$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a2d9e3b7-6b4f-382d-bf49-48b64be62bff.roa File: a2d9e3b7-6b4f-382d-bf49-48b64be62bff.roa (raw, json) Hash identifier: 2GC0Wme5lFqi/wrHkaWbyjZUWiy4auhfh/b27g8qfg4= Subject key identifier: 29:35:BA:E9:79:1C:73:C7:EC:8D:09:79:DA:51:49:00:74:15:8E:CC Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285847E62A3B42A5BCE2FF7E124600 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a2d9e3b7-6b4f-382d-bf49-48b64be62bff.roa Signing time: Sat 16 Nov 2024 14:00:41 +0000 ROA not before: Sat 16 Nov 2024 14:00:41 +0000 ROA not after: Fri 14 Feb 2025 14:00:41 +0000 asID: 7155 IP address blocks: 72.173.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e6:2a:3b:42:a5:bc:e2:ff:7e:12:46:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Nov 16 14:00:41 2024 GMT Not After : Feb 14 14:00:41 2025 GMT Subject: CN=8f530d81-c268-4bcc-aab8-405fd6ea663a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:46:06:fa:12:19:5a:da:03:80:db:69:56:0b: 6e:ac:b4:3a:e5:bf:9a:0f:20:f6:79:0f:b7:83:46: a7:c3:9e:46:c3:2e:94:25:a6:cc:d5:91:9f:c0:c3: 33:80:e0:36:5e:45:8c:cf:59:62:4e:4f:e6:69:41: 86:a0:3c:41:7b:5a:12:dc:54:f7:a1:92:b2:4a:a7: 67:e1:51:64:99:c3:9c:bd:4f:ef:41:68:0a:63:cb: 09:11:c8:d0:7c:87:2b:41:e4:23:e6:12:28:27:6d: 0a:61:e1:77:e5:96:8d:91:82:57:bf:72:f2:98:e2: ac:24:95:12:c1:ef:d4:98:3b:5f:2c:50:7c:83:51: 52:f7:e0:1b:20:70:41:28:a7:7d:63:c7:ad:1c:33: a2:5a:14:07:ef:2e:5c:d1:74:61:91:84:32:30:6a: 18:b7:84:29:7a:b9:87:e4:5f:44:c8:0d:ee:41:42: f4:dd:d4:04:ca:66:54:ea:b3:92:3b:5f:49:4c:5c: 48:7a:65:56:30:f7:72:22:d7:cd:bf:60:a7:39:9b: cd:b1:d5:6b:2e:ba:2e:76:79:ef:2e:3e:3a:c5:58: 1b:d4:61:9d:3d:1c:dc:7f:e4:a0:e6:28:91:60:6e: a2:52:f2:73:ca:12:ce:bd:0f:0b:92:2e:e5:12:7d: 39:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:35:BA:E9:79:1C:73:C7:EC:8D:09:79:DA:51:49:00:74:15:8E:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a2d9e3b7-6b4f-382d-bf49-48b64be62bff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:1b:16:6d:32:12:db:d3:3c:58:3d:27:db:87:5f:f2:e5:3a: 1b:39:2b:34:30:be:e9:81:12:7f:d4:8a:ec:08:fc:ad:48:5e: e5:18:4e:7d:04:b6:6a:a6:48:23:69:85:dc:79:6b:6a:b0:01: 13:b6:68:16:30:10:2c:03:eb:b4:ca:18:01:73:f3:af:07:15: 6b:63:5e:3c:9b:dd:b9:2f:84:7c:b1:b4:68:ff:f0:0f:2e:0a: c3:dd:15:32:55:73:61:28:91:56:9a:6a:e7:fa:1d:f9:a3:ca: b3:5c:e9:3b:68:ae:a9:a3:61:c6:38:b1:b3:aa:5f:dd:d2:15: 07:6a:28:0f:d0:1f:56:d8:cc:8b:64:c2:5b:70:80:0c:f4:38: d2:d8:6f:3d:ea:ad:1a:c7:7d:f7:cc:f7:66:4c:39:e5:44:38: 65:f9:13:2e:10:b6:2d:f8:b0:f9:06:bf:d5:80:8d:ae:d7:75: 0d:f2:ec:bb:45:95:ab:6a:2c:29:32:9a:b1:f1:5b:08:99:8b: 66:44:1c:87:82:ff:c3:f2:38:e6:1b:e5:82:96:ec:ab:20:b4: 74:04:db:07:66:b0:e2:cc:87:af:c6:35:68:d6:58:cb:f4:46: b5:da:91:13:e7:31:ba:7f:1d:25:99:91:88:08:e0:b0:09:34: 1e:7a:43:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKjtCpbzi/34SRgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk OGY1MzBkODEtYzI2OC00YmNjLWFhYjgtNDA1ZmQ2ZWE2NjNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukYG+hIZWtoDgNtpVgturLQ65b+aDyD2eQ+3 g0anw55Gwy6UJabM1ZGfwMMzgOA2XkWMz1liTk/maUGGoDxBe1oS3FT3oZKySqdn 4VFkmcOcvU/vQWgKY8sJEcjQfIcrQeQj5hIoJ20KYeF35ZaNkYJXv3LymOKsJJUS we/UmDtfLFB8g1FS9+AbIHBBKKd9Y8etHDOiWhQH7y5c0XRhkYQyMGoYt4QpermH 5F9EyA3uQUL03dQEymZU6rOSO19JTFxIemVWMPdyItfNv2CnOZvNsdVrLroudnnv Lj46xVgb1GGdPRzcf+Sg5iiRYG6iUvJzyhLOvQ8Lki7lEn055QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCk1uul5HHPH7I0JedpRSQB0FY7MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYTJkOWUzYjctNmI0Zi0z ODJkLWJmNDktNDhiNjRiZTYyYmZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK0AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGkbFm0yEtvTPFg9J9uHX/LlOhs5KzQwvumBEn/UiuwI/K1IXuUYTn0E tmqmSCNphdx5a2qwARO2aBYwECwD67TKGAFz868HFWtjXjyb3bkvhHyxtGj/8A8u CsPdFTJVc2EokVaaauf6HfmjyrNc6TtorqmjYcY4sbOqX93SFQdqKA/QH1bYzItk wltwgAz0ONLYbz3qrRrHfffM92ZMOeVEOGX5Ey4Qti34sPkGv9WAja7XdQ3y7LtF latqLCkymrHxWwiZi2ZEHIeC/8PyOOYb5YKW7KsgtHQE2wdmsOLMh6/GNWjWWMv0 RrXakRPnMbp/HSWZkYgI4LAJNB56Q1Y= -----END CERTIFICATE-----Generated at Fri Nov 22 02:12:06 2024 by rpki-client on console-fra.rpki-client.org