$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/49d08ce6-c5bf-3525-93b6-82887db7e157.roa File: 49d08ce6-c5bf-3525-93b6-82887db7e157.roa (raw, json) Hash identifier: H9YWasirGwAgikpNgkwMZ6zbiOOEwmAeLG0knAKL+To= Subject key identifier: 7E:C6:DD:9C:D0:1D:EB:6A:79:07:38:89:3D:61:5B:B1:74:CD:C3:35 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285845A428BDE4C89BDFB7B9388600 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/49d08ce6-c5bf-3525-93b6-82887db7e157.roa Signing time: Tue 23 Apr 2024 13:00:34 +0000 ROA not before: Tue 23 Apr 2024 13:00:34 +0000 ROA not after: Mon 22 Jul 2024 13:00:34 +0000 asID: 33667 IP address blocks: 96.109.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:a4:28:bd:e4:c8:9b:df:b7:b9:38:86:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 23 13:00:34 2024 GMT Not After : Jul 22 13:00:34 2024 GMT Subject: CN=4d9b9faf-4c19-4e52-abd1-753b46e8dcce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:eb:71:49:a7:49:1b:b1:8b:d0:a9:0b:49:49: 0d:d0:81:b2:29:32:56:b3:54:88:d0:78:85:dd:72: 1a:02:96:7f:38:81:be:bd:d2:66:58:8c:ec:33:5d: f5:b3:6c:c6:67:09:41:9b:71:82:8d:99:0f:94:10: f4:d4:2e:bf:5f:3d:b9:c5:10:86:33:c8:87:77:2c: e1:63:a6:eb:d1:d3:e0:65:36:8f:9e:11:4f:84:7a: 6c:08:38:61:5a:4e:da:29:c2:26:35:5d:49:ea:59: e1:a7:62:d5:0c:b7:b9:dc:8e:3d:fc:d3:0e:15:7e: ed:59:eb:8f:8d:1b:ad:23:89:9b:f3:7c:e0:37:94: e7:80:91:81:53:30:7c:19:37:a4:68:fc:71:1f:4e: bd:23:1f:15:7f:39:99:9c:42:60:59:be:d8:11:c3: 96:94:c7:75:57:73:13:c5:70:46:4c:7b:91:af:33: 68:a7:be:24:45:11:50:cb:30:5f:f7:a7:e5:dd:69: 0a:ed:5c:f7:24:2c:f1:5f:a5:c1:cd:56:d7:2f:17: 38:b8:c8:91:9f:2e:68:5d:57:d1:ff:bb:a4:3a:fb: 82:8b:7c:47:d0:11:87:f8:ab:10:32:f5:b1:78:19: 0d:ce:cc:02:f0:00:af:b3:1a:2e:13:12:8a:47:4b: b4:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:C6:DD:9C:D0:1D:EB:6A:79:07:38:89:3D:61:5B:B1:74:CD:C3:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/49d08ce6-c5bf-3525-93b6-82887db7e157.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 96.109.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:4b:78:da:a4:49:77:37:63:bc:00:f5:b0:91:05:18:17:5b: 54:1a:93:ae:67:2f:22:77:57:a8:eb:8f:31:7e:68:66:d2:46: 5f:51:fc:99:fe:f4:b9:ae:67:50:2a:d3:33:77:09:6e:85:6f: 7f:0e:6d:16:b2:18:c3:36:4a:9b:47:23:27:3a:2b:00:fe:15: f8:50:ef:54:da:cf:58:81:54:89:28:e5:3b:5f:a4:e7:bb:7a: 98:44:62:4c:6c:df:c0:88:c9:5f:11:dd:05:3a:bc:ec:11:e0: d6:45:03:91:54:32:25:7e:b2:27:6f:eb:ad:90:25:c9:93:ac: f8:8b:66:97:a7:38:de:4a:83:04:87:57:fa:2f:c1:8c:3a:ce: 41:07:9a:bc:47:5d:22:dc:9a:c7:6c:83:e5:eb:79:38:74:71: af:79:f2:8c:36:46:8e:e9:18:73:2b:97:80:27:3e:1d:8c:26: 25:5c:b7:04:d5:fa:14:3d:4a:e1:32:79:14:9e:8a:3b:da:85: 58:fa:bd:8e:45:8d:0f:2f:1d:5e:a8:3c:d0:bf:a7:44:da:c6: 26:2a:ee:f1:01:cb:8a:59:22:0f:96:90:8c:8b:09:73:84:ad: aa:19:9e:8f:60:2e:af:a5:a8:88:aa:54:b6:74:05:27:91:b5: 96:05:23:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWkKL3kyJvft7k4hgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MDQyMzEzMDAzNFoXDTI0MDcyMjEzMDAzNFowLzEtMCsGA1UEAxMk NGQ5YjlmYWYtNGMxOS00ZTUyLWFiZDEtNzUzYjQ2ZThkY2NlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgutxSadJG7GL0KkLSUkN0IGyKTJWs1SI0HiF 3XIaApZ/OIG+vdJmWIzsM131s2zGZwlBm3GCjZkPlBD01C6/Xz25xRCGM8iHdyzh Y6br0dPgZTaPnhFPhHpsCDhhWk7aKcImNV1J6lnhp2LVDLe53I49/NMOFX7tWeuP jRutI4mb83zgN5TngJGBUzB8GTekaPxxH069Ix8VfzmZnEJgWb7YEcOWlMd1V3MT xXBGTHuRrzNop74kRRFQyzBf96fl3WkK7Vz3JCzxX6XBzVbXLxc4uMiRny5oXVfR /7ukOvuCi3xH0BGH+KsQMvWxeBkNzswC8ACvsxouExKKR0u0qwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH7G3ZzQHetqeQc4iT1hW7F0zcM1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDlkMDhjZTYtYzViZi0z NTI1LTkzYjYtODI4ODdkYjdlMTU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYG3hMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD5LeNqkSXc3Y7wA9bCRBRgXW1Qak65nLyJ3V6jrjzF+aGbSRl9R/Jn+ 9LmuZ1Aq0zN3CW6Fb38ObRayGMM2SptHIyc6KwD+FfhQ71Taz1iBVIko5TtfpOe7 ephEYkxs38CIyV8R3QU6vOwR4NZFA5FUMiV+sidv662QJcmTrPiLZpenON5KgwSH V/ovwYw6zkEHmrxHXSLcmsdsg+XreTh0ca958ow2Ro7pGHMrl4AnPh2MJiVctwTV +hQ9SuEyeRSeijvahVj6vY5FjQ8vHV6oPNC/p0TaxiYq7vEBy4pZIg+WkIyLCXOE raoZno9gLq+lqIiqVLZ0BSeRtZYFI5g= -----END CERTIFICATE-----Generated at Sun May 5 02:16:25 2024 by rpki-client on console-ams.rpki-client.org