$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f918fc70-c1f0-3ce8-9c2b-820bfca5bc1e.roa File: f918fc70-c1f0-3ce8-9c2b-820bfca5bc1e.roa (raw, json) Hash identifier: 4ToJc46xiFE85ReNWEOzfb2TYsUSNx0EC3O3qXRaCYs= Subject key identifier: 0A:1B:A4:A9:6B:54:CF:0F:21:8F:0D:0E:8C:21:13:43:30:84:22:61 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858476C9D4407F84AD3C841439B40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f918fc70-c1f0-3ce8-9c2b-820bfca5bc1e.roa Signing time: Fri 04 Oct 2024 01:00:31 +0000 ROA not before: Fri 04 Oct 2024 01:00:31 +0000 ROA not after: Thu 02 Jan 2025 02:00:31 +0000 asID: 33651 IP address blocks: 73.223.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:6c:9d:44:07:f8:4a:d3:c8:41:43:9b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 4 01:00:31 2024 GMT Not After : Jan 2 02:00:31 2025 GMT Subject: CN=8b643a71-0a6e-4774-b3d7-7e6147714748 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:38:89:3a:1c:5e:ca:73:22:12:f7:c7:f3:56: 71:fc:a5:9d:2b:6f:98:a0:fc:69:54:9c:f6:b5:35: a7:6e:0e:d3:52:bb:8a:10:d4:20:a3:ea:2e:e5:6d: 1c:98:10:17:fc:32:c1:4f:db:bb:91:e3:04:2f:e8: 7f:59:10:a0:6a:8b:14:ff:fa:c4:b7:c9:fd:fb:c8: a1:07:1f:9f:1f:ff:7e:eb:30:e5:a8:40:c7:d0:28: de:c0:99:4e:03:b5:f6:ac:3c:0b:d3:59:d7:b1:47: 11:a3:05:5c:38:5f:31:63:61:75:ad:d4:2d:7f:4d: 12:c5:72:89:2b:ff:d4:94:43:9a:2a:a2:77:1f:6a: cd:bf:b7:fe:39:f9:db:76:4a:54:45:0b:ed:9d:c3: b2:36:4e:5b:a0:24:8f:cf:27:9a:0a:37:17:17:20: e9:eb:be:e2:18:79:2f:4e:e2:0d:6a:39:18:7a:75: 86:90:bf:f6:2d:e0:4f:57:ec:17:c2:cc:3d:79:c3: af:2d:ff:ca:3e:ce:91:b6:3c:50:ff:8f:a7:16:02: 9a:57:45:2d:73:e5:35:a0:8d:36:5e:b1:24:c0:5c: 3e:a4:01:ca:9b:86:c0:5f:6d:6a:c7:61:e1:86:1e: e4:86:a5:da:b0:66:76:6a:aa:f0:44:d7:4e:0c:a3: 33:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:1B:A4:A9:6B:54:CF:0F:21:8F:0D:0E:8C:21:13:43:30:84:22:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f918fc70-c1f0-3ce8-9c2b-820bfca5bc1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.223.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:35:81:22:7a:7e:e9:4b:0c:15:f1:bd:58:41:e9:f0:dd:d7: 41:0a:f7:fe:a8:a6:d8:7a:18:ce:8e:27:d8:85:33:c7:45:c7: 5b:fa:5c:90:6f:6c:ca:1c:fa:85:6a:d8:ca:88:11:d2:b1:63: 7f:d6:e0:4c:1c:a8:97:21:b8:fb:87:e1:8d:4f:ee:72:b8:f2: 91:0c:89:14:4b:04:1d:4b:a2:36:05:8b:66:c1:2c:06:21:9c: 2c:e2:1c:d5:48:8e:d4:4f:18:2b:68:60:fd:77:15:99:ec:88: 53:3a:20:c2:d8:71:0a:21:17:22:6b:5d:a5:fb:69:e8:27:1d: 2f:e8:e1:51:79:10:d5:42:6d:dd:e2:4f:24:8b:0b:55:a9:bf: f4:5e:01:69:9b:d8:c2:6a:45:3d:c3:55:75:b0:bf:4a:04:d2: 06:fe:06:85:a9:23:dc:7f:41:45:64:d9:5b:5d:b8:b8:ec:cf: 5b:88:35:d5:dc:c9:94:ed:f0:a3:5f:06:3f:5a:3f:18:a5:98: c3:6a:61:cd:9a:98:45:5a:cb:32:d4:14:1b:a2:54:c7:a7:16: 6d:6f:f5:32:0a:0c:26:20:5d:c9:cb:9c:ad:ed:53:b9:63:9c: e0:ad:b2:76:48:3d:2c:00:a6:7f:fc:8b:55:e9:c9:9a:d6:fc: 4d:69:b0:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdsnUQH+ErTyEFDm0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MTAwNDAxMDAzMVoXDTI1MDEwMjAyMDAzMVowLzEtMCsGA1UEAxMk OGI2NDNhNzEtMGE2ZS00Nzc0LWIzZDctN2U2MTQ3NzE0NzQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDiJOhxeynMiEvfH81Zx/KWdK2+YoPxpVJz2 tTWnbg7TUruKENQgo+ou5W0cmBAX/DLBT9u7keMEL+h/WRCgaosU//rEt8n9+8ih Bx+fH/9+6zDlqEDH0CjewJlOA7X2rDwL01nXsUcRowVcOF8xY2F1rdQtf00SxXKJ K//UlEOaKqJ3H2rNv7f+OfnbdkpURQvtncOyNk5boCSPzyeaCjcXFyDp677iGHkv TuINajkYenWGkL/2LeBPV+wXwsw9ecOvLf/KPs6RtjxQ/4+nFgKaV0Utc+U1oI02 XrEkwFw+pAHKm4bAX21qx2Hhhh7khqXasGZ2aqrwRNdODKMzuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAobpKlrVM8PIY8NDowhE0MwhCJhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjkxOGZjNzAtYzFmMC0z Y2U4LTljMmItODIwYmZjYTViYzFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSd+AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH81gSJ6fulLDBXxvVhB6fDd10EK9/6opth6GM6OJ9iFM8dFx1v6XJBv bMoc+oVq2MqIEdKxY3/W4EwcqJchuPuH4Y1P7nK48pEMiRRLBB1LojYFi2bBLAYh nCziHNVIjtRPGCtoYP13FZnsiFM6IMLYcQohFyJrXaX7aegnHS/o4VF5ENVCbd3i TySLC1Wpv/ReAWmb2MJqRT3DVXWwv0oE0gb+BoWpI9x/QUVk2VtduLjsz1uINdXc yZTt8KNfBj9aPxilmMNqYc2amEVayzLUFBuiVMenFm1v9TIKDCYgXcnLnK3tU7lj nOCtsnZIPSwApn/8i1XpyZrW/E1psMM= -----END CERTIFICATE-----Generated at Fri Nov 22 11:38:44 2024 by rpki-client on console-fra.rpki-client.org