$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/58c03d5d-3757-35b6-a74d-9545c8210733.roa File: 58c03d5d-3757-35b6-a74d-9545c8210733.roa (raw, json) Hash identifier: bQ78ukWpfSgIC4M4p1OW1SM3ckEadI0V/yPLOIHwtBY= Subject key identifier: A2:6F:D8:24:D8:2D:81:32:9F:E7:C6:6E:66:4F:C6:A6:0F:3A:DF:26 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285847BEF719A6EFC4A985E979EDE0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/58c03d5d-3757-35b6-a74d-9545c8210733.roa Signing time: Sat 02 Nov 2024 13:00:42 +0000 ROA not before: Sat 02 Nov 2024 13:00:42 +0000 ROA not after: Fri 31 Jan 2025 14:00:42 +0000 asID: 33666 IP address blocks: 71.229.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 25 Dec 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:be:f7:19:a6:ef:c4:a9:85:e9:79:ed:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Nov 2 13:00:42 2024 GMT Not After : Jan 31 14:00:42 2025 GMT Subject: CN=0daf39f3-6f47-4d29-92b3-1fe5e8c5e1d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:20:e8:a4:f4:7a:b4:e4:92:03:24:92:0f:db: 53:cf:1c:05:26:9d:a8:52:28:1e:a8:67:d8:10:ed: 49:74:d0:5c:55:4c:d5:ad:d8:3f:50:5e:1e:7c:47: 31:6b:4a:56:f2:50:3a:8e:68:68:63:c8:e2:39:98: ea:bb:50:08:3f:26:52:9f:55:34:35:1b:e1:16:b7: 43:3d:d4:f0:9d:99:44:d6:5f:e3:9a:37:1c:88:ac: 5a:b6:85:12:53:77:1c:e9:50:c9:0f:60:a6:b6:39: a5:0e:8c:86:db:70:03:ab:3b:dc:45:26:2c:7f:50: 60:2b:a8:01:a6:8f:5f:2d:0a:d6:14:29:3f:f0:06: 30:00:40:40:a6:40:0a:66:14:80:d7:c5:aa:98:29: 0b:9a:88:d1:b1:a7:22:9e:72:66:48:59:d1:83:54: 13:44:74:91:2b:33:1f:8e:2e:3c:29:75:2c:82:aa: bc:93:95:ca:15:4a:05:ce:6c:fd:4a:92:31:c3:7d: 89:6e:aa:4e:57:0f:d4:2e:39:91:da:6e:8d:1d:19: b5:1f:a6:9a:b0:00:71:ea:c9:80:3b:74:7a:fc:80: 87:7b:cf:ba:db:9d:b1:1f:5b:07:e1:8e:41:f0:a6: 0d:81:f3:6f:ca:de:f0:25:b4:da:f7:ce:a7:d3:9f: f1:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:6F:D8:24:D8:2D:81:32:9F:E7:C6:6E:66:4F:C6:A6:0F:3A:DF:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/58c03d5d-3757-35b6-a74d-9545c8210733.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.229.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:fb:ec:7a:d5:6f:0c:f8:a1:ab:20:5c:ad:9a:87:39:d9:b3: 77:bd:95:de:38:4a:4c:27:63:0d:e2:57:c7:fe:fd:a9:24:5c: 77:f5:6b:2d:9d:10:c1:3f:4a:e5:57:60:27:8e:f7:c2:80:51: df:78:0b:a8:f6:4e:66:59:7e:e5:07:e4:56:e0:2c:97:6a:3e: 63:ef:2a:61:a5:79:66:f7:66:70:07:08:7b:22:8d:6f:ec:2d: 5b:d0:89:7c:9f:8f:7c:79:c8:c8:e7:0c:d7:7d:ba:e9:73:a9: 1c:ec:1d:58:65:a3:cc:c3:65:92:09:35:71:e4:81:6b:45:66: f1:16:75:70:b6:c4:31:47:56:f1:f3:65:6c:38:39:1e:db:7a: 72:22:4a:ce:f6:df:05:c6:bc:3e:37:b0:21:42:62:57:fa:67: 38:b9:66:f7:73:5a:85:b7:57:b5:8b:1c:f1:f8:ca:19:ee:8f: 18:5a:c9:52:e6:a6:f7:9a:5c:4e:57:1b:99:dd:32:06:5f:71: ee:12:d7:24:56:8f:54:09:1a:8c:f5:69:59:79:ac:39:d3:ec: f7:6e:8f:5b:86:60:af:af:26:f3:ca:b0:03:64:80:2f:56:42: 62:e5:0d:7b:d8:93:17:26:76:27:4d:be:bd:8e:df:2c:59:43: 73:ef:c4:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe+9xmm78Sphel57eAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MTEwMjEzMDA0MloXDTI1MDEzMTE0MDA0MlowLzEtMCsGA1UEAxMk MGRhZjM5ZjMtNmY0Ny00ZDI5LTkyYjMtMWZlNWU4YzVlMWQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSDopPR6tOSSAySSD9tTzxwFJp2oUigeqGfY EO1JdNBcVUzVrdg/UF4efEcxa0pW8lA6jmhoY8jiOZjqu1AIPyZSn1U0NRvhFrdD PdTwnZlE1l/jmjcciKxatoUSU3cc6VDJD2CmtjmlDoyG23ADqzvcRSYsf1BgK6gB po9fLQrWFCk/8AYwAEBApkAKZhSA18WqmCkLmojRsacinnJmSFnRg1QTRHSRKzMf ji48KXUsgqq8k5XKFUoFzmz9SpIxw32JbqpOVw/ULjmR2m6NHRm1H6aasABx6smA O3R6/ICHe8+6252xH1sH4Y5B8KYNgfNvyt7wJbTa986n05/xxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKJv2CTYLYEyn+fGbmZPxqYPOt8mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNThjMDNkNWQtMzc1Ny0z NWI2LWE3NGQtOTU0NWM4MjEwNzMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQER+UAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACj77HrVbwz4oasgXK2ahznZs3e9ld44SkwnYw3iV8f+/akkXHf1ay2d EME/SuVXYCeO98KAUd94C6j2TmZZfuUH5FbgLJdqPmPvKmGleWb3ZnAHCHsijW/s LVvQiXyfj3x5yMjnDNd9uulzqRzsHVhlo8zDZZIJNXHkgWtFZvEWdXC2xDFHVvHz ZWw4OR7benIiSs723wXGvD43sCFCYlf6Zzi5ZvdzWoW3V7WLHPH4yhnujxhayVLm pveaXE5XG5ndMgZfce4S1yRWj1QJGoz1aVl5rDnT7Pduj1uGYK+vJvPKsANkgC9W QmLlDXvYkxcmdidNvr2O3yxZQ3PvxDM= -----END CERTIFICATE-----Generated at Sun Dec 22 15:11:54 2024 by rpki-client on console-fra.rpki-client.org