$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/a05fde6c-d2ff-3701-9252-dda8da5b78e8.roa File: a05fde6c-d2ff-3701-9252-dda8da5b78e8.roa (raw, json) Hash identifier: gT3N2/COto0y+pN5JXqaj7CR3dXUrdpQsCOFkidWUrY= Subject key identifier: 70:6A:7E:15:EE:D8:D3:07:E6:91:40:C6:EA:E3:32:D9:7B:F1:0E:DB Certificate issuer: /CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7 Certificate serial: 010D0C9F43285847AF9BEF73CBD2516D56664C80 Authority key identifier: FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/a05fde6c-d2ff-3701-9252-dda8da5b78e8.roa Signing time: Mon 28 Oct 2024 01:00:32 +0000 ROA not before: Mon 28 Oct 2024 01:00:32 +0000 ROA not after: Sun 26 Jan 2025 02:00:32 +0000 asID: 152700 IP address blocks: 72.14.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:af:9b:ef:73:cb:d2:51:6d:56:66:4c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7 Validity Not Before: Oct 28 01:00:32 2024 GMT Not After : Jan 26 02:00:32 2025 GMT Subject: CN=a160aae6-fffc-47c1-940d-9d710ba01fae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:cf:ce:03:e5:ca:83:ff:b0:74:09:58:c4:38: 52:97:5e:a9:8f:52:a0:48:9d:4d:b0:ed:85:04:f1: b2:00:7d:ff:fe:ac:ab:62:a2:38:21:e8:10:50:51: 0f:59:c1:5b:65:98:fa:f2:0d:1a:97:0a:f3:07:57: 9d:24:01:89:5a:1c:ab:f0:24:52:7b:eb:59:aa:87: df:63:66:6f:d9:2b:6a:f7:79:01:28:68:0f:49:c5: bd:52:0c:ce:8d:69:08:b0:8e:3b:4a:96:cc:95:0f: 63:3c:33:18:25:35:48:a4:4a:c4:3a:65:39:d7:be: d4:e6:0e:b2:c2:b3:97:67:dc:28:96:47:02:2b:df: b1:a7:be:6f:08:28:f0:52:57:dd:18:e1:ca:d8:4a: d9:b7:c9:28:9b:5b:d9:c6:8c:26:16:90:0b:da:a4: 78:1a:23:48:fe:20:2b:4b:2a:39:d1:c6:d8:2a:cc: 09:80:51:3d:1c:05:a8:26:73:ce:66:41:5f:d5:d1: 30:7a:1b:0d:a9:c3:ec:49:a6:d1:ba:bd:4d:c2:e5: 31:31:3c:0a:47:41:09:21:d8:de:26:69:8a:c3:b0: 9b:cc:2b:1d:f1:0e:8b:36:3e:b8:6b:bd:c7:85:9a: eb:4e:56:20:41:60:52:b4:47:1b:2a:a3:a1:f5:a7: 8e:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:6A:7E:15:EE:D8:D3:07:E6:91:40:C6:EA:E3:32:D9:7B:F1:0E:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/a05fde6c-d2ff-3701-9252-dda8da5b78e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl X509v3 Authority Key Identifier: keyid:FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer sbgp-ipAddrBlock: critical IPv4: 72.14.