$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b41a75ed-0d95-3237-bd3c-20308b602b3e.roa File: b41a75ed-0d95-3237-bd3c-20308b602b3e.roa (raw, json) Hash identifier: omwN20xMfvBkDaZkHqklSjeSxtH5DqfbPsN1GxZvw5s= Subject key identifier: D0:F4:67:E5:6A:CB:62:FE:3D:72:42:B0:24:62:5D:E6:D7:BA:71:DE Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858476C9D0B952BABF6B38F17B780 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b41a75ed-0d95-3237-bd3c-20308b602b3e.roa Signing time: Fri 04 Oct 2024 01:00:31 +0000 ROA not before: Fri 04 Oct 2024 01:00:31 +0000 ROA not after: Thu 02 Jan 2025 02:00:31 +0000 asID: 33651 IP address blocks: 67.180.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:6c:9d:0b:95:2b:ab:f6:b3:8f:17:b7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 4 01:00:31 2024 GMT Not After : Jan 2 02:00:31 2025 GMT Subject: CN=85b0bc1d-52d4-49e3-ad1c-9b813a5ef045 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:76:e9:26:13:31:15:88:b9:02:65:e0:59:db: 94:b8:ae:0f:b9:45:af:06:37:08:27:8c:74:dc:5a: f8:8c:d6:2b:c9:ad:be:82:3b:a6:2f:95:c9:93:10: 0e:99:c0:cd:f1:15:a3:5b:78:bc:f4:ee:13:15:a3: 16:15:45:88:78:a3:9c:5f:fc:b4:57:56:7e:99:f6: cf:02:22:70:04:fa:a9:d2:72:6d:97:7d:b2:0b:23: d8:4b:c1:e9:95:db:6b:87:55:66:d4:8c:48:f7:b7: a0:b7:6f:79:c5:3f:ab:40:06:e2:fe:56:1e:9e:7f: dc:04:c5:96:d6:10:9a:ce:bf:13:29:84:86:83:2a: 59:5e:ec:16:c5:48:45:b6:5b:77:9c:93:f0:1f:41: 96:c2:22:00:11:3b:92:71:d8:cd:b7:f3:f2:e6:97: 8d:85:c0:e9:31:87:e8:71:1f:1b:c3:80:4d:72:46: 96:f8:67:b4:09:b1:e0:ef:7f:cb:e4:65:eb:1a:67: 41:65:e4:bd:d2:6c:a3:af:e3:6a:0c:47:2f:f7:a5: cc:f9:7d:fa:f6:e3:00:9e:48:fd:5e:96:cc:41:5e: c5:a4:eb:60:a2:ea:89:87:12:c0:b4:c6:5e:6e:4d: be:f3:d5:05:d7:67:d2:75:68:44:8d:f6:30:b3:12: 4f:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:F4:67:E5:6A:CB:62:FE:3D:72:42:B0:24:62:5D:E6:D7:BA:71:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b41a75ed-0d95-3237-bd3c-20308b602b3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.180.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:38:b9:ba:ba:7f:de:d1:cb:70:4a:9d:91:b3:17:ef:ed:53: e5:ca:19:5a:35:c3:5e:e2:4b:8e:ce:e8:f2:d3:15:2c:8d:c9: 76:58:78:1e:f3:85:4f:67:fe:d5:f4:60:4f:1c:61:c6:d1:a4: d9:c1:28:d1:a2:8e:e9:82:b3:fd:f6:7a:cb:38:7d:fb:e2:65: f4:3f:3c:e6:6c:82:4a:27:6e:82:c2:39:ad:bd:5e:05:2d:b2: 79:f6:94:55:c9:39:f0:84:3e:3c:5b:2c:24:c3:30:78:e8:55: e6:ac:50:69:12:5b:13:85:cd:a0:48:bf:9d:fc:ba:78:3a:35: e5:3c:08:d5:94:eb:5d:19:84:17:08:5f:75:a2:0b:63:e1:e1: 98:ce:e3:da:91:db:68:70:8d:62:a8:d3:d3:51:77:fc:05:74: 58:20:2e:59:68:29:4c:55:e3:db:fe:f2:20:71:86:a4:64:ce: a3:9b:f6:1d:fb:7d:8f:cc:f7:55:69:07:65:31:4e:d7:02:cb: 9e:d4:9f:e1:38:d4:b0:ab:7c:2a:21:43:99:22:3c:11:dc:66: a9:f4:76:60:7b:63:83:21:6f:01:01:1d:63:fc:69:ca:0b:c5: 56:43:d8:e0:dd:d9:10:1c:db:7d:58:fe:01:13:fa:f7:48:e8: 66:40:68:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdsnQuVK6v2s48Xt4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MTAwNDAxMDAzMVoXDTI1MDEwMjAyMDAzMVowLzEtMCsGA1UEAxMk ODViMGJjMWQtNTJkNC00OWUzLWFkMWMtOWI4MTNhNWVmMDQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXbpJhMxFYi5AmXgWduUuK4PuUWvBjcIJ4x0 3Fr4jNYrya2+gjumL5XJkxAOmcDN8RWjW3i89O4TFaMWFUWIeKOcX/y0V1Z+mfbP AiJwBPqp0nJtl32yCyPYS8Hpldtrh1Vm1IxI97egt295xT+rQAbi/lYenn/cBMWW 1hCazr8TKYSGgypZXuwWxUhFtlt3nJPwH0GWwiIAETuScdjNt/Py5peNhcDpMYfo cR8bw4BNckaW+Ge0CbHg73/L5GXrGmdBZeS90myjr+NqDEcv96XM+X369uMAnkj9 XpbMQV7FpOtgouqJhxLAtMZebk2+89UF12fSdWhEjfYwsxJPpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFND0Z+Vqy2L+PXJCsCRiXebXunHeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjQxYTc1ZWQtMGQ5NS0z MjM3LWJkM2MtMjAzMDhiNjAyYjNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQ7TUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFM4ubq6f97Ry3BKnZGzF+/tU+XKGVo1w17iS47O6PLTFSyNyXZYeB7z hU9n/tX0YE8cYcbRpNnBKNGijumCs/32ess4ffviZfQ/POZsgkonboLCOa29XgUt snn2lFXJOfCEPjxbLCTDMHjoVeasUGkSWxOFzaBIv538ung6NeU8CNWU610ZhBcI X3WiC2Ph4ZjO49qR22hwjWKo09NRd/wFdFggLlloKUxV49v+8iBxhqRkzqOb9h37 fY/M91VpB2UxTtcCy57Un+E41LCrfCohQ5kiPBHcZqn0dmB7Y4MhbwEBHWP8acoL xVZD2ODd2RAc231Y/gET+vdI6GZAaBc= -----END CERTIFICATE-----Generated at Fri Nov 22 12:04:03 2024 by rpki-client on console-ams.rpki-client.org