$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/fe7bf971-d595-362a-9a0e-ed505e789075.roa File: fe7bf971-d595-362a-9a0e-ed505e789075.roa (raw, json) Hash identifier: bIHYzSjmzrzdWIs5ONz8vsddRw18nnNGNoBiRXQ05ZQ= Subject key identifier: 77:2D:E6:51:1F:07:1B:58:2D:67:A9:94:1E:A2:91:06:27:42:B6:27 Certificate issuer: /CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7 Certificate serial: 010D0C9F432858483B5014E6B1D9691038852180 Authority key identifier: FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/fe7bf971-d595-362a-9a0e-ed505e789075.roa Signing time: Tue 17 Dec 2024 02:00:38 +0000 ROA not before: Tue 17 Dec 2024 02:00:38 +0000 ROA not after: Mon 17 Mar 2025 01:00:38 +0000 asID: 20460 IP address blocks: 72.14.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 11 Feb 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:3b:50:14:e6:b1:d9:69:10:38:85:21:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7 Validity Not Before: Dec 17 02:00:38 2024 GMT Not After : Mar 17 01:00:38 2025 GMT Subject: CN=83eda407-36e6-49d6-9155-4bba5dffc38b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:be:9c:d6:fe:96:3f:46:af:4c:f6:54:66:34: 71:70:4f:e3:d5:a1:7a:ac:cf:7f:bc:5a:ef:3e:80: c2:ec:74:35:33:0e:78:d0:7e:2b:d7:21:92:d1:60: 00:a8:33:4d:17:d1:80:02:dd:c5:b9:82:61:80:f1: 6a:18:ac:64:0f:7d:0a:7c:3a:93:a6:bf:34:98:7b: 27:47:90:1c:73:00:58:d3:a5:90:2c:ec:f7:e7:20: 82:48:aa:2c:dc:b2:1c:c8:20:5b:00:9c:ea:f0:99: 05:e9:14:06:59:fd:56:b2:eb:17:93:15:42:d4:7b: 69:3f:81:1f:10:cc:d5:75:50:68:55:35:26:68:ec: 8a:96:0a:91:c5:47:05:a0:5d:9d:92:6a:98:88:a1: 78:56:c0:9c:33:75:88:02:ff:a1:de:86:72:d1:09: 62:06:57:15:23:db:a8:26:e2:b0:a0:25:91:72:24: 87:c7:f7:64:bb:6e:a2:88:5d:0f:ed:d9:48:85:16: d6:df:1b:a6:d7:e0:f4:f0:86:2d:18:df:b9:42:03: 69:21:ac:d8:74:13:7d:2a:3b:69:2b:61:f8:c1:0f: 73:a9:91:32:6a:16:e2:bf:50:42:8a:c7:da:67:ba: b1:a4:09:52:6a:50:04:39:18:a9:6e:df:7a:97:f3: 24:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:2D:E6:51:1F:07:1B:58:2D:67:A9:94:1E:A2:91:06:27:42:B6:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/fe7bf971-d595-362a-9a0e-ed505e789075.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl X509v3 Authority Key Identifier: keyid:FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer sbgp-ipAddrBlock: critical IPv4: 72.14.