$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/44588e0b-5cb8-3a52-b09e-01f02bdfd3da.roa File: 44588e0b-5cb8-3a52-b09e-01f02bdfd3da.roa (raw, json) Hash identifier: +myAhlHKJ5e1OXQkxOBB3ltjk0WqF9P20aNfvdMKKo0= Subject key identifier: D4:FC:0D:01:B9:69:A9:C8:97:2D:EE:84:61:7B:C5:73:8E:A6:16:C6 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584840E5784AF6F45E4CC64C6100 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/44588e0b-5cb8-3a52-b09e-01f02bdfd3da.roa Signing time: Thu 19 Dec 2024 02:00:39 +0000 ROA not before: Thu 19 Dec 2024 02:00:39 +0000 ROA not after: Wed 19 Mar 2025 01:00:39 +0000 asID: 7725 IP address blocks: 68.35.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 23 Dec 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:40:e5:78:4a:f6:f4:5e:4c:c6:4c:61:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Dec 19 02:00:39 2024 GMT Not After : Mar 19 01:00:39 2025 GMT Subject: CN=b011a91e-cb2c-4df9-b26d-b31d5740bf3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:35:47:03:eb:ec:55:82:80:b2:4e:90:1d:ef: d9:56:24:8f:2a:05:32:43:37:f0:1d:b9:3e:2e:f4: a9:18:99:cc:ea:b0:28:47:b9:40:6e:76:48:81:e6: 22:05:37:38:e8:56:08:51:74:bd:97:2f:34:4d:ce: 90:e4:92:01:92:51:f7:97:26:e1:49:ec:e0:64:a3: d9:33:7d:d4:1d:19:0f:83:87:5f:e5:62:28:cf:45: 77:5f:b1:4f:cd:54:ae:f4:c2:06:9a:1e:0f:58:d8: 1e:8d:4d:a5:84:e8:05:ed:b8:45:12:08:f6:ef:89: b5:98:35:35:be:ec:e0:c2:98:fa:3d:64:cf:60:41: 15:8b:dc:17:08:6c:9c:74:b5:8d:fd:ff:7c:86:1f: b0:f1:d9:58:c2:7b:e8:74:fc:2e:d9:05:04:72:58: 9f:97:9f:1a:c3:f9:ed:4c:29:1f:49:72:e7:0f:cf: fe:87:96:60:a5:b9:4a:4d:25:3a:c9:08:5e:f7:8c: 74:67:c3:3b:51:88:e7:94:5f:88:98:98:78:c4:40: 5f:69:db:31:ed:07:e1:99:9e:ca:0c:36:4e:90:d2: b3:39:25:7c:68:f3:da:c1:59:7a:68:6d:e1:d5:7e: 68:99:e3:bd:88:04:f8:4c:65:40:e0:5b:fb:d3:a6: f1:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:FC:0D:01:B9:69:A9:C8:97:2D:EE:84:61:7B:C5:73:8E:A6:16:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/44588e0b-5cb8-3a52-b09e-01f02bdfd3da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.35.113.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:d5:2f:2d:a2:f3:8a:6a:01:60:b1:3f:e1:a9:bb:7d:05:69: 1d:4b:c2:cd:89:ba:4b:f1:8e:4d:00:8b:61:c2:89:1b:00:ed: c0:11:e8:b4:3c:7c:c5:b6:8e:4f:ca:a7:6f:45:5d:0a:f6:53: 99:6a:55:18:73:33:f7:8e:fb:9e:3b:64:42:5b:c4:1e:1d:be: 3b:8a:e9:6a:0e:6f:30:8c:9a:c2:f2:8e:b9:3a:c9:02:2e:65: 84:12:82:05:5b:0f:e7:06:06:02:9e:00:6c:db:61:26:79:de: 50:06:e5:f5:64:dc:d7:7b:23:e6:dd:c2:0d:b2:0f:43:65:ee: 31:82:c9:99:98:56:ec:58:1c:24:81:4e:ae:34:6f:fd:bb:b8: 32:f2:10:4e:72:c5:69:21:17:90:88:6b:4f:ff:5c:54:68:39: 28:34:3b:20:44:ae:c8:75:6a:95:62:00:cb:41:7a:7f:3f:53: 17:b4:d6:1d:15:c1:60:63:db:03:c8:42:7a:2f:d3:d0:9b:ce: 7b:69:f7:7b:e1:fe:02:54:03:22:0d:ab:f4:45:1e:44:4c:30: cb:21:eb:c7:0b:e1:bb:e0:f0:ab:d7:a4:74:2f:90:fd:2e:81: 3b:5a:c6:df:91:a3:48:c5:5d:dc:2c:b1:9e:74:7d:e7:b7:54: 69:f6:13:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhA5XhK9vReTMZMYQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MTIxOTAyMDAzOVoXDTI1MDMxOTAxMDAzOVowLzEtMCsGA1UEAxMk YjAxMWE5MWUtY2IyYy00ZGY5LWIyNmQtYjMxZDU3NDBiZjNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDVHA+vsVYKAsk6QHe/ZViSPKgUyQzfwHbk+ LvSpGJnM6rAoR7lAbnZIgeYiBTc46FYIUXS9ly80Tc6Q5JIBklH3lybhSezgZKPZ M33UHRkPg4df5WIoz0V3X7FPzVSu9MIGmh4PWNgejU2lhOgF7bhFEgj274m1mDU1 vuzgwpj6PWTPYEEVi9wXCGycdLWN/f98hh+w8dlYwnvodPwu2QUEclifl58aw/nt TCkfSXLnD8/+h5ZgpblKTSU6yQhe94x0Z8M7UYjnlF+ImJh4xEBfadsx7QfhmZ7K DDZOkNKzOSV8aPPawVl6aG3h1X5omeO9iAT4TGVA4Fv706bxQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNT8DQG5aanIly3uhGF7xXOOphbGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDQ1ODhlMGItNWNiOC0z YTUyLWIwOWUtMDFmMDJiZGZkM2RhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARCNxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFvVLy2i84pqAWCxP+Gpu30FaR1Lws2Jukvxjk0Ai2HCiRsA7cAR6LQ8 fMW2jk/Kp29FXQr2U5lqVRhzM/eO+547ZEJbxB4dvjuK6WoObzCMmsLyjrk6yQIu ZYQSggVbD+cGBgKeAGzbYSZ53lAG5fVk3Nd7I+bdwg2yD0Nl7jGCyZmYVuxYHCSB Tq40b/27uDLyEE5yxWkhF5CIa0//XFRoOSg0OyBErsh1apViAMtBen8/Uxe01h0V wWBj2wPIQnov09Cbzntp93vh/gJUAyINq/RFHkRMMMsh68cL4bvg8KvXpHQvkP0u gTtaxt+Ro0jFXdwssZ50fee3VGn2E8s= -----END CERTIFICATE-----Generated at Sun Dec 22 12:54:43 2024 by rpki-client on console-ams.rpki-client.org