$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2d0094d1-a63d-34a6-b180-d7ffbbb6b6ed.roa File: 2d0094d1-a63d-34a6-b180-d7ffbbb6b6ed.roa (raw, json) Hash identifier: i0cN+agRTAM8em982dYHKGsibERGqgISl6WHr6lOdz0= Subject key identifier: 5A:C5:6A:09:48:6C:13:3C:06:EB:D5:25:C3:B0:02:16:1A:89:23:72 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285847E62ACE400EE89594D9613080 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2d0094d1-a63d-34a6-b180-d7ffbbb6b6ed.roa Signing time: Sat 16 Nov 2024 14:00:41 +0000 ROA not before: Sat 16 Nov 2024 14:00:41 +0000 ROA not after: Fri 14 Feb 2025 14:00:41 +0000 asID: 7155 IP address blocks: 72.173.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e6:2a:ce:40:0e:e8:95:94:d9:61:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Nov 16 14:00:41 2024 GMT Not After : Feb 14 14:00:41 2025 GMT Subject: CN=43f3e6f2-7a09-4cf7-8b0a-8a2b1614cbcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:cd:b5:b7:b2:3a:67:92:86:6f:54:83:4d:2d: f0:25:f5:d9:ba:a1:05:b7:ef:31:77:1a:70:68:3b: b1:8c:cf:de:a4:75:dc:52:64:9f:14:0c:ca:43:12: 76:00:ac:80:87:5b:28:71:51:6c:cb:1a:4f:09:bc: 2d:13:62:c3:78:ad:95:32:c3:71:ad:5f:d6:25:cc: 87:de:2e:29:b3:2f:6a:3d:c9:89:4a:85:f9:15:a9: 64:62:2c:98:24:fd:33:4e:26:92:14:a8:f9:e3:c6: 15:b2:4c:be:e8:b0:6a:86:59:a8:81:db:13:a7:33: 28:5e:15:34:cd:62:ad:a4:86:f8:ad:a3:9e:0f:73: 2c:67:51:25:3f:9b:b0:ec:fb:40:ec:45:54:a4:21: 27:e4:6b:6b:89:8a:47:f3:9d:06:6d:a2:95:ed:ad: d2:54:1a:d8:ea:cd:73:8f:98:8c:36:7b:e6:64:6e: 50:11:46:93:65:d4:b0:cf:26:37:5c:63:c2:52:8a: f2:d1:db:32:9d:3b:a1:7f:7d:2f:1c:dd:ef:8c:5f: 0d:1f:97:c9:07:9d:26:c2:39:0f:95:97:86:cf:4e: cc:e0:21:88:e4:6f:e2:29:cf:0f:42:0d:0b:a0:e3: 51:b1:59:d0:07:9c:ca:4a:42:be:b0:94:82:f0:57: 52:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:C5:6A:09:48:6C:13:3C:06:EB:D5:25:C3:B0:02:16:1A:89:23:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2d0094d1-a63d-34a6-b180-d7ffbbb6b6ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:34:3a:93:83:df:51:08:e1:1e:0e:d9:05:cc:ef:49:81:06: f9:d0:eb:f4:b4:a0:f1:14:5a:df:cb:8a:67:57:e6:3a:b1:6c: 4a:27:4c:6f:c0:c4:44:7d:b3:e9:4f:49:5c:ba:25:33:ec:b8: ff:ea:6e:19:55:80:bd:b4:c2:66:a2:b1:2f:58:b4:58:39:d0: 5d:bd:60:32:f2:cc:35:8d:4c:d2:35:d3:c7:67:39:5e:6d:6c: 78:7a:a6:c9:85:4d:c4:b9:a2:68:81:13:0c:b9:04:bb:f8:2d: fa:90:d9:86:df:89:d4:12:30:90:8e:b5:20:1c:93:7c:9d:c4: e2:32:02:dd:80:1d:4e:71:3d:91:9d:a2:0e:0b:2a:ff:af:a4: c2:49:6c:a9:a3:16:28:26:7d:3c:7d:06:c4:bc:43:62:bc:2a: cf:3c:5e:84:71:17:bb:d5:b6:2c:7e:d4:2b:04:0f:db:fc:b4: af:c4:d5:ee:16:b4:d6:93:75:0c:39:ac:de:28:07:48:80:49: 75:16:60:ca:07:bb:9a:6d:85:97:97:da:2f:1c:45:ca:ff:49: f7:30:28:12:06:ac:8b:43:43:90:a4:bf:18:ba:99:06:18:5a: e0:43:f6:3f:8a:89:7c:20:d4:74:97:b2:87:b0:23:d7:20:74: ad:ce:a6:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKs5ADuiVlNlhMIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk NDNmM2U2ZjItN2EwOS00Y2Y3LThiMGEtOGEyYjE2MTRjYmNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv821t7I6Z5KGb1SDTS3wJfXZuqEFt+8xdxpw aDuxjM/epHXcUmSfFAzKQxJ2AKyAh1socVFsyxpPCbwtE2LDeK2VMsNxrV/WJcyH 3i4psy9qPcmJSoX5FalkYiyYJP0zTiaSFKj548YVsky+6LBqhlmogdsTpzMoXhU0 zWKtpIb4raOeD3MsZ1ElP5uw7PtA7EVUpCEn5GtriYpH850GbaKV7a3SVBrY6s1z j5iMNnvmZG5QEUaTZdSwzyY3XGPCUory0dsynTuhf30vHN3vjF8NH5fJB50mwjkP lZeGz07M4CGI5G/iKc8PQg0LoONRsVnQB5zKSkK+sJSC8FdSjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFrFaglIbBM8BuvVJcOwAhYaiSNyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMmQwMDk0ZDEtYTYzZC0z NGE2LWIxODAtZDdmZmJiYjZiNmVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK0DMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE00OpOD31EI4R4O2QXM70mBBvnQ6/S0oPEUWt/LimdX5jqxbEonTG/A xER9s+lPSVy6JTPsuP/qbhlVgL20wmaisS9YtFg50F29YDLyzDWNTNI108dnOV5t bHh6psmFTcS5omiBEwy5BLv4LfqQ2YbfidQSMJCOtSAck3ydxOIyAt2AHU5xPZGd og4LKv+vpMJJbKmjFigmfTx9BsS8Q2K8Ks88XoRxF7vVtix+1CsED9v8tK/E1e4W tNaTdQw5rN4oB0iASXUWYMoHu5pthZeX2i8cRcr/SfcwKBIGrItDQ5Ckvxi6mQYY WuBD9j+KiXwg1HSXsoewI9cgdK3Oprc= -----END CERTIFICATE-----Generated at Fri Nov 22 01:35:26 2024 by rpki-client on console-ams.rpki-client.org