$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aaa61e85-c0ec-32f3-addd-1226abdaf23f.roa File: aaa61e85-c0ec-32f3-addd-1226abdaf23f.roa (raw, json) Hash identifier: zbtQcvrRCt7D9+at+6JoERCY1WCfbIw6kosRGfwG15U= Subject key identifier: 1D:9B:47:70:12:55:EC:B4:8E:80:54:05:3E:48:01:81:1F:21:D8:95 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584840E5766A1E1CFD7BC6A88B40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aaa61e85-c0ec-32f3-addd-1226abdaf23f.roa Signing time: Thu 19 Dec 2024 02:00:39 +0000 ROA not before: Thu 19 Dec 2024 02:00:39 +0000 ROA not after: Wed 19 Mar 2025 01:00:39 +0000 asID: 7725 IP address blocks: 67.191.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 25 Dec 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:40:e5:76:6a:1e:1c:fd:7b:c6:a8:8b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Dec 19 02:00:39 2024 GMT Not After : Mar 19 01:00:39 2025 GMT Subject: CN=0dd8a517-386d-49ee-bf9f-7d4cf99ed753 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:4d:23:74:69:49:a5:de:c1:5d:49:27:12:8a: d3:4a:1d:41:47:2d:47:8d:65:d1:3a:5b:73:52:34: 92:1f:20:4c:90:f3:f0:a0:f4:97:40:4b:9d:7d:7b: 40:94:4c:f8:41:80:92:8c:d2:1c:90:55:77:f7:1b: 22:07:93:c0:2f:f1:73:fc:c2:80:06:ba:33:63:d1: 1b:7c:5d:5d:ee:42:4d:14:3e:98:79:70:74:e3:9a: 29:39:37:db:c5:d3:9c:9c:a5:9b:4c:ea:fd:8d:ab: d9:5a:51:55:4a:82:74:b6:60:13:d9:88:df:b9:bc: 6f:a4:91:a8:13:c8:4d:59:c9:fd:21:fd:a2:c7:37: 77:9b:49:81:28:a7:a5:97:f7:92:1e:f8:9d:26:69: d4:32:2e:7f:ee:10:2f:42:d3:e2:0f:66:4d:d4:40: 74:d8:f7:2c:58:45:6c:81:bb:77:eb:d0:1c:07:69: 6e:54:f5:f1:32:42:79:29:98:7b:9c:1e:48:23:c8: ad:f0:da:53:f0:b0:23:b6:3c:97:69:0a:b5:ad:04: 92:c7:7a:88:0d:46:d6:30:3b:86:97:a3:3c:9c:99: 29:2f:48:85:f4:e6:2a:bd:b0:9e:d5:b7:4c:64:3e: 8c:3e:bf:39:91:67:8b:5f:3f:18:82:02:6a:67:a4: 59:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:9B:47:70:12:55:EC:B4:8E:80:54:05:3E:48:01:81:1F:21:D8:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aaa61e85-c0ec-32f3-addd-1226abdaf23f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.191.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:52:86:e9:4f:8c:16:4b:42:f3:fc:c5:35:cb:e9:57:e4:a7: 45:74:da:a8:08:c2:d5:a0:be:09:eb:a4:09:d5:ab:c2:72:b5: b1:2f:98:0d:ba:e4:3f:d4:8b:7d:b6:b2:0f:04:66:34:7c:43: a0:07:44:09:cc:2a:63:6e:1c:d7:72:42:75:2f:43:50:36:cb: a1:60:f6:9f:9c:be:f6:c6:9f:f7:5c:7f:9c:7a:5b:3d:b8:d0: d9:65:63:78:d9:ff:0d:f0:2e:c1:3f:54:e1:16:20:46:f8:98: c4:23:0c:83:e4:af:65:27:15:c8:47:28:e5:7f:07:51:28:88: 0c:0f:56:89:c5:77:bd:95:f6:a9:fb:a2:4f:76:ff:74:d7:b4: 94:41:1a:6d:3d:ca:9b:83:f3:d2:00:ae:34:00:09:ed:59:a4: f5:98:34:a3:7d:23:b6:69:08:96:81:32:90:13:a8:6d:1b:15: da:0c:ed:c5:92:b3:2f:bc:55:07:47:4b:9b:0e:9c:51:eb:e4: 20:44:a8:22:fa:15:94:22:75:cb:5a:d9:37:2d:c7:2a:45:a0: ef:ae:92:9a:f5:51:53:ee:69:a0:a2:0f:1d:80:34:2a:3c:e2: 0a:b7:cf:74:bf:47:2e:22:93:bb:0f:5c:ec:1a:b3:e6:bc:28: 12:f1:b0:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhA5XZqHhz9e8aoi0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MTIxOTAyMDAzOVoXDTI1MDMxOTAxMDAzOVowLzEtMCsGA1UEAxMk MGRkOGE1MTctMzg2ZC00OWVlLWJmOWYtN2Q0Y2Y5OWVkNzUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo00jdGlJpd7BXUknEorTSh1BRy1HjWXROltz UjSSHyBMkPPwoPSXQEudfXtAlEz4QYCSjNIckFV39xsiB5PAL/Fz/MKABrozY9Eb fF1d7kJNFD6YeXB045opOTfbxdOcnKWbTOr9javZWlFVSoJ0tmAT2YjfubxvpJGo E8hNWcn9If2ixzd3m0mBKKell/eSHvidJmnUMi5/7hAvQtPiD2ZN1EB02PcsWEVs gbt369AcB2luVPXxMkJ5KZh7nB5II8it8NpT8LAjtjyXaQq1rQSSx3qIDUbWMDuG l6M8nJkpL0iF9OYqvbCe1bdMZD6MPr85kWeLXz8YggJqZ6RZPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB2bR3ASVey0joBUBT5IAYEfIdiVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWFhNjFlODUtYzBlYy0z MmYzLWFkZGQtMTIyNmFiZGFmMjNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ7/IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIpShulPjBZLQvP8xTXL6Vfkp0V02qgIwtWgvgnrpAnVq8JytbEvmA26 5D/Ui322sg8EZjR8Q6AHRAnMKmNuHNdyQnUvQ1A2y6Fg9p+cvvbGn/dcf5x6Wz24 0NllY3jZ/w3wLsE/VOEWIEb4mMQjDIPkr2UnFchHKOV/B1EoiAwPVonFd72V9qn7 ok92/3TXtJRBGm09ypuD89IArjQACe1ZpPWYNKN9I7ZpCJaBMpATqG0bFdoM7cWS sy+8VQdHS5sOnFHr5CBEqCL6FZQidcta2TctxypFoO+ukpr1UVPuaaCiDx2ANCo8 4gq3z3S/Ry4ik7sPXOwas+a8KBLxsLg= -----END CERTIFICATE-----Generated at Sun Dec 22 15:26:22 2024 by rpki-client on console-fra.rpki-client.org