$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d33f9142-e777-3123-84e2-07853a71af06.roa File: d33f9142-e777-3123-84e2-07853a71af06.roa (raw, json) Hash identifier: 9rI2yAp8MVhkKtHjEUgSOu0KHmLMSFfsov5IrFXJlyU= Subject key identifier: E0:B1:F8:BB:55:EE:F2:96:A7:44:57:53:D4:2F:BB:38:CA:3E:81:39 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584840E57A80E9206BC513377940 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d33f9142-e777-3123-84e2-07853a71af06.roa Signing time: Thu 19 Dec 2024 02:00:39 +0000 ROA not before: Thu 19 Dec 2024 02:00:39 +0000 ROA not after: Wed 19 Mar 2025 01:00:39 +0000 asID: 7725 IP address blocks: 68.54.164.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 23 Dec 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:40:e5:7a:80:e9:20:6b:c5:13:37:79:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Dec 19 02:00:39 2024 GMT Not After : Mar 19 01:00:39 2025 GMT Subject: CN=a0df17b4-788f-42e9-85bf-c9036a1b01c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a4:c9:7d:e2:3d:a4:a3:d8:82:cf:28:b5:d1: 65:e3:61:a8:d0:a7:46:d0:dc:17:40:ab:cc:82:f3: db:52:73:24:59:18:0a:78:8b:92:dc:13:79:b2:3e: 24:76:f7:87:d3:8a:71:19:42:3f:e0:c2:17:39:2d: 78:aa:22:d9:c5:6c:d8:58:85:e4:86:fd:9c:03:e1: 8d:20:53:4b:eb:aa:43:b5:b9:97:5c:9a:62:77:b4: 93:a2:ef:01:77:f4:dc:b5:69:5c:67:4d:f5:09:87: d7:b7:2a:01:4f:b4:9a:eb:78:cb:38:4f:f1:a7:c6: 7d:6b:aa:a6:93:c7:32:24:13:9c:14:59:a8:1f:3a: e4:09:99:87:0a:f0:d9:00:49:28:ec:b6:f8:ea:48: b4:ee:a4:71:17:19:30:ea:5b:46:f3:df:29:6c:cd: 8f:c7:ac:87:e5:ee:92:54:f8:99:bc:5c:4e:66:1b: a8:a5:b9:99:bc:c4:c7:26:c1:b0:68:ea:b4:c6:38: d2:7e:99:b9:5e:d9:95:a5:2e:39:40:fc:6e:43:0c: ea:24:93:ec:51:dd:65:c5:04:ee:76:95:7b:81:9b: 39:e2:6f:31:77:26:c6:29:2c:49:23:05:5c:75:16: 8d:af:ee:4f:68:79:46:1c:43:e8:f0:3b:ea:62:10: f2:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:B1:F8:BB:55:EE:F2:96:A7:44:57:53:D4:2F:BB:38:CA:3E:81:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d33f9142-e777-3123-84e2-07853a71af06.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.54.164.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:11:fd:ca:fa:93:3a:4c:76:14:7d:bb:41:3b:38:cc:fe:31: d0:32:90:f2:10:83:b1:0e:cb:ee:1c:52:d7:c3:13:35:31:73: a1:30:18:4a:d3:a7:da:b5:83:75:73:be:d9:62:53:bd:9c:8f: 41:97:43:dc:c2:f6:cc:9f:a9:32:9e:69:80:e9:9f:c0:a3:62: 75:ba:4e:ae:2b:61:b8:ff:39:5e:20:a6:6c:40:71:75:ea:f1: 3c:7c:fe:76:4f:28:d8:80:f8:83:0f:8e:1e:61:1c:17:e6:a6: e0:f5:7c:29:0e:eb:7c:aa:68:42:cd:9a:87:6f:1c:26:2b:22: 58:37:2d:bc:ee:67:ef:95:c1:cf:e8:09:c5:c5:4e:a6:c1:cf: 59:84:6e:e2:f2:aa:51:ca:94:34:43:f6:da:15:da:08:b5:87: f9:6d:a0:72:23:d3:31:88:b0:2f:b2:ec:0e:68:58:9e:3f:c2: 9b:02:ca:ea:6e:24:50:a1:3d:3d:6b:6b:f3:ba:7f:c7:e7:c1: db:ce:3c:cb:b3:dd:83:c2:9f:1e:9b:d7:d3:e5:2c:d6:8c:42: 64:4c:be:38:22:eb:52:30:c2:09:47:db:33:75:ff:67:4d:f5: 39:eb:ed:89:f1:b8:83:67:cd:14:84:10:b7:7f:85:31:36:99: aa:cd:7b:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhA5XqA6SBrxRM3eUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MTIxOTAyMDAzOVoXDTI1MDMxOTAxMDAzOVowLzEtMCsGA1UEAxMk YTBkZjE3YjQtNzg4Zi00MmU5LTg1YmYtYzkwMzZhMWIwMWM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKTJfeI9pKPYgs8otdFl42Go0KdG0NwXQKvM gvPbUnMkWRgKeIuS3BN5sj4kdveH04pxGUI/4MIXOS14qiLZxWzYWIXkhv2cA+GN IFNL66pDtbmXXJpid7STou8Bd/TctWlcZ031CYfXtyoBT7Sa63jLOE/xp8Z9a6qm k8cyJBOcFFmoHzrkCZmHCvDZAEko7Lb46ki07qRxFxkw6ltG898pbM2Px6yH5e6S VPiZvFxOZhuopbmZvMTHJsGwaOq0xjjSfpm5XtmVpS45QPxuQwzqJJPsUd1lxQTu dpV7gZs54m8xdybGKSxJIwVcdRaNr+5PaHlGHEPo8DvqYhDygwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOCx+LtV7vKWp0RXU9QvuzjKPoE5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDMzZjkxNDItZTc3Ny0z MTIzLTg0ZTItMDc4NTNhNzFhZjA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRDakMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABwR/cr6kzpMdhR9u0E7OMz+MdAykPIQg7EOy+4cUtfDEzUxc6EwGErT p9q1g3VzvtliU72cj0GXQ9zC9syfqTKeaYDpn8CjYnW6Tq4rYbj/OV4gpmxAcXXq 8Tx8/nZPKNiA+IMPjh5hHBfmpuD1fCkO63yqaELNmodvHCYrIlg3LbzuZ++Vwc/o CcXFTqbBz1mEbuLyqlHKlDRD9toV2gi1h/ltoHIj0zGIsC+y7A5oWJ4/wpsCyupu JFChPT1ra/O6f8fnwdvOPMuz3YPCnx6b19PlLNaMQmRMvjgi61IwwglH2zN1/2dN 9Tnr7YnxuINnzRSEELd/hTE2marNewY= -----END CERTIFICATE-----Generated at Sun Dec 22 13:19:46 2024 by rpki-client on console-ams.rpki-client.org