$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/c47cecfe-2d16-3ba9-85b1-c17b1aeaa5b1.roa File: c47cecfe-2d16-3ba9-85b1-c17b1aeaa5b1.roa (raw, json) Hash identifier: oSHEpcFkaYqGuNZcRrf7qjinnVdFZXy3kSx74zYFSk0= Subject key identifier: 7A:80:2A:97:E3:3B:05:12:E6:2E:93:B5:40:BB:45:F8:C3:6B:BB:61 Certificate issuer: /CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7 Certificate serial: 010D0C9F4328584827C5460CA62D7FB8943BE880 Authority key identifier: FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/c47cecfe-2d16-3ba9-85b1-c17b1aeaa5b1.roa Signing time: Tue 10 Dec 2024 02:00:40 +0000 ROA not before: Tue 10 Dec 2024 02:00:40 +0000 ROA not after: Mon 10 Mar 2025 01:00:40 +0000 asID: 211373 IP address blocks: 72.14.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Dec 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:27:c5:46:0c:a6:2d:7f:b8:94:3b:e8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7 Validity Not Before: Dec 10 02:00:40 2024 GMT Not After : Mar 10 01:00:40 2025 GMT Subject: CN=5fe0af21-19c0-4532-9c9d-9bb4998430b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:96:48:b5:b2:8e:ce:4f:7d:29:bb:c6:59:e5: 1a:e2:5e:9a:2a:ab:dc:af:b6:ce:27:f1:66:53:55: ec:29:06:f8:2f:93:c3:a2:9b:60:7a:3e:5e:e0:b0: 5a:c8:80:07:13:86:f9:9d:dd:e6:6b:98:43:44:3e: 29:c9:6e:41:20:ec:37:fe:7e:d5:a9:2d:19:a6:e5: 2e:33:70:04:df:5a:11:cb:ab:77:0b:d2:7e:ee:34: 8e:4b:6f:85:f6:bc:ce:8f:5b:d2:fd:13:50:0c:17: 61:5a:5c:bb:f2:0f:70:ee:f7:ec:64:4f:70:67:32: cf:40:5b:a3:9f:3d:49:14:9b:f8:3e:4a:82:d5:27: bf:85:e9:87:59:12:81:0c:63:c0:bc:12:a4:95:cc: 88:80:59:3e:13:f1:81:27:3a:87:dd:74:20:8a:a0: 9f:a2:38:5c:d5:02:50:72:f0:58:f9:dc:fe:76:22: 11:a8:dd:e0:77:d6:8b:8e:d1:ff:ed:6e:8a:0a:62: 8e:06:56:13:50:e1:a7:07:2d:07:a0:e1:43:a4:24: 10:78:70:c9:e0:54:ed:9c:42:a2:35:4a:28:d5:c9: 61:8c:0b:5a:93:8e:c4:83:c9:92:ec:d8:26:e5:95: 71:e2:66:83:07:11:46:52:07:14:c0:25:9c:ac:a9: a3:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:80:2A:97:E3:3B:05:12:E6:2E:93:B5:40:BB:45:F8:C3:6B:BB:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/c47cecfe-2d16-3ba9-85b1-c17b1aeaa5b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl X509v3 Authority Key Identifier: keyid:FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer sbgp-ipAddrBlock: critical IPv4: 72.14.142.