$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4af899a2-73cb-3dc4-85ea-10087d381f6f.roa File: 4af899a2-73cb-3dc4-85ea-10087d381f6f.roa (raw, json) Hash identifier: NaHG+3Xl5FRBOBgjrfwpHI2B89RArIZeGbXHbwwTRMs= Subject key identifier: 9F:88:8D:6C:C5:43:5E:D4:B8:F4:4B:A1:AB:26:23:FD:D8:BD:C4:54 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858476C9EBD78963EACFDC246CDF0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4af899a2-73cb-3dc4-85ea-10087d381f6f.roa Signing time: Fri 04 Oct 2024 01:00:31 +0000 ROA not before: Fri 04 Oct 2024 01:00:31 +0000 ROA not after: Thu 02 Jan 2025 02:00:31 +0000 asID: 33287 IP address blocks: 71.224.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:6c:9e:bd:78:96:3e:ac:fd:c2:46:cd:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 4 01:00:31 2024 GMT Not After : Jan 2 02:00:31 2025 GMT Subject: CN=806fb80e-b629-4883-a538-3bd1edd6e437 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:32:f8:19:f6:45:53:29:89:d6:d9:53:a3:81: c5:d5:f5:f0:e5:1a:b4:ab:dd:42:57:89:d3:a2:07: 2c:e5:69:1a:b6:ad:c4:f2:13:7e:dd:ed:10:f5:5f: b5:e2:f4:84:6f:92:0e:ec:d0:d7:20:73:35:27:ba: 6e:f2:94:eb:e0:44:17:a7:0f:12:66:ad:ba:fa:8e: 20:51:14:bf:34:09:18:ca:e0:0c:e9:46:b6:e8:c3: c9:47:08:62:28:59:be:71:0e:f4:b6:88:95:41:00: fd:2a:67:e8:1e:d1:8b:bc:a7:08:39:d3:56:1f:06: 5c:d7:3b:82:04:08:60:21:a2:ff:42:2a:f2:1c:d3: a0:c4:ed:75:90:23:f0:e9:cb:f1:3e:97:44:e9:2d: d9:cf:b4:bd:ce:29:06:3b:bf:a5:6f:66:c6:c2:12: 01:aa:98:af:99:f2:6c:33:4f:53:ee:c5:04:dc:72: 12:7f:b5:47:12:10:eb:41:d7:94:de:09:2d:31:65: 5a:6a:56:9c:e8:31:68:b9:7d:9a:78:79:5d:97:cb: 03:0f:e7:08:ee:55:90:75:9e:b3:c6:b7:16:43:dd: 80:51:ba:7a:b6:d8:50:ce:38:bf:b8:6a:30:60:29: 55:98:78:14:a2:42:53:dc:e0:3e:f1:67:9e:64:ec: 36:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:88:8D:6C:C5:43:5E:D4:B8:F4:4B:A1:AB:26:23:FD:D8:BD:C4:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4af899a2-73cb-3dc4-85ea-10087d381f6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.224.88.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption da:29:91:62:ab:75:10:a3:1e:e7:46:14:20:1b:19:fd:28:41: 6b:d3:bb:e8:c7:3d:95:7c:ca:66:f7:58:51:78:af:da:f3:72: 9e:ba:2d:21:e7:df:23:c8:59:4c:2e:ca:ea:77:a2:55:1d:92: b1:2b:b4:20:d2:26:e8:4e:9c:aa:cc:b7:54:79:89:17:93:7a: cb:2e:dc:92:d1:bf:fc:1b:b6:c8:b3:e4:a3:a8:bf:9f:d3:3e: d7:92:4c:8d:d2:7e:e4:a2:68:c9:a7:c4:2f:b9:4e:f0:2f:aa: ca:26:1e:0b:87:28:9f:1d:21:2d:eb:61:da:10:80:ef:48:f2: 51:be:53:e3:9e:3e:9c:f0:66:60:47:06:5c:46:74:fc:5e:33: d8:d3:e5:a3:93:0e:4c:ef:8d:5e:65:67:7c:4c:05:5b:03:58: 0c:89:ba:2a:53:08:2e:bc:ed:2d:fc:20:ea:73:7c:64:0b:7b: 6e:e5:da:56:1a:de:0d:48:d1:46:91:04:b3:26:6c:24:16:dd: db:63:0d:ba:b0:58:24:8a:11:ab:d1:de:81:2f:36:50:a0:46: 57:92:bf:f8:64:e8:76:7e:6b:58:2f:29:26:06:dd:1e:06:79: b2:ff:ca:1a:c8:c6:3e:6e:dc:4d:9e:90:4f:71:59:ce:37:b4: 4a:80:a2:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdsnr14lj6s/cJGzfAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MTAwNDAxMDAzMVoXDTI1MDEwMjAyMDAzMVowLzEtMCsGA1UEAxMk ODA2ZmI4MGUtYjYyOS00ODgzLWE1MzgtM2JkMWVkZDZlNDM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgjL4GfZFUymJ1tlTo4HF1fXw5Rq0q91CV4nT ogcs5Wkatq3E8hN+3e0Q9V+14vSEb5IO7NDXIHM1J7pu8pTr4EQXpw8SZq26+o4g URS/NAkYyuAM6Ua26MPJRwhiKFm+cQ70toiVQQD9KmfoHtGLvKcIOdNWHwZc1zuC BAhgIaL/QiryHNOgxO11kCPw6cvxPpdE6S3Zz7S9zikGO7+lb2bGwhIBqpivmfJs M09T7sUE3HISf7VHEhDrQdeU3gktMWVaalac6DFouX2aeHldl8sDD+cI7lWQdZ6z xrcWQ92AUbp6tthQzji/uGowYClVmHgUokJT3OA+8WeeZOw2kwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ+IjWzFQ17UuPRLoasmI/3YvcRUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNGFmODk5YTItNzNjYi0z ZGM0LTg1ZWEtMTAwODdkMzgxZjZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDR+BYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANopkWKrdRCjHudGFCAbGf0oQWvTu+jHPZV8ymb3WFF4r9rzcp66LSHn 3yPIWUwuyup3olUdkrErtCDSJuhOnKrMt1R5iReTessu3JLRv/wbtsiz5KOov5/T PteSTI3SfuSiaMmnxC+5TvAvqsomHguHKJ8dIS3rYdoQgO9I8lG+U+OePpzwZmBH BlxGdPxeM9jT5aOTDkzvjV5lZ3xMBVsDWAyJuipTCC687S38IOpzfGQLe27l2lYa 3g1I0UaRBLMmbCQW3dtjDbqwWCSKEavR3oEvNlCgRleSv/hk6HZ+a1gvKSYG3R4G ebL/yhrIxj5u3E2ekE9xWc43tEqAokk= -----END CERTIFICATE-----Generated at Fri Nov 22 11:54:39 2024 by rpki-client on console-ams.rpki-client.org