$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/f411f7e3-a030-33c6-a8e2-d381a9731d20.roa File: f411f7e3-a030-33c6-a8e2-d381a9731d20.roa (raw, json) Hash identifier: gds+T8EyhWwLUMEIlXmrmd8nYCZ/isFdeydrGdwqq1E= Subject key identifier: EF:AE:2B:F4:6C:3C:22:AD:E0:81:8C:6F:2A:77:36:6A:6A:28:1B:D7 Certificate issuer: /CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Certificate serial: 010D0C9F432858477BF66C911D87F80B05C0A240 Authority key identifier: 79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/f411f7e3-a030-33c6-a8e2-d381a9731d20.roa Signing time: Wed 09 Oct 2024 13:00:42 +0000 ROA not before: Wed 09 Oct 2024 13:00:42 +0000 ROA not after: Tue 07 Jan 2025 14:00:42 +0000 asID: 4213 IP address blocks: 74.222.152.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:7b:f6:6c:91:1d:87:f8:0b:05:c0:a2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Validity Not Before: Oct 9 13:00:42 2024 GMT Not After : Jan 7 14:00:42 2025 GMT Subject: CN=eb093d26-cb31-40c6-9e5e-009634baae5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f3:10:a1:dd:4b:a7:26:14:8d:44:a7:1b:2e: b9:1b:6b:5e:5d:8e:da:cc:01:91:cb:b8:a5:0d:db: 33:53:28:ab:e6:c4:08:61:05:66:a4:32:db:6a:b0: e0:f5:bf:4b:39:18:34:f2:f1:a3:23:c4:cd:fe:7d: 36:76:35:95:79:34:10:f4:78:48:90:12:4a:c6:00: 7c:22:e3:90:ee:b6:18:05:59:62:67:52:3d:5e:a2: 08:7d:e5:9e:b0:1d:a4:b3:0f:3d:11:ae:db:f5:1d: c2:5c:ea:73:a1:27:32:64:ba:30:71:7b:4b:5a:33: f1:fe:fb:3b:b7:ed:b0:24:0e:41:e0:79:d3:fc:b3: d7:e4:1c:54:c7:6d:24:ad:86:02:54:31:f8:4a:0b: ac:76:c7:d2:07:40:01:be:f7:7a:b4:b3:4e:e0:1b: a3:1c:a3:3c:cd:a5:0f:4b:c4:16:17:f2:22:59:d9: e9:c6:7c:c1:9f:85:5a:c0:96:ab:ed:6b:77:cc:0f: 17:bd:1c:08:10:ef:26:7f:54:75:a3:95:9f:8e:10: 5d:51:63:cc:fd:cd:29:c2:39:9b:b1:a7:34:b0:dc: 04:31:f8:34:50:16:d8:01:92:2d:d4:f5:0e:c8:f3: 74:93:01:14:81:c4:6f:f8:bd:e3:a2:2d:83:25:a7: be:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:AE:2B:F4:6C:3C:22:AD:E0:81:8C:6F:2A:77:36:6A:6A:28:1B:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/f411f7e3-a030-33c6-a8e2-d381a9731d20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl X509v3 Authority Key Identifier: keyid:79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer sbgp-ipAddrBlock: critical IPv4: 74.222.