$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/a389dbd4-a2d7-3ac1-9484-5d1b64728900.roa File: a389dbd4-a2d7-3ac1-9484-5d1b64728900.roa (raw, json) Hash identifier: GIFOLIgfpbqfC2dMtHPbFoEcVzLfuUC3IjHUa02wyTg= Subject key identifier: 86:E1:58:F4:A2:BD:E6:C2:CC:66:E0:B7:8A:B8:61:6B:AF:59:79:1F Certificate issuer: /CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7 Certificate serial: 010D0C9F43285847E78F57D1026875AD9C63CE00 Authority key identifier: FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/a389dbd4-a2d7-3ac1-9484-5d1b64728900.roa Signing time: Sun 17 Nov 2024 02:00:28 +0000 ROA not before: Sun 17 Nov 2024 02:00:28 +0000 ROA not after: Sat 15 Feb 2025 02:00:28 +0000 asID: 200017 IP address blocks: 72.14.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e7:8f:57:d1:02:68:75:ad:9c:63:ce:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7 Validity Not Before: Nov 17 02:00:28 2024 GMT Not After : Feb 15 02:00:28 2025 GMT Subject: CN=22c714af-9de5-40e1-ae63-2a28bc6084c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e4:30:b0:b9:47:e6:ce:bc:26:1c:d8:9d:50: 6b:40:e3:cc:b4:12:3e:d5:26:b9:05:c8:0d:be:64: 4d:07:fc:f1:6e:0b:ff:f4:09:02:58:73:e6:fe:7b: e8:c4:58:7c:2d:79:ba:25:53:be:2f:a5:e7:5a:3a: 3c:ab:99:49:fc:9a:52:34:a1:d4:fa:6d:ba:98:79: 01:75:1b:ff:bd:bb:a7:96:5f:de:6a:8c:f0:c4:87: 86:fc:6a:cf:31:e3:5f:7a:56:4f:15:9f:3f:c8:a4: 1a:bd:e6:bc:2f:2a:98:c9:ce:bc:d1:c7:81:7e:8d: a4:3d:ef:f0:db:02:3e:13:4c:3e:d9:0f:ef:91:06: b6:a3:7f:cb:8d:95:12:12:f8:43:f5:b5:50:28:a4: 90:e1:b6:b8:2b:16:76:9b:39:f8:53:0f:e7:e2:a5: 3f:df:b5:c8:df:ca:fd:45:10:bb:0f:b8:c7:c5:40: ae:74:db:15:3b:47:55:13:5f:a2:0a:53:0a:c2:6e: 73:00:3f:0c:71:64:c2:d9:88:68:2f:ac:28:59:f4: 8b:42:ee:f2:1c:dc:31:c4:7c:2a:58:98:03:ee:bb: 35:18:63:0e:90:f0:9b:a3:8d:32:36:07:ca:c6:5a: 51:40:5c:03:b7:36:80:32:e3:21:a7:d1:dd:08:e9: 07:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:E1:58:F4:A2:BD:E6:C2:CC:66:E0:B7:8A:B8:61:6B:AF:59:79:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/a389dbd4-a2d7-3ac1-9484-5d1b64728900.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl X509v3 Authority Key Identifier: keyid:FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer sbgp-ipAddrBlock: critical IPv4: 72.14.151.