$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3e0fa426-4839-30f6-88f3-9ebeac59596d.roa File: 3e0fa426-4839-30f6-88f3-9ebeac59596d.roa (raw, json) Hash identifier: KjmdnSysr9Aubvbj5mwM6Rx8plJG2Fm2jzadPfbQTC8= Subject key identifier: 72:C0:12:73:18:2C:60:71:0C:9C:62:73:B4:A5:4F:7E:0B:BA:EA:FD Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285847E62AD3F2D29494F3543998A0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3e0fa426-4839-30f6-88f3-9ebeac59596d.roa Signing time: Sat 16 Nov 2024 14:00:41 +0000 ROA not before: Sat 16 Nov 2024 14:00:41 +0000 ROA not after: Fri 14 Feb 2025 14:00:41 +0000 asID: 7155 IP address blocks: 72.173.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e6:2a:d3:f2:d2:94:94:f3:54:39:98:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Nov 16 14:00:41 2024 GMT Not After : Feb 14 14:00:41 2025 GMT Subject: CN=95322801-e15d-4a33-b358-4d89978fb2f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:80:da:1f:cc:16:4b:70:d9:73:b3:3f:27:5e: 56:2e:7a:c5:2b:91:b8:fd:16:13:ab:17:53:0b:0f: 73:9f:7d:57:06:ee:c2:b7:44:80:14:54:02:1f:63: 42:69:cd:d6:c3:c3:3d:76:de:40:e3:1b:37:f4:97: d3:e4:5b:d6:7c:01:f9:99:e7:e5:b7:ec:a5:21:5c: 8c:36:ee:ea:6a:4d:f7:13:e4:2f:04:bc:4e:02:a8: 8b:b4:2f:48:5a:e2:db:3a:75:0c:bd:c4:11:8d:28: 93:53:7c:9f:17:62:5d:3d:bd:6e:fd:be:89:d8:f9: 76:ca:af:7b:6b:3e:bc:31:76:51:8f:33:e2:83:e1: 5f:a8:10:04:67:73:ee:6f:37:d6:09:1d:83:4d:62: 14:db:7e:e4:6b:e9:c0:d0:ef:9a:40:70:00:20:43: 08:39:ea:25:aa:b3:cd:65:c2:5e:7d:34:71:1b:eb: 3e:49:19:28:86:f6:01:19:d5:e1:93:b4:99:62:25: 3b:8d:84:44:0b:ea:1a:9d:35:0f:18:b7:bb:06:23: fd:a7:e9:3a:98:ea:73:56:7d:f7:3a:bb:f6:ef:46: e9:81:7b:65:1f:f0:10:8b:50:df:d4:1c:70:33:8b: 36:74:b9:52:0a:8c:e8:d4:9e:25:eb:10:ba:fb:3d: 20:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:C0:12:73:18:2C:60:71:0C:9C:62:73:B4:A5:4F:7E:0B:BA:EA:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3e0fa426-4839-30f6-88f3-9ebeac59596d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:5c:c7:b9:48:25:8c:5a:fb:5d:bd:5b:4c:ff:5d:4f:22:b3: 30:87:b3:6d:47:5e:aa:fb:fd:31:22:4e:1b:1c:11:a7:a7:e3: fb:6f:88:0c:33:72:f2:69:78:af:9a:33:9f:15:90:70:2e:3b: a7:3e:a1:dc:5c:7f:94:2d:a8:85:09:d1:02:f7:92:3b:fe:a7: a9:e5:53:6a:f5:56:02:a7:1e:f4:dd:10:49:90:7c:74:d5:3e: 83:95:73:5b:5b:24:f6:01:33:ea:37:21:52:0d:a3:03:2e:b1: 30:33:1d:93:e2:64:fb:11:bc:14:27:72:30:2d:ba:3c:8f:e0: 9d:ea:38:4b:90:44:52:82:93:6d:1a:f0:d9:83:74:fa:89:23: d1:ed:6c:59:10:98:e4:11:4f:b7:1f:e1:f7:45:33:d5:1b:36: 8e:e6:2c:c7:c5:68:81:d5:6e:22:76:99:7a:10:0b:07:92:07: 41:c5:9c:ec:a7:b3:4c:91:76:bb:48:28:a7:df:fe:91:e1:f1: 92:13:40:27:e5:82:27:70:1f:78:00:84:4e:44:64:6d:ae:52: 28:c8:c4:33:ff:5c:ef:34:3d:a2:5d:d4:88:c7:6b:00:86:a4: 23:b8:55:8e:5f:09:c2:a1:f0:9a:8a:e4:30:4a:b1:bf:e8:aa: 46:c7:6e:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKtPy0pSU81Q5mKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk OTUzMjI4MDEtZTE1ZC00YTMzLWIzNTgtNGQ4OTk3OGZiMmY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIDaH8wWS3DZc7M/J15WLnrFK5G4/RYTqxdT Cw9zn31XBu7Ct0SAFFQCH2NCac3Ww8M9dt5A4xs39JfT5FvWfAH5meflt+ylIVyM Nu7qak33E+QvBLxOAqiLtC9IWuLbOnUMvcQRjSiTU3yfF2JdPb1u/b6J2Pl2yq97 az68MXZRjzPig+FfqBAEZ3PubzfWCR2DTWIU237ka+nA0O+aQHAAIEMIOeolqrPN ZcJefTRxG+s+SRkohvYBGdXhk7SZYiU7jYREC+oanTUPGLe7BiP9p+k6mOpzVn33 Orv270bpgXtlH/AQi1Df1BxwM4s2dLlSCozo1J4l6xC6+z0glwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHLAEnMYLGBxDJxic7SlT34Luur9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvM2UwZmE0MjYtNDgzOS0z MGY2LTg4ZjMtOWViZWFjNTk1OTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK36MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADNcx7lIJYxa+129W0z/XU8iszCHs21HXqr7/TEiThscEaen4/tviAwz cvJpeK+aM58VkHAuO6c+odxcf5QtqIUJ0QL3kjv+p6nlU2r1VgKnHvTdEEmQfHTV PoOVc1tbJPYBM+o3IVINowMusTAzHZPiZPsRvBQncjAtujyP4J3qOEuQRFKCk20a 8NmDdPqJI9HtbFkQmOQRT7cf4fdFM9UbNo7mLMfFaIHVbiJ2mXoQCweSB0HFnOyn s0yRdrtIKKff/pHh8ZITQCflgidwH3gAhE5EZG2uUijIxDP/XO80PaJd1IjHawCG pCO4VY5fCcKh8JqK5DBKsb/oqkbHbjM= -----END CERTIFICATE-----Generated at Mon Nov 25 01:03:04 2024 by rpki-client on console-ams.rpki-client.org