$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/a8a238f7-752f-3b08-9a4a-8c095f31d878.roa File: a8a238f7-752f-3b08-9a4a-8c095f31d878.roa (raw, json) Hash identifier: hIHcUXnEaQwcXEBUSnR0UMbHMulJlGgVoPW137ryAGU= Subject key identifier: 70:95:4E:65:01:EF:78:59:A5:C4:87:4A:2D:3F:C6:E5:55:E5:4D:76 Certificate issuer: /CN=94550438-10ef-444f-b785-f7bc6eba08e7 Certificate serial: 010D0C9F43285847B3CC0F3C479839FB6E3D4580 Authority key identifier: 34:47:3D:92:98:3E:D3:C0:22:F0:9B:CA:12:10:8C:3D:A1:EF:3C:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/a8a238f7-752f-3b08-9a4a-8c095f31d878.roa Signing time: Tue 29 Oct 2024 13:00:40 +0000 ROA not before: Tue 29 Oct 2024 13:00:40 +0000 ROA not after: Mon 27 Jan 2025 14:00:40 +0000 asID: 36374 IP address blocks: 72.18.118.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/94550438-10ef-444f-b785-f7bc6eba08e7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/94550438-10ef-444f-b785-f7bc6eba08e7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b3:cc:0f:3c:47:98:39:fb:6e:3d:45:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94550438-10ef-444f-b785-f7bc6eba08e7 Validity Not Before: Oct 29 13:00:40 2024 GMT Not After : Jan 27 14:00:40 2025 GMT Subject: CN=3fd11b8b-747d-475d-8a69-affb15f2e100 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:09:ea:85:0c:38:cf:d8:dc:ba:40:84:c1:58: 22:5b:38:2a:fe:9e:15:f2:42:91:8a:28:17:b8:44: c4:ce:bc:d8:7a:ee:a4:78:ee:51:19:cd:8d:b8:bd: 10:bf:de:ae:dc:b6:ae:0d:a4:fa:f0:73:4e:c5:4d: 79:5d:8e:f4:8f:31:f2:3e:93:90:3a:01:64:3f:f8: a1:83:e9:04:d4:82:3b:c7:13:db:72:6a:0f:19:7c: dc:5c:41:35:17:77:46:a0:c8:42:92:d9:31:80:cf: a4:18:71:a7:e6:4e:9e:8c:cf:73:0a:53:1b:2a:6a: cd:c3:63:11:5b:e8:f9:f1:59:1f:43:a4:e9:b6:9a: 20:4c:b5:b9:a3:b0:3b:89:f8:2a:be:db:5b:79:26: 82:ce:08:d4:53:51:f4:f2:29:01:78:bb:53:4a:44: 16:ae:2b:f8:44:40:35:17:e5:43:b1:97:1d:cd:82: 2c:b1:e0:5b:d3:ac:6a:41:a9:42:94:c3:76:f4:71: 21:f9:3c:05:37:ad:9e:ee:8f:00:3d:fb:91:92:82: ff:13:6a:3e:63:8b:6a:00:b7:a3:e9:b7:0c:08:f1: c5:dc:10:8d:f7:65:15:83:1d:a7:a7:a0:eb:e0:1d: 49:d6:f7:c7:a3:48:76:56:b1:fe:2b:ee:88:fd:91: 58:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:95:4E:65:01:EF:78:59:A5:C4:87:4A:2D:3F:C6:E5:55:E5:4D:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/a8a238f7-752f-3b08-9a4a-8c095f31d878.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/94550438-10ef-444f-b785-f7bc6eba08e7.crl X509v3 Authority Key Identifier: keyid:34:47:3D:92:98:3E:D3:C0:22:F0:9B:CA:12:10:8C:3D:A1:EF:3C:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7.cer sbgp-ipAddrBlock: critical IPv4: 72.18.118.