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:00:04:87:aa:fb:f5:cf:27:bb:ff:e2:a7:90:8c:0f:3e:f8: 2c:14:40:ec:f8:7c:de:1c:22:ce:91:d0:0d:d0:86:ac:ab:4c: da:81:ae:cf:e5:a3:12:bb:02:d6:d7:11:7e:57:ae:7b:3b:75: c0:20:31:cb:fe:53:aa:d1:24:55:60:6b:94:7e:9e:ef:67:dd: 8d:d3:80:03:ca:df:bc:ec:fa:c3:5b:73:09:ef:7d:73:75:33: 40:29:2f:94:5c:e7:6a:68:39:e0:6e:ea:48:b4:c4:55:bc:a4: 5c:a4:77:28:29:b1:5a:90:7a:c4:df:64:f4:3b:67:b6:34:98: 2d:99:45:db:84:89:72:73:e6:4e:0e:5f:fd:e2:2c:c9:c3:66: 63:b3:1b:d8:92:b8:40:de:77:41:c2:30:41:81:51:02:f4:ad: 2b:40:7a:50:ce:03:68:2d:84:1e:20:56:a5:17:4b:af:ff:2e: 0d:26:f2:bd:bc:d0:5b:c5:31:97:54:c8:ba:79:8b:e2:bc:e4: 77:4d:94:85:cf:5f:f8:7b:c0:9d:3a:16:ad:cd:0e:3b:d9:44: 3e:df:25:cc:d4:a7:4c:f2:da:48:05:81:72:b7:87:d0:a3:a3: dd:db:b7:59:8a:f9:a5:47:4a:ab:80:10:85:63:44:0a:9f:27: 2c:cd:74:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfnj1fRAmh1rZxjzgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjU2ZjY2NWQtM2MyOC00NTdmLWFiNmYtYTQ3NDQ0ZDZk MWY3MB4XDTI0MTExNzAyMDAyOFoXDTI1MDIxNTAyMDAyOFowLzEtMCsGA1UEAxMk MjJjNzE0YWYtOWRlNS00MGUxLWFlNjMtMmEyOGJjNjA4NGMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsuQwsLlH5s68JhzYnVBrQOPMtBI+1Sa5BcgN vmRNB/zxbgv/9AkCWHPm/nvoxFh8LXm6JVO+L6XnWjo8q5lJ/JpSNKHU+m26mHkB dRv/vbunll/eaozwxIeG/GrPMeNfelZPFZ8/yKQavea8LyqYyc680ceBfo2kPe/w 2wI+E0w+2Q/vkQa2o3/LjZUSEvhD9bVQKKSQ4ba4KxZ2mzn4Uw/n4qU/37XI38r9 RRC7D7jHxUCudNsVO0dVE1+iClMKwm5zAD8McWTC2YhoL6woWfSLQu7yHNwxxHwq WJgD7rs1GGMOkPCbo40yNgfKxlpRQFwDtzaAMuMhp9HdCOkHBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIbhWPSivebCzGbgt4q4YWuvWXkfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iNTZm NjY1ZC0zYzI4LTQ1N2YtYWI2Zi1hNDc0NDRkNmQxZjcvYTM4OWRiZDQtYTJkNy0z YWMxLTk0ODQtNWQxYjY0NzI4OTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjU2ZjY2NWQtM2MyOC00NTdmLWFi NmYtYTQ3NDQ0ZDZkMWY3L2I1NmY2NjVkLTNjMjgtNDU3Zi1hYjZmLWE0NzQ0NGQ2 ZDFmNy5jcmwwHwYDVR0jBBgwFoAU+xFjJ4HO45oodHTCKCwulN2DCMQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iNTZmNjY1ZC0zYzI4LTQ1N2YtYWI2Zi1hNDc0 NDRkNmQxZjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASA6XMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFAABIeq+/XPJ7v/4qeQjA8++CwUQOz4fN4cIs6R0A3QhqyrTNqBrs/l oxK7AtbXEX5Xrns7dcAgMcv+U6rRJFVga5R+nu9n3Y3TgAPK37zs+sNbcwnvfXN1 M0ApL5Rc52poOeBu6ki0xFW8pFykdygpsVqQesTfZPQ7Z7Y0mC2ZRduEiXJz5k4O X/3iLMnDZmOzG9iSuEDed0HCMEGBUQL0rStAelDOA2gthB4gVqUXS6//Lg0m8r28 0FvFMZdUyLp5i+K85HdNlIXPX/h7wJ06Fq3NDjvZRD7fJczUp0zy2kgFgXK3h9Cj o93bt1mK+aVHSquAEIVjRAqfJyzNdK8= -----END CERTIFICATE-----Generated at Thu Nov 21 21:43:05 2024 by rpki-client on console-ams.rpki-client.org