$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/8627eb3e-2ada-3de9-b53c-c5df600e1058.roa File: 8627eb3e-2ada-3de9-b53c-c5df600e1058.roa (raw, json) Hash identifier: uIBrrQtoukOOkPNxU7FUnQUaZr/Rq8Jjw8tL3okqP+M= Subject key identifier: 34:4B:09:76:5C:F9:9B:84:5E:7D:15:86:43:D0:6E:30:DF:70:E2:54 Certificate issuer: /CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7 Certificate serial: 010D0C9F432858480A75204DAD3E4D5BAAFC89E0 Authority key identifier: FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/8627eb3e-2ada-3de9-b53c-c5df600e1058.roa Signing time: Fri 29 Nov 2024 14:00:51 +0000 ROA not before: Fri 29 Nov 2024 14:00:51 +0000 ROA not after: Thu 27 Feb 2025 14:00:51 +0000 asID: 174 IP address blocks: 72.14.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:0a:75:20:4d:ad:3e:4d:5b:aa:fc:89:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7 Validity Not Before: Nov 29 14:00:51 2024 GMT Not After : Feb 27 14:00:51 2025 GMT Subject: CN=152af632-7170-41e4-a97e-aab000ea92ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e7:6e:85:70:f8:28:b9:a8:69:35:47:0a:de: 21:68:87:14:0b:31:47:c3:34:bc:c3:b8:d6:2e:80: a7:8e:a9:7e:2a:85:8b:36:b5:23:14:f6:b6:91:07: ac:89:43:4b:2a:b2:43:a6:b8:c9:c9:0a:9f:d4:4e: a1:b4:65:91:67:9e:2b:4d:47:af:41:eb:5a:c6:dd: 3f:4e:b0:68:70:44:0b:85:89:08:69:50:56:4b:99: 13:06:b1:da:c8:cd:d8:f4:25:b8:3d:af:42:5e:7a: c5:a0:df:d4:29:cc:72:d7:00:03:11:37:7c:c4:09: 07:3d:d9:ee:6d:48:42:db:14:10:06:3c:a4:85:84: bc:75:6a:f0:22:b3:5b:00:2f:8a:6e:29:0d:23:98: 57:78:80:78:7c:13:ea:17:af:7e:20:13:ef:63:69: 9d:b6:06:59:1e:23:8b:d1:48:d7:6c:d9:b8:0f:1d: f6:eb:5f:1a:e0:a1:44:41:d4:f7:2c:66:19:09:f6: cc:93:03:c8:db:e2:5a:32:e1:90:7a:f4:fb:8c:92: f5:d5:56:b7:e8:bc:15:8c:65:87:8d:90:66:27:87: fe:dd:f2:2c:3c:a5:9d:fe:db:b6:ea:f0:76:78:27: 1a:56:18:f8:85:d6:76:35:f4:b4:e6:e2:31:03:0e: 1d:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:4B:09:76:5C:F9:9B:84:5E:7D:15:86:43:D0:6E:30:DF:70:E2:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/8627eb3e-2ada-3de9-b53c-c5df600e1058.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl X509v3 Authority Key Identifier: keyid:FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer sbgp-ipAddrBlock: critical IPv4: 72.14.