$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/40420dc4-9d4c-3850-9245-08633abd44d4.roa File: 40420dc4-9d4c-3850-9245-08633abd44d4.roa (raw, json) Hash identifier: KZ0DZg9VphSA50BIylxy5GyVWMgKhAFcjjFQuPyxohE= Subject key identifier: 76:3E:A8:03:3B:92:EB:98:C6:8E:10:85:05:2D:3D:25:1B:CA:4D:08 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285847E62AD1E0A8B06CA0BDBDD940 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/40420dc4-9d4c-3850-9245-08633abd44d4.roa Signing time: Sat 16 Nov 2024 14:00:41 +0000 ROA not before: Sat 16 Nov 2024 14:00:41 +0000 ROA not after: Fri 14 Feb 2025 14:00:41 +0000 asID: 7155 IP address blocks: 72.173.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e6:2a:d1:e0:a8:b0:6c:a0:bd:bd:d9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Nov 16 14:00:41 2024 GMT Not After : Feb 14 14:00:41 2025 GMT Subject: CN=5a783039-a333-4e30-930c-680540994bf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:d4:b2:fe:ea:e3:41:aa:0d:b3:e8:f0:7e:2d: ce:32:27:33:47:90:aa:2d:64:7b:b2:d3:af:4f:ce: 3f:af:b0:47:af:43:00:30:56:ca:0c:06:6f:db:d4: cf:ad:07:e5:1e:cc:ea:30:79:09:8a:02:ab:74:44: 29:07:6a:97:02:3e:b5:0f:50:35:ef:5b:36:11:a2: 72:ac:1e:07:ca:85:09:d4:95:62:64:e0:44:a6:cb: d5:ca:48:da:8b:aa:42:f0:b1:f9:98:e9:5a:56:eb: 1a:62:ad:4d:0b:85:21:7e:c8:5e:0c:be:42:97:4f: 9a:97:52:81:6c:e3:f7:68:02:b4:fd:77:f7:91:aa: 1e:f9:30:a5:40:e0:9b:47:a4:49:72:a9:01:62:40: f5:c7:3d:1b:6a:cc:3d:3d:2a:34:4e:f3:89:71:3b: 1e:eb:5d:1c:ad:c0:5a:7d:b3:53:bf:9e:a3:d8:ad: 89:38:15:fc:91:00:69:7e:b4:22:86:4c:b9:a2:35: af:4e:89:05:95:28:bb:b6:ad:b1:f0:24:89:d4:9f: 70:c1:1b:3c:34:3c:d4:2d:24:89:32:64:c2:71:40: 06:da:a7:c3:09:04:ee:57:4b:87:74:8a:1d:92:f6: a2:d1:cb:ca:45:f0:c1:13:91:fb:d3:09:08:51:07: 68:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:3E:A8:03:3B:92:EB:98:C6:8E:10:85:05:2D:3D:25:1B:CA:4D:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/40420dc4-9d4c-3850-9245-08633abd44d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.169.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:6e:a1:78:25:7f:95:4c:b2:3e:19:46:09:03:5f:7d:dd:9a: 2a:19:cb:3f:93:4e:7c:df:4a:ef:58:37:d5:d4:b0:41:42:a5: 0a:a0:35:cf:23:23:e6:22:26:82:1c:4e:0b:d6:7f:8b:b1:22: 80:e3:80:a5:ba:2f:da:c1:2d:3a:87:c4:5c:4e:3b:20:da:db: 5e:6d:a3:3e:6e:aa:55:a2:43:43:af:39:4d:41:1a:5e:b8:ec: 24:f0:d8:81:8d:9b:41:a2:6a:ff:63:96:c7:f3:8d:61:d7:0a: f0:ee:98:76:b4:7c:b9:37:f3:c2:70:97:91:e0:78:c9:33:5a: 0c:fd:f2:c0:1e:f5:12:6d:f4:2f:5f:78:62:f9:fa:91:06:aa: 7f:47:c1:98:e1:4a:05:29:0f:5a:cc:51:d4:36:5c:57:de:6f: 28:95:6e:59:7c:ac:78:5d:e5:a5:76:36:1f:6d:f5:b8:64:29: df:2e:1b:50:54:3c:fa:9c:38:2f:13:33:19:90:c1:4f:cd:52: ef:36:37:f3:18:72:c5:da:1b:78:49:55:54:12:3d:ac:8a:00: 4b:6b:10:6f:b4:95:7e:65:13:98:c1:0d:10:da:66:c4:1d:b7: 5e:a1:fc:c7:e4:e3:fc:8f:3a:8c:04:7d:fe:75:82:bb:f1:96: 28:56:c3:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKtHgqLBsoL292UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk NWE3ODMwMzktYTMzMy00ZTMwLTkzMGMtNjgwNTQwOTk0YmY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdSy/urjQaoNs+jwfi3OMiczR5CqLWR7stOv T84/r7BHr0MAMFbKDAZv29TPrQflHszqMHkJigKrdEQpB2qXAj61D1A171s2EaJy rB4HyoUJ1JViZOBEpsvVykjai6pC8LH5mOlaVusaYq1NC4UhfsheDL5Cl0+al1KB bOP3aAK0/Xf3kaoe+TClQOCbR6RJcqkBYkD1xz0basw9PSo0TvOJcTse610crcBa fbNTv56j2K2JOBX8kQBpfrQihky5ojWvTokFlSi7tq2x8CSJ1J9wwRs8NDzULSSJ MmTCcUAG2qfDCQTuV0uHdIodkvai0cvKRfDBE5H70wkIUQdoYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHY+qAM7kuuYxo4QhQUtPSUbyk0IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNDA0MjBkYzQtOWQ0Yy0z ODUwLTkyNDUtMDg2MzNhYmQ0NGQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK2pMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGluoXglf5VMsj4ZRgkDX33dmioZyz+TTnzfSu9YN9XUsEFCpQqgNc8j I+YiJoIcTgvWf4uxIoDjgKW6L9rBLTqHxFxOOyDa215toz5uqlWiQ0OvOU1BGl64 7CTw2IGNm0Giav9jlsfzjWHXCvDumHa0fLk388Jwl5HgeMkzWgz98sAe9RJt9C9f eGL5+pEGqn9HwZjhSgUpD1rMUdQ2XFfebyiVbll8rHhd5aV2Nh9t9bhkKd8uG1BU PPqcOC8TMxmQwU/NUu82N/MYcsXaG3hJVVQSPayKAEtrEG+0lX5lE5jBDRDaZsQd t16h/Mfk4/yPOowEff51grvxlihWw8U= -----END CERTIFICATE-----Generated at Fri Nov 22 01:35:37 2024 by rpki-client on console-ams.rpki-client.org