$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/f2becbea-8e5f-3dd6-bbe0-38c8315aa2c4.roa File: f2becbea-8e5f-3dd6-bbe0-38c8315aa2c4.roa (raw, json) Hash identifier: KcFSUyg6KNbUucQBxciAlbHELrT5i5Pw4w3IPJAm/2c= Subject key identifier: 70:B7:7A:DC:47:89:AA:6C:2B:D8:28:AA:EF:1D:C1:E2:A2:8C:55:DB Certificate issuer: /CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7 Certificate serial: 010D0C9F4328584829814C6519D605F7E4D05C80 Authority key identifier: FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/f2becbea-8e5f-3dd6-bbe0-38c8315aa2c4.roa Signing time: Tue 10 Dec 2024 16:55:33 +0000 ROA not before: Tue 10 Dec 2024 16:55:33 +0000 ROA not after: Mon 10 Mar 2025 15:55:33 +0000 asID: 272370 IP address blocks: 72.14.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Feb 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:29:81:4c:65:19:d6:05:f7:e4:d0:5c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7 Validity Not Before: Dec 10 16:55:33 2024 GMT Not After : Mar 10 15:55:33 2025 GMT Subject: CN=c99fe8bc-8d4e-40f9-84bc-685fa2d75fcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:90:55:24:5f:dc:e2:18:97:a8:4f:e6:87:1e: 81:cd:ea:7f:be:77:f7:40:00:71:23:09:e6:18:4e: 02:66:d7:86:cc:da:52:21:a4:ba:44:e1:c6:8c:de: 44:ee:1a:bc:72:4a:11:1c:05:c4:55:9a:fa:25:d1: bd:5d:01:e7:6c:c2:6c:7f:41:4a:f3:0f:dc:e5:12: 05:34:4b:7d:19:9a:fe:94:ae:7d:56:19:66:9a:55: 60:d7:14:6e:a0:b3:fc:ac:74:a3:4f:ba:d1:41:fc: dd:4e:8e:0d:23:26:56:74:41:18:75:69:86:d6:95: d1:ec:b9:77:71:0c:79:d6:d9:38:7f:f3:d8:30:7d: 01:8c:57:6a:c6:9b:85:2f:f8:b5:1e:27:3f:72:11: 33:c1:51:86:0e:1c:db:c6:50:1f:68:44:7c:6f:dd: b3:83:43:ea:6a:c5:91:1d:03:21:06:6e:e8:20:09: 26:5a:f1:e8:ef:a9:6b:3c:d0:6d:aa:fd:3e:ae:02: c0:b3:0f:90:a4:06:bc:6b:6e:8d:38:fa:a6:ec:5b: c9:50:c8:12:cd:55:6a:53:c7:f4:5d:a4:db:88:a1: a5:1d:44:73:98:b1:37:77:43:0f:19:f5:9d:01:e1: a6:00:01:04:59:b6:c3:28:a1:c4:0e:f9:eb:8b:2c: ee:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:B7:7A:DC:47:89:AA:6C:2B:D8:28:AA:EF:1D:C1:E2:A2:8C:55:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/f2becbea-8e5f-3dd6-bbe0-38c8315aa2c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl X509v3 Authority Key Identifier: keyid:FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer sbgp-ipAddrBlock: critical IPv4: 72.14.134.