$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4417a6cb-9bcf-3bcd-b5e8-0e141d370c39.roa File: 4417a6cb-9bcf-3bcd-b5e8-0e141d370c39.roa (raw, json) Hash identifier: so1aba9h01lNMPItppGQaggmD/E3sAvlFnHDDAQmBrQ= Subject key identifier: 3D:9D:4E:A9:29:DA:2B:AC:4F:85:C2:6C:CF:3E:14:63:39:DD:FA:74 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584840E5DFC7F8F500F86E6C0180 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4417a6cb-9bcf-3bcd-b5e8-0e141d370c39.roa Signing time: Thu 19 Dec 2024 02:00:39 +0000 ROA not before: Thu 19 Dec 2024 02:00:39 +0000 ROA not after: Wed 19 Mar 2025 01:00:39 +0000 asID: 7725 IP address blocks: 71.204.112.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 23 Dec 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:40:e5:df:c7:f8:f5:00:f8:6e:6c:01:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Dec 19 02:00:39 2024 GMT Not After : Mar 19 01:00:39 2025 GMT Subject: CN=e639e7be-7117-4d5d-8346-f64a2c5d6260 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e6:47:af:a6:85:2d:43:c9:b6:ec:1f:63:e3: 3f:db:5b:4e:ce:98:27:9a:73:c7:3e:5b:75:db:ab: 6f:5c:7f:50:f2:94:65:18:54:8e:44:12:8b:89:18: ae:69:79:5a:39:3c:b8:1e:73:77:eb:64:17:b5:e6: 6a:e0:50:bc:62:20:86:92:ee:a4:a4:22:4b:6f:91: 45:52:52:69:58:39:04:0c:c8:06:9c:19:6b:ef:2a: ef:cf:21:1f:95:a8:ce:51:cf:36:e8:d4:1c:12:2e: 46:f2:a5:5c:f4:52:10:49:4a:be:1f:fe:37:a8:76: 5a:11:eb:4e:e6:04:af:ff:a0:aa:f3:77:47:e8:be: 9b:ff:bd:8a:0e:fa:d2:04:53:fd:5c:a7:d6:b7:f5: fd:d1:2c:c8:6b:3f:2a:b5:63:e9:a1:c9:4e:36:72: 80:d9:e9:e4:1d:a4:fe:f9:8e:8b:8c:ce:7f:34:90: 05:66:93:0a:46:a9:65:f9:89:05:a6:4c:48:fb:28: fd:3b:8c:c1:97:14:11:e7:49:bd:46:37:14:a6:48: 06:b2:1f:ab:95:3d:ac:9e:43:fa:60:1f:e6:4f:94: 0b:db:74:cc:5f:5a:ae:fa:a9:77:c6:c1:77:21:55: 71:74:84:ea:a1:74:2f:6a:8f:6d:bc:a5:e7:a0:81: 77:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:9D:4E:A9:29:DA:2B:AC:4F:85:C2:6C:CF:3E:14:63:39:DD:FA:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4417a6cb-9bcf-3bcd-b5e8-0e141d370c39.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.204.112.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:7a:d9:88:8f:bb:8b:fe:25:43:8c:94:d8:f7:41:66:4d:06: 8c:8a:09:99:65:7a:f3:f6:12:24:fe:a3:9b:fa:fa:e3:bc:cc: 72:05:ad:ef:0f:76:ef:ed:64:11:b4:62:50:82:cf:0d:a7:e9: 30:f7:a1:ce:ac:1c:f9:00:3e:09:5b:38:1a:b2:d8:82:de:91: c5:cd:8c:82:e3:91:49:33:95:dc:74:ce:16:21:bd:0f:a6:2c: ea:1a:be:51:e3:72:c0:71:8e:5e:bd:da:bb:bc:22:da:83:22: 8a:e0:bf:c9:1a:c3:ab:69:8d:77:7c:c8:fd:01:63:54:6d:9e: ad:38:67:c8:e4:df:72:d0:fc:a3:b3:0f:b7:1d:23:64:14:9c: 70:0e:99:d8:3e:37:25:00:19:3b:90:ab:c4:d0:fc:45:b7:6d: a0:f2:df:da:94:de:7e:59:df:5c:b5:fb:e1:51:df:51:d3:78: f2:58:c8:fe:6c:2f:df:f2:e8:7d:f7:93:a4:98:0e:27:e0:2c: 0f:30:6c:11:95:59:62:0a:68:ab:88:15:01:f3:69:49:9c:5d: 16:21:12:18:27:20:9b:ab:bd:53:fb:10:7b:5b:c0:ac:01:cb: 44:e7:90:16:ea:ec:86:bf:30:55:84:cc:55:f5:6f:86:48:1e: 8c:78:cd:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhA5d/H+PUA+G5sAYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MTIxOTAyMDAzOVoXDTI1MDMxOTAxMDAzOVowLzEtMCsGA1UEAxMk ZTYzOWU3YmUtNzExNy00ZDVkLTgzNDYtZjY0YTJjNWQ2MjYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAreZHr6aFLUPJtuwfY+M/21tOzpgnmnPHPlt1 26tvXH9Q8pRlGFSORBKLiRiuaXlaOTy4HnN362QXteZq4FC8YiCGku6kpCJLb5FF UlJpWDkEDMgGnBlr7yrvzyEflajOUc826NQcEi5G8qVc9FIQSUq+H/43qHZaEetO 5gSv/6Cq83dH6L6b/72KDvrSBFP9XKfWt/X90SzIaz8qtWPpoclONnKA2enkHaT+ +Y6LjM5/NJAFZpMKRqll+YkFpkxI+yj9O4zBlxQR50m9RjcUpkgGsh+rlT2snkP6 YB/mT5QL23TMX1qu+ql3xsF3IVVxdITqoXQvao9tvKXnoIF3cQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD2dTqkp2iusT4XCbM8+FGM53fp0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDQxN2E2Y2ItOWJjZi0z YmNkLWI1ZTgtMGUxNDFkMzcwYzM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBR8xwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMJ62YiPu4v+JUOMlNj3QWZNBoyKCZllevP2EiT+o5v6+uO8zHIFre8P du/tZBG0YlCCzw2n6TD3oc6sHPkAPglbOBqy2ILekcXNjILjkUkzldx0zhYhvQ+m LOoavlHjcsBxjl692ru8ItqDIorgv8kaw6tpjXd8yP0BY1Rtnq04Z8jk33LQ/KOz D7cdI2QUnHAOmdg+NyUAGTuQq8TQ/EW3baDy39qU3n5Z31y1++FR31HTePJYyP5s L9/y6H33k6SYDifgLA8wbBGVWWIKaKuIFQHzaUmcXRYhEhgnIJurvVP7EHtbwKwB y0TnkBbq7Ia/MFWEzFX1b4ZIHox4zfI= -----END CERTIFICATE-----Generated at Sun Dec 22 12:54:40 2024 by rpki-client on console-ams.rpki-client.org