$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/5af33709-1f6c-3c8c-9294-6f80a56247c6.roa File: 5af33709-1f6c-3c8c-9294-6f80a56247c6.roa (raw, json) Hash identifier: c0AaQiTaeWlQ1Q7t21YrmnEFdbSdzgbucJ8f7nBt2y4= Subject key identifier: 21:A3:C4:B7:11:03:30:56:99:C7:29:AF:BE:5E:13:70:62:A7:E7:F5 Certificate issuer: /CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7 Certificate serial: 010D0C9F432858474850C2D1427A662D496B5F10 Authority key identifier: FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/5af33709-1f6c-3c8c-9294-6f80a56247c6.roa Signing time: Sat 21 Sep 2024 01:00:33 +0000 ROA not before: Sat 21 Sep 2024 01:00:33 +0000 ROA not after: Fri 20 Dec 2024 02:00:33 +0000 asID: 35793 IP address blocks: 72.14.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:48:50:c2:d1:42:7a:66:2d:49:6b:5f:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7 Validity Not Before: Sep 21 01:00:33 2024 GMT Not After : Dec 20 02:00:33 2024 GMT Subject: CN=647bb433-1fa8-4a58-ad66-d92d8b726fcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:c4:5c:46:c7:99:b0:97:22:cf:ed:73:ec:e1: fa:d3:43:fb:c2:d8:f9:a3:9f:f9:54:06:c3:0a:35: 61:60:33:7f:0b:ee:1a:09:90:8f:c6:0e:0e:ad:79: 76:47:44:22:ac:1e:ae:ec:86:26:5b:d5:0e:b3:f5: e0:ed:a4:34:8b:6e:b5:36:fc:b4:6f:de:7c:50:d0: f9:32:47:c0:19:b2:d8:a5:d4:17:e7:fb:a1:6e:03: 84:37:44:a4:98:fc:d1:16:f0:c7:4f:a2:22:50:5d: 86:ae:0d:6c:21:af:55:78:d9:e4:b5:af:6c:a6:c2: d8:fc:21:03:dc:62:d4:1d:e7:92:ca:79:30:aa:2f: ae:83:4a:84:57:fe:73:d8:94:de:7d:74:e5:80:54: d7:32:8f:0c:98:25:64:85:b0:55:f7:af:b6:a0:1f: 88:ff:16:e7:40:e3:73:11:ef:ad:0f:8c:34:50:28: 35:ea:ed:b7:1d:b1:19:c3:c1:bf:3c:97:35:e8:9e: 56:96:78:e8:21:97:42:aa:77:22:70:85:b9:3f:25: 28:b5:a0:c1:7f:ef:61:de:c1:73:ec:a8:ad:e1:43: a1:ea:9d:b2:cb:6c:dc:05:eb:e5:d0:30:77:d5:16: 02:4a:04:5d:5c:00:bf:76:1c:4c:e9:34:88:c8:c1: a4:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:A3:C4:B7:11:03:30:56:99:C7:29:AF:BE:5E:13:70:62:A7:E7:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/5af33709-1f6c-3c8c-9294-6f80a56247c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl X509v3 Authority Key Identifier: keyid:FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer sbgp-ipAddrBlock: critical IPv4: 72.14.130.