$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/28e420a5-0f3c-3e64-9dc4-25a946e286fd.roa File: 28e420a5-0f3c-3e64-9dc4-25a946e286fd.roa (raw, json) Hash identifier: k1TOjeU4qQsJcRh0mfKUJVwNvVPG1KbylxcKao7jua8= Subject key identifier: BE:C4:18:D9:3D:92:16:B7:B5:E7:0D:7D:D9:B7:1C:24:B9:FD:33:57 Certificate issuer: /CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7 Certificate serial: 010D0C9F4328584802150AB52DFE15EEC30A9090 Authority key identifier: FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/28e420a5-0f3c-3e64-9dc4-25a946e286fd.roa Signing time: Tue 26 Nov 2024 14:00:39 +0000 ROA not before: Tue 26 Nov 2024 14:00:39 +0000 ROA not after: Mon 24 Feb 2025 14:00:39 +0000 asID: 63023 IP address blocks: 72.14.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 11 Dec 2024 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:02:15:0a:b5:2d:fe:15:ee:c3:0a:90:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7 Validity Not Before: Nov 26 14:00:39 2024 GMT Not After : Feb 24 14:00:39 2025 GMT Subject: CN=ceb44ce6-4a55-4267-943b-7664d43a22b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:04:1f:06:71:e3:52:91:25:5a:97:de:9f:9e: 1f:81:4f:05:3c:57:27:1c:db:b5:4d:bc:34:00:ad: d9:b6:2b:ae:34:93:28:05:b0:45:10:35:25:15:73: af:33:10:48:30:ee:0b:3c:34:a4:ac:26:e1:e1:ad: 3c:7f:81:da:ad:40:cc:f0:2d:ea:7c:81:da:3b:38: da:6a:be:2a:9c:9a:d8:9e:13:f1:af:0d:3e:26:f8: 74:96:39:95:e8:ac:31:90:d5:63:47:30:e7:ef:e9: bf:01:31:4e:97:e1:84:a5:bb:7e:ab:7c:35:d1:39: 3a:bc:23:91:7b:da:58:dc:23:c0:07:bb:11:0d:3e: f1:9c:8c:8f:11:34:30:ef:8e:6f:84:75:7e:70:d2: 01:42:53:b6:88:93:84:de:ab:64:06:d7:38:4e:89: 70:34:ae:c1:77:e2:fe:47:c9:28:ef:24:52:f6:77: 3d:16:a3:b3:66:00:3b:b4:f8:39:20:e8:98:c5:8c: e7:07:98:ba:12:f6:6a:4e:8a:97:2b:4e:9e:f1:81: 0c:f9:68:85:50:36:78:20:4b:ba:4a:f0:1e:aa:20: 03:d4:23:1f:0b:2b:22:8e:e8:38:40:a0:db:bd:08: bf:c9:52:b3:6f:bd:39:9a:b2:49:41:40:ca:07:79: 56:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:C4:18:D9:3D:92:16:B7:B5:E7:0D:7D:D9:B7:1C:24:B9:FD:33:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/28e420a5-0f3c-3e64-9dc4-25a946e286fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl X509v3 Authority Key Identifier: keyid:FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer sbgp-ipAddrBlock: critical IPv4: 72.14.