$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/40b3bd1c-a755-33b8-8e12-20c6d6e1f9e2.roa File: 40b3bd1c-a755-33b8-8e12-20c6d6e1f9e2.roa (raw, json) Hash identifier: jHD9kSErJ+v1F9NqPx3b62yhDG/7fmLT4+TjXqQgdX4= Subject key identifier: BD:54:A1:C1:40:54:58:F2:1F:91:41:09:F2:19:A0:54:26:28:BA:B8 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285847E62AD3DC0CE5F43A61551B70 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/40b3bd1c-a755-33b8-8e12-20c6d6e1f9e2.roa Signing time: Sat 16 Nov 2024 14:00:41 +0000 ROA not before: Sat 16 Nov 2024 14:00:41 +0000 ROA not after: Fri 14 Feb 2025 14:00:41 +0000 asID: 7155 IP address blocks: 72.173.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e6:2a:d3:dc:0c:e5:f4:3a:61:55:1b:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Nov 16 14:00:41 2024 GMT Not After : Feb 14 14:00:41 2025 GMT Subject: CN=4cea8224-20ba-41c9-b466-407468748d8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:28:c8:7a:f4:66:2f:a7:2c:0e:9d:3e:b0:5b: bc:7c:ca:a7:90:74:7e:73:78:a4:c0:1e:da:db:e8: 1c:9d:ce:fa:04:5e:d3:f7:29:c8:ee:c1:b0:6c:a6: 07:8a:f9:d6:98:cd:62:c2:78:b8:c9:7d:77:89:b4: da:c3:aa:9a:da:d0:75:11:d9:c4:f1:f9:34:52:ef: 25:6e:a1:b4:fb:da:fd:17:73:46:fc:28:35:cf:80: 3d:57:c8:d1:3c:9a:f2:d6:cf:91:42:19:15:c7:50: 3d:48:8e:58:52:7d:84:56:0b:80:c5:ba:4e:27:57: c1:ff:6e:c8:0f:f7:af:f0:6c:47:8c:89:74:d3:04: b0:44:c2:a7:49:75:34:bc:81:84:16:fa:9e:88:09: f5:02:7a:d9:8e:51:a7:51:2d:fc:fe:1e:5f:be:a0: 74:c6:d3:4c:bf:6d:de:25:f0:44:fd:9a:8d:d7:2f: 6b:9e:ba:2e:8b:80:be:ff:ae:82:27:79:53:a0:d9: 9b:58:37:82:99:55:7a:88:84:0b:66:e2:0a:d2:46: a4:2e:e9:a4:9c:f9:38:19:40:2e:97:7f:aa:97:6d: 4a:e5:90:b7:69:82:7a:8c:1a:f3:df:2d:2e:c5:57: 6e:c1:0f:c2:de:7b:d8:ec:b3:86:8b:02:f6:2d:99: fd:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:54:A1:C1:40:54:58:F2:1F:91:41:09:F2:19:A0:54:26:28:BA:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/40b3bd1c-a755-33b8-8e12-20c6d6e1f9e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:78:1f:b3:24:4d:81:6e:4e:0c:94:8c:73:4b:de:57:f7:69: 33:41:6a:18:2c:52:8e:45:7e:eb:d9:b9:27:a9:40:02:c1:06: a3:49:37:c2:44:29:79:1f:f7:37:dd:99:ef:2e:d3:58:51:5e: 3a:aa:18:b5:6d:c3:84:d2:38:e5:28:2a:18:c8:8a:eb:b1:25: 9f:0f:c9:58:bb:7f:fd:ba:42:18:39:6a:9c:80:d1:70:ea:f1: 4a:70:f3:f0:34:05:e4:50:82:9b:1c:2f:ac:83:19:13:12:90: 97:95:81:60:ce:eb:3b:57:16:cc:8d:ac:2e:7c:71:5a:39:6a: 2b:8d:c1:5e:1d:0f:e2:9d:a5:25:17:cc:b2:dd:52:3d:e5:46: c4:6f:1c:08:92:6b:18:cd:0d:36:c6:54:15:60:56:8c:3a:3d: 41:0f:d1:e1:66:c5:e2:f6:87:37:ba:b6:46:9f:59:0e:35:82: 66:9c:22:41:ab:51:26:e0:09:cf:60:ce:7b:47:ed:2a:dc:d3: 39:32:34:50:86:6c:03:7d:c6:49:17:8e:5c:c9:73:47:f2:e4: 04:43:5b:cf:de:0c:a7:43:eb:d3:6e:aa:51:28:11:d8:08:9a: 9a:ee:76:bd:4a:4e:ea:22:5e:18:1c:01:a9:93:b4:83:04:9d: f2:b0:b0:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKtPcDOX0OmFVG3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk NGNlYTgyMjQtMjBiYS00MWM5LWI0NjYtNDA3NDY4NzQ4ZDhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCjIevRmL6csDp0+sFu8fMqnkHR+c3ikwB7a 2+gcnc76BF7T9ynI7sGwbKYHivnWmM1iwni4yX13ibTaw6qa2tB1EdnE8fk0Uu8l bqG0+9r9F3NG/Cg1z4A9V8jRPJry1s+RQhkVx1A9SI5YUn2EVguAxbpOJ1fB/27I D/ev8GxHjIl00wSwRMKnSXU0vIGEFvqeiAn1AnrZjlGnUS38/h5fvqB0xtNMv23e JfBE/ZqN1y9rnroui4C+/66CJ3lToNmbWDeCmVV6iIQLZuIK0kakLumknPk4GUAu l3+ql21K5ZC3aYJ6jBrz3y0uxVduwQ/C3nvY7LOGiwL2LZn9rwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL1UocFAVFjyH5FBCfIZoFQmKLq4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNDBiM2JkMWMtYTc1NS0z M2I4LThlMTItMjBjNmQ2ZTFmOWUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK34MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFV4H7MkTYFuTgyUjHNL3lf3aTNBahgsUo5FfuvZuSepQALBBqNJN8JE KXkf9zfdme8u01hRXjqqGLVtw4TSOOUoKhjIiuuxJZ8PyVi7f/26Qhg5apyA0XDq 8Upw8/A0BeRQgpscL6yDGRMSkJeVgWDO6ztXFsyNrC58cVo5aiuNwV4dD+KdpSUX zLLdUj3lRsRvHAiSaxjNDTbGVBVgVow6PUEP0eFmxeL2hze6tkafWQ41gmacIkGr USbgCc9gzntH7Src0zkyNFCGbAN9xkkXjlzJc0fy5ARDW8/eDKdD69NuqlEoEdgI mprudr1KTuoiXhgcAamTtIMEnfKwsNc= -----END CERTIFICATE-----Generated at Fri Nov 22 02:11:24 2024 by rpki-client on console-fra.rpki-client.org