$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1f3c99bd-149e-3cc6-945a-edac122da832.roa File: 1f3c99bd-149e-3cc6-945a-edac122da832.roa (raw, json) Hash identifier: Ymwj7cJBoyAHWBXZoptu8lJ1YYO5GkpvM9x0VW85G+U= Subject key identifier: F1:3D:CF:8F:51:D3:70:EE:62:25:75:42:AE:47:08:FE:D5:64:AA:79 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285847E62ABED83EE9B6B27E8C4D00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1f3c99bd-149e-3cc6-945a-edac122da832.roa Signing time: Sat 16 Nov 2024 14:00:41 +0000 ROA not before: Sat 16 Nov 2024 14:00:41 +0000 ROA not after: Fri 14 Feb 2025 14:00:41 +0000 asID: 40306 IP address blocks: 72.173.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e6:2a:be:d8:3e:e9:b6:b2:7e:8c:4d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Nov 16 14:00:41 2024 GMT Not After : Feb 14 14:00:41 2025 GMT Subject: CN=54f812e0-0069-4885-8e68-83fa44e98004 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:0c:c3:ff:73:7c:95:c1:9e:23:84:5e:08:80: 3c:6c:47:3a:f0:1d:3b:58:d4:b7:5e:cc:10:b9:bd: 99:e4:0c:e3:0b:1e:81:3b:b3:54:ea:82:1b:f6:68: da:a0:1e:15:ed:c8:a4:84:05:f2:7d:2c:91:4f:dc: 2d:e0:bf:ad:fa:ad:45:d2:1c:26:7d:7f:15:29:59: cf:0a:1e:8f:34:b4:1b:4a:ac:db:c9:8e:83:3a:29: b7:0d:a3:69:0a:5d:58:21:08:8d:ca:0d:01:43:5a: 0c:ad:87:89:ea:70:e8:36:57:b5:be:c1:06:ad:e8: 1a:c5:e4:f2:6d:d0:b7:40:c5:3c:2d:38:1d:e4:df: bc:a9:7b:de:9f:43:7d:98:bf:40:e8:d9:9d:fc:28: 35:1f:5b:43:bc:fe:72:4d:97:14:e0:3c:08:8f:c5: 17:44:ea:4f:dd:1a:13:69:8b:02:27:35:36:e6:21: 9a:f0:aa:e5:84:ad:e7:dc:a8:6a:cc:98:27:9d:bf: 35:ad:b4:58:6b:48:33:b5:83:63:83:33:68:d4:58: 5c:9d:87:93:88:3b:6f:27:81:ae:76:5c:fb:a0:05: 8c:f2:42:29:65:c0:6f:d5:51:14:b5:7f:55:85:d9: b7:46:43:07:a1:b6:ee:48:7f:ab:e6:67:d1:21:e5: 8c:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:3D:CF:8F:51:D3:70:EE:62:25:75:42:AE:47:08:FE:D5:64:AA:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1f3c99bd-149e-3cc6-945a-edac122da832.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:be:73:19:29:2c:16:e1:1b:a9:f1:d6:d6:93:37:e6:65:9f: 09:3c:57:88:8a:26:a3:46:97:68:5e:dc:4b:9f:5e:3c:ea:8a: 0f:d7:ec:30:e7:14:45:4f:e7:bc:15:e1:94:f2:bd:9f:2e:fb: ea:a0:c4:3a:2d:ac:86:33:ab:4f:3c:1a:3f:44:e1:12:20:3b: 03:ab:fd:56:d5:b3:c1:5a:6c:19:55:2f:4f:01:18:80:d7:c7: 44:05:da:f0:77:6b:eb:8a:17:22:71:72:5f:f2:88:eb:76:3a: b4:e3:93:4f:af:bc:05:b8:6b:de:ac:b8:58:34:82:7c:08:b7: c4:df:da:cf:6a:dd:c8:d1:b7:32:6e:36:66:e6:66:2f:84:ce: 49:ae:55:b5:e7:83:72:46:23:c5:19:b0:dd:09:9f:09:35:35: c8:5a:f5:8b:9a:73:fc:8b:3b:07:cf:66:23:09:e8:2f:9e:96: 4e:a8:44:8e:03:da:dd:c9:04:4d:b4:a7:f5:20:db:8c:63:22: dd:c1:24:8c:23:22:a5:e0:e5:d1:32:7e:29:e7:bd:4d:dd:68: 78:bc:06:4b:ac:e5:b3:56:59:02:34:e2:a0:6f:64:30:61:1d: 48:04:6c:62:9a:16:fc:22:e9:67:cc:d6:93:9c:5f:e3:15:d4: 2d:b0:02:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKr7YPum2sn6MTQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk NTRmODEyZTAtMDA2OS00ODg1LThlNjgtODNmYTQ0ZTk4MDA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQzD/3N8lcGeI4ReCIA8bEc68B07WNS3XswQ ub2Z5AzjCx6BO7NU6oIb9mjaoB4V7cikhAXyfSyRT9wt4L+t+q1F0hwmfX8VKVnP Ch6PNLQbSqzbyY6DOim3DaNpCl1YIQiNyg0BQ1oMrYeJ6nDoNle1vsEGregaxeTy bdC3QMU8LTgd5N+8qXven0N9mL9A6Nmd/Cg1H1tDvP5yTZcU4DwIj8UXROpP3RoT aYsCJzU25iGa8KrlhK3n3KhqzJgnnb81rbRYa0gztYNjgzNo1FhcnYeTiDtvJ4Gu dlz7oAWM8kIpZcBv1VEUtX9Vhdm3RkMHobbuSH+r5mfRIeWMuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPE9z49R03DuYiV1Qq5HCP7VZKp5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMWYzYzk5YmQtMTQ5ZS0z Y2M2LTk0NWEtZWRhYzEyMmRhODMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSK3QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKa+cxkpLBbhG6nx1taTN+Zlnwk8V4iKJqNGl2he3EufXjzqig/X7DDn FEVP57wV4ZTyvZ8u++qgxDotrIYzq088Gj9E4RIgOwOr/VbVs8FabBlVL08BGIDX x0QF2vB3a+uKFyJxcl/yiOt2OrTjk0+vvAW4a96suFg0gnwIt8Tf2s9q3cjRtzJu NmbmZi+EzkmuVbXng3JGI8UZsN0Jnwk1Ncha9Yuac/yLOwfPZiMJ6C+elk6oRI4D 2t3JBE20p/Ug24xjIt3BJIwjIqXg5dEyfinnvU3daHi8Bkus5bNWWQI04qBvZDBh HUgEbGKaFvwi6WfM1pOcX+MV1C2wAqw= -----END CERTIFICATE-----Generated at Fri Nov 22 01:35:17 2024 by rpki-client on console-ams.rpki-client.org