$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d204249c-9705-3ad2-9c85-32345972ac3a.roa File: d204249c-9705-3ad2-9c85-32345972ac3a.roa (raw, json) Hash identifier: cLq4ad3Am83SFpmjMgNVRRDubq7XHvb7d6VaaWdJXX0= Subject key identifier: CC:F3:44:00:72:B1:F6:40:E8:01:44:0E:B0:CF:33:F1:AA:CD:12:F5 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285847BEFB13AD880AEF0D6326F800 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d204249c-9705-3ad2-9c85-32345972ac3a.roa Signing time: Sat 02 Nov 2024 13:00:42 +0000 ROA not before: Sat 02 Nov 2024 13:00:42 +0000 ROA not after: Fri 31 Jan 2025 14:00:42 +0000 asID: 13367 IP address blocks: 24.118.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 23 Dec 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:be:fb:13:ad:88:0a:ef:0d:63:26:f8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Nov 2 13:00:42 2024 GMT Not After : Jan 31 14:00:42 2025 GMT Subject: CN=600eea9a-1813-4c23-bd8a-3cdba13b5704 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:9b:09:ca:12:20:2c:fa:b6:92:d4:2a:de:90: 21:32:02:44:0a:8f:1c:ef:0d:d2:67:96:bb:62:42: 06:ab:1b:ea:54:65:ca:ca:7d:f1:51:12:a1:f5:51: 8f:66:97:da:9f:20:57:57:73:63:e7:28:ed:37:6b: f2:33:f6:14:6e:8f:39:24:f9:58:75:60:4c:91:dd: 7c:9e:2a:07:38:02:21:4b:f4:b1:53:66:96:91:8f: 9e:a0:24:9d:17:1c:5d:7c:2b:09:cd:ea:c3:56:a2: 95:68:a3:cb:02:36:40:b1:f5:42:05:23:e5:19:73: bf:71:fe:79:91:a4:af:ae:5a:31:03:1f:ca:4e:9f: 49:c4:68:b8:42:91:4b:63:49:ef:7a:d7:17:cd:85: d3:aa:c5:8d:4c:c2:58:50:44:e4:01:e9:f3:52:c5: 0f:8b:c3:4d:48:14:f1:c3:49:58:53:ab:db:77:31: 7e:f4:6a:3b:60:89:bf:65:59:35:62:ef:fc:2c:b9: 73:33:19:b5:de:a4:6d:3a:25:22:6f:ff:7a:27:f2: 13:59:d5:a2:12:d5:40:ca:5c:30:73:e6:8e:db:aa: 76:d3:33:af:b7:aa:49:fd:b8:94:d7:94:b1:15:e1: af:80:09:a9:d7:4b:44:d0:5c:59:f4:f1:2f:a7:1f: e3:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:F3:44:00:72:B1:F6:40:E8:01:44:0E:B0:CF:33:F1:AA:CD:12:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d204249c-9705-3ad2-9c85-32345972ac3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.118.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:e4:ec:65:6a:8d:ed:bd:ee:1c:6b:2f:71:12:fe:96:cb:da: fc:ef:1f:54:14:d1:be:e9:97:3a:aa:da:96:e1:cc:39:1e:16: 52:67:71:dc:f8:88:49:b1:a7:50:46:05:8f:dc:26:01:b7:85: 4e:66:c0:4a:03:79:2f:fd:01:6b:df:a8:e4:ac:f1:02:fd:05: cc:4c:45:e1:55:a6:ca:3e:c6:5e:a2:f8:76:81:4f:11:12:9f: ba:1a:2d:c8:db:5f:af:24:eb:5f:ad:d5:d4:6e:d1:e2:9e:12: df:12:ae:63:59:d1:a1:7e:94:d4:2b:f9:69:98:1b:41:e0:09: 0e:84:fb:da:bf:67:6b:7a:6e:f3:43:db:d2:10:1d:60:00:92: c4:e6:a4:f1:16:2d:68:14:af:91:bd:46:2f:8a:41:b1:ff:c2: 6a:e0:3d:42:e1:9b:46:a1:76:dc:10:6f:67:9e:21:92:19:77: 7b:e9:e0:4a:28:b6:f8:de:43:92:b0:50:8f:55:dd:e9:dd:03: 45:a0:41:0a:28:32:03:fc:83:c4:d5:a2:e4:0c:d2:b6:80:40: 3c:9e:94:bf:de:25:23:e8:d6:3f:37:f6:e2:35:42:30:20:ce: 33:e0:10:7b:cb:4b:bd:13:e7:57:19:a1:48:32:6f:1e:83:b4: a1:a4:bd:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe++xOtiArvDWMm+AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MTEwMjEzMDA0MloXDTI1MDEzMTE0MDA0MlowLzEtMCsGA1UEAxMk NjAwZWVhOWEtMTgxMy00YzIzLWJkOGEtM2NkYmExM2I1NzA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZsJyhIgLPq2ktQq3pAhMgJECo8c7w3SZ5a7 YkIGqxvqVGXKyn3xURKh9VGPZpfanyBXV3Nj5yjtN2vyM/YUbo85JPlYdWBMkd18 nioHOAIhS/SxU2aWkY+eoCSdFxxdfCsJzerDVqKVaKPLAjZAsfVCBSPlGXO/cf55 kaSvrloxAx/KTp9JxGi4QpFLY0nvetcXzYXTqsWNTMJYUETkAenzUsUPi8NNSBTx w0lYU6vbdzF+9Go7YIm/ZVk1Yu/8LLlzMxm13qRtOiUib/96J/ITWdWiEtVAylww c+aO26p20zOvt6pJ/biU15SxFeGvgAmp10tE0FxZ9PEvpx/jLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMzzRABysfZA6AFEDrDPM/GqzRL1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDIwNDI0OWMtOTcwNS0z YWQyLTljODUtMzIzNDU5NzJhYzNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGHYUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGDk7GVqje297hxrL3ES/pbL2vzvH1QU0b7plzqq2pbhzDkeFlJncdz4 iEmxp1BGBY/cJgG3hU5mwEoDeS/9AWvfqOSs8QL9BcxMReFVpso+xl6i+HaBTxES n7oaLcjbX68k61+t1dRu0eKeEt8SrmNZ0aF+lNQr+WmYG0HgCQ6E+9q/Z2t6bvND 29IQHWAAksTmpPEWLWgUr5G9Ri+KQbH/wmrgPULhm0ahdtwQb2eeIZIZd3vp4Eoo tvjeQ5KwUI9V3endA0WgQQooMgP8g8TVouQM0raAQDyelL/eJSPo1j839uI1QjAg zjPgEHvLS70T51cZoUgybx6DtKGkvVI= -----END CERTIFICATE-----Generated at Sun Dec 22 11:14:00 2024 by rpki-client on console-fra.rpki-client.org