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:c6:56:43:f1:67:46:55:1d:0f:ef:38:25:fd:45:5e:d7:70: 80:65:74:f2:05:fb:99:62:07:98:e7:ff:ff:1c:3d:72:53:9c: 49:35:80:d9:18:f3:c8:71:15:47:e9:dc:65:6e:6c:1a:dc:3f: 5c:f8:16:48:77:48:b1:57:b3:e8:c2:e5:38:bb:ca:7e:46:85: a4:ec:78:88:85:46:81:3f:ef:3c:47:c6:99:6a:f1:62:c9:1d: 48:e6:97:24:34:5b:15:39:24:ea:ee:08:04:ca:c5:7e:33:85: c7:33:17:39:04:85:df:85:07:25:4c:d3:77:3d:0b:49:ac:1d: 79:53:1b:08:db:8e:02:4d:92:be:ec:78:aa:4a:c1:a5:ea:74: 87:23:0e:f5:c5:fe:5d:d7:69:55:4d:36:48:40:af:6a:dd:05: 5e:ab:18:89:ce:c5:3d:12:f1:79:31:14:c6:23:24:39:8b:13: 66:93:cf:8b:33:44:ad:9a:4a:5f:72:b7:5a:76:d6:1b:74:b0: ef:66:02:5e:7e:77:84:79:3f:67:ee:b1:aa:40:d6:0e:97:bd: 8e:c8:c2:d0:11:1b:90:0e:47:a4:46:4f:a7:2b:77:4e:28:d4: e1:f9:df:ac:0f:67:c3:80:09:bd:94:33:3f:ca:f7:ef:ba:a2: 44:db:6a:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgCFQq1Lf4V7sMKkJAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjU2ZjY2NWQtM2MyOC00NTdmLWFiNmYtYTQ3NDQ0ZDZk MWY3MB4XDTI0MTEyNjE0MDAzOVoXDTI1MDIyNDE0MDAzOVowLzEtMCsGA1UEAxMk Y2ViNDRjZTYtNGE1NS00MjY3LTk0M2ItNzY2NGQ0M2EyMmI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjAQfBnHjUpElWpfen54fgU8FPFcnHNu1Tbw0 AK3ZtiuuNJMoBbBFEDUlFXOvMxBIMO4LPDSkrCbh4a08f4HarUDM8C3qfIHaOzja ar4qnJrYnhPxrw0+Jvh0ljmV6KwxkNVjRzDn7+m/ATFOl+GEpbt+q3w10Tk6vCOR e9pY3CPAB7sRDT7xnIyPETQw745vhHV+cNIBQlO2iJOE3qtkBtc4TolwNK7Bd+L+ R8ko7yRS9nc9FqOzZgA7tPg5IOiYxYznB5i6EvZqToqXK06e8YEM+WiFUDZ4IEu6 SvAeqiAD1CMfCysijug4QKDbvQi/yVKzb705mrJJQUDKB3lW1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL7EGNk9kha3tecNfdm3HCS5/TNXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iNTZm NjY1ZC0zYzI4LTQ1N2YtYWI2Zi1hNDc0NDRkNmQxZjcvMjhlNDIwYTUtMGYzYy0z ZTY0LTlkYzQtMjVhOTQ2ZTI4NmZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjU2ZjY2NWQtM2MyOC00NTdmLWFi NmYtYTQ3NDQ0ZDZkMWY3L2I1NmY2NjVkLTNjMjgtNDU3Zi1hYjZmLWE0NzQ0NGQ2 ZDFmNy5jcmwwHwYDVR0jBBgwFoAU+xFjJ4HO45oodHTCKCwulN2DCMQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iNTZmNjY1ZC0zYzI4LTQ1N2YtYWI2Zi1hNDc0 NDRkNmQxZjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASA6UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAHGVkPxZ0ZVHQ/vOCX9RV7XcIBldPIF+5liB5jn//8cPXJTnEk1gNkY 88hxFUfp3GVubBrcP1z4Fkh3SLFXs+jC5Ti7yn5GhaTseIiFRoE/7zxHxplq8WLJ HUjmlyQ0WxU5JOruCATKxX4zhcczFzkEhd+FByVM03c9C0msHXlTGwjbjgJNkr7s eKpKwaXqdIcjDvXF/l3XaVVNNkhAr2rdBV6rGInOxT0S8XkxFMYjJDmLE2aTz4sz RK2aSl9yt1p21ht0sO9mAl5+d4R5P2fusapA1g6XvY7IwtARG5AOR6RGT6crd04o 1OH536wPZ8OACb2UMz/K9++6okTbavQ= -----END CERTIFICATE-----Generated at Tue Dec 10 02:50:44 2024 by rpki-client on console-ams.rpki-client.org