$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/38432c1c-cf0c-3467-9f51-62e4ba11f084.roa File: 38432c1c-cf0c-3467-9f51-62e4ba11f084.roa (raw, json) Hash identifier: 3Hpv0ZaTb41cWMy+iMDLEdOjtcImKoJdSVtSqcsLAsM= Subject key identifier: 5B:0D:8A:77:20:10:A5:54:8F:7D:5E:93:34:18:EC:B2:93:9C:18:C1 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285847E62A4181DA285A277F0B4200 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/38432c1c-cf0c-3467-9f51-62e4ba11f084.roa Signing time: Sat 16 Nov 2024 14:00:41 +0000 ROA not before: Sat 16 Nov 2024 14:00:41 +0000 ROA not after: Fri 14 Feb 2025 14:00:41 +0000 asID: 7155 IP address blocks: 72.173.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e6:2a:41:81:da:28:5a:27:7f:0b:42:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Nov 16 14:00:41 2024 GMT Not After : Feb 14 14:00:41 2025 GMT Subject: CN=58071a65-5550-4d8f-bd48-a86433ff2fa3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:aa:58:fc:3c:21:9e:b0:5e:54:47:2f:7c:18: 6d:de:f9:1c:fe:7b:c2:51:4a:bc:a1:e8:f7:8c:75: f6:d8:52:aa:d4:0f:7f:52:01:0c:9d:4c:67:a5:30: b7:73:44:87:7d:97:80:1e:71:7a:42:7b:67:b4:37: a2:7c:1a:f1:3a:68:d4:00:80:fc:45:0d:96:68:09: 44:3a:7c:ae:85:48:50:49:18:17:9c:34:e7:ff:37: 55:74:e5:e9:f8:01:b2:3d:8f:ae:e7:30:05:c9:c0: d8:2b:0e:11:e1:a1:a1:10:a3:58:af:10:2c:57:f4: 4f:3a:0d:f8:61:60:2f:3c:b2:c5:e1:43:ee:d4:a5: bf:00:e8:ed:de:74:66:54:7c:c1:7d:dc:d1:8b:a7: 1d:24:30:8b:43:5d:0c:75:be:1e:b9:c8:da:67:97: b9:63:59:6b:39:db:ae:17:5d:19:61:1c:b9:5d:72: cd:04:1b:20:0b:4e:0f:91:db:22:6f:10:2f:a4:3b: 0b:96:bb:3e:1a:ff:f3:8f:17:35:ca:fb:c5:bb:63: 41:f2:b2:d3:f6:44:89:e2:89:f9:27:9f:1a:3e:26: d7:1c:3a:a8:17:6a:ee:4c:f9:80:03:18:4a:2b:0f: a7:21:ed:a9:48:44:5a:6b:56:d5:e2:cc:95:c7:a1: bf:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:0D:8A:77:20:10:A5:54:8F:7D:5E:93:34:18:EC:B2:93:9C:18:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/38432c1c-cf0c-3467-9f51-62e4ba11f084.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.205.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:50:0e:53:8d:36:70:ca:0c:88:3d:6d:46:84:6f:16:29:b1: dc:c7:10:d1:a1:82:39:b9:26:ed:4e:f4:ff:57:f1:01:a0:0f: ff:d1:91:1a:56:70:74:e5:49:81:a2:bf:42:6a:75:82:fb:d5: 4a:c5:d9:7b:ce:f3:62:64:f7:fb:63:20:70:eb:a8:f8:36:d7: 52:fd:ca:f8:a8:f1:e2:e5:7b:50:cd:bc:6e:1f:76:f0:55:02: ab:0d:ff:60:46:60:56:ec:f2:18:19:4a:53:8a:53:4c:50:1f: 25:92:b3:b1:2b:d1:f5:87:f1:9e:7f:2f:fb:9d:d2:0e:ae:33: e4:b9:56:38:06:9b:74:02:b0:29:9c:c5:03:f6:21:ca:24:da: 9c:36:2f:a8:ed:d9:df:86:7b:af:5f:53:d3:70:9a:c5:bc:12: a8:f8:84:54:0f:a1:5a:68:15:25:a7:c0:02:11:e1:38:96:15: 4e:3c:88:98:4c:33:64:71:a8:d3:33:d9:a5:51:e1:a8:1e:38: ee:33:93:56:13:ea:f6:19:0b:24:2e:3b:b1:0b:54:17:1f:66: cb:8a:b2:49:21:3e:60:9a:e2:28:08:7c:fe:7f:02:a1:49:a6: e0:1e:f8:a2:af:76:62:45:4f:ed:fa:c8:e1:af:d1:e0:30:78: 88:a9:d5:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKkGB2ihaJ38LQgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk NTgwNzFhNjUtNTU1MC00ZDhmLWJkNDgtYTg2NDMzZmYyZmEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqpY/DwhnrBeVEcvfBht3vkc/nvCUUq8oej3 jHX22FKq1A9/UgEMnUxnpTC3c0SHfZeAHnF6QntntDeifBrxOmjUAID8RQ2WaAlE OnyuhUhQSRgXnDTn/zdVdOXp+AGyPY+u5zAFycDYKw4R4aGhEKNYrxAsV/RPOg34 YWAvPLLF4UPu1KW/AOjt3nRmVHzBfdzRi6cdJDCLQ10Mdb4eucjaZ5e5Y1lrOduu F10ZYRy5XXLNBBsgC04PkdsibxAvpDsLlrs+Gv/zjxc1yvvFu2NB8rLT9kSJ4on5 J58aPibXHDqoF2ruTPmAAxhKKw+nIe2pSERaa1bV4syVx6G/LwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFsNincgEKVUj31ekzQY7LKTnBjBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMzg0MzJjMWMtY2YwYy0z NDY3LTlmNTEtNjJlNGJhMTFmMDg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK3NMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEdQDlONNnDKDIg9bUaEbxYpsdzHENGhgjm5Ju1O9P9X8QGgD//RkRpW cHTlSYGiv0JqdYL71UrF2XvO82Jk9/tjIHDrqPg211L9yvio8eLle1DNvG4fdvBV AqsN/2BGYFbs8hgZSlOKU0xQHyWSs7Er0fWH8Z5/L/ud0g6uM+S5VjgGm3QCsCmc xQP2Icok2pw2L6jt2d+Ge69fU9NwmsW8Eqj4hFQPoVpoFSWnwAIR4TiWFU48iJhM M2RxqNMz2aVR4ageOO4zk1YT6vYZCyQuO7ELVBcfZsuKskkhPmCa4igIfP5/AqFJ puAe+KKvdmJFT+36yOGv0eAweIip1fg= -----END CERTIFICATE-----Generated at Fri Nov 22 01:35:34 2024 by rpki-client on console-ams.rpki-client.org