$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cd35aab8-3087-36a1-a242-a5e1aadb6e13.roa File: cd35aab8-3087-36a1-a242-a5e1aadb6e13.roa (raw, json) Hash identifier: TFUvj7PREWy7/SOQp3xKbn2LDiDUbULg5xFsvHYKxro= Subject key identifier: 77:A8:1F:06:AF:2A:07:98:A5:31:BE:E5:E4:AC:61:68:9C:C7:EF:E4 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285847DA59C66E51E0F4752509A000 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cd35aab8-3087-36a1-a242-a5e1aadb6e13.roa Signing time: Tue 12 Nov 2024 08:27:03 +0000 ROA not before: Tue 12 Nov 2024 08:27:03 +0000 ROA not after: Mon 10 Feb 2025 08:27:03 +0000 asID: 22773 IP address blocks: 72.194.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:da:59:c6:6e:51:e0:f4:75:25:09:a0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Nov 12 08:27:03 2024 GMT Not After : Feb 10 08:27:03 2025 GMT Subject: CN=2c453c66-6463-4f21-9baa-98df28e3ea63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:03:64:62:55:f2:f3:9d:6e:35:07:01:f1:d8: 84:9d:09:a0:70:1e:c6:bf:5b:16:46:8a:b7:de:01: 9e:b6:09:01:0f:ff:fe:73:a7:fa:92:27:4f:22:55: 74:34:85:42:32:64:6a:2e:1a:d6:51:a4:30:6f:39: a1:4c:f2:a7:19:09:1e:d3:d9:26:71:18:93:00:d1: 60:bb:cc:ce:f8:7e:40:5d:f3:f4:ad:82:c7:c8:3b: 6b:0a:b4:82:bf:76:29:e9:e1:3d:0a:3b:84:94:81: b4:d8:0f:e8:96:c7:6a:48:6a:b2:fb:4c:b8:42:c2: d5:52:8c:c6:4c:ba:80:99:d4:92:6b:d8:b7:7f:40: 53:bf:61:61:d8:5f:a6:4c:b7:fb:bc:7a:3f:e6:8d: d3:f0:46:4d:9e:05:80:bc:a9:cb:93:6e:82:e4:cc: 2c:c9:57:be:f7:0f:d7:a2:54:3d:aa:c1:9b:11:45: 0b:2b:e1:49:d3:0a:48:14:28:1a:8f:c3:28:f7:fd: d5:1c:e6:14:26:c7:8e:ed:50:1b:f9:7a:8e:13:24: 2c:60:57:87:eb:43:32:23:b2:ea:9b:65:84:79:f3: 4f:64:4e:2e:07:b8:34:4f:68:f9:60:2e:eb:50:47: 72:9e:fe:50:29:c4:17:46:c0:4e:45:a0:53:11:dd: 4b:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:A8:1F:06:AF:2A:07:98:A5:31:BE:E5:E4:AC:61:68:9C:C7:EF:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cd35aab8-3087-36a1-a242-a5e1aadb6e13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.194.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:44:33:bc:7d:99:65:f1:f2:6c:70:7e:d7:07:4e:c3:b9:3b: a3:3c:a7:5a:9b:d2:c6:6c:5f:f1:b6:e5:4f:97:c8:e9:e5:b3: f4:15:91:9d:29:59:7c:fe:78:7c:30:cd:13:d1:9e:74:57:fd: 07:c8:d9:c5:af:10:dc:c2:b9:87:0b:6a:02:64:f0:d9:19:a5: c0:4d:80:66:e7:db:97:fa:c4:a2:a9:0b:e3:a0:52:b9:83:d9: 5b:1a:45:2f:74:aa:b6:7f:b7:83:0f:c6:8a:d1:0c:db:2a:e9: 8d:db:ec:3d:c2:79:88:cc:dd:f3:88:29:2a:e4:17:df:a2:e7: 4c:3c:be:3a:94:7b:7d:72:8f:7d:28:0f:f3:da:f6:b0:37:e0: 10:f1:fc:b3:b0:88:62:d7:d6:fb:2d:15:42:0f:e7:90:54:f5: 46:74:60:02:de:e6:e6:2d:1d:94:26:cb:62:4c:9c:2c:6d:95: 04:87:36:1c:e4:9a:58:7a:ef:9f:90:1b:59:a7:0f:47:59:69: 0f:26:23:a7:be:0d:6d:ec:3a:1a:de:60:29:8b:35:8f:4a:4b: 2f:d5:ed:0c:51:e6:dd:24:4f:ec:7f:79:a7:84:39:92:88:d5: 43:b4:de:e0:a0:05:95:9a:3d:e8:23:bc:bb:49:be:07:4e:a1: f5:17:45:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfaWcZuUeD0dSUJoAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI0MTExMjA4MjcwM1oXDTI1MDIxMDA4MjcwM1owLzEtMCsGA1UEAxMk MmM0NTNjNjYtNjQ2My00ZjIxLTliYWEtOThkZjI4ZTNlYTYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQNkYlXy851uNQcB8diEnQmgcB7Gv1sWRoq3 3gGetgkBD//+c6f6kidPIlV0NIVCMmRqLhrWUaQwbzmhTPKnGQke09kmcRiTANFg u8zO+H5AXfP0rYLHyDtrCrSCv3Yp6eE9CjuElIG02A/olsdqSGqy+0y4QsLVUozG TLqAmdSSa9i3f0BTv2Fh2F+mTLf7vHo/5o3T8EZNngWAvKnLk26C5MwsyVe+9w/X olQ9qsGbEUULK+FJ0wpIFCgaj8Mo9/3VHOYUJseO7VAb+XqOEyQsYFeH60MyI7Lq m2WEefNPZE4uB7g0T2j5YC7rUEdynv5QKcQXRsBORaBTEd1LdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHeoHwavKgeYpTG+5eSsYWicx+/kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvY2QzNWFhYjgtMzA4Ny0z NmExLWEyNDItYTVlMWFhZGI2ZTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESMLQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKVEM7x9mWXx8mxwftcHTsO5O6M8p1qb0sZsX/G25U+XyOnls/QVkZ0p WXz+eHwwzRPRnnRX/QfI2cWvENzCuYcLagJk8NkZpcBNgGbn25f6xKKpC+OgUrmD 2VsaRS90qrZ/t4MPxorRDNsq6Y3b7D3CeYjM3fOIKSrkF9+i50w8vjqUe31yj30o D/Pa9rA34BDx/LOwiGLX1vstFUIP55BU9UZ0YALe5uYtHZQmy2JMnCxtlQSHNhzk mlh675+QG1mnD0dZaQ8mI6e+DW3sOhreYCmLNY9KSy/V7QxR5t0kT+x/eaeEOZKI 1UO03uCgBZWaPegjvLtJvgdOofUXRWk= -----END CERTIFICATE-----Generated at Fri Nov 22 00:23:56 2024 by rpki-client on console-fra.rpki-client.org