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:e1:00:53:b8:d7:2f:b3:36:9e:3f:c2:68:81:eb:03:49:93: 48:59:64:da:76:f4:bd:d8:31:20:d2:48:11:c5:de:d6:61:f3: b3:eb:42:9a:3b:1b:00:4f:dd:4d:4e:6f:50:2e:3d:3d:f9:36: 06:b7:16:27:aa:0f:0a:90:57:55:41:e0:5e:e7:b1:aa:b3:a5: bc:e4:3c:d8:29:1f:2c:19:b8:82:30:25:2c:59:c7:a9:04:94: d3:fe:d7:6b:54:68:de:ef:8b:e0:ed:d2:9b:be:c8:c8:68:89: cf:70:3e:2c:6f:39:e1:4e:16:64:6b:af:94:c0:46:12:c2:f1: d7:70:56:05:ff:a0:9c:d4:6b:5d:2b:96:36:71:6d:ac:d9:60: a1:04:e6:54:6c:bd:09:66:7d:4f:1b:5a:75:d3:d0:63:ba:db: 53:81:b3:8b:ab:c8:cf:7b:45:06:72:dd:c1:e8:8a:57:ae:c4: d6:5f:04:5f:86:33:b2:5c:0e:d9:bc:9b:2c:ac:4b:68:51:ad: 0f:d5:9e:bc:1a:55:af:a8:93:94:e0:61:39:d9:56:13:df:a2: d2:9c:43:a8:9a:1d:d1:f6:95:37:88:fc:b5:cd:50:e9:d5:61: 66:f1:b8:0f:98:c4:fd:c3:b2:9f:cc:c9:b7:16:61:15:a0:ee: d5:30:6b:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd79myRHYf4CwXAokAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY3YzQzZTctMDU3MS00ZDA4LWI3MWEtOGI5MzBkZGE5 YWFkMB4XDTI0MTAwOTEzMDA0MloXDTI1MDEwNzE0MDA0MlowLzEtMCsGA1UEAxMk ZWIwOTNkMjYtY2IzMS00MGM2LTllNWUtMDA5NjM0YmFhZTVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPMQod1LpyYUjUSnGy65G2teXY7azAGRy7il DdszUyir5sQIYQVmpDLbarDg9b9LORg08vGjI8TN/n02djWVeTQQ9HhIkBJKxgB8 IuOQ7rYYBVliZ1I9XqIIfeWesB2ksw89Ea7b9R3CXOpzoScyZLowcXtLWjPx/vs7 t+2wJA5B4HnT/LPX5BxUx20krYYCVDH4SgusdsfSB0ABvvd6tLNO4BujHKM8zaUP S8QWF/IiWdnpxnzBn4VawJar7Wt3zA8XvRwIEO8mf1R1o5WfjhBdUWPM/c0pwjmb sac0sNwEMfg0UBbYAZIt1PUOyPN0kwEUgcRv+L3joi2DJae+mwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO+uK/RsPCKt4IGMbyp3NmpqKBvXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iZjdj NDNlNy0wNTcxLTRkMDgtYjcxYS04YjkzMGRkYTlhYWQvZjQxMWY3ZTMtYTAzMC0z M2M2LWE4ZTItZDM4MWE5NzMxZDIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmY3YzQzZTctMDU3MS00ZDA4LWI3 MWEtOGI5MzBkZGE5YWFkL2JmN2M0M2U3LTA1NzEtNGQwOC1iNzFhLThiOTMwZGRh OWFhZC5jcmwwHwYDVR0jBBgwFoAUeZqf6o0FGJJghnDDQxDjJyHgFKgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iZjdjNDNlNy0wNTcxLTRkMDgtYjcxYS04Yjkz MGRkYTlhYWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSt6YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIrhAFO41y+zNp4/wmiB6wNJk0hZZNp29L3YMSDSSBHF3tZh87PrQpo7 GwBP3U1Ob1AuPT35Nga3FieqDwqQV1VB4F7nsaqzpbzkPNgpHywZuIIwJSxZx6kE lNP+12tUaN7vi+Dt0pu+yMhoic9wPixvOeFOFmRrr5TARhLC8ddwVgX/oJzUa10r ljZxbazZYKEE5lRsvQlmfU8bWnXT0GO621OBs4uryM97RQZy3cHoileuxNZfBF+G M7JcDtm8myysS2hRrQ/VnrwaVa+ok5TgYTnZVhPfotKcQ6iaHdH2lTeI/LXNUOnV YWbxuA+YxP3Dsp/MybcWYRWg7tUwayI= -----END CERTIFICATE-----Generated at Sun Nov 24 19:47:11 2024 by rpki-client on console-fra.rpki-client.org