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:56:b3:0f:94:cd:f9:95:0b:42:fd:e3:0f:01:ba:ce:01:d2: 95:73:4b:9b:28:5f:89:d7:ec:39:fd:3a:ff:57:7a:77:d6:5e: 15:a7:83:79:f9:d9:04:f7:4c:5c:52:f9:1d:7a:6b:76:bf:a7: bb:cb:33:29:4d:8c:ce:15:5c:4d:8e:ab:20:9d:c5:46:97:e7: bc:ea:dd:10:f5:00:53:4b:10:30:51:f6:28:5c:2e:9a:94:94: 1b:60:0f:de:22:7b:6f:5e:1c:60:bb:8c:f0:80:33:c5:12:be: 19:6d:c6:85:2e:86:6c:d6:e9:70:e3:d3:60:c7:81:2b:0b:48: e1:85:72:74:d0:c4:5e:08:5b:c3:ba:f6:5b:bb:90:cf:75:63: 52:7a:a7:da:e1:b6:e4:65:68:a5:c7:b2:b6:26:6e:81:9f:f4: 3f:9f:4d:1b:64:46:c1:7b:c1:52:4c:f4:9d:0a:80:38:90:2f: 98:a9:c4:7a:66:2e:1a:c3:08:24:cf:de:ec:08:cf:e3:52:36: fc:a4:cb:9a:84:f0:b3:f3:37:26:d7:c9:b7:07:5a:0e:53:3d: a3:12:ef:81:07:a0:2c:34:3e:ad:27:35:7e:7b:f1:3e:35:e7: c2:27:9c:0c:6e:66:31:2d:82:94:06:b4:29:17:44:47:a2:df: f9:49:b5:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEezzA88R5g5+249RYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTQ1NTA0MzgtMTBlZi00NDRmLWI3ODUtZjdiYzZlYmEw OGU3MB4XDTI0MTAyOTEzMDA0MFoXDTI1MDEyNzE0MDA0MFowLzEtMCsGA1UEAxMk M2ZkMTFiOGItNzQ3ZC00NzVkLThhNjktYWZmYjE1ZjJlMTAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQnqhQw4z9jcukCEwVgiWzgq/p4V8kKRiigX uETEzrzYeu6keO5RGc2NuL0Qv96u3LauDaT68HNOxU15XY70jzHyPpOQOgFkP/ih g+kE1II7xxPbcmoPGXzcXEE1F3dGoMhCktkxgM+kGHGn5k6ejM9zClMbKmrNw2MR W+j58VkfQ6TptpogTLW5o7A7ifgqvttbeSaCzgjUU1H08ikBeLtTSkQWriv4REA1 F+VDsZcdzYIsseBb06xqQalClMN29HEh+TwFN62e7o8APfuRkoL/E2o+Y4tqALej 6bcMCPHF3BCN92UVgx2np6Dr4B1J1vfHo0h2VrH+K+6I/ZFYVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHCVTmUB73hZpcSHSi0/xuVV5U12MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85NDU1 MDQzOC0xMGVmLTQ0NGYtYjc4NS1mN2JjNmViYTA4ZTcvYThhMjM4ZjctNzUyZi0z YjA4LTlhNGEtOGMwOTVmMzFkODc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTQ1NTA0MzgtMTBlZi00NDRmLWI3 ODUtZjdiYzZlYmEwOGU3Lzk0NTUwNDM4LTEwZWYtNDQ0Zi1iNzg1LWY3YmM2ZWJh MDhlNy5jcmwwHwYDVR0jBBgwFoAUNEc9kpg+08Ai8JvKEhCMPaHvPCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85NDU1MDQzOC0xMGVmLTQ0NGYtYjc4NS1mN2Jj NmViYTA4ZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSBJ2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFFWsw+UzfmVC0L94w8Bus4B0pVzS5soX4nX7Dn9Ov9XenfWXhWng3n5 2QT3TFxS+R16a3a/p7vLMylNjM4VXE2OqyCdxUaX57zq3RD1AFNLEDBR9ihcLpqU lBtgD94ie29eHGC7jPCAM8USvhltxoUuhmzW6XDj02DHgSsLSOGFcnTQxF4IW8O6 9lu7kM91Y1J6p9rhtuRlaKXHsrYmboGf9D+fTRtkRsF7wVJM9J0KgDiQL5ipxHpm LhrDCCTP3uwIz+NSNvyky5qE8LPzNybXybcHWg5TPaMS74EHoCw0Pq0nNX578T41 58InnAxuZjEtgpQGtCkXREei3/lJtZ4= -----END CERTIFICATE-----Generated at Fri Nov 22 04:07:13 2024 by rpki-client on console-ams.rpki-client.org