$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/94f45de0-7790-3329-bc2a-9a841c6e0202.roa File: 94f45de0-7790-3329-bc2a-9a841c6e0202.roa (raw, json) Hash identifier: tAfPHoZTVNygaCofkNXwUDQxf9DVor4fj9mw9w9kMAs= Subject key identifier: BF:25:72:1A:58:D8:36:90:46:96:53:CE:9A:61:D5:78:26:A6:B4:A3 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858476C9C3B0DC4091AC9E66A5A00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/94f45de0-7790-3329-bc2a-9a841c6e0202.roa Signing time: Fri 04 Oct 2024 01:00:31 +0000 ROA not before: Fri 04 Oct 2024 01:00:31 +0000 ROA not after: Thu 02 Jan 2025 02:00:31 +0000 asID: 33491 IP address blocks: 73.22.106.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 23 Dec 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:6c:9c:3b:0d:c4:09:1a:c9:e6:6a:5a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 4 01:00:31 2024 GMT Not After : Jan 2 02:00:31 2025 GMT Subject: CN=f4c49c39-64e3-41e4-a1e9-c8800cfebd12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:32:f6:56:f3:e0:d6:e4:55:2a:c8:26:83:23: 21:44:ef:57:d7:5c:65:68:8f:3b:df:13:09:5e:91: 39:e4:91:c9:19:44:92:7c:07:61:f1:53:07:30:60: 52:38:db:e2:0e:8f:d2:69:fc:da:7c:ed:54:05:d2: 6b:9d:90:56:eb:84:3b:c1:50:a9:3c:2d:62:7d:ff: b4:22:e9:bc:81:61:05:81:94:85:5c:8a:3f:15:1a: 36:34:f9:5a:46:48:b2:35:fd:19:93:41:61:ed:82: e2:c7:c6:cf:c2:fd:06:5c:69:d7:d7:6b:dc:4b:02: a1:fa:f9:04:81:1f:96:49:cf:9d:e6:54:8d:33:55: cd:54:d8:00:14:44:81:7e:d3:0e:b2:9c:45:bf:6c: 6a:5b:25:1e:90:99:0c:5f:cc:2e:d9:eb:c5:1a:ec: 24:54:14:f3:43:97:b9:2d:53:98:39:e1:0c:1a:1a: 5d:90:63:36:ea:52:de:14:c9:ff:24:b3:43:14:d2: 0d:2d:69:73:e6:f4:ae:72:67:e2:94:54:d5:66:f3: d7:34:9b:2a:b1:6a:5e:8d:73:01:61:df:1e:fd:68: 57:0e:36:a5:0e:6a:98:b9:59:55:68:8c:aa:78:06: 40:e3:21:8e:86:48:d5:4f:2f:e1:68:ee:db:f9:e6: 40:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:25:72:1A:58:D8:36:90:46:96:53:CE:9A:61:D5:78:26:A6:B4:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/94f45de0-7790-3329-bc2a-9a841c6e0202.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.22.106.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:6a:d5:c9:56:8e:c6:3f:dd:6c:55:d6:47:b6:4d:7f:eb:f3: 78:bb:72:4a:ac:6d:39:ef:fe:ac:57:2d:76:ef:69:2b:3e:76: 04:c5:2f:c2:cc:96:91:17:36:5a:de:d6:ff:ba:73:9e:85:95: b5:62:e1:0d:5a:ea:41:d0:9c:5a:e8:47:ca:3d:fb:0d:ba:73: 69:af:1e:d5:cd:83:d9:97:75:17:44:a9:35:33:33:32:19:8c: 42:0f:17:28:70:f6:b0:0b:71:38:67:a5:49:87:09:ad:a5:f7: f8:79:5d:16:1f:4d:ba:7d:c2:d1:72:2f:04:59:59:83:d6:ec: 06:8b:fc:41:4a:f6:0c:ef:bc:ab:02:8a:a0:a4:13:5c:aa:43: e5:ed:b4:ab:6b:fe:8c:1c:29:ff:f8:0e:4e:34:6a:f2:ce:96: d7:f1:60:1f:29:40:75:91:f5:41:90:2f:90:d6:7c:67:64:3c: 19:f5:6b:bd:80:98:dd:9d:23:b3:39:36:96:3f:50:36:80:cb: 53:0a:cf:78:6d:3d:d9:8d:c5:f1:8c:40:6d:71:89:b8:42:92: 0b:2d:bf:8d:ee:fd:a7:92:ad:52:8e:82:39:e4:7e:eb:6b:a2: cd:92:ee:b5:88:36:ed:3d:85:f0:f2:50:00:13:22:a3:c4:01: 03:24:7a:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdsnDsNxAkayeZqWgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MTAwNDAxMDAzMVoXDTI1MDEwMjAyMDAzMVowLzEtMCsGA1UEAxMk ZjRjNDljMzktNjRlMy00MWU0LWExZTktYzg4MDBjZmViZDEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5zL2VvPg1uRVKsgmgyMhRO9X11xlaI873xMJ XpE55JHJGUSSfAdh8VMHMGBSONviDo/SafzafO1UBdJrnZBW64Q7wVCpPC1iff+0 Ium8gWEFgZSFXIo/FRo2NPlaRkiyNf0Zk0Fh7YLix8bPwv0GXGnX12vcSwKh+vkE gR+WSc+d5lSNM1XNVNgAFESBftMOspxFv2xqWyUekJkMX8wu2evFGuwkVBTzQ5e5 LVOYOeEMGhpdkGM26lLeFMn/JLNDFNINLWlz5vSucmfilFTVZvPXNJsqsWpejXMB Yd8e/WhXDjalDmqYuVlVaIyqeAZA4yGOhkjVTy/haO7b+eZArwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL8lchpY2DaQRpZTzpph1XgmprSjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTRmNDVkZTAtNzc5MC0z MzI5LWJjMmEtOWE4NDFjNmUwMjAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSRZqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAABq1clWjsY/3WxV1ke2TX/r83i7ckqsbTnv/qxXLXbvaSs+dgTFL8LM lpEXNlre1v+6c56FlbVi4Q1a6kHQnFroR8o9+w26c2mvHtXNg9mXdRdEqTUzMzIZ jEIPFyhw9rALcThnpUmHCa2l9/h5XRYfTbp9wtFyLwRZWYPW7AaL/EFK9gzvvKsC iqCkE1yqQ+XttKtr/owcKf/4Dk40avLOltfxYB8pQHWR9UGQL5DWfGdkPBn1a72A mN2dI7M5NpY/UDaAy1MKz3htPdmNxfGMQG1xibhCkgstv43u/aeSrVKOgjnkfutr os2S7rWINu09hfDyUAATIqPEAQMkegc= -----END CERTIFICATE-----Generated at Sun Dec 22 13:09:25 2024 by rpki-client on console-ams.rpki-client.org