$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/afb72d5b-3f1b-37db-8141-fa6d8a54971e.roa File: afb72d5b-3f1b-37db-8141-fa6d8a54971e.roa (raw, json) Hash identifier: H6dKA4mNRYhTbjDg50EQ+7jS9iq6WMf8Q7uTJ66FH60= Subject key identifier: BE:30:D0:41:68:0E:76:77:86:29:14:7B:88:76:C8:D6:E0:88:E1:EB Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285847BEF6E74CE2FBA436715BEF00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/afb72d5b-3f1b-37db-8141-fa6d8a54971e.roa Signing time: Sat 02 Nov 2024 13:00:42 +0000 ROA not before: Sat 02 Nov 2024 13:00:42 +0000 ROA not after: Fri 31 Jan 2025 14:00:42 +0000 asID: 22909 IP address blocks: 68.57.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 25 Dec 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:be:f6:e7:4c:e2:fb:a4:36:71:5b:ef:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Nov 2 13:00:42 2024 GMT Not After : Jan 31 14:00:42 2025 GMT Subject: CN=ac20c0c1-a2b7-4f69-af0a-10b39629c078 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:29:0a:59:a0:ec:a0:88:94:43:52:a2:42:52: c0:02:89:a1:e5:af:03:07:60:c6:80:00:7f:06:55: b3:b4:7b:58:ff:91:77:d4:61:08:3d:23:74:82:23: fa:fd:70:a2:0d:9e:b2:75:13:98:2d:4d:a7:1d:6c: 6b:dd:24:d4:88:99:ae:5d:1a:78:7d:7a:17:fc:47: 39:44:b1:85:3a:69:6b:2d:3e:33:7e:f0:35:88:c8: 4d:2d:92:30:77:d9:84:dd:12:65:17:90:9d:1e:e2: 5e:77:8b:22:c3:a7:cd:85:7e:1a:49:0b:65:9d:ed: 54:ab:58:c7:49:f4:2b:0d:da:ce:f9:d2:89:0e:51: e1:f2:40:f3:5d:53:52:6f:aa:71:37:88:38:d3:27: 1b:de:f9:a1:75:2c:c9:15:8d:c0:9c:78:c5:d1:9f: be:53:c2:9c:3c:3d:70:9e:b2:45:45:76:b5:3d:c7: 6c:79:e1:da:93:00:75:36:a6:73:6d:8a:88:29:14: 79:02:d3:1a:21:c8:0f:9d:be:e1:95:5f:76:8a:a7: c7:5f:85:d8:31:e4:d8:81:c3:1d:c1:b6:76:f0:d1: 8a:a1:b4:bc:45:c8:bc:24:ab:c1:e0:ed:b2:d2:04: 19:03:12:50:2f:c0:09:e3:59:1a:aa:b3:0e:2b:ab: 06:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:30:D0:41:68:0E:76:77:86:29:14:7B:88:76:C8:D6:E0:88:E1:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/afb72d5b-3f1b-37db-8141-fa6d8a54971e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.57.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:88:32:1d:89:01:2f:7b:f6:ec:97:51:5b:f0:52:d6:1e:1a: 11:a0:a2:6e:9f:15:7f:dd:59:d4:7e:a1:de:25:3f:cc:41:9c: a2:2c:7d:26:70:8a:92:e1:1f:6e:85:fa:cc:2a:cc:e3:c5:1d: 64:7d:f5:28:9c:4e:02:ff:93:fc:88:69:c7:44:84:44:64:bb: e4:bc:1c:08:46:d7:b4:32:ca:87:cb:85:00:54:d2:c3:7d:a4: 41:69:9a:87:d5:3f:27:ed:f5:0e:ed:fd:2f:51:e8:55:2e:2a: 56:43:78:ac:f7:60:27:0f:59:aa:97:18:97:49:59:76:fb:62: 38:df:df:f3:76:74:09:39:50:4b:68:54:e7:48:23:96:a1:fc: dd:9c:9b:be:3f:4a:f2:59:ba:54:b1:60:d6:12:af:da:39:7b: 29:a1:82:e2:10:f8:77:e2:79:b7:bf:2f:0d:fe:5d:eb:5d:76: 8c:79:0e:d9:b7:37:a6:6d:80:8a:cb:1f:ef:9f:c1:6d:7d:b3: 19:02:64:24:9a:c1:af:c1:e8:2b:69:a5:ff:d3:d2:5c:dc:ff: 44:0e:d6:82:7f:a4:a8:30:f0:fa:44:97:15:3d:85:4e:85:49: 19:93:7d:5f:34:b4:2d:9d:25:13:c2:06:aa:2c:6f:89:b5:e5: 22:f9:43:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe+9udM4vukNnFb7wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MTEwMjEzMDA0MloXDTI1MDEzMTE0MDA0MlowLzEtMCsGA1UEAxMk YWMyMGMwYzEtYTJiNy00ZjY5LWFmMGEtMTBiMzk2MjljMDc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxykKWaDsoIiUQ1KiQlLAAomh5a8DB2DGgAB/ BlWztHtY/5F31GEIPSN0giP6/XCiDZ6ydROYLU2nHWxr3STUiJmuXRp4fXoX/Ec5 RLGFOmlrLT4zfvA1iMhNLZIwd9mE3RJlF5CdHuJed4siw6fNhX4aSQtlne1Uq1jH SfQrDdrO+dKJDlHh8kDzXVNSb6pxN4g40ycb3vmhdSzJFY3AnHjF0Z++U8KcPD1w nrJFRXa1PcdseeHakwB1NqZzbYqIKRR5AtMaIcgPnb7hlV92iqfHX4XYMeTYgcMd wbZ28NGKobS8Rci8JKvB4O2y0gQZAxJQL8AJ41kaqrMOK6sGQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL4w0EFoDnZ3hikUe4h2yNbgiOHrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWZiNzJkNWItM2YxYi0z N2RiLTgxNDEtZmE2ZDhhNTQ5NzFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRDkgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB+IMh2JAS979uyXUVvwUtYeGhGgom6fFX/dWdR+od4lP8xBnKIsfSZw ipLhH26F+swqzOPFHWR99SicTgL/k/yIacdEhERku+S8HAhG17QyyofLhQBU0sN9 pEFpmofVPyft9Q7t/S9R6FUuKlZDeKz3YCcPWaqXGJdJWXb7Yjjf3/N2dAk5UEto VOdII5ah/N2cm74/SvJZulSxYNYSr9o5eymhguIQ+Hfiebe/Lw3+Xetddox5Dtm3 N6ZtgIrLH++fwW19sxkCZCSawa/B6Ctppf/T0lzc/0QO1oJ/pKgw8PpElxU9hU6F SRmTfV80tC2dJRPCBqosb4m15SL5Q1s= -----END CERTIFICATE-----Generated at Sun Dec 22 15:27:18 2024 by rpki-client on console-fra.rpki-client.org