$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/12480461-a8be-389a-8f9c-82fc59d16f68.roa File: 12480461-a8be-389a-8f9c-82fc59d16f68.roa (raw, json) Hash identifier: 2O2ZPwgO9cF3T/oF95wUp+bijwCbsNss3/LErttrKew= Subject key identifier: 40:EF:62:8F:B0:33:08:35:23:1E:66:25:75:1D:ED:E2:21:8E:86:4B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F154FD7E36C04768F8F6DC80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/12480461-a8be-389a-8f9c-82fc59d16f68.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 7029 IP address blocks: 72.172.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:54:fd:7e:36:c0:47:68:f8:f6:dc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=72e9860d-4a9d-4eda-b582-ed0755c75c25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:53:bb:dd:02:8b:82:1a:31:25:64:71:01:ed: dc:0c:e8:a0:4c:65:6d:60:0a:ea:25:50:e8:c1:60: 05:a4:be:6b:35:08:24:38:ed:8a:f9:0f:ba:24:cb: 8f:29:f7:e5:20:87:7f:a3:07:3e:76:97:a8:f5:9d: 10:fd:1b:6c:70:af:3b:6c:03:38:0b:8d:fd:d0:4f: f6:8d:29:96:a0:eb:10:0c:46:73:13:17:10:96:44: be:04:fa:bf:37:0f:a9:f6:d9:6c:a2:12:93:12:0b: 35:5b:49:6d:7c:a7:a3:74:61:4b:e9:71:9b:bb:47: 56:c4:2b:0a:11:85:34:68:7f:43:db:07:a7:04:53: 67:d3:3d:07:a2:3b:c2:3b:4e:57:39:28:85:c4:6a: 6f:7a:ad:a5:1c:92:a2:10:e0:b0:49:26:b9:8f:f3: 5b:76:e2:59:e6:93:67:d9:8e:a2:5e:0c:98:f1:af: fe:4f:8a:21:07:8a:d6:74:6f:c7:fc:30:65:8e:43: 35:cd:e5:e6:46:44:cf:61:74:0b:a5:43:b7:d3:ea: a9:62:da:7e:62:89:a4:a7:40:78:fd:01:92:6d:e9: 17:57:32:4d:65:2a:9e:93:2d:ac:f3:58:db:fa:cf: d3:31:dc:ab:cb:86:ac:a5:3f:d1:c3:eb:da:d0:96: 81:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:EF:62:8F:B0:33:08:35:23:1E:66:25:75:1D:ED:E2:21:8E:86:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/12480461-a8be-389a-8f9c-82fc59d16f68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 72.172.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:1b:75:8e:91:c1:ca:05:cc:92:f7:d5:e4:f0:5f:64:07:e3: f5:54:65:7c:56:8f:7c:55:dc:de:ae:d7:ee:0f:35:b3:c7:70: d1:9e:dc:4e:8f:39:4f:58:07:09:83:3a:ff:98:ef:86:1c:6a: 49:c5:dc:9c:bf:de:f1:bf:32:64:66:75:8b:0d:d7:cf:41:43: 6b:7e:57:ff:a2:24:71:0d:a7:a0:12:03:16:41:c0:e3:26:1f: 4a:f4:74:08:08:ee:19:13:d9:5e:67:92:31:e6:07:17:53:ac: 0c:4d:1c:43:bd:f0:e8:70:86:eb:99:4b:fc:41:7e:c0:28:3f: a1:e2:74:79:41:7b:82:c1:2c:19:6a:7d:12:96:7d:dc:d5:17: 5e:74:66:7d:36:1e:ff:24:9c:f2:60:69:5f:3f:9a:38:de:5c: aa:1b:f5:3b:7a:4b:05:4d:b5:62:ae:4e:86:41:21:a3:cf:b1: b4:96:dd:2c:9f:c6:ac:1b:1d:5a:15:1e:87:c2:36:56:58:8d: 5f:f7:ce:00:c8:f9:f7:19:74:83:9e:e1:c3:c0:44:3f:55:76: 60:1b:5f:05:fa:25:4c:3a:69:78:08:40:16:4f:e7:f7:9c:c7: ed:f1:77:1e:b6:45:49:d4:7d:e8:88:70:78:16:a1:35:58:e7: 90:3f:8a:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfxVP1+NsBHaPj23IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk NzJlOTg2MGQtNGE5ZC00ZWRhLWI1ODItZWQwNzU1Yzc1YzI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8lO73QKLghoxJWRxAe3cDOigTGVtYArqJVDo wWAFpL5rNQgkOO2K+Q+6JMuPKfflIId/owc+dpeo9Z0Q/RtscK87bAM4C4390E/2 jSmWoOsQDEZzExcQlkS+BPq/Nw+p9tlsohKTEgs1W0ltfKejdGFL6XGbu0dWxCsK EYU0aH9D2wenBFNn0z0HojvCO05XOSiFxGpveq2lHJKiEOCwSSa5j/NbduJZ5pNn 2Y6iXgyY8a/+T4ohB4rWdG/H/DBljkM1zeXmRkTPYXQLpUO30+qpYtp+Yomkp0B4 /QGSbekXVzJNZSqeky2s81jb+s/TMdyry4aspT/Rw+va0JaBDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEDvYo+wMwg1Ix5mJXUd7eIhjoZLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTI0ODA0NjEtYThiZS0z ODlhLThmOWMtODJmYzU5ZDE2ZjY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGSKwAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA8bdY6RwcoFzJL31eTwX2QH4/VUZXxWj3xV3N6u1+4PNbPHcNGe3E6P OU9YBwmDOv+Y74YcaknF3Jy/3vG/MmRmdYsN189BQ2t+V/+iJHENp6ASAxZBwOMm H0r0dAgI7hkT2V5nkjHmBxdTrAxNHEO98OhwhuuZS/xBfsAoP6HidHlBe4LBLBlq fRKWfdzVF150Zn02Hv8knPJgaV8/mjjeXKob9Tt6SwVNtWKuToZBIaPPsbSW3Syf xqwbHVoVHofCNlZYjV/3zgDI+fcZdIOe4cPARD9VdmAbXwX6JUw6aXgIQBZP5/ec x+3xdx62RUnUfeiIcHgWoTVY55A/imE= -----END CERTIFICATE-----Generated at Thu Nov 21 21:43:26 2024 by rpki-client on console-ams.rpki-client.org