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:90:10:3d:4c:73:1f:2e:ba:25:f9:23:ed:df:e7:b1:63:c0: a7:84:36:59:f4:e0:7e:cb:47:c4:7c:14:60:71:69:8a:7a:47: 33:ad:d3:7c:34:d9:2f:24:53:06:a6:01:99:7c:78:40:c5:e3: da:4a:4f:38:ef:6c:4b:33:32:e1:30:7c:a6:86:35:6c:e8:81: 86:ee:6e:8f:d2:41:93:ab:f4:18:57:6d:58:1a:6a:b5:9d:73: 34:f3:84:e0:6b:d2:4e:19:21:2d:8b:ff:fc:c7:ba:dd:ed:d5: 37:e0:f6:59:aa:73:63:07:2a:fe:50:c3:82:fd:dc:ae:ac:3a: ba:95:b7:16:3b:d1:d0:ba:0a:9e:82:07:99:6e:64:78:d7:30: 6d:62:b8:71:a0:18:cc:f5:b5:5e:89:37:1f:b1:e7:69:32:f8: 91:e8:da:4c:83:4f:46:db:20:6e:de:25:bb:af:c2:e1:fc:4b: ca:81:e9:0e:d0:d9:8e:f8:93:14:e4:9c:cd:7c:11:14:89:5c: 05:0c:37:0a:05:c5:50:bb:87:84:93:c5:b8:56:56:e5:21:fe: 61:e0:dd:23:15:03:bf:80:99:ce:9c:b0:18:4c:8e:74:2a:b2: ff:8c:64:07:d3:ed:ce:a8:d4:2c:62:69:b9:0a:b2:3d:8a:b7: fc:e3:59:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdIUMLRQnpmLUlrXxAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjU2ZjY2NWQtM2MyOC00NTdmLWFiNmYtYTQ3NDQ0ZDZk MWY3MB4XDTI0MDkyMTAxMDAzM1oXDTI0MTIyMDAyMDAzM1owLzEtMCsGA1UEAxMk NjQ3YmI0MzMtMWZhOC00YTU4LWFkNjYtZDkyZDhiNzI2ZmNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiMRcRseZsJciz+1z7OH600P7wtj5o5/5VAbD CjVhYDN/C+4aCZCPxg4OrXl2R0QirB6u7IYmW9UOs/Xg7aQ0i261Nvy0b958UND5 MkfAGbLYpdQX5/uhbgOEN0SkmPzRFvDHT6IiUF2Grg1sIa9VeNnkta9spsLY/CED 3GLUHeeSynkwqi+ug0qEV/5z2JTefXTlgFTXMo8MmCVkhbBV96+2oB+I/xbnQONz Ee+tD4w0UCg16u23HbEZw8G/PJc16J5WlnjoIZdCqncicIW5PyUotaDBf+9h3sFz 7Kit4UOh6p2yy2zcBevl0DB31RYCSgRdXAC/dhxM6TSIyMGkSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCGjxLcRAzBWmccpr75eE3Bip+f1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iNTZm NjY1ZC0zYzI4LTQ1N2YtYWI2Zi1hNDc0NDRkNmQxZjcvNWFmMzM3MDktMWY2Yy0z YzhjLTkyOTQtNmY4MGE1NjI0N2M2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjU2ZjY2NWQtM2MyOC00NTdmLWFi NmYtYTQ3NDQ0ZDZkMWY3L2I1NmY2NjVkLTNjMjgtNDU3Zi1hYjZmLWE0NzQ0NGQ2 ZDFmNy5jcmwwHwYDVR0jBBgwFoAU+xFjJ4HO45oodHTCKCwulN2DCMQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iNTZmNjY1ZC0zYzI4LTQ1N2YtYWI2Zi1hNDc0 NDRkNmQxZjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASA6CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA+QED1Mcx8uuiX5I+3f57FjwKeENln04H7LR8R8FGBxaYp6RzOt03w0 2S8kUwamAZl8eEDF49pKTzjvbEszMuEwfKaGNWzogYbubo/SQZOr9BhXbVgaarWd czTzhOBr0k4ZIS2L//zHut3t1Tfg9lmqc2MHKv5Qw4L93K6sOrqVtxY70dC6Cp6C B5luZHjXMG1iuHGgGMz1tV6JNx+x52ky+JHo2kyDT0bbIG7eJbuvwuH8S8qB6Q7Q 2Y74kxTknM18ERSJXAUMNwoFxVC7h4STxbhWVuUh/mHg3SMVA7+Amc6csBhMjnQq sv+MZAfT7c6o1CxiabkKsj2Kt/zjWak= -----END CERTIFICATE-----Generated at Fri Nov 22 03:54:14 2024 by rpki-client on console-fra.rpki-client.org