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:49:d6:64:62:23:d9:9e:04:da:55:ac:05:2d:bb:08:65:6d: 2f:70:c1:34:93:16:73:1c:9a:c4:5b:58:ab:16:36:a8:23:52: 1c:70:15:84:ae:85:ba:5a:6e:5c:2b:af:15:5e:67:56:66:14: 6f:de:c1:93:9a:7e:22:38:3f:e5:dd:b7:2d:ad:c0:65:32:57: 22:ca:38:18:28:62:42:91:fa:5c:3b:d3:21:e7:22:bc:19:cb: 33:bc:d9:a2:9b:b4:d4:9f:79:20:dc:15:5d:87:7a:f2:e8:02: 16:21:b1:f6:34:1a:b2:0c:86:00:19:a2:ee:b1:d2:0f:bb:eb: 16:3f:b4:f1:ff:b6:63:6f:12:54:22:59:27:e2:4f:33:43:c0: b9:81:a8:81:e3:38:4f:d9:fc:8f:09:7f:43:a7:2a:7b:3b:46: db:66:61:c0:e7:0b:23:8d:fc:d9:c2:30:f2:17:2d:91:04:9d: a1:9e:e9:2c:53:2d:ad:51:17:1c:2d:0e:ea:00:d3:7c:ee:5b: 73:28:7f:cc:06:a3:81:aa:91:04:95:40:07:49:9c:0f:fa:42: aa:28:28:bb:c3:da:5d:8c:ee:4d:76:86:8e:23:f0:f7:93:5c: 4c:99:d4:eb:71:ee:6a:42:56:79:82:ea:bf:4c:63:5f:19:ca: c6:a1:e3:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgpgUxlGdYF9+TQXIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjU2ZjY2NWQtM2MyOC00NTdmLWFiNmYtYTQ3NDQ0ZDZk MWY3MB4XDTI0MTIxMDE2NTUzM1oXDTI1MDMxMDE1NTUzM1owLzEtMCsGA1UEAxMk Yzk5ZmU4YmMtOGQ0ZS00MGY5LTg0YmMtNjg1ZmEyZDc1ZmNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpBVJF/c4hiXqE/mhx6Bzep/vnf3QABxIwnm GE4CZteGzNpSIaS6ROHGjN5E7hq8ckoRHAXEVZr6JdG9XQHnbMJsf0FK8w/c5RIF NEt9GZr+lK59VhlmmlVg1xRuoLP8rHSjT7rRQfzdTo4NIyZWdEEYdWmG1pXR7Ll3 cQx51tk4f/PYMH0BjFdqxpuFL/i1Hic/chEzwVGGDhzbxlAfaER8b92zg0PqasWR HQMhBm7oIAkmWvHo76lrPNBtqv0+rgLAsw+QpAa8a26NOPqm7FvJUMgSzVVqU8f0 XaTbiKGlHURzmLE3d0MPGfWdAeGmAAEEWbbDKKHEDvnriyzugQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHC3etxHiapsK9goqu8dweKijFXbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iNTZm NjY1ZC0zYzI4LTQ1N2YtYWI2Zi1hNDc0NDRkNmQxZjcvZjJiZWNiZWEtOGU1Zi0z ZGQ2LWJiZTAtMzhjODMxNWFhMmM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjU2ZjY2NWQtM2MyOC00NTdmLWFi NmYtYTQ3NDQ0ZDZkMWY3L2I1NmY2NjVkLTNjMjgtNDU3Zi1hYjZmLWE0NzQ0NGQ2 ZDFmNy5jcmwwHwYDVR0jBBgwFoAU+xFjJ4HO45oodHTCKCwulN2DCMQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iNTZmNjY1ZC0zYzI4LTQ1N2YtYWI2Zi1hNDc0 NDRkNmQxZjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASA6GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADpJ1mRiI9meBNpVrAUtuwhlbS9wwTSTFnMcmsRbWKsWNqgjUhxwFYSu hbpablwrrxVeZ1ZmFG/ewZOafiI4P+Xdty2twGUyVyLKOBgoYkKR+lw70yHnIrwZ yzO82aKbtNSfeSDcFV2HevLoAhYhsfY0GrIMhgAZou6x0g+76xY/tPH/tmNvElQi WSfiTzNDwLmBqIHjOE/Z/I8Jf0OnKns7RttmYcDnCyON/NnCMPIXLZEEnaGe6SxT La1RFxwtDuoA03zuW3Mof8wGo4GqkQSVQAdJnA/6QqooKLvD2l2M7k12ho4j8PeT XEyZ1Otx7mpCVnmC6r9MY18Zysah4+M= -----END CERTIFICATE-----Generated at Wed Feb 5 16:54:47 2025 by rpki-client