$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ccf8f667-8d6f-3944-845f-b44a05df04c4.roa File: ccf8f667-8d6f-3944-845f-b44a05df04c4.roa (raw, json) Hash identifier: rWgRfqHwfXsviJysPXGAxl83UwHS1sRGdJcJbf70/Ko= Subject key identifier: DD:66:29:43:42:50:CC:3B:05:0C:BB:7F:91:D8:EE:B6:CE:0B:C3:3D Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584840E57964517D879FE550DE40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ccf8f667-8d6f-3944-845f-b44a05df04c4.roa Signing time: Thu 19 Dec 2024 02:00:39 +0000 ROA not before: Thu 19 Dec 2024 02:00:39 +0000 ROA not after: Wed 19 Mar 2025 01:00:39 +0000 asID: 7725 IP address blocks: 68.35.38.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 25 Dec 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:40:e5:79:64:51:7d:87:9f:e5:50:de:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Dec 19 02:00:39 2024 GMT Not After : Mar 19 01:00:39 2025 GMT Subject: CN=ea3fa8ca-dd75-4b11-8262-3784f85107b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:2e:b6:9c:56:fb:af:06:1c:0c:64:e7:29:99: 5b:b5:59:87:82:9d:eb:fb:16:ff:2e:d1:4f:63:94: ed:87:98:23:62:a5:1a:e6:87:3b:ba:44:2f:8f:2e: b9:e0:f1:89:0f:7c:72:00:1c:b0:41:b0:07:8a:01: 8c:a8:cd:7f:a7:7b:01:02:7c:68:44:21:f7:2a:e4: 81:d1:b8:2e:74:ab:51:4e:d4:46:29:7a:d0:b9:61: a5:e5:d1:9e:65:cb:a2:59:71:e2:1f:b7:3d:aa:a0: 4d:3f:c0:fc:43:42:bc:cd:ad:00:e9:20:5e:b9:ce: 1d:b7:63:5c:c2:f0:f1:19:1b:4c:1c:9e:3c:bd:1d: 35:4c:b0:4e:eb:a4:e1:47:d3:da:3d:56:85:c5:0f: e4:64:ae:68:b9:92:26:00:ba:76:f0:ba:d5:a3:86: c7:ca:57:3a:36:be:08:05:38:b2:94:61:a5:72:35: 52:65:c8:b5:4e:3b:18:47:16:a4:03:8e:7d:1c:e8: 40:2d:9b:0a:4f:6e:84:91:83:c1:c3:c0:c8:de:d8: b8:06:a0:59:f3:58:c6:94:40:3d:a8:18:e5:73:dc: 32:50:de:a8:a2:a4:2a:d9:f4:30:6d:52:fd:76:3e: d9:c3:f7:d4:1e:be:94:49:50:c0:a1:b5:7c:51:76: 08:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:66:29:43:42:50:CC:3B:05:0C:BB:7F:91:D8:EE:B6:CE:0B:C3:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ccf8f667-8d6f-3944-845f-b44a05df04c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.35.38.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:5d:b3:f3:30:03:b4:f5:b4:d4:56:ee:6f:7f:fb:ff:11:c6: b3:2c:c9:01:46:ff:0b:70:83:66:77:37:87:a7:04:d4:07:92: 17:1b:e1:fe:53:76:cf:b4:40:f6:e2:e0:bb:59:b2:6f:c3:f9: 7d:7d:e0:ac:55:da:8b:6a:d6:e2:b5:bf:a3:10:11:dd:ee:e2: d8:d4:f8:df:59:b5:c8:8e:e5:9a:e2:7f:03:f2:5a:56:04:50: 14:c0:b2:7a:ae:66:a8:5a:51:72:6a:53:5f:77:5d:4e:a5:c7: ea:f9:76:1c:a6:9d:33:00:34:bf:e5:24:b0:e9:f2:14:c0:d2: 3b:2f:85:39:2e:55:22:0a:62:83:40:ba:10:19:db:d1:6c:92: eb:5d:42:f6:24:64:28:ae:b9:f9:b7:3f:af:07:3c:f1:e8:78: 7f:ae:9c:4e:b2:3a:77:a1:ad:97:27:07:87:20:c0:38:17:8f: 26:b9:8c:85:b6:79:84:8b:8b:9b:00:03:b6:df:f8:be:f5:cd: 63:aa:00:a5:23:9a:ef:7f:47:c6:83:5a:f3:16:51:02:5c:de: 1b:f6:e6:7c:ad:c1:46:05:59:d2:a3:92:5b:dc:2e:06:72:2d: 11:4f:7e:83:b1:9b:3c:aa:84:e0:a9:03:31:42:a7:51:06:78: f5:f1:94:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhA5XlkUX2Hn+VQ3kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MTIxOTAyMDAzOVoXDTI1MDMxOTAxMDAzOVowLzEtMCsGA1UEAxMk ZWEzZmE4Y2EtZGQ3NS00YjExLTgyNjItMzc4NGY4NTEwN2IxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3y62nFb7rwYcDGTnKZlbtVmHgp3r+xb/LtFP Y5Tth5gjYqUa5oc7ukQvjy654PGJD3xyABywQbAHigGMqM1/p3sBAnxoRCH3KuSB 0bgudKtRTtRGKXrQuWGl5dGeZcuiWXHiH7c9qqBNP8D8Q0K8za0A6SBeuc4dt2Nc wvDxGRtMHJ48vR01TLBO66ThR9PaPVaFxQ/kZK5ouZImALp28LrVo4bHylc6Nr4I BTiylGGlcjVSZci1TjsYRxakA459HOhALZsKT26EkYPBw8DI3ti4BqBZ81jGlEA9 qBjlc9wyUN6ooqQq2fQwbVL9dj7Zw/fUHr6USVDAobV8UXYI7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN1mKUNCUMw7BQy7f5HY7rbOC8M9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2NmOGY2NjctOGQ2Zi0z OTQ0LTg0NWYtYjQ0YTA1ZGYwNGM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCMmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIdds/MwA7T1tNRW7m9/+/8RxrMsyQFG/wtwg2Z3N4enBNQHkhcb4f5T ds+0QPbi4LtZsm/D+X194KxV2otq1uK1v6MQEd3u4tjU+N9ZtciO5ZrifwPyWlYE UBTAsnquZqhaUXJqU193XU6lx+r5dhymnTMANL/lJLDp8hTA0jsvhTkuVSIKYoNA uhAZ29FskutdQvYkZCiuufm3P68HPPHoeH+unE6yOnehrZcnB4cgwDgXjya5jIW2 eYSLi5sAA7bf+L71zWOqAKUjmu9/R8aDWvMWUQJc3hv25nytwUYFWdKjklvcLgZy LRFPfoOxmzyqhOCpAzFCp1EGePXxlOk= -----END CERTIFICATE-----Generated at Sun Dec 22 15:32:22 2024 by rpki-client on console-fra.rpki-client.org