$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a8f9425e-e773-3e21-b590-b426d4ca8a25.roa File: a8f9425e-e773-3e21-b590-b426d4ca8a25.roa (raw, json) Hash identifier: rseRcVJd/RgpCMbAnWqro5DdTFm4yM86yNUGzFeBdS8= Subject key identifier: C1:EA:8A:7F:82:8C:6F:4A:71:12:20:5F:51:89:B3:E4:DD:3E:0B:83 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285847BEFAB6EB50C02EF95A6EDA80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a8f9425e-e773-3e21-b590-b426d4ca8a25.roa Signing time: Sat 02 Nov 2024 13:00:42 +0000 ROA not before: Sat 02 Nov 2024 13:00:42 +0000 ROA not after: Fri 31 Jan 2025 14:00:42 +0000 asID: 33668 IP address blocks: 68.86.140.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:be:fa:b6:eb:50:c0:2e:f9:5a:6e:da:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Nov 2 13:00:42 2024 GMT Not After : Jan 31 14:00:42 2025 GMT Subject: CN=8331710f-db11-495a-8c1f-5412daf5db8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:cc:ff:3e:d3:5a:07:b1:e5:3c:3c:cc:01:60: d1:c4:f9:42:27:38:15:a1:e8:02:cd:11:fc:57:f7: 0c:ff:86:cf:29:b9:e8:ce:72:7c:e7:c5:36:1c:af: 19:b7:0e:7d:7b:0e:69:12:3e:5c:aa:60:f5:f1:20: 8e:2c:29:c7:88:05:51:8c:de:95:20:cf:2d:45:f5: 7e:8d:c5:68:e9:4c:ff:4a:42:35:e6:71:9a:c4:b5: ff:9a:26:05:dd:01:f1:5b:6f:70:e5:0a:af:91:a1: 7b:df:dc:02:96:6f:88:83:e0:a2:17:88:f8:ff:63: 0a:37:5a:63:7f:df:4f:d6:53:16:aa:9d:30:0a:41: aa:ba:4d:63:53:f9:1a:17:13:c7:e8:62:cb:67:e8: 87:87:f4:f1:ed:c3:db:12:9a:2e:91:7a:c2:1b:01: 31:a5:61:d6:cc:a2:00:6e:2d:2d:a9:4a:84:b6:93: 02:7d:aa:9a:67:ce:c4:89:46:e0:a1:0a:40:ed:2f: 33:1f:a4:23:a2:12:3d:5e:18:e9:06:e1:60:2b:88: bd:e3:b7:95:79:bb:ae:70:2e:e7:9b:ae:99:84:ca: c1:55:3d:6d:91:6d:15:40:54:48:9c:c0:39:81:99: 33:80:af:c5:a2:81:01:5f:f5:78:ab:ce:8d:8d:02: af:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:EA:8A:7F:82:8C:6F:4A:71:12:20:5F:51:89:B3:E4:DD:3E:0B:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a8f9425e-e773-3e21-b590-b426d4ca8a25.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.86.140.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:3c:55:60:d5:58:5d:81:77:2c:ad:1d:5b:cd:8a:a1:0d:32: 80:d8:43:8d:30:d6:bb:de:25:32:29:38:3f:fa:f2:43:13:69: 51:ee:d8:c8:87:13:e0:13:4b:64:a7:d6:2f:67:4a:37:05:74: 9f:91:68:93:35:10:4a:97:79:94:76:2b:07:41:ab:ea:ed:f6: 78:f8:15:da:ed:fa:4e:c5:b5:cf:6a:16:06:ac:3b:43:71:ae: 83:ae:9c:17:81:cb:62:07:b4:2a:a5:58:94:48:d0:34:6d:8f: c2:0c:38:9b:be:fa:0e:2c:1d:ee:10:f1:34:a8:be:d6:32:cb: d1:f5:5b:b4:8a:9d:3d:58:62:06:bf:bb:7e:fa:e0:43:2a:a9: a5:c8:f9:4c:cc:61:fa:54:2b:76:04:df:ec:77:35:e2:f8:30: 90:31:aa:8b:c1:34:b0:95:23:11:9a:96:75:21:27:0f:91:66: 3a:f8:c1:7f:63:8a:ff:64:d0:65:e2:53:66:42:54:15:6a:7f: 2d:b6:94:55:87:b2:23:9c:0e:3e:2d:e3:62:c0:ac:2a:82:70: 12:40:58:2f:89:6c:6f:e6:57:25:95:96:ea:43:70:06:3d:45: d9:88:01:62:20:5a:93:d7:fd:2b:45:8d:cf:00:a6:03:fd:be: 8e:dd:b7:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe++rbrUMAu+Vpu2oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MTEwMjEzMDA0MloXDTI1MDEzMTE0MDA0MlowLzEtMCsGA1UEAxMk ODMzMTcxMGYtZGIxMS00OTVhLThjMWYtNTQxMmRhZjVkYjhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAncz/PtNaB7HlPDzMAWDRxPlCJzgVoegCzRH8 V/cM/4bPKbnoznJ858U2HK8Ztw59ew5pEj5cqmD18SCOLCnHiAVRjN6VIM8tRfV+ jcVo6Uz/SkI15nGaxLX/miYF3QHxW29w5QqvkaF739wClm+Ig+CiF4j4/2MKN1pj f99P1lMWqp0wCkGquk1jU/kaFxPH6GLLZ+iHh/Tx7cPbEpoukXrCGwExpWHWzKIA bi0tqUqEtpMCfaqaZ87EiUbgoQpA7S8zH6QjohI9XhjpBuFgK4i947eVebuucC7n m66ZhMrBVT1tkW0VQFRInMA5gZkzgK/FooEBX/V4q86NjQKvtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMHqin+CjG9KcRIgX1GJs+TdPguDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYThmOTQyNWUtZTc3My0z ZTIxLWI1OTAtYjQyNmQ0Y2E4YTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRFaMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGk8VWDVWF2BdyytHVvNiqENMoDYQ40w1rveJTIpOD/68kMTaVHu2MiH E+ATS2Sn1i9nSjcFdJ+RaJM1EEqXeZR2KwdBq+rt9nj4Fdrt+k7Ftc9qFgasO0Nx roOunBeBy2IHtCqlWJRI0DRtj8IMOJu++g4sHe4Q8TSovtYyy9H1W7SKnT1YYga/ u3764EMqqaXI+UzMYfpUK3YE3+x3NeL4MJAxqovBNLCVIxGalnUhJw+RZjr4wX9j iv9k0GXiU2ZCVBVqfy22lFWHsiOcDj4t42LArCqCcBJAWC+JbG/mVyWVlupDcAY9 RdmIAWIgWpPX/StFjc8ApgP9vo7dt58= -----END CERTIFICATE-----Generated at Tue Nov 26 05:10:48 2024 by rpki-client on console-ams.rpki-client.org