$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/25ffd5c2-35f4-3ecb-9557-6964354a7797.roa File: 25ffd5c2-35f4-3ecb-9557-6964354a7797.roa (raw, json) Hash identifier: mtlotPBoi1nRbZvVYbdzubpeMhYjPaK1vHkfXyGnaGQ= Subject key identifier: 42:8F:42:00:6B:7B:11:65:EE:1A:01:79:B3:16:0F:F2:CF:28:9B:16 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285847E62A41BF9E4736DF2A6DF2A8 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/25ffd5c2-35f4-3ecb-9557-6964354a7797.roa Signing time: Sat 16 Nov 2024 14:00:41 +0000 ROA not before: Sat 16 Nov 2024 14:00:41 +0000 ROA not after: Fri 14 Feb 2025 14:00:41 +0000 asID: 7155 IP address blocks: 72.173.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e6:2a:41:bf:9e:47:36:df:2a:6d:f2:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Nov 16 14:00:41 2024 GMT Not After : Feb 14 14:00:41 2025 GMT Subject: CN=0042b262-cf8f-41fd-9bdc-2a91d7b9b305 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:cb:db:d6:d9:e3:95:9a:31:4c:a4:e0:5a:85: 50:8e:35:69:a0:f1:2d:0f:ea:af:3b:5a:77:8a:da: e2:84:b7:9d:e3:36:47:a8:73:5c:68:95:dc:31:88: 15:75:2d:a4:bc:ae:0f:7b:ab:e0:95:11:36:e1:db: 64:31:ce:14:0f:7c:8f:65:94:45:9b:e1:0c:49:7f: c7:1f:59:25:99:d1:a2:8f:0e:79:c5:1f:27:16:ba: 79:1d:ec:6a:d7:bd:02:76:a1:63:81:79:47:fa:6f: a0:5c:c4:31:37:28:0b:7e:8a:80:9f:ec:51:99:1c: 0d:0f:a9:b6:44:9d:35:8b:31:f5:09:7d:ba:bc:72: da:ca:2f:b7:73:50:c2:de:93:27:fa:e2:9d:ba:ef: 69:53:3b:6d:14:0e:94:56:f4:d1:97:6a:b4:f8:f4: 60:b6:11:38:73:c6:14:68:63:7e:06:d8:79:a4:de: e9:fd:48:6a:3a:da:84:00:56:23:e5:b7:84:cb:13: 3c:86:d3:12:4c:7d:6c:9d:ba:70:38:cc:0f:da:e0: 71:6e:e2:2a:f3:07:82:68:e6:bb:9b:49:28:3d:05: c8:f0:88:91:55:fe:7b:41:f8:fa:39:a2:15:47:df: 16:ec:51:c0:28:cf:6c:8f:d1:a3:e9:ba:05:bd:b3: c2:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:8F:42:00:6B:7B:11:65:EE:1A:01:79:B3:16:0F:F2:CF:28:9B:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/25ffd5c2-35f4-3ecb-9557-6964354a7797.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:d1:2d:1d:7b:2f:f0:99:0f:cd:34:da:e0:b6:36:c6:1a:ee: ec:fb:5e:fb:36:a0:d5:4c:ad:84:30:ca:9b:ef:8c:bc:3c:4e: bb:52:32:2a:8a:bc:0d:bc:37:fc:26:51:42:b3:fd:99:14:aa: 5a:b6:d2:1d:00:8a:71:2f:2c:ef:3a:f7:34:d6:c3:39:b2:08: b0:29:1a:0c:9c:f3:a2:d0:3a:a9:a3:3c:69:2a:0f:43:64:c1: 51:13:f5:19:0b:39:14:4a:f2:c0:ec:c1:3d:1e:3b:f3:17:4a: b3:ef:4d:8a:34:2c:41:54:30:12:c7:9d:e7:4f:71:8a:29:f9: b7:bd:9d:b1:b1:cd:9a:d0:25:c2:4f:23:9a:53:e6:16:20:4a: ab:25:83:7f:23:fc:e6:01:ef:61:bf:93:a7:65:20:f4:87:97: 35:c7:6e:bd:72:a5:27:75:d2:8a:a4:c3:7f:59:6b:9e:4b:b2: 41:d0:cb:a7:f0:32:21:61:43:bc:08:53:d1:fc:4d:26:9e:45: f8:f4:0a:aa:07:58:03:26:55:8d:71:42:8e:b7:06:21:ad:1a: 60:6e:1c:2a:fe:b2:28:40:ad:8f:19:12:35:7f:97:76:db:69: cc:41:71:7a:55:80:ad:1e:73:5d:17:59:91:bb:8b:30:61:8b: 46:b2:2f:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKkG/nkc23ypt8qgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk MDA0MmIyNjItY2Y4Zi00MWZkLTliZGMtMmE5MWQ3YjliMzA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg8vb1tnjlZoxTKTgWoVQjjVpoPEtD+qvO1p3 itrihLed4zZHqHNcaJXcMYgVdS2kvK4Pe6vglRE24dtkMc4UD3yPZZRFm+EMSX/H H1klmdGijw55xR8nFrp5Hexq170CdqFjgXlH+m+gXMQxNygLfoqAn+xRmRwND6m2 RJ01izH1CX26vHLayi+3c1DC3pMn+uKduu9pUzttFA6UVvTRl2q0+PRgthE4c8YU aGN+Bth5pN7p/UhqOtqEAFYj5beEyxM8htMSTH1snbpwOMwP2uBxbuIq8weCaOa7 m0koPQXI8IiRVf57Qfj6OaIVR98W7FHAKM9sj9Gj6boFvbPCLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEKPQgBrexFl7hoBebMWD/LPKJsWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMjVmZmQ1YzItMzVmNC0z ZWNiLTk1NTctNjk2NDM1NGE3Nzk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK3ZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKTRLR17L/CZD8002uC2NsYa7uz7Xvs2oNVMrYQwypvvjLw8TrtSMiqK vA28N/wmUUKz/ZkUqlq20h0AinEvLO869zTWwzmyCLApGgyc86LQOqmjPGkqD0Nk wVET9RkLORRK8sDswT0eO/MXSrPvTYo0LEFUMBLHnedPcYop+be9nbGxzZrQJcJP I5pT5hYgSqslg38j/OYB72G/k6dlIPSHlzXHbr1ypSd10oqkw39Za55LskHQy6fw MiFhQ7wIU9H8TSaeRfj0CqoHWAMmVY1xQo63BiGtGmBuHCr+sihArY8ZEjV/l3bb acxBcXpVgK0ec10XWZG7izBhi0ayL7A= -----END CERTIFICATE-----Generated at Fri Nov 22 02:11:10 2024 by rpki-client on console-fra.rpki-client.org