$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/19a62d2b-da55-3be0-b433-46859e2a5d3e.roa File: 19a62d2b-da55-3be0-b433-46859e2a5d3e.roa (raw, json) Hash identifier: UxxRhuwJ4LBgLlfMOx9pVymYoTTF9r1hG1CYYs8cB64= Subject key identifier: 42:E4:D7:10:60:D8:76:67:DD:6A:23:69:A1:58:5B:C5:31:C0:BA:07 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285847E62AD06E6D758FFCC23FC800 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/19a62d2b-da55-3be0-b433-46859e2a5d3e.roa Signing time: Sat 16 Nov 2024 14:00:41 +0000 ROA not before: Sat 16 Nov 2024 14:00:41 +0000 ROA not after: Fri 14 Feb 2025 14:00:41 +0000 asID: 7155 IP address blocks: 72.173.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e6:2a:d0:6e:6d:75:8f:fc:c2:3f:c8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Nov 16 14:00:41 2024 GMT Not After : Feb 14 14:00:41 2025 GMT Subject: CN=11812989-6b9b-4baa-9587-79da5c20e57f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:e4:33:e4:b4:72:79:cd:1a:a1:22:c3:e0:bf: 8e:94:e2:e6:93:d4:1c:ce:2e:74:5b:aa:fa:db:1e: 49:bd:74:91:af:98:72:56:6a:f6:6d:af:a9:ec:48: 28:00:2e:7a:66:2d:f5:92:51:76:4f:3c:0c:4c:c4: cd:19:ee:63:6b:bc:b1:3c:a3:73:ae:1a:15:fd:6d: 15:51:35:9b:00:f1:0f:9a:03:a9:bc:bc:dd:2e:25: ac:92:ab:d9:da:04:6e:ff:16:be:ef:cd:8a:c7:ec: a2:2a:ba:52:f0:31:46:61:45:66:d9:fa:06:1b:b5: 30:df:f5:cd:80:e0:8e:a7:00:18:67:75:9e:19:0d: 27:70:42:14:e2:c2:57:d3:29:34:c4:b7:b6:d3:37: e7:74:6a:d4:39:fe:77:1f:77:07:9a:a5:0c:f6:08: 10:00:f4:5f:c5:a3:a7:0e:d9:00:0c:c4:2e:8b:48: b3:d2:26:30:75:15:2e:85:de:77:52:35:31:bc:f7: 02:f2:c0:5c:60:46:6d:35:15:50:03:d3:40:ca:9a: 96:c6:e5:8a:6b:04:44:bf:7e:6e:70:94:d4:bd:4e: 4d:e7:65:00:21:48:85:f6:7f:d7:8d:92:36:e3:ac: 38:49:9c:fa:93:ef:27:43:02:4d:c9:f4:50:2a:3d: a5:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:E4:D7:10:60:D8:76:67:DD:6A:23:69:A1:58:5B:C5:31:C0:BA:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/19a62d2b-da55-3be0-b433-46859e2a5d3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:c3:1c:01:36:89:e6:22:51:5d:0e:62:eb:31:6c:ac:c2:f3: fd:3f:3b:8b:66:f4:4d:e2:10:3e:90:d7:b6:ae:b1:1f:95:5f: 17:6d:6a:86:5a:0e:7f:6c:dd:41:a1:27:8e:21:04:f7:79:b2: 36:fb:8d:76:a3:15:33:76:29:8b:21:06:cc:94:8c:89:ac:be: 82:c5:c5:e2:5d:8b:bc:c9:bf:b0:89:8d:d4:f7:60:1b:77:c7: 86:cc:b0:f6:d4:4d:2a:80:e8:90:89:d0:21:6c:a0:29:33:e6: 32:fa:97:9f:47:b4:80:79:5c:b0:8f:75:05:99:f5:32:47:d4: 63:c9:a3:fc:c6:4c:1a:b0:c5:f9:cd:2c:ed:8a:e1:4e:65:23: aa:59:99:cc:44:da:37:1d:db:42:c8:b6:5a:51:63:1f:46:90: 66:40:28:7a:4f:7d:bf:5f:36:53:59:b5:3e:3d:2a:23:c9:09: ef:8f:33:ff:0a:1f:50:a2:13:a2:b2:6a:0b:13:6e:3d:fc:e0: 6c:02:05:51:f7:9c:a7:e3:01:35:22:01:8c:9a:e1:a1:90:31: 03:04:5d:90:ea:59:01:92:63:55:6e:b8:1f:99:ac:3f:28:02: b1:55:7f:0f:97:77:d8:59:dc:30:3b:d1:f0:df:83:56:6e:29: ba:11:7f:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKtBubXWP/MI/yAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk MTE4MTI5ODktNmI5Yi00YmFhLTk1ODctNzlkYTVjMjBlNTdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAluQz5LRyec0aoSLD4L+OlOLmk9Qczi50W6r6 2x5JvXSRr5hyVmr2ba+p7EgoAC56Zi31klF2TzwMTMTNGe5ja7yxPKNzrhoV/W0V UTWbAPEPmgOpvLzdLiWskqvZ2gRu/xa+782Kx+yiKrpS8DFGYUVm2foGG7Uw3/XN gOCOpwAYZ3WeGQ0ncEIU4sJX0yk0xLe20zfndGrUOf53H3cHmqUM9ggQAPRfxaOn DtkADMQui0iz0iYwdRUuhd53UjUxvPcC8sBcYEZtNRVQA9NAypqWxuWKawREv35u cJTUvU5N52UAIUiF9n/XjZI246w4SZz6k+8nQwJNyfRQKj2lMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFELk1xBg2HZn3WojaaFYW8UxwLoHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMTlhNjJkMmItZGE1NS0z YmUwLWI0MzMtNDY4NTllMmE1ZDNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK11MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA7DHAE2ieYiUV0OYusxbKzC8/0/O4tm9E3iED6Q17ausR+VXxdtaoZa Dn9s3UGhJ44hBPd5sjb7jXajFTN2KYshBsyUjImsvoLFxeJdi7zJv7CJjdT3YBt3 x4bMsPbUTSqA6JCJ0CFsoCkz5jL6l59HtIB5XLCPdQWZ9TJH1GPJo/zGTBqwxfnN LO2K4U5lI6pZmcxE2jcd20LItlpRYx9GkGZAKHpPfb9fNlNZtT49KiPJCe+PM/8K H1CiE6KyagsTbj384GwCBVH3nKfjATUiAYya4aGQMQMEXZDqWQGSY1VuuB+ZrD8o ArFVfw+Xd9hZ3DA70fDfg1ZuKboRf0w= -----END CERTIFICATE-----Generated at Fri Nov 22 02:11:04 2024 by rpki-client on console-fra.rpki-client.org