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:cd:00:23:69:1d:8f:c8:c5:e2:55:81:49:f4:2a:7e:0a:6d: 07:8c:34:9d:91:e6:5d:f3:09:8e:f6:b3:b8:2e:41:be:d0:b9: e2:a8:b1:a1:a1:28:b4:fd:67:b3:90:35:00:6d:d2:1c:83:e7: a0:0b:79:a1:c5:6d:9c:30:2d:01:24:66:26:47:9e:9b:bd:de: b8:04:7f:99:42:49:77:6c:3e:31:ad:a4:7c:fc:9f:94:7b:b2: e9:8c:41:b6:6e:4a:93:91:b5:b6:cc:b8:c3:e1:e6:1f:97:d4: 65:bd:08:83:61:3d:03:85:4d:c0:f7:8e:6f:0a:1c:7a:40:e1: 7e:46:57:b0:74:f6:2b:3b:5b:dd:3b:74:c5:83:57:84:d0:40: 09:26:99:bb:d7:57:12:88:b8:6d:82:37:48:cb:e8:eb:15:cf: 3a:99:60:12:3a:e3:4a:64:50:3f:55:89:a3:eb:18:8c:09:8c: aa:6b:28:da:a6:0e:36:eb:28:44:b4:70:67:53:60:89:92:b3: d6:a6:f4:9e:77:3f:30:59:eb:e2:1d:8c:09:08:cb:dc:ea:14: 6d:40:a4:29:de:7f:e9:0c:47:ce:d4:33:6b:f7:23:36:77:4c: e8:50:d3:16:eb:e1:80:9a:43:7b:15:b0:de:ec:e0:d0:ed:c3: 6d:69:88:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgnxUYMpi1/uJQ76IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjU2ZjY2NWQtM2MyOC00NTdmLWFiNmYtYTQ3NDQ0ZDZk MWY3MB4XDTI0MTIxMDAyMDA0MFoXDTI1MDMxMDAxMDA0MFowLzEtMCsGA1UEAxMk NWZlMGFmMjEtMTljMC00NTMyLTljOWQtOWJiNDk5ODQzMGI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5ZItbKOzk99KbvGWeUa4l6aKqvcr7bOJ/Fm U1XsKQb4L5PDoptgej5e4LBayIAHE4b5nd3ma5hDRD4pyW5BIOw3/n7VqS0ZpuUu M3AE31oRy6t3C9J+7jSOS2+F9rzOj1vS/RNQDBdhWly78g9w7vfsZE9wZzLPQFuj nz1JFJv4PkqC1Se/hemHWRKBDGPAvBKklcyIgFk+E/GBJzqH3XQgiqCfojhc1QJQ cvBY+dz+diIRqN3gd9aLjtH/7W6KCmKOBlYTUOGnBy0HoOFDpCQQeHDJ4FTtnEKi NUoo1clhjAtak47Eg8mS7Ngm5ZVx4maDBxFGUgcUwCWcrKmjpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHqAKpfjOwUS5i6TtUC7RfjDa7thMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iNTZm NjY1ZC0zYzI4LTQ1N2YtYWI2Zi1hNDc0NDRkNmQxZjcvYzQ3Y2VjZmUtMmQxNi0z YmE5LTg1YjEtYzE3YjFhZWFhNWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjU2ZjY2NWQtM2MyOC00NTdmLWFi NmYtYTQ3NDQ0ZDZkMWY3L2I1NmY2NjVkLTNjMjgtNDU3Zi1hYjZmLWE0NzQ0NGQ2 ZDFmNy5jcmwwHwYDVR0jBBgwFoAU+xFjJ4HO45oodHTCKCwulN2DCMQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iNTZmNjY1ZC0zYzI4LTQ1N2YtYWI2Zi1hNDc0 NDRkNmQxZjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASA6OMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHTNACNpHY/IxeJVgUn0Kn4KbQeMNJ2R5l3zCY72s7guQb7QueKosaGh KLT9Z7OQNQBt0hyD56ALeaHFbZwwLQEkZiZHnpu93rgEf5lCSXdsPjGtpHz8n5R7 sumMQbZuSpORtbbMuMPh5h+X1GW9CINhPQOFTcD3jm8KHHpA4X5GV7B09is7W907 dMWDV4TQQAkmmbvXVxKIuG2CN0jL6OsVzzqZYBI640pkUD9ViaPrGIwJjKprKNqm DjbrKES0cGdTYImSs9am9J53PzBZ6+IdjAkIy9zqFG1ApCnef+kMR87UM2v3IzZ3 TOhQ0xbr4YCaQ3sVsN7s4NDtw21piPI= -----END CERTIFICATE-----Generated at Fri Dec 13 15:18:21 2024 by rpki-client on console-fra.rpki-client.org