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:e9:7e:4d:f3:9d:ad:66:ab:1e:e9:3a:23:be:9d:07:85:4c: 7f:28:a8:b1:0d:a1:e9:cd:31:94:d9:9c:c1:75:82:ed:a3:8a: f5:3b:fc:78:f2:72:b5:ad:e7:0b:aa:8d:ac:35:c8:64:7d:ea: 43:2c:e6:91:28:39:7a:4a:42:13:e1:e5:81:f8:3b:09:ce:b3: c9:03:fb:3b:b4:fa:ee:02:be:84:a2:88:1f:e1:db:39:59:48: de:cb:04:60:5e:08:f2:86:ca:95:f9:e4:65:8e:6f:8a:d6:3e: aa:66:46:70:50:1c:c9:4c:ec:78:d0:c7:4c:1e:3a:60:72:48: 3a:ca:2a:c2:3f:d5:47:50:2a:ec:8e:d4:67:65:75:b3:42:40: d9:d2:0a:b6:ef:4a:0f:40:9e:47:e9:53:4e:82:88:7d:93:65: ec:d9:15:76:bd:3d:5e:c2:ae:f2:92:30:84:6c:f6:3b:9f:84: 41:33:d5:64:e1:b3:89:7c:6e:95:2c:95:de:7b:04:7b:c4:61: 42:7e:a4:35:e0:a4:6f:1c:79:f2:16:b8:a6:5e:88:4a:1f:ab: b7:da:4b:ab:f5:d3:cd:2c:7e:27:7f:ad:8c:dd:b6:9c:51:87: fc:de:b9:18:c9:63:7a:cd:46:2c:1f:07:50:ae:38:c3:af:93: 79:a8:89:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgKdSBNrT5NW6r8ieAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjU2ZjY2NWQtM2MyOC00NTdmLWFiNmYtYTQ3NDQ0ZDZk MWY3MB4XDTI0MTEyOTE0MDA1MVoXDTI1MDIyNzE0MDA1MVowLzEtMCsGA1UEAxMk MTUyYWY2MzItNzE3MC00MWU0LWE5N2UtYWFiMDAwZWE5MmFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+duhXD4KLmoaTVHCt4haIcUCzFHwzS8w7jW LoCnjql+KoWLNrUjFPa2kQesiUNLKrJDprjJyQqf1E6htGWRZ54rTUevQetaxt0/ TrBocEQLhYkIaVBWS5kTBrHayM3Y9CW4Pa9CXnrFoN/UKcxy1wADETd8xAkHPdnu bUhC2xQQBjykhYS8dWrwIrNbAC+KbikNI5hXeIB4fBPqF69+IBPvY2mdtgZZHiOL 0UjXbNm4Dx32618a4KFEQdT3LGYZCfbMkwPI2+JaMuGQevT7jJL11Va36LwVjGWH jZBmJ4f+3fIsPKWd/tu26vB2eCcaVhj4hdZ2NfS05uIxAw4dhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDRLCXZc+ZuEXn0VhkPQbjDfcOJUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iNTZm NjY1ZC0zYzI4LTQ1N2YtYWI2Zi1hNDc0NDRkNmQxZjcvODYyN2ViM2UtMmFkYS0z ZGU5LWI1M2MtYzVkZjYwMGUxMDU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjU2ZjY2NWQtM2MyOC00NTdmLWFi NmYtYTQ3NDQ0ZDZkMWY3L2I1NmY2NjVkLTNjMjgtNDU3Zi1hYjZmLWE0NzQ0NGQ2 ZDFmNy5jcmwwHwYDVR0jBBgwFoAU+xFjJ4HO45oodHTCKCwulN2DCMQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iNTZmNjY1ZC0zYzI4LTQ1N2YtYWI2Zi1hNDc0 NDRkNmQxZjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASA6dMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIHpfk3zna1mqx7pOiO+nQeFTH8oqLENoenNMZTZnMF1gu2jivU7/Hjy crWt5wuqjaw1yGR96kMs5pEoOXpKQhPh5YH4OwnOs8kD+zu0+u4CvoSiiB/h2zlZ SN7LBGBeCPKGypX55GWOb4rWPqpmRnBQHMlM7HjQx0weOmBySDrKKsI/1UdQKuyO 1GdldbNCQNnSCrbvSg9AnkfpU06CiH2TZezZFXa9PV7CrvKSMIRs9jufhEEz1WTh s4l8bpUsld57BHvEYUJ+pDXgpG8cefIWuKZeiEofq7faS6v1080sfid/rYzdtpxR h/zeuRjJY3rNRiwfB1CuOMOvk3moiUs= -----END CERTIFICATE-----Generated at Sun Feb 16 15:43:34 2025 by rpki-client