$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43290c87-c43c-46a1-8633-9c4624dc1aaf/00f8bc34-2fd6-3328-924d-129cb50d9319.roa File: 00f8bc34-2fd6-3328-924d-129cb50d9319.roa (raw, json) Hash identifier: ynGAnn0JWyC1kHbxXvUhRKLbWYRw3ZRONucf6XTLBRA= Subject key identifier: 09:94:3C:76:0F:BB:89:DC:96:79:00:0B:8D:9F:DB:40:AE:0C:EE:DF Certificate issuer: /CN=43290c87-c43c-46a1-8633-9c4624dc1aaf Certificate serial: 010D0C9F43285847C3448D44B9A4D05716EBC5C0 Authority key identifier: 6E:FC:BD:06:6F:97:7B:E8:82:11:C6:20:8E:C3:E7:3A:41:12:D7:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43290c87-c43c-46a1-8633-9c4624dc1aaf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43290c87-c43c-46a1-8633-9c4624dc1aaf/00f8bc34-2fd6-3328-924d-129cb50d9319.roa Signing time: Mon 04 Nov 2024 02:00:36 +0000 ROA not before: Mon 04 Nov 2024 02:00:36 +0000 ROA not after: Sun 02 Feb 2025 02:00:36 +0000 asID: 396982 IP address blocks: 52.129.72.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43290c87-c43c-46a1-8633-9c4624dc1aaf/43290c87-c43c-46a1-8633-9c4624dc1aaf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43290c87-c43c-46a1-8633-9c4624dc1aaf/43290c87-c43c-46a1-8633-9c4624dc1aaf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43290c87-c43c-46a1-8633-9c4624dc1aaf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:c3:44:8d:44:b9:a4:d0:57:16:eb:c5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43290c87-c43c-46a1-8633-9c4624dc1aaf Validity Not Before: Nov 4 02:00:36 2024 GMT Not After : Feb 2 02:00:36 2025 GMT Subject: CN=f94581c2-26d1-4ed6-b98c-206716edb364 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:89:3a:38:80:83:75:da:c5:9e:1a:30:0a:1a: 29:74:95:83:a0:54:ee:1c:e9:c2:7a:66:4f:b5:8a: 52:14:60:16:cd:e5:70:43:42:05:43:b8:7a:4a:bf: df:8c:b2:af:9b:39:22:5c:73:f3:7f:40:75:22:d9: 0c:38:ae:2e:b6:08:5c:f1:a5:16:96:c3:c4:5e:79: 50:3b:de:23:41:3c:0f:98:46:60:1d:3e:9f:2d:04: 16:6f:04:73:59:3e:61:57:b6:41:0b:3d:f9:a4:90: f4:d3:2e:48:1a:5c:19:f0:23:ff:4d:a9:32:90:4b: 1c:54:1c:0b:24:7a:a8:a1:7e:98:18:7b:fc:ee:8e: 0d:13:97:09:a0:41:f2:1f:12:5f:1b:78:98:86:56: ee:92:8c:b5:4c:f5:a9:c5:fe:59:b7:27:0b:25:02: 9e:cf:09:40:9c:86:f5:d8:53:00:ac:b2:28:64:52: 49:8e:8d:f1:6f:02:47:c3:f0:bc:d2:30:1c:f9:bc: ba:49:42:31:99:03:fd:54:37:39:fd:53:c5:22:48: d4:09:66:a4:fb:a5:d7:9a:d5:0b:e9:a3:94:e0:6d: d5:22:05:c6:a7:04:e1:df:a3:85:bc:3a:ef:05:0f: d4:2e:03:af:2c:d2:a7:4d:55:ad:4c:c9:2d:73:9a: f9:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:94:3C:76:0F:BB:89:DC:96:79:00:0B:8D:9F:DB:40:AE:0C:EE:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43290c87-c43c-46a1-8633-9c4624dc1aaf/00f8bc34-2fd6-3328-924d-129cb50d9319.