$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8d11a6dc-c42d-3aef-a681-9c223790c69b.roa File: 8d11a6dc-c42d-3aef-a681-9c223790c69b.roa (raw, json) Hash identifier: IZxmoVuUeBu0ube7OktN+/tbcgECXXja1HCwExxT6h8= Subject key identifier: C4:CC:91:D1:04:1B:30:65:7C:40:54:15:A5:76:68:A2:9A:9D:35:03 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584840E57DB523EA6B8A3CF46400 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8d11a6dc-c42d-3aef-a681-9c223790c69b.roa Signing time: Thu 19 Dec 2024 02:00:39 +0000 ROA not before: Thu 19 Dec 2024 02:00:39 +0000 ROA not after: Wed 19 Mar 2025 01:00:39 +0000 asID: 7725 IP address blocks: 71.204.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 23 Dec 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:40:e5:7d:b5:23:ea:6b:8a:3c:f4:64:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Dec 19 02:00:39 2024 GMT Not After : Mar 19 01:00:39 2025 GMT Subject: CN=e6ba0352-eef0-41c7-af86-5dcc5aa2c568 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:7e:0e:e1:e4:c4:57:e1:1c:de:c9:bc:57:f0: 95:a9:ff:19:24:47:d3:6e:1d:30:d3:0e:df:95:96: 53:7f:6e:8d:df:e8:07:65:fb:d9:3e:e5:b2:12:bd: fa:fa:2a:1c:74:93:ea:c8:ec:e9:fb:2d:41:1d:42: 56:09:a9:2c:6b:02:fc:8f:a4:21:17:c0:5b:3b:2e: a4:46:34:85:d3:30:43:30:f1:3f:1c:4d:d1:d9:00: 78:d0:24:07:3c:0c:fb:5c:ce:47:59:55:2a:91:11: d8:6a:8a:16:4a:e3:ae:10:0d:54:f6:5a:7f:1c:72: b6:8b:0b:dc:28:c2:9b:9c:3a:78:5c:3c:73:54:d7: 3d:03:74:6e:5d:20:d1:dc:32:40:2a:60:17:cb:8b: 28:61:f1:0b:e0:4b:f5:20:9b:e1:fc:09:21:78:35: 69:07:75:38:d7:f4:88:91:89:ee:c5:7a:2a:22:07: e8:25:76:e9:8c:98:16:6e:8a:aa:43:b7:06:08:12: f4:b4:e8:20:11:54:6c:2f:c3:b6:39:44:2f:55:d9: 1c:87:1a:1b:6f:b5:02:2a:b2:0e:a6:31:87:3c:6a: 41:5d:0d:58:83:c9:e6:e0:76:9a:09:bf:a7:d4:0f: 79:6c:78:5a:ec:91:cd:af:55:b5:d5:1f:2c:4a:c4: 3c:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:CC:91:D1:04:1B:30:65:7C:40:54:15:A5:76:68:A2:9A:9D:35:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8d11a6dc-c42d-3aef-a681-9c223790c69b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.204.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:5b:77:c6:a9:49:58:c6:0d:e9:a5:e3:f3:e0:75:0e:ce:ca: 2a:4e:3c:5d:a3:69:e4:eb:cd:11:f8:b2:17:c4:82:42:a1:b2: bd:28:43:39:19:09:8f:dc:02:a1:02:b1:0e:02:2f:a5:09:20: 27:88:7c:db:57:33:c4:11:7f:d6:36:fb:a8:77:02:04:1e:a6: 83:bf:6a:5f:a9:69:3d:04:8f:e4:2d:e7:9c:17:a6:44:5d:cf: 62:97:18:ad:57:eb:3b:4b:5e:d2:36:e0:06:87:25:ec:0b:40: 05:09:e2:ec:62:66:40:24:26:b7:d4:71:7f:5c:99:52:40:92: 31:17:2a:fe:11:54:76:c7:6a:6b:cd:fb:21:7b:e8:1f:b8:d4: e3:47:2e:b9:c5:b5:00:0b:af:6a:ba:b5:dd:53:b5:5b:40:46: 99:de:d4:eb:dd:56:60:b7:a4:9d:d0:81:b6:2b:23:5c:26:5b: 42:f1:27:88:26:ec:77:d5:bb:ec:19:00:22:95:e0:f7:17:6b: 76:02:18:da:8e:e5:ba:f1:ea:af:3c:62:24:27:e2:00:40:b0: 5d:01:75:73:be:af:28:51:d9:7e:f9:eb:ce:ef:1a:f8:6e:17: 28:19:e0:3c:ae:85:7a:54:c8:bc:d9:23:3d:47:66:28:ee:ca: 64:1a:39:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhA5X21I+prijz0ZAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MTIxOTAyMDAzOVoXDTI1MDMxOTAxMDAzOVowLzEtMCsGA1UEAxMk ZTZiYTAzNTItZWVmMC00MWM3LWFmODYtNWRjYzVhYTJjNTY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkn4O4eTEV+Ec3sm8V/CVqf8ZJEfTbh0w0w7f lZZTf26N3+gHZfvZPuWyEr36+iocdJPqyOzp+y1BHUJWCaksawL8j6QhF8BbOy6k RjSF0zBDMPE/HE3R2QB40CQHPAz7XM5HWVUqkRHYaooWSuOuEA1U9lp/HHK2iwvc KMKbnDp4XDxzVNc9A3RuXSDR3DJAKmAXy4soYfEL4Ev1IJvh/AkheDVpB3U41/SI kYnuxXoqIgfoJXbpjJgWboqqQ7cGCBL0tOggEVRsL8O2OUQvVdkchxobb7UCKrIO pjGHPGpBXQ1Yg8nm4HaaCb+n1A95bHha7JHNr1W11R8sSsQ8HwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMTMkdEEGzBlfEBUFaV2aKKanTUDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGQxMWE2ZGMtYzQyZC0z YWVmLWE2ODEtOWMyMjM3OTBjNjliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCR8wUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKtbd8apSVjGDeml4/PgdQ7OyipOPF2jaeTrzRH4shfEgkKhsr0oQzkZ CY/cAqECsQ4CL6UJICeIfNtXM8QRf9Y2+6h3AgQepoO/al+paT0Ej+Qt55wXpkRd z2KXGK1X6ztLXtI24AaHJewLQAUJ4uxiZkAkJrfUcX9cmVJAkjEXKv4RVHbHamvN +yF76B+41ONHLrnFtQALr2q6td1TtVtARpne1OvdVmC3pJ3QgbYrI1wmW0LxJ4gm 7HfVu+wZACKV4PcXa3YCGNqO5brx6q88YiQn4gBAsF0BdXO+ryhR2X75687vGvhu FygZ4DyuhXpUyLzZIz1HZijuymQaOSs= -----END CERTIFICATE-----Generated at Sun Dec 22 13:08:02 2024 by rpki-client on console-ams.rpki-client.org