$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ec3a7ed3-c4df-3b82-a795-7f2c454a62f2.roa File: ec3a7ed3-c4df-3b82-a795-7f2c454a62f2.roa (raw, json) Hash identifier: jKdidZiH5FYxvXGA14LBjb6guGKlqvwSqsikQhdXCso= Subject key identifier: 94:57:0F:6F:1B:15:AC:E7:96:50:FC:21:B1:7C:68:CC:0E:41:A1:2D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285847308AE3082D69F8994BFCAA80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ec3a7ed3-c4df-3b82-a795-7f2c454a62f2.roa Signing time: Thu 12 Sep 2024 12:38:35 +0000 ROA not before: Thu 12 Sep 2024 12:38:35 +0000 ROA not after: Wed 11 Dec 2024 13:38:35 +0000 asID: 0 IP address blocks: 72.13.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Oct 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:30:8a:e3:08:2d:69:f8:99:4b:fc:aa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 12 12:38:35 2024 GMT Not After : Dec 11 13:38:35 2024 GMT Subject: CN=761e256e-739b-43e4-8ee6-6d1943a765ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e9:4a:62:f2:3e:cc:20:ed:38:c3:67:0a:ca: 76:03:23:c1:7b:f2:7a:20:2a:d6:5c:c2:11:13:99: a6:60:c2:67:ce:51:aa:88:19:32:14:f5:23:7a:d6: ca:cc:a9:cd:4d:83:cc:2a:c9:46:bd:51:ad:5f:69: 42:7f:e6:e0:50:09:2a:e1:f4:c4:ed:56:b2:1c:41: 67:ea:7a:35:7c:07:b5:ad:57:64:41:cc:86:ff:aa: cf:24:b7:71:29:e0:53:5c:23:65:53:db:34:da:27: 17:25:74:93:2b:89:6c:0b:57:b8:30:cf:2f:7a:ad: e4:77:c3:89:31:6b:b7:bd:6e:0a:0a:e0:cf:9e:3d: 6e:4b:5e:31:ea:e9:cb:77:44:db:98:91:91:2e:37: 99:7a:2e:28:04:0b:aa:36:ab:28:1a:19:bb:2a:ef: 12:ae:0d:17:26:79:29:79:5e:9d:9c:4d:df:70:6f: 96:86:6f:54:6e:41:71:97:89:bc:2b:1d:83:87:aa: 4a:0b:3c:77:ce:ad:96:53:cc:8a:d9:ff:60:cd:90: 83:9c:d4:f8:2b:5a:5e:3d:1d:43:71:6e:4b:87:71: d4:f3:20:ca:c8:f0:3a:03:59:88:b8:9c:aa:66:34: 16:04:88:2c:08:8d:a9:42:02:d3:56:dc:a6:ba:50: 8a:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:57:0F:6F:1B:15:AC:E7:96:50:FC:21:B1:7C:68:CC:0E:41:A1:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ec3a7ed3-c4df-3b82-a795-7f2c454a62f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 72.13.44.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:56:1a:60:01:0e:32:38:77:da:2f:93:08:37:d6:42:98:55: 99:bc:30:5e:f3:cc:d3:aa:15:b0:98:5e:c9:7d:23:d6:13:51: 78:e5:5e:8d:2f:f6:36:86:c8:55:c9:46:45:fe:d7:2c:77:ae: 3b:09:c9:40:90:e6:44:90:54:d2:90:e0:8a:1b:b6:c4:33:de: 0c:e5:9b:fc:fb:06:76:d1:78:60:c1:e4:04:0d:1f:cd:05:6d: 2e:c1:5c:42:f7:8f:09:a9:f3:66:db:1e:c3:11:d8:42:8a:fa: 0e:48:16:ee:2c:4e:b6:34:db:ce:14:bd:4b:14:3c:2b:09:7c: c2:db:d7:07:26:b9:aa:d6:0c:17:74:9b:7e:ef:58:d1:d2:94: d1:c7:7b:0b:c9:b3:dc:5c:9f:a3:5a:5a:aa:1a:63:8b:69:6d: 8e:c2:3a:a1:83:11:9d:24:42:b5:c2:82:df:55:89:a4:d8:e5: 3c:e9:10:51:f9:85:ad:0f:64:c7:17:8e:4f:08:15:da:8c:0d: b7:18:f7:a5:9d:4b:74:e9:a0:dd:2a:ff:2f:f6:f0:2b:26:d2: 42:66:50:61:59:38:85:b3:e9:e0:e4:e0:79:4c:60:a6:3e:e7: e9:c0:e5:c8:79:78:23:e5:eb:37:55:1a:36:c2:85:98:e5:bb: 53:8b:9b:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcwiuMILWn4mUv8qoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI0MDkxMjEyMzgzNVoXDTI0MTIxMTEzMzgzNVowLzEtMCsGA1UEAxMk NzYxZTI1NmUtNzM5Yi00M2U0LThlZTYtNmQxOTQzYTc2NWVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuulKYvI+zCDtOMNnCsp2AyPBe/J6ICrWXMIR E5mmYMJnzlGqiBkyFPUjetbKzKnNTYPMKslGvVGtX2lCf+bgUAkq4fTE7VayHEFn 6no1fAe1rVdkQcyG/6rPJLdxKeBTXCNlU9s02icXJXSTK4lsC1e4MM8veq3kd8OJ MWu3vW4KCuDPnj1uS14x6unLd0TbmJGRLjeZei4oBAuqNqsoGhm7Ku8Srg0XJnkp eV6dnE3fcG+Whm9UbkFxl4m8Kx2Dh6pKCzx3zq2WU8yK2f9gzZCDnNT4K1pePR1D cW5Lh3HU8yDKyPA6A1mIuJyqZjQWBIgsCI2pQgLTVtymulCK6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJRXD28bFaznllD8IbF8aMwOQaEtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZWMzYTdlZDMtYzRkZi0z YjgyLWE3OTUtN2YyYzQ1NGE2MmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASA0sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEJWGmABDjI4d9ovkwg31kKYVZm8MF7zzNOqFbCYXsl9I9YTUXjlXo0v 9jaGyFXJRkX+1yx3rjsJyUCQ5kSQVNKQ4IobtsQz3gzlm/z7BnbReGDB5AQNH80F bS7BXEL3jwmp82bbHsMR2EKK+g5IFu4sTrY0284UvUsUPCsJfMLb1wcmuarWDBd0 m37vWNHSlNHHewvJs9xcn6NaWqoaY4tpbY7COqGDEZ0kQrXCgt9ViaTY5TzpEFH5 ha0PZMcXjk8IFdqMDbcY96WdS3TpoN0q/y/28Csm0kJmUGFZOIWz6eDk4HlMYKY+ 5+nA5ch5eCPl6zdVGjbChZjlu1OLm7g= -----END CERTIFICATE-----Generated at Tue Oct 22 21:17:55 2024 by rpki-client on console-ams.rpki-client.org