$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f2700e5b-29d2-3357-93f3-d0224351fad5.roa File: f2700e5b-29d2-3357-93f3-d0224351fad5.roa (raw, json) Hash identifier: kQHHl0MtFAP7HmjYLvB6BrPZq1d/oDLCWG4zBe1GiwA= Subject key identifier: 27:F8:9B:66:65:9A:40:22:04:27:64:61:65:20:8D:F2:25:86:E6:0E Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584840E602BD871AA59AA1391F40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f2700e5b-29d2-3357-93f3-d0224351fad5.roa Signing time: Thu 19 Dec 2024 02:00:39 +0000 ROA not before: Thu 19 Dec 2024 02:00:39 +0000 ROA not after: Wed 19 Mar 2025 01:00:39 +0000 asID: 7725 IP address blocks: 96.217.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 25 Dec 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:40:e6:02:bd:87:1a:a5:9a:a1:39:1f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Dec 19 02:00:39 2024 GMT Not After : Mar 19 01:00:39 2025 GMT Subject: CN=cc3ed653-d18a-4a2e-a25f-19678a0698d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:a1:2c:4f:37:10:41:3a:73:e2:ab:1b:8b:82: 23:a6:64:17:3a:dc:cd:51:a5:0a:84:fa:47:e0:e0: 5b:e1:a9:98:5a:f4:b8:b5:34:87:a5:78:bd:b8:21: 0d:74:6f:2a:1d:b2:1c:aa:c4:6a:cc:18:46:1f:8d: 7c:ad:19:5b:0e:8a:32:20:5c:88:4a:bd:cc:46:3a: fe:16:16:87:4f:d1:15:14:a8:7f:71:45:55:8c:3e: d4:9f:83:f0:8a:23:d6:9b:93:e5:6a:28:1c:20:40: c5:57:99:c9:03:20:6c:5e:0d:79:2d:3e:e3:5e:e8: 69:82:63:d0:07:d3:c1:dd:77:47:31:52:e7:40:fb: 2b:ff:2a:92:6f:5d:8a:a1:28:9d:de:d5:7d:ab:48: 3a:25:e5:90:66:5a:3d:b3:c3:79:b5:63:53:cb:43: e1:2a:13:65:9d:78:69:69:eb:a9:9f:96:c6:39:13: b7:8c:08:36:fd:6c:29:b4:f5:18:33:ac:4a:a7:39: 72:60:e7:66:93:a9:d6:66:d8:ed:43:3e:ab:1c:3c: 21:1e:89:7b:91:ff:2c:6c:d6:21:a9:c0:50:a9:a8: 3c:a9:b9:48:99:82:38:bc:64:e7:84:7b:1f:41:f1: ce:d4:40:16:05:81:f3:90:23:06:1b:a0:52:f7:eb: 2d:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:F8:9B:66:65:9A:40:22:04:27:64:61:65:20:8D:F2:25:86:E6:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f2700e5b-29d2-3357-93f3-d0224351fad5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 96.217.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c8:c6:a3:f0:3e:5d:0c:4f:db:41:ca:9f:a6:c2:a3:ae:d5:64: c1:fb:f0:76:ba:03:d8:02:0d:24:c6:44:f7:73:58:c4:9c:e2: 98:eb:af:82:f4:8b:6d:84:12:7f:bc:22:a2:e0:3c:01:5d:cc: 01:95:d2:92:c8:30:19:28:f3:7c:65:51:e3:65:f5:3b:d9:5b: 1f:02:21:47:54:54:02:05:a8:61:25:c4:9d:ea:54:88:a3:7b: bc:77:0b:85:02:94:4e:92:1a:ce:9d:fd:be:38:9b:01:01:b4: 33:da:fa:42:05:ac:e7:79:a0:ce:36:78:38:71:be:a5:38:27: a7:2f:3a:0e:74:07:5b:52:18:c8:72:be:4a:c7:0c:9e:79:31: af:28:b8:df:4a:12:0d:94:9e:c8:96:2c:d6:29:fe:bb:e7:38: 55:1e:1e:3c:84:59:93:a5:80:0b:fc:9e:bc:44:7c:57:95:88: c0:f6:75:67:b1:00:af:62:b2:43:77:9d:a5:98:09:f0:ef:9f: e7:75:2e:ca:1d:71:ea:b7:5f:80:54:1d:bf:f1:70:96:39:89: 33:1f:7e:84:44:6d:ce:39:05:5d:f4:99:24:73:51:4e:06:aa: f7:b3:41:7b:59:fb:0e:12:19:e5:75:47:c4:00:2f:8d:0e:85: a8:95:35:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhA5gK9hxqlmqE5H0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MTIxOTAyMDAzOVoXDTI1MDMxOTAxMDAzOVowLzEtMCsGA1UEAxMk Y2MzZWQ2NTMtZDE4YS00YTJlLWEyNWYtMTk2NzhhMDY5OGQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6KEsTzcQQTpz4qsbi4IjpmQXOtzNUaUKhPpH 4OBb4amYWvS4tTSHpXi9uCENdG8qHbIcqsRqzBhGH418rRlbDooyIFyISr3MRjr+ FhaHT9EVFKh/cUVVjD7Un4PwiiPWm5PlaigcIEDFV5nJAyBsXg15LT7jXuhpgmPQ B9PB3XdHMVLnQPsr/yqSb12KoSid3tV9q0g6JeWQZlo9s8N5tWNTy0PhKhNlnXhp aeupn5bGORO3jAg2/WwptPUYM6xKpzlyYOdmk6nWZtjtQz6rHDwhHol7kf8sbNYh qcBQqag8qblImYI4vGTnhHsfQfHO1EAWBYHzkCMGG6BS9+stZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCf4m2ZlmkAiBCdkYWUgjfIlhuYOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjI3MDBlNWItMjlkMi0z MzU3LTkzZjMtZDAyMjQzNTFmYWQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYNl4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMjGo/A+XQxP20HKn6bCo67VZMH78Ha6A9gCDSTGRPdzWMSc4pjrr4L0 i22EEn+8IqLgPAFdzAGV0pLIMBko83xlUeNl9TvZWx8CIUdUVAIFqGElxJ3qVIij e7x3C4UClE6SGs6d/b44mwEBtDPa+kIFrOd5oM42eDhxvqU4J6cvOg50B1tSGMhy vkrHDJ55Ma8ouN9KEg2UnsiWLNYp/rvnOFUeHjyEWZOlgAv8nrxEfFeViMD2dWex AK9iskN3naWYCfDvn+d1Lsodceq3X4BUHb/xcJY5iTMffoREbc45BV30mSRzUU4G qvezQXtZ+w4SGeV1R8QAL40OhaiVNWA= -----END CERTIFICATE-----Generated at Sun Dec 22 15:37:55 2024 by rpki-client on console-fra.rpki-client.org