$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3c039b0a-d539-3980-b111-7f48e21e1f7f.roa File: 3c039b0a-d539-3980-b111-7f48e21e1f7f.roa (raw, json) Hash identifier: IEspg/WEztSNmbx8kkGW5jZqH/O3UTdk8O2fvoa/dpY= Subject key identifier: 45:8B:8C:F7:95:42:81:E3:81:FC:E3:5B:A5:59:29:F7:A8:2D:EB:3C Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285847BEF85BB691FCEEF7EEB17300 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3c039b0a-d539-3980-b111-7f48e21e1f7f.roa Signing time: Sat 02 Nov 2024 13:00:42 +0000 ROA not before: Sat 02 Nov 2024 13:00:42 +0000 ROA not after: Fri 31 Jan 2025 14:00:42 +0000 asID: 22909 IP address blocks: 174.161.20.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 25 Dec 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:be:f8:5b:b6:91:fc:ee:f7:ee:b1:73:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Nov 2 13:00:42 2024 GMT Not After : Jan 31 14:00:42 2025 GMT Subject: CN=24db2ff9-8170-4bcb-b0ed-b260167b79f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:d6:80:fe:85:16:23:15:f3:fe:49:fa:e9:63: 41:62:98:7d:11:5f:d4:ed:4f:82:e5:24:5f:2d:16: 28:06:32:9f:d7:60:04:48:1d:6f:06:a3:22:43:31: ed:20:13:5c:96:77:49:09:dc:a4:1d:10:c4:57:0d: 64:f9:e7:f0:94:c8:37:7a:dd:d1:7c:5d:2c:fd:3c: 49:89:c0:b8:9e:a7:9f:50:af:29:bc:b2:a4:fc:89: d4:1a:52:c1:27:ca:da:66:0c:be:83:b9:1b:f9:4a: f1:40:b7:2b:cd:71:41:d7:3b:c4:c6:a0:18:ef:51: c0:59:23:b9:0a:cb:63:27:5a:ff:95:85:f6:ad:54: 8a:47:e6:2d:db:de:47:40:14:68:0c:41:ae:23:ff: 11:af:6d:bd:40:93:4e:ff:66:48:02:85:44:81:1d: bc:bc:34:cb:45:6e:95:d6:cf:78:b3:da:8d:7b:a1: a7:51:06:11:37:aa:47:d4:82:03:51:ba:29:7d:4e: b7:3e:9c:bf:c0:71:18:6a:80:0f:1b:64:eb:4a:22: ce:fb:40:eb:c0:e5:c7:61:c0:2c:ea:75:e9:8e:e5: d6:92:52:d1:2b:1b:9c:21:7e:78:8d:29:9f:fe:76: 46:c3:55:4e:b0:25:e3:74:97:09:08:b2:1d:ec:f8: 31:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:8B:8C:F7:95:42:81:E3:81:FC:E3:5B:A5:59:29:F7:A8:2D:EB:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3c039b0a-d539-3980-b111-7f48e21e1f7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.161.20.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:01:71:a1:47:bb:73:cb:66:a9:bf:9a:51:d9:a0:68:74:d7: 38:85:fb:c8:3e:95:db:df:52:fd:6d:3a:49:58:d0:4c:28:f4: e4:50:0a:c4:a3:74:47:7c:9b:b9:ce:8b:a9:26:7d:de:e6:12: 2f:05:58:02:c1:f4:d5:4d:bc:c3:d6:51:c0:71:b4:a7:53:7f: 22:aa:dd:0b:0b:34:aa:6e:8b:04:b0:64:0e:98:bf:af:65:6f: bd:70:bb:50:c3:e8:22:2e:b9:49:bb:76:30:61:8c:eb:f3:a0: 8d:a7:21:36:6e:d3:48:ca:b5:ad:18:d2:5a:ed:bb:62:e7:b9: 97:b6:85:20:d9:88:bb:8d:21:3a:9d:46:89:7d:d9:14:04:59: 54:13:e3:ca:0d:60:fb:ba:6c:83:5e:63:a7:66:ca:b5:0c:9a: e8:94:be:20:16:3b:f1:bb:cf:41:c2:7a:2f:39:96:31:08:32: 36:b2:78:53:25:c4:18:47:f1:88:c7:f1:cb:45:c2:36:0b:ec: 78:f2:90:db:a4:f2:7a:64:4f:70:d1:22:f4:ef:98:54:d4:52: 1e:de:d9:8f:75:8c:33:e7:22:f2:ae:96:bd:71:5e:97:27:27: 07:48:7e:e9:9f:71:5d:6e:ec:b9:87:0c:b0:00:14:e2:3b:ce: 19:93:3c:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe++Fu2kfzu9+6xcwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MTEwMjEzMDA0MloXDTI1MDEzMTE0MDA0MlowLzEtMCsGA1UEAxMk MjRkYjJmZjktODE3MC00YmNiLWIwZWQtYjI2MDE2N2I3OWY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA79aA/oUWIxXz/kn66WNBYph9EV/U7U+C5SRf LRYoBjKf12AESB1vBqMiQzHtIBNclndJCdykHRDEVw1k+efwlMg3et3RfF0s/TxJ icC4nqefUK8pvLKk/InUGlLBJ8raZgy+g7kb+UrxQLcrzXFB1zvExqAY71HAWSO5 CstjJ1r/lYX2rVSKR+Yt295HQBRoDEGuI/8Rr229QJNO/2ZIAoVEgR28vDTLRW6V 1s94s9qNe6GnUQYRN6pH1IIDUbopfU63Ppy/wHEYaoAPG2TrSiLO+0DrwOXHYcAs 6nXpjuXWklLRKxucIX54jSmf/nZGw1VOsCXjdJcJCLId7PgxzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEWLjPeVQoHjgfzjW6VZKfeoLes8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2MwMzliMGEtZDUzOS0z OTgwLWIxMTEtN2Y0OGUyMWUxZjdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrqEUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKIBcaFHu3PLZqm/mlHZoGh01ziF+8g+ldvfUv1tOklY0Ewo9ORQCsSj dEd8m7nOi6kmfd7mEi8FWALB9NVNvMPWUcBxtKdTfyKq3QsLNKpuiwSwZA6Yv69l b71wu1DD6CIuuUm7djBhjOvzoI2nITZu00jKta0Y0lrtu2LnuZe2hSDZiLuNITqd Rol92RQEWVQT48oNYPu6bINeY6dmyrUMmuiUviAWO/G7z0HCei85ljEIMjayeFMl xBhH8YjH8ctFwjYL7HjykNuk8npkT3DRIvTvmFTUUh7e2Y91jDPnIvKulr1xXpcn JwdIfumfcV1u7LmHDLAAFOI7zhmTPE4= -----END CERTIFICATE-----Generated at Sun Dec 22 16:17:48 2024 by rpki-client on console-ams.rpki-client.org