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43290c87-c43c-46a1-8633-9c4624dc1aaf/43290c87-c43c-46a1-8633-9c4624dc1aaf.crl X509v3 Authority Key Identifier: keyid:6E:FC:BD:06:6F:97:7B:E8:82:11:C6:20:8E:C3:E7:3A:41:12:D7:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43290c87-c43c-46a1-8633-9c4624dc1aaf.cer sbgp-ipAddrBlock: critical IPv4: 52.129.72.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:c8:66:c9:0b:ef:ca:cd:43:be:c2:3e:60:fd:6f:30:4f:f7: ff:f9:7f:fe:ae:56:a0:02:d1:d1:a3:17:e3:26:8b:ee:ec:23: a3:8b:46:94:4f:68:fe:1f:36:ea:6b:2b:b0:a6:80:8d:fa:5b: c5:cf:2a:cd:dc:7b:09:6a:31:d0:9f:a5:a6:d9:c9:5b:3b:ce: 1f:bb:18:43:33:57:38:eb:6a:8d:59:d5:6c:93:ce:6c:83:fa: 1f:99:d0:9b:47:e9:cb:3a:33:f0:97:36:11:22:88:f0:0d:26: 45:9c:b6:e5:aa:0b:79:bc:2f:4b:18:90:96:dd:1b:71:45:61: a9:85:44:df:a8:23:cc:c2:a0:54:7b:5f:e0:45:f1:b1:29:82: 4f:66:14:97:21:6a:8c:37:0d:6c:0b:c2:a0:c8:4b:1d:c2:a7: c8:e8:43:7f:13:10:34:61:82:98:58:5e:73:3f:d6:2c:27:2f: 86:68:5f:20:ec:ef:cf:5b:bc:0f:55:a6:48:aa:97:ff:58:3b: a7:72:f0:05:58:4d:38:f0:54:ac:88:5b:53:03:d4:f9:97:ef: 79:4c:ed:3a:02:15:1c:56:62:ed:23:2a:19:a0:aa:6e:a4:4c: e8:8c:ba:0d:a6:74:5d:3e:eb:e3:b4:cc:34:42:1a:43:4f:23: f1:22:47:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfDRI1EuaTQVxbrxcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDMyOTBjODctYzQzYy00NmExLTg2MzMtOWM0NjI0ZGMx YWFmMB4XDTI0MTEwNDAyMDAzNloXDTI1MDIwMjAyMDAzNlowLzEtMCsGA1UEAxMk Zjk0NTgxYzItMjZkMS00ZWQ2LWI5OGMtMjA2NzE2ZWRiMzY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYk6OICDddrFnhowChopdJWDoFTuHOnCemZP tYpSFGAWzeVwQ0IFQ7h6Sr/fjLKvmzkiXHPzf0B1ItkMOK4utghc8aUWlsPEXnlQ O94jQTwPmEZgHT6fLQQWbwRzWT5hV7ZBCz35pJD00y5IGlwZ8CP/TakykEscVBwL JHqooX6YGHv87o4NE5cJoEHyHxJfG3iYhlbukoy1TPWpxf5ZtycLJQKezwlAnIb1 2FMArLIoZFJJjo3xbwJHw/C80jAc+by6SUIxmQP9VDc5/VPFIkjUCWak+6XXmtUL 6aOU4G3VIgXGpwTh36OFvDrvBQ/ULgOvLNKnTVWtTMktc5r5zwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAmUPHYPu4nclnkAC42f20CuDO7fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80MzI5 MGM4Ny1jNDNjLTQ2YTEtODYzMy05YzQ2MjRkYzFhYWYvMDBmOGJjMzQtMmZkNi0z MzI4LTkyNGQtMTI5Y2I1MGQ5MzE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNDMyOTBjODctYzQzYy00NmExLTg2 MzMtOWM0NjI0ZGMxYWFmLzQzMjkwYzg3LWM0M2MtNDZhMS04NjMzLTljNDYyNGRj MWFhZi5jcmwwHwYDVR0jBBgwFoAUbvy9Bm+Xe+iCEcYgjsPnOkES13gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy80MzI5MGM4Ny1jNDNjLTQ2YTEtODYzMy05YzQ2 MjRkYzFhYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBNIFIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJjIZskL78rNQ77CPmD9bzBP9//5f/6uVqAC0dGjF+Mmi+7sI6OLRpRP aP4fNuprK7CmgI36W8XPKs3cewlqMdCfpabZyVs7zh+7GEMzVzjrao1Z1WyTzmyD +h+Z0JtH6cs6M/CXNhEiiPANJkWctuWqC3m8L0sYkJbdG3FFYamFRN+oI8zCoFR7 X+BF8bEpgk9mFJchaow3DWwLwqDISx3Cp8joQ38TEDRhgphYXnM/1iwnL4ZoXyDs 789bvA9Vpkiql/9YO6dy8AVYTTjwVKyIW1MD1PmX73lM7ToCFRxWYu0jKhmgqm6k TOiMug2mdF0+6+O0zDRCGkNPI/EiR+Y= -----END CERTIFICATE-----Generated at Sun Nov 24 21:45:20 2024 by rpki-client on console-ams.rpki-client.org