$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/942853ad-81f7-3d58-8678-2e238c1ee6c1.roa File: 942853ad-81f7-3d58-8678-2e238c1ee6c1.roa (raw, json) Hash identifier: L1bsjex4iqB5gMV4x6qhshjj3f/cY6rRln+px/UdqEk= Subject key identifier: 09:7B:2F:7C:C8:16:2A:8B:54:13:5E:1E:C6:A5:02:69:BB:0D:B6:05 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858476C9BFD7DCD5AD2C494F7D160 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/942853ad-81f7-3d58-8678-2e238c1ee6c1.roa Signing time: Fri 04 Oct 2024 01:00:31 +0000 ROA not before: Fri 04 Oct 2024 01:00:31 +0000 ROA not after: Thu 02 Jan 2025 02:00:31 +0000 asID: 33491 IP address blocks: 71.239.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 25 Dec 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:6c:9b:fd:7d:cd:5a:d2:c4:94:f7:d1:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 4 01:00:31 2024 GMT Not After : Jan 2 02:00:31 2025 GMT Subject: CN=ec8b382b-e88e-47ed-a607-6b33628bc54b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:2a:0b:4b:43:9d:5e:f2:1a:64:98:0b:2e:45: 1f:34:09:7e:f8:b1:f6:e5:a4:d4:75:0a:d0:23:70: 5e:59:5e:a3:eb:a2:45:4e:5c:58:12:b1:dd:fc:85: a6:ad:b8:3f:60:b5:0e:98:1e:af:d3:81:d8:e7:0b: e2:c4:cf:0a:ea:f8:00:68:79:e4:dd:4b:49:dc:90: 43:83:d7:fe:16:3e:61:0c:4e:48:3c:19:09:28:9b: 45:ba:05:f2:cf:da:91:df:de:07:3d:39:c3:70:9f: 45:8f:94:43:77:42:cd:1a:ca:e4:a1:c0:0c:82:49: 2d:36:1d:0f:5e:06:ab:83:d3:66:c3:1c:45:16:d1: 66:7f:3f:fc:b7:5f:04:90:93:69:e4:6d:a4:d1:3c: 2d:a6:4c:2e:da:c0:86:5e:48:0f:da:96:40:5d:52: f5:03:c8:1f:8d:b9:b8:b3:28:28:f7:f9:47:82:d2: 7b:cc:f7:35:2c:31:63:ac:1e:1a:d5:17:ec:1e:55: 02:df:e5:3c:be:10:f3:a1:3b:27:3f:e6:53:45:c8: d0:d4:dc:44:7f:aa:ae:c5:d5:5c:37:0f:19:95:7f: 98:4a:96:02:61:78:1c:15:72:4d:35:0e:97:33:62: be:b3:68:95:b0:bb:45:8f:52:85:93:aa:63:5b:82: 19:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:7B:2F:7C:C8:16:2A:8B:54:13:5E:1E:C6:A5:02:69:BB:0D:B6:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/942853ad-81f7-3d58-8678-2e238c1ee6c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.239.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ce:72:36:12:7f:d4:af:5b:0f:10:d5:e3:dd:d0:9b:17:55:f7: 35:83:4c:d7:fa:e5:d3:1f:7e:5c:06:17:0f:e2:2b:94:75:24: 30:76:c7:6c:d7:e4:ed:c0:c7:83:7e:66:6a:51:4d:c3:59:65: 0a:fa:0e:4f:7d:30:9f:db:f2:50:11:50:ab:ee:9b:77:8c:ba: bb:82:da:24:d9:41:66:c6:b3:ba:dc:84:90:02:f9:66:a2:7e: 5b:21:10:83:b5:f9:cf:cb:b4:ff:7c:bc:f2:43:b7:ea:d7:92: 90:cc:56:6f:62:80:14:8e:08:04:9f:9b:cc:55:4e:1e:f9:b4: 7b:0d:d7:71:04:7c:49:42:56:e3:44:97:32:8e:46:f5:f5:6c: 88:db:3e:60:35:dd:23:70:2a:ee:e5:61:e4:f6:c0:5c:15:22: 9f:48:cf:c4:7b:84:29:00:11:03:70:13:41:b3:c2:fd:08:f6: 5d:6b:62:47:39:18:8e:a6:bf:b4:43:04:ec:c8:e3:5b:0d:28: e6:e2:02:e1:5e:6c:21:c3:6a:76:ff:6c:ee:c0:f7:c2:79:a9: a9:ff:c5:d4:78:5a:06:32:db:61:54:a4:e4:7c:f7:42:fb:e3: d7:26:ff:6b:e7:70:0b:3a:2d:8f:a3:db:db:31:34:3a:8c:4e: 22:d4:17:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdsm/19zVrSxJT30WAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MTAwNDAxMDAzMVoXDTI1MDEwMjAyMDAzMVowLzEtMCsGA1UEAxMk ZWM4YjM4MmItZTg4ZS00N2VkLWE2MDctNmIzMzYyOGJjNTRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCoLS0OdXvIaZJgLLkUfNAl++LH25aTUdQrQ I3BeWV6j66JFTlxYErHd/IWmrbg/YLUOmB6v04HY5wvixM8K6vgAaHnk3UtJ3JBD g9f+Fj5hDE5IPBkJKJtFugXyz9qR394HPTnDcJ9Fj5RDd0LNGsrkocAMgkktNh0P Xgarg9NmwxxFFtFmfz/8t18EkJNp5G2k0Twtpkwu2sCGXkgP2pZAXVL1A8gfjbm4 sygo9/lHgtJ7zPc1LDFjrB4a1RfsHlUC3+U8vhDzoTsnP+ZTRcjQ1NxEf6quxdVc Nw8ZlX+YSpYCYXgcFXJNNQ6XM2K+s2iVsLtFj1KFk6pjW4IZAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAl7L3zIFiqLVBNeHsalAmm7DbYFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTQyODUzYWQtODFmNy0z ZDU4LTg2NzgtMmUyMzhjMWVlNmMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCR+/wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM5yNhJ/1K9bDxDV493QmxdV9zWDTNf65dMfflwGFw/iK5R1JDB2x2zX 5O3Ax4N+ZmpRTcNZZQr6Dk99MJ/b8lARUKvum3eMuruC2iTZQWbGs7rchJAC+Wai flshEIO1+c/LtP98vPJDt+rXkpDMVm9igBSOCASfm8xVTh75tHsN13EEfElCVuNE lzKORvX1bIjbPmA13SNwKu7lYeT2wFwVIp9Iz8R7hCkAEQNwE0Gzwv0I9l1rYkc5 GI6mv7RDBOzI41sNKObiAuFebCHDanb/bO7A98J5qan/xdR4WgYy22FUpOR890L7 49cm/2vncAs6LY+j29sxNDqMTiLUFxE= -----END CERTIFICATE-----Generated at Sun Dec 22 15:22:26 2024 by rpki-client on console-fra.rpki-client.org