$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/724dc813-9136-3075-bcba-f77834af4133.roa File: 724dc813-9136-3075-bcba-f77834af4133.roa (raw, json) Hash identifier: +WEMLEkDy385ivEidgLUdvEicdctpeNaKaCRnIwS2uw= Subject key identifier: 8B:7C:A7:E1:DF:23:1D:9B:38:6D:EC:72:0F:63:54:C1:35:2F:9E:28 Certificate issuer: /CN=add35f11-0294-4be9-94b7-49cac2bcb001 Certificate serial: 010D0C9F43285847845671D2C49B37435B805D00 Authority key identifier: A5:7A:61:2C:B0:49:28:3C:1F:09:9D:0D:5E:0C:F3:8E:B9:58:F8:CA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/724dc813-9136-3075-bcba-f77834af4133.roa Signing time: Sat 12 Oct 2024 13:00:42 +0000 ROA not before: Sat 12 Oct 2024 13:00:42 +0000 ROA not after: Fri 10 Jan 2025 14:00:42 +0000 asID: 923 IP address blocks: 207.167.121.0/24 maxlen: 24 2602:fbf5::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/add35f11-0294-4be9-94b7-49cac2bcb001.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/add35f11-0294-4be9-94b7-49cac2bcb001.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:84:56:71:d2:c4:9b:37:43:5b:80:5d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=add35f11-0294-4be9-94b7-49cac2bcb001 Validity Not Before: Oct 12 13:00:42 2024 GMT Not After : Jan 10 14:00:42 2025 GMT Subject: CN=fb7a9eed-303c-4526-b753-7acd1ebea391 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b7:7b:74:29:e5:e6:67:36:db:12:4b:f8:22: df:25:80:80:93:53:e7:c4:6a:71:b4:d6:93:1d:2c: 6c:c8:05:58:c6:3a:3d:86:9d:77:8f:93:16:37:46: 44:f1:df:00:af:ef:74:60:fd:fd:6f:0b:45:1a:5b: 7b:cc:4e:d1:0b:f9:07:9c:cf:5a:5e:03:1b:9d:1b: 24:ae:74:cb:46:5f:07:7a:5c:0d:81:3c:4d:7d:f3: e8:03:ed:ad:65:52:c1:e5:ee:e8:21:38:e4:89:f0: 33:99:39:22:04:12:8a:cb:d7:74:3b:d6:c1:10:55: 48:59:c9:a7:3c:0e:a9:18:0a:9e:56:eb:fb:6a:78: 9f:ec:f1:12:b4:ea:11:1f:4d:16:06:1b:94:23:2b: 64:0d:b9:b4:38:62:b6:55:22:f9:e5:e8:34:2e:aa: 6e:f0:9e:ca:95:4e:31:e6:b6:02:fa:44:21:74:5e: d9:ba:92:77:bc:05:65:d2:e6:42:73:a8:79:1d:2f: 83:94:58:b7:52:d8:cd:86:00:43:76:9e:25:40:05: 7f:db:95:17:c7:50:26:9b:00:25:e7:1e:fa:ff:35: e6:3c:9b:a7:3b:f0:9a:1a:4f:20:02:cb:3f:20:f1: 90:ae:e1:82:12:ca:4b:ef:24:35:ea:16:91:1a:bb: 8f:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:7C:A7:E1:DF:23:1D:9B:38:6D:EC:72:0F:63:54:C1:35:2F:9E:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/724dc813-9136-3075-bcba-f77834af4133.