$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8daf6b6c-4447-3c79-a80b-a0e5de1dd898.roa File: 8daf6b6c-4447-3c79-a80b-a0e5de1dd898.roa (raw, json) Hash identifier: SBFEaV0EnizwNCNA+9ryPwpL/+V5EzRn6GeXVTJucTE= Subject key identifier: 59:4B:EF:AB:64:AD:26:1B:FD:1B:86:F4:F1:50:65:D9:B6:71:0D:AE Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858476C9D490DDB1F6F7CEA57B600 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8daf6b6c-4447-3c79-a80b-a0e5de1dd898.roa Signing time: Fri 04 Oct 2024 01:00:31 +0000 ROA not before: Fri 04 Oct 2024 01:00:31 +0000 ROA not after: Thu 02 Jan 2025 02:00:31 +0000 asID: 33651 IP address blocks: 73.231.128.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:6c:9d:49:0d:db:1f:6f:7c:ea:57:b6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 4 01:00:31 2024 GMT Not After : Jan 2 02:00:31 2025 GMT Subject: CN=a4754eec-7e78-4816-88a0-f90d4a09d9de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e6:02:67:9c:9e:dc:9b:ae:35:eb:dc:bf:64: 07:39:e6:ac:9e:16:d1:bb:48:cd:0b:3c:8c:6c:53: 29:99:58:d7:56:ae:16:7d:97:85:77:c5:00:37:ab: 43:c0:42:7d:86:83:d6:03:1a:9a:f8:12:4a:02:45: 92:d2:cd:5a:cf:ce:12:7d:9a:98:fa:3d:e8:69:1a: ed:04:2c:d9:63:55:2c:18:fd:0f:27:cb:57:11:65: 30:16:ed:92:39:91:b5:48:14:a4:08:c8:a7:37:0e: ad:1b:63:c1:af:e5:3e:d1:0f:5d:92:dc:a5:26:04: bb:3a:65:6b:33:92:aa:5a:96:aa:ff:91:cc:92:29: bd:83:42:3a:80:4d:67:42:bf:86:d9:fd:2b:30:fd: ea:98:52:8c:c4:31:a5:d3:eb:1a:1f:7a:c7:ab:82: 25:e9:a5:1d:0e:4d:12:6f:cf:97:0b:68:71:2c:22: 30:a2:83:68:bc:68:50:76:d8:06:d1:4b:d1:bd:0f: b5:9b:61:e2:0f:76:0c:be:00:ca:2a:82:77:23:86: b3:ec:94:f9:28:91:9a:80:b0:2f:47:3d:45:15:b2: 17:7c:0b:d0:be:ca:56:9f:28:15:73:dc:bb:72:ce: af:ed:e3:10:0b:c1:6b:ae:38:86:4a:6e:1f:27:bb: c7:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:4B:EF:AB:64:AD:26:1B:FD:1B:86:F4:F1:50:65:D9:B6:71:0D:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8daf6b6c-4447-3c79-a80b-a0e5de1dd898.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.231.128.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:8d:b9:13:2b:a3:a4:4d:ae:83:01:40:bc:a1:98:cd:14:e6: 98:69:50:af:b7:d1:1d:57:4f:97:1f:7f:dc:57:1d:95:4c:21: e4:86:a1:6a:2a:cd:60:6c:8d:93:d7:d5:2e:dd:50:06:ce:9d: af:3d:1f:80:2e:07:3a:f3:3c:4c:c8:59:d9:11:2c:30:e3:fa: 17:8f:de:dd:83:1a:11:e9:89:00:e1:aa:ed:eb:dd:53:f0:e4: 51:07:2b:d5:07:f9:ef:f0:c2:c7:ce:6e:4a:a1:51:50:aa:b3: a9:ae:53:65:bc:c2:84:bb:77:a9:38:65:1f:af:1e:57:6e:58: ab:df:97:a9:c5:27:0d:5b:0d:ac:9b:3f:95:01:c2:9a:ec:9a: cc:17:73:c5:50:db:85:19:31:47:23:09:c7:7c:df:09:3a:15: b6:1e:7a:b7:ed:b9:84:1d:62:39:57:51:94:d5:29:57:e0:ce: 34:6b:81:98:53:e8:75:20:65:a5:af:19:c4:e8:4d:87:62:6c: be:ef:37:3c:6e:d8:96:f0:f5:19:c3:cc:9e:cf:99:52:4d:49: 28:d4:18:8f:8e:f2:69:b9:c3:76:bb:06:14:f1:51:9b:cd:ad: 3e:5b:d2:eb:25:64:b7:44:07:47:1e:28:79:ab:3a:66:e1:f5: 44:8e:ea:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdsnUkN2x9vfOpXtgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MTAwNDAxMDAzMVoXDTI1MDEwMjAyMDAzMVowLzEtMCsGA1UEAxMk YTQ3NTRlZWMtN2U3OC00ODE2LTg4YTAtZjkwZDRhMDlkOWRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwuYCZ5ye3JuuNevcv2QHOeasnhbRu0jNCzyM bFMpmVjXVq4WfZeFd8UAN6tDwEJ9hoPWAxqa+BJKAkWS0s1az84SfZqY+j3oaRrt BCzZY1UsGP0PJ8tXEWUwFu2SOZG1SBSkCMinNw6tG2PBr+U+0Q9dktylJgS7OmVr M5KqWpaq/5HMkim9g0I6gE1nQr+G2f0rMP3qmFKMxDGl0+saH3rHq4Il6aUdDk0S b8+XC2hxLCIwooNovGhQdtgG0UvRvQ+1m2HiD3YMvgDKKoJ3I4az7JT5KJGagLAv Rz1FFbIXfAvQvspWnygVc9y7cs6v7eMQC8FrrjiGSm4fJ7vHYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFlL76tkrSYb/RuG9PFQZdm2cQ2uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGRhZjZiNmMtNDQ0Ny0z Yzc5LWE4MGItYTBlNWRlMWRkODk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSeeAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIiNuRMro6RNroMBQLyhmM0U5phpUK+30R1XT5cff9xXHZVMIeSGoWoq zWBsjZPX1S7dUAbOna89H4AuBzrzPEzIWdkRLDDj+heP3t2DGhHpiQDhqu3r3VPw 5FEHK9UH+e/wwsfObkqhUVCqs6muU2W8woS7d6k4ZR+vHlduWKvfl6nFJw1bDayb P5UBwprsmswXc8VQ24UZMUcjCcd83wk6FbYeerftuYQdYjlXUZTVKVfgzjRrgZhT 6HUgZaWvGcToTYdibL7vNzxu2Jbw9RnDzJ7PmVJNSSjUGI+O8mm5w3a7BhTxUZvN rT5b0uslZLdEB0ceKHmrOmbh9USO6l8= -----END CERTIFICATE-----Generated at Fri Nov 22 11:29:50 2024 by rpki-client on console-fra.rpki-client.org