$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/41cbe6a5-348b-3a8d-9767-cbe273c1f5ab.roa File: 41cbe6a5-348b-3a8d-9767-cbe273c1f5ab.roa (raw, json) Hash identifier: p9Dt0vx4iMG5CPZRS/tkySOJ2mOlSfdDZyUxq6ax6qQ= Subject key identifier: 93:AC:18:91:CB:C1:10:7E:D2:DA:FE:A0:3F:92:A4:51:20:B8:36:B9 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584840E57E4B475450C56D9A7240 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/41cbe6a5-348b-3a8d-9767-cbe273c1f5ab.roa Signing time: Thu 19 Dec 2024 02:00:39 +0000 ROA not before: Thu 19 Dec 2024 02:00:39 +0000 ROA not after: Wed 19 Mar 2025 01:00:39 +0000 asID: 7725 IP address blocks: 71.204.88.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 25 Dec 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:40:e5:7e:4b:47:54:50:c5:6d:9a:72:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Dec 19 02:00:39 2024 GMT Not After : Mar 19 01:00:39 2025 GMT Subject: CN=4cf87fe4-204f-4783-b5bd-1a9f8fc4a4cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:81:19:f5:44:87:fa:da:86:01:8c:c7:59:a0: 10:df:1f:d8:81:27:52:bc:25:a6:bd:4c:d0:c9:e7: 4b:a4:0b:22:91:79:6d:12:bf:b8:4f:1c:a5:61:9f: 00:35:70:18:35:81:83:2c:4b:db:b3:0d:6d:65:4c: 39:8e:13:37:b5:b1:81:97:cc:e0:ef:61:f7:9f:92: 07:e4:dd:50:54:fb:8c:b9:52:e7:42:7b:bb:72:d8: 7b:41:7b:9b:bc:39:b0:6a:47:b6:1a:5c:c0:97:8a: e5:03:2f:34:3e:47:1f:93:41:27:4f:d7:d8:e3:69: c4:c1:13:86:a3:8e:c4:d0:09:52:0c:40:be:56:04: d2:bf:ab:af:54:eb:fa:76:14:27:ec:73:74:7b:a2: 6a:93:ee:03:9b:f6:2c:a5:31:92:92:ac:bc:34:8f: 01:f9:13:39:11:36:94:58:11:f4:52:d1:b0:c7:79: b7:0a:b5:b9:12:f4:67:7d:96:2b:56:15:2e:74:30: 4c:64:8e:85:c5:bc:3e:3b:f4:e7:b2:00:20:36:d7: ae:d6:8b:bf:3b:58:a6:81:a1:28:23:c4:72:9c:bf: 0c:18:ee:4d:f5:f3:67:88:4e:66:be:0d:20:d0:c2: d1:ea:50:49:ee:4a:b8:ac:cd:e0:c6:92:0c:bd:b1: 27:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:AC:18:91:CB:C1:10:7E:D2:DA:FE:A0:3F:92:A4:51:20:B8:36:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/41cbe6a5-348b-3a8d-9767-cbe273c1f5ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.204.88.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:79:f0:f6:0b:55:ac:16:d7:ca:db:25:ff:29:02:5f:c5:50: e9:b1:4f:82:b3:cd:bb:1a:d3:93:09:1f:aa:d3:2d:da:4a:0b: d3:20:da:dc:de:13:6d:78:c3:2f:04:bc:cb:60:2d:0f:7a:57: 52:f4:2a:93:97:84:16:aa:de:21:72:00:a0:6b:87:9b:f5:1e: 04:35:7e:46:32:a2:c8:d2:cb:60:82:23:7a:a2:ed:05:b0:8f: 1b:1c:09:ad:52:19:72:34:2a:8a:4a:92:d3:27:16:d2:96:c6: 15:7a:f4:1a:cc:24:18:7a:e9:5b:19:1c:a9:58:59:41:aa:c1: 98:65:7a:50:a0:a0:3e:b2:c1:d6:c8:b1:e3:71:ae:24:5a:7e: 4f:dc:89:d7:7b:e7:9d:30:32:df:90:82:c6:2e:0f:6b:d2:37: 67:ca:7b:aa:f2:63:94:9f:92:ab:f5:5b:08:6f:45:ac:9b:54: 46:00:42:a2:84:10:c9:d1:70:66:99:2f:f3:56:08:ca:d7:d9: 6d:24:f6:23:bc:71:28:16:10:3e:7a:9e:e4:0e:e1:72:25:71: 23:c2:cf:c3:a7:5d:78:f5:b2:b5:b3:96:1a:c0:0d:6c:77:b2: d5:b1:69:fe:e5:54:a4:ca:cb:65:e8:0f:4a:63:c6:0d:fc:d0: b5:8c:a8:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhA5X5LR1RQxW2ackAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MTIxOTAyMDAzOVoXDTI1MDMxOTAxMDAzOVowLzEtMCsGA1UEAxMk NGNmODdmZTQtMjA0Zi00NzgzLWI1YmQtMWE5ZjhmYzRhNGNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA64EZ9USH+tqGAYzHWaAQ3x/YgSdSvCWmvUzQ yedLpAsikXltEr+4TxylYZ8ANXAYNYGDLEvbsw1tZUw5jhM3tbGBl8zg72H3n5IH 5N1QVPuMuVLnQnu7cth7QXubvDmwake2GlzAl4rlAy80Pkcfk0EnT9fY42nEwROG o47E0AlSDEC+VgTSv6uvVOv6dhQn7HN0e6Jqk+4Dm/YspTGSkqy8NI8B+RM5ETaU WBH0UtGwx3m3CrW5EvRnfZYrVhUudDBMZI6Fxbw+O/TnsgAgNteu1ou/O1imgaEo I8RynL8MGO5N9fNniE5mvg0g0MLR6lBJ7kq4rM3gxpIMvbEnaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJOsGJHLwRB+0tr+oD+SpFEguDa5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDFjYmU2YTUtMzQ4Yi0z YThkLTk3NjctY2JlMjczYzFmNWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCR8xYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKZ58PYLVawW18rbJf8pAl/FUOmxT4Kzzbsa05MJH6rTLdpKC9Mg2tze E214wy8EvMtgLQ96V1L0KpOXhBaq3iFyAKBrh5v1HgQ1fkYyosjSy2CCI3qi7QWw jxscCa1SGXI0KopKktMnFtKWxhV69BrMJBh66VsZHKlYWUGqwZhlelCgoD6ywdbI seNxriRafk/cidd7550wMt+QgsYuD2vSN2fKe6ryY5Sfkqv1WwhvRaybVEYAQqKE EMnRcGaZL/NWCMrX2W0k9iO8cSgWED56nuQO4XIlcSPCz8OnXXj1srWzlhrADWx3 stWxaf7lVKTKy2XoD0pjxg380LWMqOU= -----END CERTIFICATE-----Generated at Sun Dec 22 15:08:03 2024 by rpki-client on console-fra.rpki-client.org