$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/761a2baf-778e-3674-8cc9-24c7a8ad8618.roa File: 761a2baf-778e-3674-8cc9-24c7a8ad8618.roa (raw, json) Hash identifier: XkCrWfRRILUy9EWpEEmXHZKhCgLsk6O+ovqkCwrC6q4= Subject key identifier: F9:F0:D4:87:59:18:AA:DD:DD:8F:93:CB:61:CF:2A:FE:2A:40:60:99 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584840E5F0A3ADB69C3005DBBF80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/761a2baf-778e-3674-8cc9-24c7a8ad8618.roa Signing time: Thu 19 Dec 2024 02:00:39 +0000 ROA not before: Thu 19 Dec 2024 02:00:39 +0000 ROA not after: Wed 19 Mar 2025 01:00:39 +0000 asID: 7725 IP address blocks: 73.237.220.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 25 Dec 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:40:e5:f0:a3:ad:b6:9c:30:05:db:bf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Dec 19 02:00:39 2024 GMT Not After : Mar 19 01:00:39 2025 GMT Subject: CN=3686c30d-0f6a-417c-ae6d-39f3314b8214 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:aa:6d:9a:d2:15:c4:d4:ed:45:28:b3:01:17: 4a:bb:e8:e5:ea:36:30:8b:07:c0:cf:76:de:9d:d9: 5c:a3:e8:59:52:a6:18:94:75:62:9c:40:25:21:f5: 64:e7:a5:44:f9:67:f7:b2:37:95:af:79:2f:72:2b: 23:99:6a:f2:19:d9:c8:cc:ee:6a:0c:b7:66:52:a3: c2:f4:8c:ab:fd:b6:54:51:6c:45:49:18:3a:5d:61: ee:f2:4f:49:7d:58:a5:0c:11:c9:3c:78:92:7e:e9: 38:03:d1:34:6e:0b:cb:00:49:1b:c2:67:a4:f4:9d: da:8e:c7:82:4b:90:6b:37:95:ae:0c:8f:fd:6a:6e: 71:c4:14:61:34:eb:30:4d:08:e9:ea:0a:f7:a0:22: 0b:c9:8a:4f:fb:93:74:fa:45:81:33:c9:6d:06:7a: 50:5b:46:3a:ee:ae:61:83:a6:a1:ba:96:fe:c2:03: ff:8c:4b:94:69:67:57:75:1b:53:0d:74:e0:dd:7a: 95:39:e0:30:61:08:0c:0b:34:41:92:45:c2:30:87: 5c:40:13:a0:6c:f9:51:3c:e9:85:16:3c:e6:e4:1d: c3:95:e2:a4:73:04:e4:25:fc:d7:ef:a8:84:a6:b5: 71:ac:ac:af:8a:4a:ec:d8:7e:87:27:2b:61:75:bb: 3d:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:F0:D4:87:59:18:AA:DD:DD:8F:93:CB:61:CF:2A:FE:2A:40:60:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/761a2baf-778e-3674-8cc9-24c7a8ad8618.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.237.220.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:91:17:91:e5:90:30:20:4c:36:60:95:57:70:2e:0f:6a:dc: 6c:e7:64:a7:99:80:93:e5:45:04:ac:b0:50:77:4f:d6:f3:1f: 50:dd:66:f5:94:72:f2:a0:5d:83:39:f0:44:0d:9a:e5:9d:25: 3a:78:b9:ff:a5:01:0d:0e:36:53:a3:f4:a9:09:5a:ac:9a:f0: 80:30:0a:32:2e:b6:64:e9:da:6a:b1:13:c4:f1:b0:f8:ab:6d: db:76:84:e9:f6:2d:1d:5c:34:21:46:76:e6:04:66:00:ac:74: 03:a9:0f:69:bf:19:cd:0d:83:12:5d:c6:f2:2e:d3:13:64:14: 9a:73:19:36:a8:24:77:2e:2a:ad:a0:2b:61:83:ae:b9:57:f2: 54:d8:b2:b3:d0:0b:43:1f:7b:45:22:59:83:31:a9:f8:5b:5d: d8:93:0b:66:50:3b:12:60:99:71:be:b1:6e:00:48:8e:64:de: 60:85:85:7d:98:37:70:f4:21:18:fc:66:d5:43:52:08:69:8b: b4:59:ed:a6:09:ea:0b:2d:3e:e7:6a:1e:e9:d8:27:bc:fc:45: 1b:61:28:32:1f:fb:ad:ac:83:b7:94:83:17:ff:58:c5:60:b1: f5:c1:8b:14:09:0e:a1:e1:a4:78:1c:01:ca:44:4e:37:b4:23: 9f:1a:05:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhA5fCjrbacMAXbv4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MTIxOTAyMDAzOVoXDTI1MDMxOTAxMDAzOVowLzEtMCsGA1UEAxMk MzY4NmMzMGQtMGY2YS00MTdjLWFlNmQtMzlmMzMxNGI4MjE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqptmtIVxNTtRSizARdKu+jl6jYwiwfAz3be ndlco+hZUqYYlHVinEAlIfVk56VE+Wf3sjeVr3kvcisjmWryGdnIzO5qDLdmUqPC 9Iyr/bZUUWxFSRg6XWHu8k9JfVilDBHJPHiSfuk4A9E0bgvLAEkbwmek9J3ajseC S5BrN5WuDI/9am5xxBRhNOswTQjp6gr3oCILyYpP+5N0+kWBM8ltBnpQW0Y67q5h g6ahupb+wgP/jEuUaWdXdRtTDXTg3XqVOeAwYQgMCzRBkkXCMIdcQBOgbPlRPOmF Fjzm5B3DleKkcwTkJfzX76iEprVxrKyvikrs2H6HJythdbs9FwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPnw1IdZGKrd3Y+Ty2HPKv4qQGCZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNzYxYTJiYWYtNzc4ZS0z Njc0LThjYzktMjRjN2E4YWQ4NjE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSe3cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEiRF5HlkDAgTDZglVdwLg9q3GznZKeZgJPlRQSssFB3T9bzH1DdZvWU cvKgXYM58EQNmuWdJTp4uf+lAQ0ONlOj9KkJWqya8IAwCjIutmTp2mqxE8TxsPir bdt2hOn2LR1cNCFGduYEZgCsdAOpD2m/Gc0NgxJdxvIu0xNkFJpzGTaoJHcuKq2g K2GDrrlX8lTYsrPQC0Mfe0UiWYMxqfhbXdiTC2ZQOxJgmXG+sW4ASI5k3mCFhX2Y N3D0IRj8ZtVDUghpi7RZ7aYJ6gstPudqHunYJ7z8RRthKDIf+62sg7eUgxf/WMVg sfXBixQJDqHhpHgcAcpETje0I58aBZk= -----END CERTIFICATE-----Generated at Sun Dec 22 15:17:01 2024 by rpki-client on console-fra.rpki-client.org