$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8f3a67fc-0eea-3ff7-95d4-b7f0fd4e56e8.roa File: 8f3a67fc-0eea-3ff7-95d4-b7f0fd4e56e8.roa (raw, json) Hash identifier: XbdOPCcdcB2Dz3AR+WRv2RReThB8VDk4IamLsryVX4k= Subject key identifier: 61:91:00:64:5D:81:68:E1:F2:38:94:68:16:AD:36:9E:4F:1A:06:71 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584840E596BC36D2AE5CAD5D3F80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8f3a67fc-0eea-3ff7-95d4-b7f0fd4e56e8.roa Signing time: Thu 19 Dec 2024 02:00:39 +0000 ROA not before: Thu 19 Dec 2024 02:00:39 +0000 ROA not after: Wed 19 Mar 2025 01:00:39 +0000 asID: 7725 IP address blocks: 73.58.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 25 Dec 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:40:e5:96:bc:36:d2:ae:5c:ad:5d:3f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Dec 19 02:00:39 2024 GMT Not After : Mar 19 01:00:39 2025 GMT Subject: CN=28120c9c-8b98-4257-a14e-5b4de44e52dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:f4:bc:79:f0:af:2f:89:73:6f:e9:78:ad:8a: 45:9c:e3:0f:df:9d:a3:c4:28:b4:70:d9:45:f4:70: 87:84:c0:70:d9:4a:03:1a:86:03:7a:cd:8e:8e:b7: c7:1b:30:2d:0e:88:9d:45:45:ab:cb:f6:71:fc:c7: 3e:92:c5:50:65:eb:0f:d7:e0:8d:4e:ba:fc:9e:be: f6:57:4f:21:cd:4b:3b:02:8d:eb:e5:10:a8:8d:3a: 82:e2:b8:e5:f4:d8:85:de:e5:ac:51:21:e4:d8:d3: 79:79:45:bf:e7:f0:0d:34:e5:b5:18:19:a5:b4:50: f6:1f:d8:0e:30:4d:18:3a:24:e2:2c:8e:fa:bc:bc: 73:3f:58:27:42:b8:6e:c4:3f:55:a1:fb:f9:d0:51: a8:f3:08:a5:bf:39:b6:84:a6:9e:15:5e:1d:5e:c3: 0f:04:7f:45:5b:fc:50:a0:4a:d8:b3:9a:4e:49:2d: c7:d2:20:1b:5b:39:ec:32:c5:43:0a:8d:a2:87:d2: 89:de:0f:07:ef:28:76:ae:11:74:d8:e1:e5:8a:07: f3:3d:a5:63:d6:c1:aa:06:1f:52:06:d1:ef:af:58: f9:95:ac:a9:62:9a:a5:e8:e8:7e:93:53:1a:17:e6: bf:32:51:93:9e:ba:3b:e1:99:d5:60:e8:c0:38:05: 8f:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:91:00:64:5D:81:68:E1:F2:38:94:68:16:AD:36:9E:4F:1A:06:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8f3a67fc-0eea-3ff7-95d4-b7f0fd4e56e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.58.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:03:5b:df:9d:be:a8:2b:56:54:12:12:3e:fd:e9:c0:9e:06: bb:de:d5:95:29:3d:0d:cd:b3:1d:b8:d4:17:b9:74:12:c9:b1: 43:6e:4f:f9:d7:65:aa:1a:c2:ea:30:cb:70:c3:14:29:db:c2: 8b:a7:10:59:9e:50:2d:02:4a:67:d3:1e:37:00:bd:65:e3:21: 56:a7:28:23:22:72:4b:49:58:09:c0:09:5a:05:b8:03:9a:da: ff:b9:e9:e1:99:40:1c:f0:dc:96:bb:9f:1d:02:e3:9b:7b:e4: bb:c3:49:3f:e7:5e:0d:07:35:e2:a3:2c:8e:b4:99:f6:6e:d5: 79:17:36:a9:06:ca:12:c0:6a:49:86:18:1d:26:9d:1c:ab:59: 88:53:d7:0a:24:b9:86:6d:61:6c:e7:48:f5:de:f0:a7:a0:32: 73:40:3f:3f:82:fd:02:27:18:9a:36:6e:e1:b8:4c:1a:0c:f4: a0:41:fb:af:fb:07:03:ec:f6:11:6f:21:56:77:f0:98:53:19: 78:43:3b:bc:7e:2c:08:52:db:59:db:70:b2:f9:19:41:30:c3: a6:b8:33:b4:95:73:35:6f:13:53:c9:a1:e8:5e:c0:4e:da:ba: f7:6c:29:f3:de:b5:56:12:11:c2:6b:ca:74:03:e5:98:db:26: 17:9c:69:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhA5Za8NtKuXK1dP4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MTIxOTAyMDAzOVoXDTI1MDMxOTAxMDAzOVowLzEtMCsGA1UEAxMk MjgxMjBjOWMtOGI5OC00MjU3LWExNGUtNWI0ZGU0NGU1MmRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfS8efCvL4lzb+l4rYpFnOMP352jxCi0cNlF 9HCHhMBw2UoDGoYDes2OjrfHGzAtDoidRUWry/Zx/Mc+ksVQZesP1+CNTrr8nr72 V08hzUs7Ao3r5RCojTqC4rjl9NiF3uWsUSHk2NN5eUW/5/ANNOW1GBmltFD2H9gO ME0YOiTiLI76vLxzP1gnQrhuxD9Vofv50FGo8wilvzm2hKaeFV4dXsMPBH9FW/xQ oErYs5pOSS3H0iAbWznsMsVDCo2ih9KJ3g8H7yh2rhF02OHligfzPaVj1sGqBh9S BtHvr1j5laypYpql6Oh+k1MaF+a/MlGTnro74ZnVYOjAOAWPxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGGRAGRdgWjh8jiUaBatNp5PGgZxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGYzYTY3ZmMtMGVlYS0z ZmY3LTk1ZDQtYjdmMGZkNGU1NmU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSToQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIgDW9+dvqgrVlQSEj796cCeBrve1ZUpPQ3Nsx241Be5dBLJsUNuT/nX Zaoawuowy3DDFCnbwounEFmeUC0CSmfTHjcAvWXjIVanKCMicktJWAnACVoFuAOa 2v+56eGZQBzw3Ja7nx0C45t75LvDST/nXg0HNeKjLI60mfZu1XkXNqkGyhLAakmG GB0mnRyrWYhT1wokuYZtYWznSPXe8KegMnNAPz+C/QInGJo2buG4TBoM9KBB+6/7 BwPs9hFvIVZ38JhTGXhDO7x+LAhS21nbcLL5GUEww6a4M7SVczVvE1PJoehewE7a uvdsKfPetVYSEcJrynQD5ZjbJhecaVA= -----END CERTIFICATE-----Generated at Sun Dec 22 15:21:35 2024 by rpki-client on console-fra.rpki-client.org