$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0bfdc16a-2a28-3588-a708-5f7b555fc6bb.roa File: 0bfdc16a-2a28-3588-a708-5f7b555fc6bb.roa (raw, json) Hash identifier: MQibsm8ot6U1SvRTS8m+7LrM2EqPgkBuTxC9Ep0FgS8= Subject key identifier: 5B:45:FD:69:55:97:F3:53:E5:2E:28:5B:43:E7:49:5C:CA:10:E1:61 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285847E62AC00D49C99C4EC140AA00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0bfdc16a-2a28-3588-a708-5f7b555fc6bb.roa Signing time: Sat 16 Nov 2024 14:00:41 +0000 ROA not before: Sat 16 Nov 2024 14:00:41 +0000 ROA not after: Fri 14 Feb 2025 14:00:41 +0000 asID: 40306 IP address blocks: 72.173.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e6:2a:c0:0d:49:c9:9c:4e:c1:40:aa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Nov 16 14:00:41 2024 GMT Not After : Feb 14 14:00:41 2025 GMT Subject: CN=6c72eeae-44cd-4e0f-a95f-b9f7fe317466 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:7a:eb:89:0e:6a:de:ef:61:8a:19:32:1d:e2: 8b:4e:7b:cf:c2:3f:45:98:f3:44:8b:86:98:c5:33: d4:ac:3a:bd:97:cb:d7:d8:0d:58:1a:fb:47:c3:20: bb:1d:34:ca:77:70:53:bc:0f:97:5d:d1:27:2d:ab: 25:af:2f:80:66:9e:5c:02:b8:20:19:4f:0f:9c:06: 91:9b:ea:40:64:af:07:87:35:58:a9:df:31:6e:a4: a1:92:0a:48:2d:0a:d8:21:58:fa:80:b1:ad:ce:76: d3:67:64:ec:93:11:be:1e:d8:9f:72:80:6d:3b:9a: 78:15:fa:72:5d:91:37:7f:74:42:b7:78:61:f9:7e: 2a:fe:82:e8:08:ca:27:91:3b:41:f1:01:8c:31:c1: fc:e5:d0:e3:d1:ce:23:fc:bf:43:3b:79:8d:c9:bd: 75:1d:50:e7:d2:0f:8f:d9:43:6a:7f:50:3a:93:cb: fd:d9:4a:b1:de:04:c7:f3:92:c8:e3:ae:a0:ea:2e: a4:78:36:4d:d2:84:ae:3c:30:b0:4c:76:97:f3:02: bf:9e:97:b0:22:b6:09:62:04:d3:56:70:4b:3c:c6: b7:ae:0d:65:6d:6e:11:12:d5:61:d2:01:42:be:fe: 00:19:a7:bb:ec:e4:e9:42:1b:30:1d:e6:e7:da:b6: 21:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:45:FD:69:55:97:F3:53:E5:2E:28:5B:43:E7:49:5C:CA:10:E1:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0bfdc16a-2a28-3588-a708-5f7b555fc6bb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.210.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:05:7a:ad:07:c6:54:44:ef:07:b3:5f:5e:09:fe:3b:c4:49: 25:5e:84:48:d1:40:ed:cc:04:91:0c:3a:0b:e1:5a:14:b2:07: 0d:39:14:33:0d:63:42:71:14:f1:14:a5:68:6b:e7:98:77:19: 1e:82:52:77:a2:dc:80:62:e2:76:ce:f1:6c:1a:68:0b:94:a3: 8a:7e:0e:3a:7c:f6:4d:86:8a:92:32:ff:50:d8:f2:c6:dc:3a: 67:b8:14:af:78:58:ac:16:b2:58:73:32:31:d4:9e:b9:8d:5d: 8c:b9:d6:03:33:42:e0:0f:3c:34:77:b6:b8:d1:64:d1:87:84: 97:c3:71:f2:76:7c:ec:f7:b6:eb:29:19:10:92:49:2c:ee:be: 55:47:28:3e:9c:f9:87:a5:d7:c6:6f:eb:5c:3b:b5:08:f1:45: d2:5b:bc:b6:26:d2:0e:d6:20:85:94:91:4b:8f:65:b1:3b:e2: 9b:52:00:b5:08:d8:fd:c3:43:cc:b6:5d:d7:f2:71:90:ca:b1: e5:ee:99:14:5e:55:e3:a6:81:f2:cb:cc:0b:26:9a:5a:a0:4d: 68:b2:d5:f3:a6:2c:c7:c6:b3:63:d0:56:d0:05:49:fc:f7:63: 27:a0:5d:b4:26:f7:0b:49:40:a1:19:b7:b4:0e:38:10:ac:5f: 7b:34:65:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKsANScmcTsFAqgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk NmM3MmVlYWUtNDRjZC00ZTBmLWE5NWYtYjlmN2ZlMzE3NDY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg3rriQ5q3u9hihkyHeKLTnvPwj9FmPNEi4aY xTPUrDq9l8vX2A1YGvtHwyC7HTTKd3BTvA+XXdEnLaslry+AZp5cArggGU8PnAaR m+pAZK8HhzVYqd8xbqShkgpILQrYIVj6gLGtznbTZ2TskxG+HtifcoBtO5p4Ffpy XZE3f3RCt3hh+X4q/oLoCMonkTtB8QGMMcH85dDj0c4j/L9DO3mNyb11HVDn0g+P 2UNqf1A6k8v92Uqx3gTH85LI466g6i6keDZN0oSuPDCwTHaX8wK/npewIrYJYgTT VnBLPMa3rg1lbW4REtVh0gFCvv4AGae77OTpQhswHebn2rYhjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFtF/WlVl/NT5S4oW0PnSVzKEOFhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMGJmZGMxNmEtMmEyOC0z NTg4LWE3MDgtNWY3YjU1NWZjNmJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK3SMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADkFeq0HxlRE7wezX14J/jvESSVehEjRQO3MBJEMOgvhWhSyBw05FDMN Y0JxFPEUpWhr55h3GR6CUnei3IBi4nbO8WwaaAuUo4p+Djp89k2GipIy/1DY8sbc Ome4FK94WKwWslhzMjHUnrmNXYy51gMzQuAPPDR3trjRZNGHhJfDcfJ2fOz3tusp GRCSSSzuvlVHKD6c+Yel18Zv61w7tQjxRdJbvLYm0g7WIIWUkUuPZbE74ptSALUI 2P3DQ8y2XdfycZDKseXumRReVeOmgfLLzAsmmlqgTWiy1fOmLMfGs2PQVtAFSfz3 YyegXbQm9wtJQKEZt7QOOBCsX3s0Zag= -----END CERTIFICATE-----Generated at Fri Nov 22 02:10:58 2024 by rpki-client on console-fra.rpki-client.org