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:99:05:1d:28:a7:68:6c:be:fb:64:45:42:62:d6:f2:ef:91: 12:3d:a2:a5:86:d5:3d:e7:c6:20:02:7c:a2:93:3c:d4:9c:71: 0e:27:bb:45:52:e9:73:fd:7d:50:36:13:b8:a0:39:55:7a:2f: 39:2b:93:be:c1:40:6e:56:a3:49:cc:5b:06:1f:de:85:2e:91: 98:99:af:1f:a8:ee:a3:d2:ce:67:6a:d4:f4:10:66:11:cb:46: 0b:8a:e8:cd:9a:7d:f5:6a:51:76:d7:01:88:71:f8:97:45:ac: 14:a7:3b:d3:f0:15:5b:54:26:19:89:d8:96:62:37:1e:ca:a8: b4:58:47:81:58:68:d2:fa:d6:03:f3:1f:ea:a2:cf:a0:e0:48: 10:1f:28:e9:e9:7c:86:c3:93:11:75:a2:45:c3:52:be:a5:b5: 38:eb:d2:8e:6b:d6:fd:2d:ae:96:21:b0:92:6b:65:f2:67:c1: eb:5e:0d:0b:c7:16:6b:d4:d4:5b:59:6b:58:a6:0e:58:1b:af: 33:ad:28:49:d6:e6:83:ec:86:ab:f2:45:5f:a4:ba:69:54:5e: 67:17:0a:e0:67:b6:36:d2:42:9b:50:25:01:7c:d4:a1:e9:c4: 47:28:56:c3:d1:2a:9a:d6:8f:27:17:d9:71:62:8c:9c:e7:1b: 07:32:4e:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg7UBTmsdlpEDiFIYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjU2ZjY2NWQtM2MyOC00NTdmLWFiNmYtYTQ3NDQ0ZDZk MWY3MB4XDTI0MTIxNzAyMDAzOFoXDTI1MDMxNzAxMDAzOFowLzEtMCsGA1UEAxMk ODNlZGE0MDctMzZlNi00OWQ2LTkxNTUtNGJiYTVkZmZjMzhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8b6c1v6WP0avTPZUZjRxcE/j1aF6rM9/vFrv PoDC7HQ1Mw540H4r1yGS0WAAqDNNF9GAAt3FuYJhgPFqGKxkD30KfDqTpr80mHsn R5AccwBY06WQLOz35yCCSKos3LIcyCBbAJzq8JkF6RQGWf1WsusXkxVC1HtpP4Ef EMzVdVBoVTUmaOyKlgqRxUcFoF2dkmqYiKF4VsCcM3WIAv+h3oZy0QliBlcVI9uo JuKwoCWRciSHx/dku26iiF0P7dlIhRbW3xum1+D08IYtGN+5QgNpIazYdBN9Kjtp K2H4wQ9zqZEyahbiv1BCisfaZ7qxpAlSalAEORipbt96l/Mk9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHct5lEfBxtYLWeplB6ikQYnQrYnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iNTZm NjY1ZC0zYzI4LTQ1N2YtYWI2Zi1hNDc0NDRkNmQxZjcvZmU3YmY5NzEtZDU5NS0z NjJhLTlhMGUtZWQ1MDVlNzg5MDc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjU2ZjY2NWQtM2MyOC00NTdmLWFi NmYtYTQ3NDQ0ZDZkMWY3L2I1NmY2NjVkLTNjMjgtNDU3Zi1hYjZmLWE0NzQ0NGQ2 ZDFmNy5jcmwwHwYDVR0jBBgwFoAU+xFjJ4HO45oodHTCKCwulN2DCMQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iNTZmNjY1ZC0zYzI4LTQ1N2YtYWI2Zi1hNDc0 NDRkNmQxZjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASA6BMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABuZBR0op2hsvvtkRUJi1vLvkRI9oqWG1T3nxiACfKKTPNSccQ4nu0VS 6XP9fVA2E7igOVV6Lzkrk77BQG5Wo0nMWwYf3oUukZiZrx+o7qPSzmdq1PQQZhHL RguK6M2affVqUXbXAYhx+JdFrBSnO9PwFVtUJhmJ2JZiNx7KqLRYR4FYaNL61gPz H+qiz6DgSBAfKOnpfIbDkxF1okXDUr6ltTjr0o5r1v0trpYhsJJrZfJnweteDQvH FmvU1FtZa1imDlgbrzOtKEnW5oPshqvyRV+kumlUXmcXCuBntjbSQptQJQF81KHp xEcoVsPRKprWjycX2XFijJznGwcyTs0= -----END CERTIFICATE-----Generated at Sun Feb 9 14:17:57 2025 by rpki-client