$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a7c6f4e9-ac31-3985-8fd1-6c98005ae8f0.roa File: a7c6f4e9-ac31-3985-8fd1-6c98005ae8f0.roa (raw, json) Hash identifier: nQs5T2rVq8T1pLtDfb9W4oCLxCDxl7ZMV3eC6bdmuk0= Subject key identifier: D0:2C:90:FD:29:B7:7E:76:93:0A:D0:5C:E0:D0:5B:04:3F:A3:62:FD Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584734C7480731444F14DF856628 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a7c6f4e9-ac31-3985-8fd1-6c98005ae8f0.roa Signing time: Sat 14 Sep 2024 01:00:32 +0000 ROA not before: Sat 14 Sep 2024 01:00:32 +0000 ROA not after: Fri 13 Dec 2024 02:00:32 +0000 asID: 7015 IP address blocks: 76.127.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:34:c7:48:07:31:44:4f:14:df:85:66:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 14 01:00:32 2024 GMT Not After : Dec 13 02:00:32 2024 GMT Subject: CN=af2da6e2-c35f-4cd4-84d9-2fe78359a251 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ef:f5:bb:63:8b:dc:2e:99:77:34:66:f3:7a: 2a:0e:5b:30:b7:f1:56:17:c1:77:91:6f:91:28:d1: 5d:0a:a4:3c:21:48:2c:cd:67:68:bf:53:77:63:0f: 1d:12:9a:dc:37:97:5e:66:73:1f:f4:ce:86:99:69: ba:c9:9d:62:62:44:a9:1e:99:f1:17:93:a0:8f:91: 52:5c:ef:f9:61:2f:ba:7a:e2:e7:5e:aa:20:56:42: 2c:a5:ab:d4:3b:84:cf:42:8d:8d:d6:5c:78:37:7c: f9:5c:5d:71:1e:65:85:e9:bb:9f:b9:fb:6d:ed:b2: fe:27:fb:e7:eb:fa:73:4d:38:68:54:05:08:c0:d7: 83:fd:3c:77:75:57:43:7b:b1:b0:53:7f:91:41:d3: a5:e5:e5:7e:96:af:a4:5a:4f:68:38:83:ff:d3:22: 77:53:15:00:ec:19:31:47:f2:df:f6:5f:e4:c1:16: 91:1f:76:32:c9:03:bd:f2:fa:6c:c2:b4:60:8e:50: 15:12:bf:8e:7a:ea:7f:7b:c0:78:e1:da:fb:42:ab: a2:34:52:6a:ec:a1:fd:db:ee:9d:50:b4:ce:81:df: 66:47:d5:8e:68:51:51:19:98:29:f9:98:0b:ea:9b: 11:92:87:b8:37:d1:bb:26:00:75:3c:f8:5c:f9:05: 7f:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:2C:90:FD:29:B7:7E:76:93:0A:D0:5C:E0:D0:5B:04:3F:A3:62:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a7c6f4e9-ac31-3985-8fd1-6c98005ae8f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.127.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:80:4c:8c:cd:17:6c:98:15:08:fb:ce:4c:55:c3:ee:be:96: f3:88:71:3a:71:09:b0:dd:1c:29:d3:c5:a6:b3:3a:06:77:b8: 03:ed:19:89:7d:4b:46:54:74:cd:31:14:19:03:22:6d:b2:ad: cd:df:46:ae:6b:21:4c:b8:ab:10:57:5f:c5:bb:30:ad:fe:ed: 60:a8:a5:b9:a6:b3:8d:54:83:9c:aa:1d:92:ea:10:98:73:76: 0f:cd:b5:c5:71:87:4b:a1:84:13:72:d8:1a:0b:12:02:25:41: 35:98:3a:11:5e:ca:5d:c3:58:99:3b:27:30:d6:20:fb:4c:07: d0:37:13:ee:40:52:44:7f:bb:27:9c:3f:1c:92:c1:a5:90:e2: b5:4e:83:73:39:ad:f2:e1:ee:d1:6d:00:96:04:02:65:1d:60: 02:9a:dc:de:a4:cf:6a:32:a4:20:f8:93:6d:7b:33:f0:72:93: 81:1d:6c:49:6e:7d:90:67:88:15:e2:34:69:13:4f:ae:80:73: c1:73:40:74:7e:8f:77:03:98:cf:cf:e3:1a:00:79:35:ff:e5: 0a:d1:88:34:2a:5c:64:97:ed:24:20:ec:67:c3:d8:f3:cb:de: 61:db:77:b6:3f:82:5e:9a:8a:74:96:41:3f:b4:ef:ae:5c:33: 83:3e:b8:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc0x0gHMURPFN+FZigwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MDkxNDAxMDAzMloXDTI0MTIxMzAyMDAzMlowLzEtMCsGA1UEAxMk YWYyZGE2ZTItYzM1Zi00Y2Q0LTg0ZDktMmZlNzgzNTlhMjUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAru/1u2OL3C6ZdzRm83oqDlswt/FWF8F3kW+R KNFdCqQ8IUgszWdov1N3Yw8dEprcN5deZnMf9M6GmWm6yZ1iYkSpHpnxF5Ogj5FS XO/5YS+6euLnXqogVkIspavUO4TPQo2N1lx4N3z5XF1xHmWF6bufuftt7bL+J/vn 6/pzTThoVAUIwNeD/Tx3dVdDe7GwU3+RQdOl5eV+lq+kWk9oOIP/0yJ3UxUA7Bkx R/Lf9l/kwRaRH3YyyQO98vpswrRgjlAVEr+Oeup/e8B44dr7QquiNFJq7KH92+6d ULTOgd9mR9WOaFFRGZgp+ZgL6psRkoe4N9G7JgB1PPhc+QV/3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNAskP0pt352kwrQXODQWwQ/o2L9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTdjNmY0ZTktYWMzMS0z OTg1LThmZDEtNmM5ODAwNWFlOGYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDTH+YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJuATIzNF2yYFQj7zkxVw+6+lvOIcTpxCbDdHCnTxaazOgZ3uAPtGYl9 S0ZUdM0xFBkDIm2yrc3fRq5rIUy4qxBXX8W7MK3+7WCopbmms41Ug5yqHZLqEJhz dg/NtcVxh0uhhBNy2BoLEgIlQTWYOhFeyl3DWJk7JzDWIPtMB9A3E+5AUkR/uyec PxySwaWQ4rVOg3M5rfLh7tFtAJYEAmUdYAKa3N6kz2oypCD4k217M/Byk4EdbElu fZBniBXiNGkTT66Ac8FzQHR+j3cDmM/P4xoAeTX/5QrRiDQqXGSX7SQg7GfD2PPL 3mHbd7Y/gl6ainSWQT+0765cM4M+uGo= -----END CERTIFICATE-----Generated at Fri Nov 22 12:02:49 2024 by rpki-client on console-ams.rpki-client.org