$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4b96b65f-cfe1-33f1-ad1b-617582e4b31d.roa File: 4b96b65f-cfe1-33f1-ad1b-617582e4b31d.roa (raw, json) Hash identifier: CP8JdV42/olB8wAANxv2x7+/T3Mnp7X/6T6SoI1cxBY= Subject key identifier: 99:86:3C:9A:95:AE:B4:00:21:2F:B1:5A:9C:3B:C9:60:FC:B3:23:CA Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285847E62AD32BDF2BF94355F77A60 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4b96b65f-cfe1-33f1-ad1b-617582e4b31d.roa Signing time: Sat 16 Nov 2024 14:00:41 +0000 ROA not before: Sat 16 Nov 2024 14:00:41 +0000 ROA not after: Fri 14 Feb 2025 14:00:41 +0000 asID: 7155 IP address blocks: 72.173.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e6:2a:d3:2b:df:2b:f9:43:55:f7:7a:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Nov 16 14:00:41 2024 GMT Not After : Feb 14 14:00:41 2025 GMT Subject: CN=1a39844c-89d0-4a38-b2ce-14e9c0cd8103 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:51:9a:79:26:22:69:d0:85:9c:ae:f3:83:f6: b1:ec:aa:2c:61:ac:bf:fa:12:4f:60:da:07:ae:b1: f8:80:92:a7:eb:56:b8:cc:b4:b4:19:1d:10:ed:0f: a4:5a:e4:9c:98:2d:53:29:a7:a9:d7:63:d7:39:bd: 36:c9:10:06:08:d9:ba:10:7e:7e:e9:35:ea:7c:9c: 6f:46:a3:53:56:7a:6e:a1:d7:06:91:e9:61:8e:5a: e9:bc:3d:5a:38:ba:f5:05:e1:20:57:78:46:f9:22: 1a:37:a1:c6:ee:f2:35:8b:a6:30:5c:d4:ed:18:66: 38:24:a7:3b:f9:3c:2b:f4:ae:af:34:dd:9a:87:55: c0:04:e1:26:b8:86:de:4a:61:15:75:84:03:69:b5: de:b3:1b:04:80:fc:2d:a6:8c:e5:09:31:da:83:97: f1:1b:9e:1b:3c:1f:0b:b9:23:30:3d:72:09:9c:22: dd:84:ce:bc:86:1f:3b:2a:16:0f:27:56:2c:a2:94: 98:a6:de:7b:30:0c:07:53:af:6d:da:6b:a4:e8:8d: 88:5a:b5:d1:dd:59:50:7e:61:1a:17:46:0f:b7:c7: c2:4b:ad:d2:e0:ed:3e:ac:57:18:1e:3e:96:cc:f4: 2a:a1:de:24:2d:25:63:d4:01:4b:8a:78:88:6b:ae: a8:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:86:3C:9A:95:AE:B4:00:21:2F:B1:5A:9C:3B:C9:60:FC:B3:23:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4b96b65f-cfe1-33f1-ad1b-617582e4b31d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:06:8e:5f:5b:8e:1d:fb:d2:bc:da:21:1a:5f:1a:51:0c:04: 25:95:e4:b8:82:58:b4:6c:c5:91:8d:a1:ac:11:d5:63:66:d5: 9e:49:46:7e:ff:ec:67:c4:9e:a0:3d:75:a8:70:ce:7a:dd:71: b7:2a:07:78:58:88:2a:21:4f:6c:5d:57:22:44:06:84:91:60: 57:5b:fa:40:2b:72:11:42:f1:0e:05:a3:97:75:fb:6f:46:62: 67:e6:05:39:07:54:fd:8c:65:23:02:b9:62:6c:6a:b7:43:ca: 9d:42:47:1b:d6:46:7b:f2:85:71:92:d4:a5:58:75:eb:bb:fd: 73:3b:0f:7c:b3:5c:c2:55:8f:1c:cf:75:5a:d4:64:a4:3a:39: 9b:5d:55:a2:9a:6c:be:56:ff:f0:96:49:46:f8:fa:3b:83:cb: 62:b9:19:a4:85:30:c7:19:08:4b:fe:d3:9e:92:a8:27:e0:01: ae:40:5a:95:b0:a1:e0:19:3b:81:c6:e0:19:5b:a6:67:47:6b: d7:44:5e:cd:ea:69:3b:a2:67:59:68:18:a9:8c:af:da:33:ff: 63:fa:45:34:11:ae:40:18:f8:e8:e7:da:fa:91:5b:8d:e3:77: 49:ef:d0:29:37:ca:c3:ea:13:42:4f:fe:cf:5a:36:b6:db:b1: 44:90:05:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKtMr3yv5Q1X3emAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk MWEzOTg0NGMtODlkMC00YTM4LWIyY2UtMTRlOWMwY2Q4MTAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgVGaeSYiadCFnK7zg/ax7KosYay/+hJPYNoH rrH4gJKn61a4zLS0GR0Q7Q+kWuScmC1TKaep12PXOb02yRAGCNm6EH5+6TXqfJxv RqNTVnpuodcGkelhjlrpvD1aOLr1BeEgV3hG+SIaN6HG7vI1i6YwXNTtGGY4JKc7 +Twr9K6vNN2ah1XABOEmuIbeSmEVdYQDabXesxsEgPwtpozlCTHag5fxG54bPB8L uSMwPXIJnCLdhM68hh87KhYPJ1YsopSYpt57MAwHU69t2muk6I2IWrXR3VlQfmEa F0YPt8fCS63S4O0+rFcYHj6WzPQqod4kLSVj1AFLiniIa66o+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJmGPJqVrrQAIS+xWpw7yWD8syPKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNGI5NmI2NWYtY2ZlMS0z M2YxLWFkMWItNjE3NTgyZTRiMzFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK3YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIwGjl9bjh370rzaIRpfGlEMBCWV5LiCWLRsxZGNoawR1WNm1Z5JRn7/ 7GfEnqA9dahwznrdcbcqB3hYiCohT2xdVyJEBoSRYFdb+kArchFC8Q4Fo5d1+29G YmfmBTkHVP2MZSMCuWJsardDyp1CRxvWRnvyhXGS1KVYdeu7/XM7D3yzXMJVjxzP dVrUZKQ6OZtdVaKabL5W//CWSUb4+juDy2K5GaSFMMcZCEv+056SqCfgAa5AWpWw oeAZO4HG4BlbpmdHa9dEXs3qaTuiZ1loGKmMr9oz/2P6RTQRrkAY+Ojn2vqRW43j d0nv0Ck3ysPqE0JP/s9aNrbbsUSQBXI= -----END CERTIFICATE-----Generated at Fri Nov 22 02:11:28 2024 by rpki-client on console-fra.rpki-client.org