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/add35f11-0294-4be9-94b7-49cac2bcb001.crl X509v3 Authority Key Identifier: keyid:A5:7A:61:2C:B0:49:28:3C:1F:09:9D:0D:5E:0C:F3:8E:B9:58:F8:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001.cer sbgp-ipAddrBlock: critical IPv4: 207.167.121.0/24 IPv6: 2602:fbf5::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bd:b2:4c:94:55:c3:a2:51:19:b8:8a:0c:01:e3:2f:8f:35:71: 84:7c:07:7c:f0:22:dd:8b:4e:fb:91:f5:8d:0d:6a:ac:3b:bf: a1:95:7e:8b:40:54:43:ae:15:1e:a4:e0:3c:aa:eb:18:50:af: 12:a1:25:33:b7:02:85:02:81:19:82:a1:e6:70:1d:f4:d8:cb: 21:3e:65:6e:cb:60:5c:ca:e6:a6:bb:82:96:ef:bf:5f:ae:25: ee:86:b3:72:87:f7:7e:d3:7e:7c:7d:88:f1:11:a2:5e:14:41: cd:bf:34:81:c6:6e:3d:b3:3c:c0:e2:bb:c0:bd:50:72:12:8e: 1d:ac:3d:0a:6c:7c:47:11:bf:21:64:cf:21:30:ef:6c:d6:59: cb:f4:8d:6d:ba:51:4d:50:dd:f1:e3:56:25:8a:88:fd:48:e0: 0c:24:68:13:30:e3:0b:c8:70:eb:b9:28:83:77:28:c6:7d:14: 9b:d5:ce:2c:0f:39:1f:ca:1e:6c:b3:3e:5f:01:d4:8e:44:bb: be:e0:ae:3d:6d:3d:49:ff:8e:04:fc:ff:49:92:2b:5d:0f:5a: db:13:84:25:7d:e9:4a:21:21:96:a8:21:a7:ed:14:87:ac:d0: ab:1b:1d:c4:bd:6b:75:9a:a0:8c:ff:0c:5e:89:45:14:67:09: 48:6c:92:c4 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEeEVnHSxJs3Q1uAXQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWRkMzVmMTEtMDI5NC00YmU5LTk0YjctNDljYWMyYmNi MDAxMB4XDTI0MTAxMjEzMDA0MloXDTI1MDExMDE0MDA0MlowLzEtMCsGA1UEAxMk ZmI3YTllZWQtMzAzYy00NTI2LWI3NTMtN2FjZDFlYmVhMzkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAord7dCnl5mc22xJL+CLfJYCAk1PnxGpxtNaT HSxsyAVYxjo9hp13j5MWN0ZE8d8Ar+90YP39bwtFGlt7zE7RC/kHnM9aXgMbnRsk rnTLRl8HelwNgTxNffPoA+2tZVLB5e7oITjkifAzmTkiBBKKy9d0O9bBEFVIWcmn PA6pGAqeVuv7anif7PEStOoRH00WBhuUIytkDbm0OGK2VSL55eg0Lqpu8J7KlU4x 5rYC+kQhdF7ZupJ3vAVl0uZCc6h5HS+DlFi3UtjNhgBDdp4lQAV/25UXx1AmmwAl 5x76/zXmPJunO/CaGk8gAss/IPGQruGCEspL7yQ16haRGruPDQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFIt8p+HfIx2bOG3scg9jVME1L54oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hZGQz NWYxMS0wMjk0LTRiZTktOTRiNy00OWNhYzJiY2IwMDEvNzI0ZGM4MTMtOTEzNi0z MDc1LWJjYmEtZjc3ODM0YWY0MTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWRkMzVmMTEtMDI5NC00YmU5LTk0 YjctNDljYWMyYmNiMDAxL2FkZDM1ZjExLTAyOTQtNGJlOS05NGI3LTQ5Y2FjMmJj YjAwMS5jcmwwHwYDVR0jBBgwFoAUpXphLLBJKDwfCZ0NXgzzjrlY+MowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hZGQzNWYxMS0wMjk0LTRiZTktOTRiNy00OWNh YzJiY2IwMDEuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAz6d5MA4E AgACMAgDBgAmAvv1ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQC9skyUVcOiURm4igwB4y+PNXGEfAd88CLd i077kfWNDWqsO7+hlX6LQFRDrhUepOA8qusYUK8SoSUztwKFAoEZgqHmcB302Msh PmVuy2Bcyuamu4KW779friXuhrNyh/d+0358fYjxEaJeFEHNvzSBxm49szzA4rvA vVByEo4drD0KbHxHEb8hZM8hMO9s1lnL9I1tulFNUN3x41Ylioj9SOAMJGgTMOML yHDruSiDdyjGfRSb1c4sDzkfyh5ssz5fAdSORLu+4K49bT1J/44E/P9JkitdD1rb E4QlfelKISGWqCGn7RSHrNCrGx3EvWt1mqCM/wxeiUUUZwlIbJLE -----END CERTIFICATE-----Generated at Fri Nov 22 04:39:18 2024 by rpki-client on console-ams.rpki-client.org