$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b3b7343c-5b08-375d-99e6-0b9301170c0e.roa File: b3b7343c-5b08-375d-99e6-0b9301170c0e.roa (raw, json) Hash identifier: WIK/bezAkFADluRPNkRvaggvgrb2g7k2UiRAgaeZgiM= Subject key identifier: 84:65:66:90:AF:F4:19:F2:D6:C6:0D:FC:A5:C3:24:B3:2A:5F:35:94 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584840E56F096FF7FCA4CB5094C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b3b7343c-5b08-375d-99e6-0b9301170c0e.roa Signing time: Thu 19 Dec 2024 02:00:39 +0000 ROA not before: Thu 19 Dec 2024 02:00:39 +0000 ROA not after: Wed 19 Mar 2025 01:00:39 +0000 asID: 7725 IP address blocks: 24.99.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 25 Dec 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:40:e5:6f:09:6f:f7:fc:a4:cb:50:94:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Dec 19 02:00:39 2024 GMT Not After : Mar 19 01:00:39 2025 GMT Subject: CN=e955d23d-ee9b-43d3-91a3-122a8edfa6e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:3d:69:ec:10:31:0f:da:f2:9c:8f:1a:79:b5: 3f:8a:a1:76:00:07:e7:bc:a4:b8:cb:7f:fd:6c:c8: ea:37:0d:97:bc:d2:c0:56:f5:ea:1e:55:ea:da:fb: 8a:3f:a6:44:af:4f:f4:ce:42:fa:bb:7a:18:08:6d: df:6f:a1:3d:1e:58:f2:82:c2:fd:6f:45:fb:8e:92: b7:c8:56:6a:ef:8f:2e:07:40:92:7a:7d:55:21:62: 52:e2:a8:8d:10:d7:cb:be:cb:2b:d0:3c:34:0a:fe: 41:81:2f:1f:f6:89:a5:df:43:79:3d:9d:8b:22:9f: 2c:82:2d:0b:74:74:6b:dd:93:f9:2e:32:ff:fc:c1: 75:79:4c:c5:86:7b:78:ae:af:f2:74:2f:d8:e3:7a: 2c:d0:48:5d:96:10:67:4d:5f:5c:35:86:ef:92:0b: 8a:e1:4f:54:4e:c2:e3:43:bc:1b:62:b8:bf:a6:13: 73:5e:c7:de:c3:8c:f8:2e:ad:40:9d:dc:69:c6:81: 79:85:01:47:d8:99:ff:5b:bc:65:96:6f:f4:8e:1b: a5:8e:5e:d3:1a:55:e0:6b:f3:de:d7:9b:c4:89:ed: c0:4c:8e:95:6c:b4:9f:e4:a9:02:8d:cc:23:48:67: 9c:72:e4:32:35:12:19:8e:b9:e5:24:be:1e:dd:dc: a7:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:65:66:90:AF:F4:19:F2:D6:C6:0D:FC:A5:C3:24:B3:2A:5F:35:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b3b7343c-5b08-375d-99e6-0b9301170c0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.99.69.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:a3:7b:42:d9:65:1a:c5:f3:86:ab:c7:4c:5d:dc:d8:10:92: 1a:66:3e:5b:4b:61:59:60:73:04:3b:b0:ab:6d:7d:22:97:aa: 79:6e:44:9d:ba:b0:77:26:fe:1e:72:35:96:b4:09:3b:e9:af: e4:2d:36:d1:f8:ef:51:a5:38:5a:f5:8c:a5:f9:7a:f6:8c:85: 60:c0:de:6b:72:a1:c1:06:56:ee:06:09:64:d2:ef:b8:2e:e2: 5d:61:be:56:db:b2:37:41:02:1f:dd:65:f0:b9:23:f9:2a:3c: 5f:8f:65:cd:40:a7:e4:9b:8e:8b:6e:56:b8:b2:af:53:4a:f4: 46:93:4c:4e:f3:41:25:1b:a1:83:1a:1a:a0:11:e3:ef:7c:bc: e6:79:5a:8a:11:8d:7f:5e:16:02:2a:2a:51:57:1a:b9:90:57: 5d:02:90:eb:a8:c9:4d:fa:c6:59:ee:bd:df:82:e0:68:2b:28: 16:0c:cd:64:f7:c7:91:c6:78:ce:ce:d3:7b:a4:c9:a4:d8:23: 0e:e2:47:10:20:ae:39:92:b8:56:0c:92:d5:03:29:3d:0b:91: e5:a3:2c:5c:32:6e:06:1f:2a:36:14:ed:99:41:53:82:c6:76: c0:7d:f5:60:63:ea:9b:cf:0d:42:02:d5:ef:8d:01:27:11:76: a6:19:f8:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhA5W8Jb/f8pMtQlMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MTIxOTAyMDAzOVoXDTI1MDMxOTAxMDAzOVowLzEtMCsGA1UEAxMk ZTk1NWQyM2QtZWU5Yi00M2QzLTkxYTMtMTIyYThlZGZhNmUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkT1p7BAxD9rynI8aebU/iqF2AAfnvKS4y3/9 bMjqNw2XvNLAVvXqHlXq2vuKP6ZEr0/0zkL6u3oYCG3fb6E9HljygsL9b0X7jpK3 yFZq748uB0CSen1VIWJS4qiNENfLvssr0Dw0Cv5BgS8f9oml30N5PZ2LIp8sgi0L dHRr3ZP5LjL//MF1eUzFhnt4rq/ydC/Y43os0EhdlhBnTV9cNYbvkguK4U9UTsLj Q7wbYri/phNzXsfew4z4Lq1AndxpxoF5hQFH2Jn/W7xllm/0jhuljl7TGlXga/Pe 15vEie3ATI6VbLSf5KkCjcwjSGeccuQyNRIZjrnlJL4e3dynZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIRlZpCv9Bny1sYN/KXDJLMqXzWUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjNiNzM0M2MtNWIwOC0z NzVkLTk5ZTYtMGI5MzAxMTcwYzBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGGNFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA6je0LZZRrF84arx0xd3NgQkhpmPltLYVlgcwQ7sKttfSKXqnluRJ26 sHcm/h5yNZa0CTvpr+QtNtH471GlOFr1jKX5evaMhWDA3mtyocEGVu4GCWTS77gu 4l1hvlbbsjdBAh/dZfC5I/kqPF+PZc1Ap+SbjotuVriyr1NK9EaTTE7zQSUboYMa GqAR4+98vOZ5WooRjX9eFgIqKlFXGrmQV10CkOuoyU36xlnuvd+C4GgrKBYMzWT3 x5HGeM7O03ukyaTYIw7iRxAgrjmSuFYMktUDKT0LkeWjLFwybgYfKjYU7ZlBU4LG dsB99WBj6pvPDUIC1e+NAScRdqYZ+Mc= -----END CERTIFICATE-----Generated at Sun Dec 22 15:28:02 2024 by rpki-client on console-fra.rpki-client.org