$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7f33f1ea-547d-371f-81a6-b54928a6ade3.roa File: 7f33f1ea-547d-371f-81a6-b54928a6ade3.roa (raw, json) Hash identifier: Rkmjlkv2fjWf6TzItFVgKZZFaFK9g3eCPt2KfVcV16Y= Subject key identifier: 39:3D:F9:4A:1C:8F:86:EA:C5:6A:30:90:10:E2:0E:46:0F:49:59:DB Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F432858474DE60E8850C6C78C54B0B800 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7f33f1ea-547d-371f-81a6-b54928a6ade3.roa Signing time: Mon 23 Sep 2024 01:00:31 +0000 ROA not before: Mon 23 Sep 2024 01:00:31 +0000 ROA not after: Sun 22 Dec 2024 02:00:31 +0000 asID: 22773 IP address blocks: 72.219.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:4d:e6:0e:88:50:c6:c7:8c:54:b0:b8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 23 01:00:31 2024 GMT Not After : Dec 22 02:00:31 2024 GMT Subject: CN=2a955d45-d537-4de1-9538-51cde46171a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:49:0c:57:98:78:de:47:d4:bb:3b:bf:7f:8a: 67:fc:94:e0:cb:78:bb:f2:00:ae:39:1c:32:1f:c1: 89:3d:0f:eb:66:52:44:82:bf:ff:32:cc:67:28:ab: e8:82:f8:7f:71:3e:d7:15:7b:11:06:a5:b0:8a:ab: b8:56:ba:f6:3d:93:b0:30:ad:53:14:26:e5:8d:77: 8a:2b:65:13:14:7d:35:7c:fa:7f:b7:6a:cf:97:f0: 2b:0f:c2:de:8b:a8:2e:30:4a:4d:e9:95:4a:ff:ae: 18:a6:92:5d:aa:cf:93:9d:8c:da:aa:24:15:a8:5b: 1e:ed:4a:c9:5a:43:26:e2:a1:ea:5a:b0:bd:29:b3: 24:02:d6:90:6d:c6:5c:7b:52:c8:77:44:c3:f0:83: e3:dc:4c:dd:66:6f:1d:07:6a:64:9c:b1:e7:0c:b0: bc:8d:48:69:33:ee:24:bd:af:18:88:7f:fa:18:91: c8:91:c0:f3:b4:00:23:47:4e:65:72:23:bf:c1:b7: 81:27:75:a3:a0:3e:57:0c:71:f2:de:ef:e6:d5:40: 93:47:81:8d:42:c8:5d:db:ee:03:60:dc:76:ac:bc: 10:81:85:aa:e2:f8:73:65:82:ba:29:7d:e3:e7:8a: 31:f4:28:38:0c:2b:b0:93:73:9e:0d:7c:aa:3f:51: 3c:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:3D:F9:4A:1C:8F:86:EA:C5:6A:30:90:10:E2:0E:46:0F:49:59:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7f33f1ea-547d-371f-81a6-b54928a6ade3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.219.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:cf:c0:1c:8f:c0:b1:c5:d0:e0:7d:d8:5b:e6:20:9c:97:c1: 8b:1a:ba:82:68:bf:e0:ee:41:22:93:94:19:76:26:27:9b:4e: db:f0:7d:d7:d3:d8:42:31:ce:30:6a:5c:39:88:98:f7:92:0e: fd:c9:7c:45:46:99:23:c6:77:0a:e4:52:a7:00:af:84:92:44: f6:3d:ad:fc:01:8f:87:0f:bc:42:e9:df:f7:17:13:d8:d4:3e: e5:ae:3d:9e:ce:e5:27:33:aa:d8:ff:96:9f:df:c0:d3:05:de: 71:67:27:94:0f:16:ef:f5:91:3c:9e:8b:76:2c:f6:f1:8f:aa: 04:e6:ec:c0:5a:2f:f8:6f:08:c8:c2:9c:1a:70:bb:f0:b4:62: f6:c1:aa:15:1a:3b:b1:30:c6:4a:69:49:f3:7a:cb:54:cf:fc: 90:d2:2a:54:20:f8:c3:0f:db:ef:7f:8d:76:98:64:28:0c:f3: 48:89:be:38:0d:4b:a7:b8:cb:25:81:77:ed:03:e6:25:b6:dc: 1a:c0:58:fc:d4:8a:e5:b8:41:6f:c6:f0:14:ce:99:48:5d:26: 68:f6:92:9f:46:6b:8d:2a:5d:b6:83:fd:0d:96:bf:d9:c7:06: a4:3f:07:b8:55:08:7c:8c:a8:f1:ca:ed:d1:8b:78:26:4f:97: c1:50:b2:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdN5g6IUMbHjFSwuAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI0MDkyMzAxMDAzMVoXDTI0MTIyMjAyMDAzMVowLzEtMCsGA1UEAxMk MmE5NTVkNDUtZDUzNy00ZGUxLTk1MzgtNTFjZGU0NjE3MWE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4EkMV5h43kfUuzu/f4pn/JTgy3i78gCuORwy H8GJPQ/rZlJEgr//MsxnKKvogvh/cT7XFXsRBqWwiqu4Vrr2PZOwMK1TFCbljXeK K2UTFH01fPp/t2rPl/ArD8Lei6guMEpN6ZVK/64YppJdqs+TnYzaqiQVqFse7UrJ WkMm4qHqWrC9KbMkAtaQbcZce1LId0TD8IPj3EzdZm8dB2pknLHnDLC8jUhpM+4k va8YiH/6GJHIkcDztAAjR05lciO/wbeBJ3WjoD5XDHHy3u/m1UCTR4GNQshd2+4D YNx2rLwQgYWq4vhzZYK6KX3j54ox9Cg4DCuwk3OeDXyqP1E8fQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDk9+Uocj4bqxWowkBDiDkYPSVnbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvN2YzM2YxZWEtNTQ3ZC0z NzFmLTgxYTYtYjU0OTI4YTZhZGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSNvQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB3PwByPwLHF0OB92FvmIJyXwYsauoJov+DuQSKTlBl2JiebTtvwfdfT 2EIxzjBqXDmImPeSDv3JfEVGmSPGdwrkUqcAr4SSRPY9rfwBj4cPvELp3/cXE9jU PuWuPZ7O5Sczqtj/lp/fwNMF3nFnJ5QPFu/1kTyei3Ys9vGPqgTm7MBaL/hvCMjC nBpwu/C0YvbBqhUaO7EwxkppSfN6y1TP/JDSKlQg+MMP2+9/jXaYZCgM80iJvjgN S6e4yyWBd+0D5iW23BrAWPzUiuW4QW/G8BTOmUhdJmj2kp9Ga40qXbaD/Q2Wv9nH BqQ/B7hVCHyMqPHK7dGLeCZPl8FQsng= -----END CERTIFICATE-----Generated at Mon Nov 25 03:14:15 2024 by rpki-client on console-ams.rpki-client.org