5yvKQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNlhgxELu8gwhkw9URLQf+xGLLPTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjFiZDEyOTYtYzcxYy0z YzVmLWE1MmYtMTBiMmE4MmU5YjZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRFfoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABIAiD0FLUQwnQVsihzXRbRf2GBcxLgHhRFP9ZpfgYSLql0FgCpfNIG6 qHwVMywr2twADBUioBVfJxL0/4JhDrZRBP+zN7TXISzHxnhu8aHOVLOnGUI7jWpN XcjKGvJGRP76Bwjm7m388yTnSYMQ1v3T3Db5ZAijgByQMaOg580sqA6S6Wg9Fm1Z 2vgp59Pxpsrd+ww59E5ryOJ2xFqO7XIqLNZann0rzHQ3h1wQWSuXKdWs/b8AN/ni C5dUmZq2RLBuyV7RxewJYZREFJvyi1hT4I+BZa2EgLRc1MUh1SdV/uKqXIs+dhUe 7dl30R2sxSZMIIinuGaptVzcR3nFjHs= -----END CERTIFICATE-----Generated at Sun Dec 22 16:12:57 2024 by rpki-client on console-ams.rpki-client.org