$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2b6de6e0-223b-33df-9fa1-478f0a7d0543.roa File: 2b6de6e0-223b-33df-9fa1-478f0a7d0543.roa (raw, json) Hash identifier: qDUoOe3xFSPXWzQxDtqZJ1No5GcmLXS2sEjZzH86yMI= Subject key identifier: D1:41:48:EB:93:E8:F6:9C:10:E3:CB:E9:06:E6:06:48:CB:89:1F:37 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584734C7C064C7C3D253FD02A500 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2b6de6e0-223b-33df-9fa1-478f0a7d0543.roa Signing time: Sat 14 Sep 2024 01:00:32 +0000 ROA not before: Sat 14 Sep 2024 01:00:32 +0000 ROA not after: Fri 13 Dec 2024 02:00:32 +0000 asID: 33668 IP address blocks: 73.161.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:34:c7:c0:64:c7:c3:d2:53:fd:02:a5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 14 01:00:32 2024 GMT Not After : Dec 13 02:00:32 2024 GMT Subject: CN=ca09cbfe-2997-4afc-ae8d-559c709aa943 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:24:84:64:21:d5:45:76:3a:48:06:90:59:4f: 1f:d9:bf:40:2a:c2:22:5d:5d:d3:b6:4c:b7:90:a3: c3:5b:60:d5:ed:d4:5d:c9:a2:00:d8:2b:7c:8b:e1: d8:4e:a7:44:2f:4e:fb:e0:99:28:95:22:fc:27:8f: 6f:eb:f6:b4:6f:cd:38:0f:f0:e9:35:bf:f8:2b:35: cc:68:56:07:7f:af:43:08:fb:a7:89:82:1f:de:68: a7:99:ab:c8:9a:94:fe:de:6a:4e:31:c8:15:35:58: 2e:83:bc:d8:be:68:fe:dc:ac:98:51:d6:ac:83:3a: 70:1b:d1:22:dd:06:14:50:11:a8:05:b2:d1:e4:22: 47:12:8b:b7:3e:9f:9c:f1:02:2d:41:01:5c:07:a1: 98:57:41:95:5b:d7:ea:51:0a:d5:cf:32:11:c1:a9: 8b:d0:b0:25:14:04:21:f8:69:91:3d:2d:eb:38:53: e2:21:a9:f8:7d:36:61:57:62:9d:b3:20:dc:59:b0: 44:80:bc:e2:06:97:29:56:2c:91:b0:af:69:ef:79: 90:8f:6d:f2:44:e3:51:30:87:ac:6e:f2:2c:dd:17: 2b:42:af:31:cf:c8:85:3e:78:1d:58:97:4a:16:01: 25:55:45:b5:d4:d8:3e:94:a0:30:1e:43:4c:58:7f: e9:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:41:48:EB:93:E8:F6:9C:10:E3:CB:E9:06:E6:06:48:CB:89:1F:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2b6de6e0-223b-33df-9fa1-478f0a7d0543.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.161.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c0:4e:91:ca:65:89:6c:a0:46:41:ef:d7:49:e1:23:fd:d5:65: 7b:3b:79:b8:1d:86:79:50:8b:a2:80:51:f9:5a:46:14:cc:69: c6:84:c3:3a:5f:28:87:e0:6e:bc:64:18:06:08:a0:b3:e8:39: 4d:15:02:e8:ca:72:0e:f2:27:c1:f8:c6:dd:7f:2d:ed:e6:7e: 19:28:e1:f0:5c:f8:b2:de:65:13:64:1e:59:80:02:fb:28:e8: 9f:93:47:4d:92:c3:11:e6:b2:58:f8:09:44:bf:68:80:2a:3c: 31:e0:93:31:8e:5b:14:05:8b:e2:30:d6:3c:8a:2a:70:51:bb: 82:06:61:9e:fc:c3:58:d0:5b:90:13:ed:a2:a2:8f:b9:16:2b: e8:75:42:9c:33:cb:ac:10:2c:8c:f3:7e:05:b7:41:ee:d0:a8: f1:5d:20:2f:eb:9b:50:79:44:53:fc:3b:02:3b:d3:b0:03:89: 2b:e7:de:52:91:af:d4:00:f7:70:39:18:b6:dc:b0:05:9c:22: 53:d5:08:dc:9b:9d:cb:c3:1f:13:fa:14:d6:c0:89:e8:da:f7: 21:8e:b7:d5:e1:38:4d:44:d5:24:de:d6:77:7a:bc:92:77:33: ba:79:1c:83:ff:c3:02:b5:82:a7:bb:82:57:ef:be:6f:2c:64: f0:09:c9:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc0x8Bkx8PSU/0CpQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MDkxNDAxMDAzMloXDTI0MTIxMzAyMDAzMlowLzEtMCsGA1UEAxMk Y2EwOWNiZmUtMjk5Ny00YWZjLWFlOGQtNTU5YzcwOWFhOTQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ySEZCHVRXY6SAaQWU8f2b9AKsIiXV3Ttky3 kKPDW2DV7dRdyaIA2Ct8i+HYTqdEL0774JkolSL8J49v6/a0b804D/DpNb/4KzXM aFYHf69DCPuniYIf3minmavImpT+3mpOMcgVNVgug7zYvmj+3KyYUdasgzpwG9Ei 3QYUUBGoBbLR5CJHEou3Pp+c8QItQQFcB6GYV0GVW9fqUQrVzzIRwamL0LAlFAQh +GmRPS3rOFPiIan4fTZhV2KdsyDcWbBEgLziBpcpViyRsK9p73mQj23yRONRMIes bvIs3RcrQq8xz8iFPngdWJdKFgElVUW11Ng+lKAwHkNMWH/pGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNFBSOuT6PacEOPL6QbmBkjLiR83MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMmI2ZGU2ZTAtMjIzYi0z M2RmLTlmYTEtNDc4ZjBhN2QwNTQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSaHQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMBOkcpliWygRkHv10nhI/3VZXs7ebgdhnlQi6KAUflaRhTMacaEwzpf KIfgbrxkGAYIoLPoOU0VAujKcg7yJ8H4xt1/Le3mfhko4fBc+LLeZRNkHlmAAvso 6J+TR02SwxHmslj4CUS/aIAqPDHgkzGOWxQFi+Iw1jyKKnBRu4IGYZ78w1jQW5AT 7aKij7kWK+h1Qpwzy6wQLIzzfgW3Qe7QqPFdIC/rm1B5RFP8OwI707ADiSvn3lKR r9QA93A5GLbcsAWcIlPVCNybncvDHxP6FNbAieja9yGOt9XhOE1E1STe1nd6vJJ3 M7p5HIP/wwK1gqe7glfvvm8sZPAJyXU= -----END CERTIFICATE-----Generated at Tue Nov 26 05:00:10 2024 by rpki-client on console-ams.rpki-client.org