$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c38d88ed-ad32-3c66-93d3-7f9c32d57172.roa File: c38d88ed-ad32-3c66-93d3-7f9c32d57172.roa (raw, json) Hash identifier: I6kFG7Jukk9wL5c+8mqhQ6bDyT0i1hAQaL5hamZ9Gh8= Subject key identifier: C3:A4:71:63:1C:0B:1E:09:B0:D3:C9:8E:1A:C2:82:58:0A:E7:77:D4 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F432858474DE60EF17F71240C4823A880 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c38d88ed-ad32-3c66-93d3-7f9c32d57172.roa Signing time: Mon 23 Sep 2024 01:00:31 +0000 ROA not before: Mon 23 Sep 2024 01:00:31 +0000 ROA not after: Sun 22 Dec 2024 02:00:31 +0000 asID: 22773 IP address blocks: 72.219.252.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:4d:e6:0e:f1:7f:71:24:0c:48:23:a8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 23 01:00:31 2024 GMT Not After : Dec 22 02:00:31 2024 GMT Subject: CN=ff77843d-8b38-4598-aa3f-032b60820e5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:a4:ce:ed:c2:ca:83:c3:95:eb:01:b7:1f:e6: 26:24:d0:21:0f:8e:b8:c1:f3:89:e9:60:c1:c7:42: 71:09:44:23:ef:b1:f1:4f:a6:ea:53:a7:02:c2:c8: 35:c7:17:24:90:72:51:38:dd:48:4f:7e:10:ae:71: 08:7f:04:10:79:74:22:0f:67:fe:63:1d:00:bc:a7: c9:c8:0b:1e:c3:a8:9e:9e:dd:f5:1f:ee:96:f6:38: 65:ef:62:ed:12:e7:1e:63:a0:e7:11:d8:eb:f5:67: 0d:2f:a0:0d:6f:91:2b:0b:b7:8c:b4:15:8a:09:30: c4:5f:8b:b5:78:5f:53:5d:cb:6e:26:42:4d:2e:a4: aa:e2:e2:c4:9c:f2:a0:72:67:1d:d7:da:79:bd:dd: 11:76:44:2e:71:ae:e2:7d:84:0e:5a:8d:1a:db:38: 89:f3:98:2a:24:a3:82:99:b8:a4:6c:55:93:1b:89: e4:08:9f:63:c2:ca:72:c7:28:48:8e:e4:a2:60:66: c8:de:5f:f8:83:2e:7f:d2:ff:2f:07:1c:7a:14:29: 97:e6:9a:65:4f:36:83:60:7a:9e:da:bd:f6:a6:72: b2:ce:61:f4:a9:c1:1f:4b:7a:b0:db:f6:e3:f2:94: 6b:cf:4c:c5:d2:89:39:17:98:73:c9:88:c4:fc:0f: 11:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:A4:71:63:1C:0B:1E:09:B0:D3:C9:8E:1A:C2:82:58:0A:E7:77:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c38d88ed-ad32-3c66-93d3-7f9c32d57172.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.219.252.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:27:29:8a:aa:51:65:bf:4e:f0:17:87:77:20:ed:38:3f:46: 1a:84:71:e8:bf:2c:c8:c0:4e:43:9d:c9:10:42:80:0f:1a:9c: 9c:ff:e3:fc:49:6b:73:fd:98:d3:6a:5a:34:79:f9:fc:13:12: bb:68:1e:3b:a7:55:57:73:ea:32:d8:f6:c1:a4:11:0b:55:17: 6c:12:14:a5:56:29:18:56:e1:0b:3d:0f:96:bb:73:84:b3:ae: 37:e3:a7:eb:a7:86:54:d0:0d:e2:d7:c8:36:27:fb:86:5b:ab: 94:76:42:22:75:11:d6:68:4b:29:00:51:f2:1a:02:45:4c:fb: 72:51:4b:a2:f4:9c:8c:3f:64:9c:bf:9e:f2:d8:85:45:db:f5: 72:bb:2b:f5:93:3a:dd:83:4d:92:8e:54:0b:b9:26:fe:ec:b9: bf:60:d9:91:03:b4:54:0a:52:7c:c0:e3:c5:85:33:64:dd:cb: 92:09:23:05:ce:2d:82:32:90:f7:54:4a:1a:44:02:ab:8d:5c: dc:78:c9:b1:67:f2:e3:64:bc:fb:ef:23:58:ae:94:63:a3:2a: ab:37:bf:df:5d:71:e0:29:ea:64:6e:c6:a6:b3:96:73:e3:66: 48:a1:f5:ef:26:7e:17:51:84:ba:ec:0d:b6:26:5f:57:da:4d: ba:23:e7:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdN5g7xf3EkDEgjqIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI0MDkyMzAxMDAzMVoXDTI0MTIyMjAyMDAzMVowLzEtMCsGA1UEAxMk ZmY3Nzg0M2QtOGIzOC00NTk4LWFhM2YtMDMyYjYwODIwZTVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlaTO7cLKg8OV6wG3H+YmJNAhD464wfOJ6WDB x0JxCUQj77HxT6bqU6cCwsg1xxckkHJRON1IT34QrnEIfwQQeXQiD2f+Yx0AvKfJ yAsew6ient31H+6W9jhl72LtEuceY6DnEdjr9WcNL6ANb5ErC7eMtBWKCTDEX4u1 eF9TXctuJkJNLqSq4uLEnPKgcmcd19p5vd0RdkQuca7ifYQOWo0a2ziJ85gqJKOC mbikbFWTG4nkCJ9jwspyxyhIjuSiYGbI3l/4gy5/0v8vBxx6FCmX5pplTzaDYHqe 2r32pnKyzmH0qcEfS3qw2/bj8pRrz0zF0ok5F5hzyYjE/A8RIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMOkcWMcCx4JsNPJjhrCglgK53fUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYzM4ZDg4ZWQtYWQzMi0z YzY2LTkzZDMtN2Y5YzMyZDU3MTcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSNv8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADknKYqqUWW/TvAXh3cg7Tg/RhqEcei/LMjATkOdyRBCgA8anJz/4/xJ a3P9mNNqWjR5+fwTErtoHjunVVdz6jLY9sGkEQtVF2wSFKVWKRhW4Qs9D5a7c4Sz rjfjp+unhlTQDeLXyDYn+4Zbq5R2QiJ1EdZoSykAUfIaAkVM+3JRS6L0nIw/ZJy/ nvLYhUXb9XK7K/WTOt2DTZKOVAu5Jv7sub9g2ZEDtFQKUnzA48WFM2Tdy5IJIwXO LYIykPdUShpEAquNXNx4ybFn8uNkvPvvI1iulGOjKqs3v99dceAp6mRuxqazlnPj Zkih9e8mfhdRhLrsDbYmX1faTboj55w= -----END CERTIFICATE-----Generated at Fri Nov 22 00:23:55 2024 by rpki-client on console-fra.rpki-client.org