$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4274c422-37b1-368a-b987-5ce4c259663c.roa File: 4274c422-37b1-368a-b987-5ce4c259663c.roa (raw, json) Hash identifier: up2q5uCue6feGqj3jjRA8nO43NW1s65gGP7aHR3pIck= Subject key identifier: 43:E4:D7:3E:26:CF:93:19:D7:91:33:F8:17:B3:F1:AF:B1:9E:41:9B Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285847BEF6E58D1ADA9C9B42BFEA80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4274c422-37b1-368a-b987-5ce4c259663c.roa Signing time: Sat 02 Nov 2024 13:00:42 +0000 ROA not before: Sat 02 Nov 2024 13:00:42 +0000 ROA not after: Fri 31 Jan 2025 14:00:42 +0000 asID: 22909 IP address blocks: 68.53.66.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 25 Dec 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:be:f6:e5:8d:1a:da:9c:9b:42:bf:ea:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Nov 2 13:00:42 2024 GMT Not After : Jan 31 14:00:42 2025 GMT Subject: CN=2d5feb18-fe11-4c2d-93a2-19e7b102e0f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:a7:5d:48:26:c1:0e:6d:d8:f2:b8:23:3f:af: 1c:70:c5:50:1f:e1:04:ee:49:f7:9a:67:bb:eb:5f: 0f:89:26:22:35:c5:bf:2b:f3:17:8b:84:bb:6e:b6: d2:91:14:08:03:09:80:78:37:9c:e3:12:0e:2c:61: a4:ae:00:67:dd:16:c8:66:ef:38:9e:c4:cb:76:f5: d4:55:e1:43:25:37:ac:4c:9b:85:5d:79:82:ad:13: c1:25:5b:7f:6a:e7:76:04:b8:55:c3:eb:82:8f:ad: 52:8f:11:85:0e:06:94:18:7c:4d:6d:39:bd:c4:22: 90:58:fa:69:46:14:94:c4:55:e8:57:04:d8:be:f6: c3:a6:1c:80:a0:6d:ab:ed:97:b7:7a:b9:a9:91:e4: ac:16:5b:f2:14:03:75:fd:18:09:74:3b:57:c2:38: c8:06:a6:70:56:95:fe:03:87:58:eb:cf:d3:c2:1b: ac:64:51:0c:3c:a0:79:8c:1b:c0:f3:e6:0a:d2:30: 37:f2:94:bd:3e:8d:4a:06:e4:d2:a4:5e:56:6a:2a: ce:04:90:f2:b7:a0:ec:01:10:7f:dd:07:31:57:93: 74:aa:c9:e1:50:c0:83:8d:a0:5c:27:f6:8d:e7:99: b1:95:40:0e:7d:82:a6:b1:6f:50:f7:b8:1f:f9:ac: 7d:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:E4:D7:3E:26:CF:93:19:D7:91:33:F8:17:B3:F1:AF:B1:9E:41:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4274c422-37b1-368a-b987-5ce4c259663c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.53.66.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:2c:0a:19:d4:3e:05:be:a9:fb:ed:e1:a6:83:32:d5:15:99: b5:02:d6:6b:99:5f:89:75:fc:fb:b9:93:a9:56:a1:70:a1:d6: 25:12:21:66:73:e2:5e:bc:8a:a3:39:1b:cc:83:3a:6f:08:e9: 55:fc:de:ae:31:d6:96:83:d8:f3:98:af:6f:40:0b:c5:7b:a2: d1:8a:9a:d4:54:d0:40:67:a2:30:bc:54:3e:14:13:6d:b9:95: 5e:22:5f:a9:8b:b2:e1:d8:54:79:19:10:f2:6c:43:c9:0a:68: 55:7c:18:b3:de:01:9a:dd:b2:28:44:49:9e:de:41:41:b8:7b: d3:8f:49:75:e9:bd:4b:47:d4:b2:10:e0:eb:47:ad:db:5e:35: 96:89:e1:53:27:c2:63:8d:ab:6e:08:cf:6e:13:d8:da:e7:9c: 69:ed:0f:8d:57:04:00:1e:30:01:f8:06:96:bc:7a:d9:14:87: dc:b8:81:36:c1:13:be:75:c1:ff:2d:d8:4b:15:f1:77:bc:ed: e5:77:2a:b5:8e:60:39:00:1e:85:38:3f:59:16:50:27:db:a7: 1f:e8:6f:fb:bc:77:0d:d4:2c:e3:2d:9c:32:37:35:39:0a:bb: 62:54:1c:c3:43:a9:ea:e9:b4:71:2b:9f:51:72:bc:43:e7:65: b3:ef:c2:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe+9uWNGtqcm0K/6oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MTEwMjEzMDA0MloXDTI1MDEzMTE0MDA0MlowLzEtMCsGA1UEAxMk MmQ1ZmViMTgtZmUxMS00YzJkLTkzYTItMTllN2IxMDJlMGYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgKddSCbBDm3Y8rgjP68ccMVQH+EE7kn3mme7 618PiSYiNcW/K/MXi4S7brbSkRQIAwmAeDec4xIOLGGkrgBn3RbIZu84nsTLdvXU VeFDJTesTJuFXXmCrRPBJVt/aud2BLhVw+uCj61SjxGFDgaUGHxNbTm9xCKQWPpp RhSUxFXoVwTYvvbDphyAoG2r7Ze3ermpkeSsFlvyFAN1/RgJdDtXwjjIBqZwVpX+ A4dY68/TwhusZFEMPKB5jBvA8+YK0jA38pS9Po1KBuTSpF5WairOBJDyt6DsARB/ 3QcxV5N0qsnhUMCDjaBcJ/aN55mxlUAOfYKmsW9Q97gf+ax9qQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEPk1z4mz5MZ15Ez+Bez8a+xnkGbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDI3NGM0MjItMzdiMS0z NjhhLWI5ODctNWNlNGMyNTk2NjNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRDVCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHUsChnUPgW+qfvt4aaDMtUVmbUC1muZX4l1/Pu5k6lWoXCh1iUSIWZz 4l68iqM5G8yDOm8I6VX83q4x1paD2POYr29AC8V7otGKmtRU0EBnojC8VD4UE225 lV4iX6mLsuHYVHkZEPJsQ8kKaFV8GLPeAZrdsihESZ7eQUG4e9OPSXXpvUtH1LIQ 4OtHrdteNZaJ4VMnwmONq24Iz24T2NrnnGntD41XBAAeMAH4Bpa8etkUh9y4gTbB E751wf8t2EsV8Xe87eV3KrWOYDkAHoU4P1kWUCfbpx/ob/u8dw3ULOMtnDI3NTkK u2JUHMNDqerptHErn1FyvEPnZbPvwro= -----END CERTIFICATE-----Generated at Sun Dec 22 16:19:01 2024 by rpki-client on console-ams.rpki-client.org