$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5f4d0327-78e6-393d-8d0f-7d6b3fe6033e.roa File: 5f4d0327-78e6-393d-8d0f-7d6b3fe6033e.roa (raw, json) Hash identifier: OpGLxskJtcm1a+ssSWZ4ewP22zsRPFWs/Z/K1buGDdE= Subject key identifier: F3:AC:A5:72:E6:6D:38:16:65:A0:73:94:55:75:94:0B:8A:D0:4A:E9 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285847E62ACF2FABD791953A045900 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5f4d0327-78e6-393d-8d0f-7d6b3fe6033e.roa Signing time: Sat 16 Nov 2024 14:00:41 +0000 ROA not before: Sat 16 Nov 2024 14:00:41 +0000 ROA not after: Fri 14 Feb 2025 14:00:41 +0000 asID: 7155 IP address blocks: 72.173.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e6:2a:cf:2f:ab:d7:91:95:3a:04:59:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Nov 16 14:00:41 2024 GMT Not After : Feb 14 14:00:41 2025 GMT Subject: CN=151ddcac-be18-441c-9806-cbc5e932b6c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:a2:c3:66:9a:a2:fe:1c:a9:85:13:ec:4c:5f: c3:c4:e5:0a:65:b6:11:74:fd:62:86:03:b9:e7:17: d1:d5:bc:47:88:5c:2c:02:40:ae:92:ba:0d:50:d9: ac:6c:ee:97:86:f7:e9:06:24:c8:04:03:73:e3:89: b7:84:e0:4e:c2:59:2e:ef:9d:25:60:5a:cc:5e:a0: 88:2e:38:74:5d:02:34:2b:b3:14:8e:1b:f9:12:45: 40:8a:19:b1:cc:af:ee:ae:b4:95:fa:f1:73:45:6c: 1c:20:c9:a7:9a:3f:1c:43:8c:a6:41:52:f1:cc:8a: b1:fc:6c:d1:5d:db:f7:5f:3d:5a:ab:a5:58:ee:49: e5:ae:73:92:5b:9c:d5:24:e5:0b:d6:32:f0:c2:18: 7c:31:a9:1c:cb:af:a3:e6:44:52:35:26:30:e7:80: 67:bd:6b:b6:7c:e8:13:ae:7b:90:46:43:06:88:23: b5:2b:2c:95:96:f3:72:94:8e:94:ac:02:9f:87:e8: b5:e8:e9:34:97:3d:9b:16:4b:a2:6b:ad:95:40:48: 26:f0:06:42:4f:57:ab:95:7c:67:5f:70:da:fe:4f: 5c:57:ba:ab:b2:a7:1e:d4:7c:6d:a6:de:d3:a5:e0: d1:0e:1b:8c:cb:5d:17:44:79:8c:5a:1a:dd:ad:e8: 32:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:AC:A5:72:E6:6D:38:16:65:A0:73:94:55:75:94:0B:8A:D0:4A:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5f4d0327-78e6-393d-8d0f-7d6b3fe6033e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:7a:fa:2d:d6:65:06:a9:80:51:86:82:98:f9:e9:0a:01:65: f6:98:89:21:72:1f:a5:ae:2b:a3:87:4c:ee:72:1a:4e:66:b2: ad:28:39:c6:97:bb:b9:6f:dd:d5:13:11:6c:85:a5:53:14:25: 06:12:07:2f:87:d1:3c:cc:9d:dd:29:7e:01:b5:bc:59:60:fc: 04:47:26:d3:9b:78:65:18:29:b0:93:32:91:aa:db:64:8c:cf: a8:2f:76:f7:05:08:b7:ad:de:e3:0c:e9:67:91:bb:88:c4:a9: 28:17:ab:5d:df:e0:0f:22:06:8a:63:80:8c:49:4e:0a:db:43: b1:8c:28:b1:c6:01:ce:36:49:e5:dc:f3:d9:16:3b:74:0d:22: b4:9f:97:5e:42:3c:a5:2c:eb:31:de:41:c7:1b:cb:ca:e6:1c: 53:5d:e5:9f:4f:fd:ac:eb:87:f9:58:c7:8f:cc:86:4d:ef:a1: 50:e2:8c:ce:3a:d2:58:5f:dd:b7:e4:ca:a0:ce:3f:75:81:98: 84:e9:73:ae:93:dd:a0:1e:93:7c:b7:59:25:ce:6d:cb:b1:9b: a4:b6:c0:f1:51:d7:d0:ba:88:e8:7b:3b:cb:b9:c0:5d:78:17: 5b:64:fa:99:ba:0c:60:51:85:b6:69:64:8c:15:ea:e9:7b:e5: 9d:f4:2e:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKs8vq9eRlToEWQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk MTUxZGRjYWMtYmUxOC00NDFjLTk4MDYtY2JjNWU5MzJiNmMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiKLDZpqi/hyphRPsTF/DxOUKZbYRdP1ihgO5 5xfR1bxHiFwsAkCukroNUNmsbO6XhvfpBiTIBANz44m3hOBOwlku750lYFrMXqCI Ljh0XQI0K7MUjhv5EkVAihmxzK/urrSV+vFzRWwcIMmnmj8cQ4ymQVLxzIqx/GzR Xdv3Xz1aq6VY7knlrnOSW5zVJOUL1jLwwhh8Makcy6+j5kRSNSYw54BnvWu2fOgT rnuQRkMGiCO1KyyVlvNylI6UrAKfh+i16Ok0lz2bFkuia62VQEgm8AZCT1erlXxn X3Da/k9cV7qrsqce1Hxtpt7TpeDRDhuMy10XRHmMWhrdregywwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPOspXLmbTgWZaBzlFV1lAuK0ErpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNWY0ZDAzMjctNzhlNi0z OTNkLThkMGYtN2Q2YjNmZTYwMzNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK0mMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIB6+i3WZQapgFGGgpj56QoBZfaYiSFyH6WuK6OHTO5yGk5msq0oOcaX u7lv3dUTEWyFpVMUJQYSBy+H0TzMnd0pfgG1vFlg/ARHJtObeGUYKbCTMpGq22SM z6gvdvcFCLet3uMM6WeRu4jEqSgXq13f4A8iBopjgIxJTgrbQ7GMKLHGAc42SeXc 89kWO3QNIrSfl15CPKUs6zHeQccby8rmHFNd5Z9P/azrh/lYx4/Mhk3voVDijM46 0lhf3bfkyqDOP3WBmITpc66T3aAek3y3WSXObcuxm6S2wPFR19C6iOh7O8u5wF14 F1tk+pm6DGBRhbZpZIwV6ul75Z30Lgc= -----END CERTIFICATE-----Generated at Mon Nov 25 01:03:17 2024 by rpki-client on console-ams.rpki-client.org