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:47:8c:b7:0c:40:dd:df:21:e3:a1:a5:67:da:c6:75:a6:c0: 00:2c:c5:5f:93:3e:b3:11:85:05:0e:db:e0:f5:be:a3:ed:0a: 49:89:c0:62:91:9a:c1:9e:5d:02:d7:be:1c:cd:ad:b0:be:83: 25:44:e4:bf:b7:c2:b8:a4:58:c9:ba:1e:a3:0f:b6:14:65:b6: c3:13:2a:a7:9b:a9:40:a8:45:59:7e:9d:56:ce:9b:e6:c5:73: 5c:34:73:d0:d2:d1:af:f4:d0:fa:8f:55:18:4b:9a:b4:eb:ee: d7:19:9e:a1:06:85:15:25:ff:b2:6d:62:64:20:15:79:29:4f: 79:d0:97:4b:25:71:3c:05:b9:a9:88:57:4a:cb:5d:dd:6e:f1: a4:42:e5:43:68:3b:de:fd:3f:03:4a:ec:7b:00:69:86:35:75: 8e:fe:3c:c6:fd:7d:13:a5:62:8a:10:59:df:7e:3a:d9:16:af: b1:81:b1:40:fe:19:45:a8:6b:31:23:be:78:a2:1d:f9:10:e4: 2a:f8:ee:50:e5:15:c6:0a:02:f6:ee:41:f6:3c:14:f3:5f:26: b4:62:e1:9e:81:9a:e7:6a:43:b6:3c:72:e9:dd:45:8e:6d:22: ba:09:15:93:f6:20:09:d5:0d:aa:7b:1a:f6:54:62:2c:ab:3d: 1c:8e:86:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEevm+9zy9JRbVZmTIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjU2ZjY2NWQtM2MyOC00NTdmLWFiNmYtYTQ3NDQ0ZDZk MWY3MB4XDTI0MTAyODAxMDAzMloXDTI1MDEyNjAyMDAzMlowLzEtMCsGA1UEAxMk YTE2MGFhZTYtZmZmYy00N2MxLTk0MGQtOWQ3MTBiYTAxZmFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8/OA+XKg/+wdAlYxDhSl16pj1KgSJ1NsO2F BPGyAH3//qyrYqI4IegQUFEPWcFbZZj68g0alwrzB1edJAGJWhyr8CRSe+tZqoff Y2Zv2Stq93kBKGgPScW9UgzOjWkIsI47SpbMlQ9jPDMYJTVIpErEOmU5177U5g6y wrOXZ9wolkcCK9+xp75vCCjwUlfdGOHK2ErZt8kom1vZxowmFpAL2qR4GiNI/iAr Syo50cbYKswJgFE9HAWoJnPOZkFf1dEwehsNqcPsSabRur1NwuUxMTwKR0EJIdje JmmKw7CbzCsd8Q6LNj64a73HhZrrTlYgQWBStEcbKqOh9aeOVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHBqfhXu2NMH5pFAxurjMtl78Q7bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iNTZm NjY1ZC0zYzI4LTQ1N2YtYWI2Zi1hNDc0NDRkNmQxZjcvYTA1ZmRlNmMtZDJmZi0z NzAxLTkyNTItZGRhOGRhNWI3OGU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjU2ZjY2NWQtM2MyOC00NTdmLWFi NmYtYTQ3NDQ0ZDZkMWY3L2I1NmY2NjVkLTNjMjgtNDU3Zi1hYjZmLWE0NzQ0NGQ2 ZDFmNy5jcmwwHwYDVR0jBBgwFoAU+xFjJ4HO45oodHTCKCwulN2DCMQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iNTZmNjY1ZC0zYzI4LTQ1N2YtYWI2Zi1hNDc0 NDRkNmQxZjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASA6KMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABlHjLcMQN3fIeOhpWfaxnWmwAAsxV+TPrMRhQUO2+D1vqPtCkmJwGKR msGeXQLXvhzNrbC+gyVE5L+3wrikWMm6HqMPthRltsMTKqebqUCoRVl+nVbOm+bF c1w0c9DS0a/00PqPVRhLmrTr7tcZnqEGhRUl/7JtYmQgFXkpT3nQl0slcTwFuamI V0rLXd1u8aRC5UNoO979PwNK7HsAaYY1dY7+PMb9fROlYooQWd9+OtkWr7GBsUD+ GUWoazEjvniiHfkQ5Cr47lDlFcYKAvbuQfY8FPNfJrRi4Z6BmudqQ7Y8cundRY5t IroJFZP2IAnVDap7GvZUYiyrPRyOhjY= -----END CERTIFICATE-----Generated at Mon Nov 25 04:55:42 2024 by rpki-client on console-fra.rpki-client.org