$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0b6651e3-8bd9-30cf-b7f6-8b27f0ce5636.roa File: 0b6651e3-8bd9-30cf-b7f6-8b27f0ce5636.roa (raw, json) Hash identifier: rjGDJlGkOUg2+k4gezr1MwnIL4jPqwuIthl1h2dLojY= Subject key identifier: 6A:69:D4:DA:63:C9:67:05:E6:5D:11:12:57:57:62:FC:7E:0B:AA:47 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285847E62A3B5B90DFB41C633B6B80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0b6651e3-8bd9-30cf-b7f6-8b27f0ce5636.roa Signing time: Sat 16 Nov 2024 14:00:41 +0000 ROA not before: Sat 16 Nov 2024 14:00:41 +0000 ROA not after: Fri 14 Feb 2025 14:00:41 +0000 asID: 7155 IP address blocks: 72.173.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e6:2a:3b:5b:90:df:b4:1c:63:3b:6b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Nov 16 14:00:41 2024 GMT Not After : Feb 14 14:00:41 2025 GMT Subject: CN=3436e73a-b57d-48a8-a36f-cff36e2b789a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:2a:76:d2:d3:a1:ac:1d:ab:40:7c:0f:0d:ad: 9e:1b:4f:53:d4:2d:6a:ff:ee:db:b1:a3:14:b1:26: e4:d0:4e:0d:f7:d6:c6:92:26:a0:27:63:02:0f:52: 4b:de:16:3c:7c:82:f5:66:90:47:37:cb:84:ef:27: 3a:d4:12:39:80:78:cd:0f:d0:90:4b:ba:76:f8:84: 70:7c:b7:a3:17:72:cd:27:61:39:c4:b6:c0:cf:06: 08:77:09:b2:91:85:01:27:d5:9e:bb:82:20:34:13: 03:9f:ca:ed:6f:99:b4:af:94:1c:a0:3c:d4:8c:9e: e7:b8:2a:e1:13:7e:5e:a6:d9:51:ce:ae:26:c2:20: 4c:3c:8a:20:62:64:f0:fd:4a:8f:57:23:d9:f4:15: 05:8d:08:47:f7:44:e4:95:68:6b:65:48:cf:07:56: 39:53:7d:1a:86:a9:7a:59:a2:bd:32:d6:f2:53:51: 47:21:c7:68:32:33:9a:d9:ed:62:41:69:39:c3:24: 71:02:28:16:ac:d0:b6:d8:99:bb:ac:5b:25:1c:19: 5f:5a:26:07:ed:b4:28:df:ad:ae:cf:dc:fa:06:1c: 5d:e7:b6:88:56:2d:de:7f:22:20:21:84:b3:cd:f2: be:4c:d2:f9:07:b2:30:65:ea:75:dd:61:ae:55:73: 50:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:69:D4:DA:63:C9:67:05:E6:5D:11:12:57:57:62:FC:7E:0B:AA:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0b6651e3-8bd9-30cf-b7f6-8b27f0ce5636.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:f7:1c:26:d6:64:4e:36:38:be:e1:04:c0:aa:96:50:96:99: f4:fe:14:14:bc:93:02:7f:33:71:76:fd:4a:22:3c:f0:70:b7: 2e:87:d6:a3:75:f8:34:6c:e2:a1:6f:6b:a4:bb:c7:f1:61:7f: aa:c7:b3:3c:fe:dd:3d:39:f3:23:d2:10:c0:7c:f8:79:54:20: 06:36:0c:ec:63:69:aa:64:53:cd:fb:a6:be:9c:38:f9:94:67: d2:86:7a:ef:ae:5d:17:c3:63:58:b3:de:49:50:8e:56:ae:5c: 82:6c:46:97:b5:5f:dd:d5:87:77:a0:51:e7:a2:4a:af:d1:57: ba:7d:a2:ad:64:df:76:ca:1b:d2:55:18:9d:44:d4:5d:46:1b: c5:32:9e:7c:f2:bb:5c:d0:02:d7:cd:cf:5c:36:63:9c:1d:01: f5:8f:9e:2e:2f:42:1a:f5:1a:4e:3e:14:b0:a6:78:bb:bb:46: f5:d3:c6:40:14:24:18:69:28:0c:08:14:aa:d3:29:1e:57:0c: f9:8d:29:10:80:f3:cc:1f:3b:67:aa:a4:84:73:19:d0:77:5a: 6f:ab:fe:f7:80:d8:d3:e9:93:85:cd:40:3c:b2:34:83:30:fa: 99:23:1a:50:df:63:a5:24:b9:2b:6f:d0:23:d7:f6:19:4a:88: 23:2e:1b:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKjtbkN+0HGM7a4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk MzQzNmU3M2EtYjU3ZC00OGE4LWEzNmYtY2ZmMzZlMmI3ODlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkip20tOhrB2rQHwPDa2eG09T1C1q/+7bsaMU sSbk0E4N99bGkiagJ2MCD1JL3hY8fIL1ZpBHN8uE7yc61BI5gHjND9CQS7p2+IRw fLejF3LNJ2E5xLbAzwYIdwmykYUBJ9Weu4IgNBMDn8rtb5m0r5QcoDzUjJ7nuCrh E35eptlRzq4mwiBMPIogYmTw/UqPVyPZ9BUFjQhH90TklWhrZUjPB1Y5U30ahql6 WaK9MtbyU1FHIcdoMjOa2e1iQWk5wyRxAigWrNC22Jm7rFslHBlfWiYH7bQo362u z9z6Bhxd57aIVi3efyIgIYSzzfK+TNL5B7IwZep13WGuVXNQsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGpp1NpjyWcF5l0REldXYvx+C6pHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMGI2NjUxZTMtOGJkOS0z MGNmLWI3ZjYtOGIyN2YwY2U1NjM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK0EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAj3HCbWZE42OL7hBMCqllCWmfT+FBS8kwJ/M3F2/UoiPPBwty6H1qN1 +DRs4qFva6S7x/Fhf6rHszz+3T058yPSEMB8+HlUIAY2DOxjaapkU837pr6cOPmU Z9KGeu+uXRfDY1iz3klQjlauXIJsRpe1X93Vh3egUeeiSq/RV7p9oq1k33bKG9JV GJ1E1F1GG8Uynnzyu1zQAtfNz1w2Y5wdAfWPni4vQhr1Gk4+FLCmeLu7RvXTxkAU JBhpKAwIFKrTKR5XDPmNKRCA88wfO2eqpIRzGdB3Wm+r/veA2NPpk4XNQDyyNIMw +pkjGlDfY6UkuStv0CPX9hlKiCMuGwI= -----END CERTIFICATE-----Generated at Fri Nov 22 02:10:58 2024 by rpki-client on console-fra.rpki-client.org