$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/a7081ce6-d0a5-398a-90e4-2bf4df0d85e7.roa File: a7081ce6-d0a5-398a-90e4-2bf4df0d85e7.roa (raw, json) Hash identifier: jfmKSf+OYdqgyHvXxYZUw3DmKsgMK+zh5PlH/hI+wxQ= Subject key identifier: 47:97:33:4E:17:FD:AD:FB:32:33:F6:2C:17:5D:05:D7:17:E7:13:FF Certificate issuer: /CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Certificate serial: 010D0C9F43285847686B8DBF94DB0AF6109450CA Authority key identifier: E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/a7081ce6-d0a5-398a-90e4-2bf4df0d85e7.roa Signing time: Wed 02 Oct 2024 13:00:42 +0000 ROA not before: Wed 02 Oct 2024 13:00:42 +0000 ROA not after: Tue 31 Dec 2024 14:00:42 +0000 asID: 396085 IP address blocks: 72.249.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:68:6b:8d:bf:94:db:0a:f6:10:94:50:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Validity Not Before: Oct 2 13:00:42 2024 GMT Not After : Dec 31 14:00:42 2024 GMT Subject: CN=458f7de0-ae60-4fed-adbe-91a74e3b3023 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:1a:52:69:75:3f:7a:da:a3:57:1e:9d:50:85: 2d:48:64:86:fa:52:16:24:ca:0a:45:c5:ef:84:84: 32:7d:88:ee:71:97:cc:63:43:14:80:de:3c:33:49: 24:86:4a:4c:5a:27:cf:ff:94:4d:f1:09:5a:6e:68: 80:24:4b:2c:81:61:11:ec:58:ce:30:1b:1d:32:fb: db:c3:f1:a9:f7:77:73:24:6f:d3:ce:24:81:29:1b: 45:e2:44:37:4d:2e:26:7b:27:54:97:88:90:d0:21: e5:9f:15:94:2d:a8:68:53:82:27:8d:4d:8a:39:ae: 71:ba:d3:10:4c:c9:21:fd:c1:da:7a:9f:70:6b:2d: aa:df:81:3e:7a:88:c2:8f:2c:17:cb:61:c3:d6:cd: 7b:fd:26:56:fd:bc:6e:d3:bc:f2:89:eb:fa:39:44: 6b:07:79:96:27:33:d8:9e:de:14:f7:51:b9:e8:cf: ff:9e:9d:8b:12:40:81:d8:11:4a:28:50:e9:4b:df: 22:3e:ae:ea:58:50:ba:c9:29:9c:3c:bc:26:54:42: ff:f7:7c:82:16:e5:9b:38:6a:6c:0f:95:ca:93:c7: 19:83:b2:d3:4c:9b:65:92:69:d0:06:7c:36:f1:f3: ea:0e:cf:ac:88:11:67:57:b1:87:63:25:4a:7a:23: 33:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:97:33:4E:17:FD:AD:FB:32:33:F6:2C:17:5D:05:D7:17:E7:13:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/a7081ce6-d0a5-398a-90e4-2bf4df0d85e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl X509v3 Authority Key Identifier: keyid:E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer sbgp-ipAddrBlock: critical IPv4: 72.249.34.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:3c:49:92:3d:ac:88:21:10:dc:8a:04:98:83:af:b2:57:22: f6:3b:65:13:58:f5:79:55:e2:b1:7b:67:23:5e:0c:c7:ba:c2: 31:a9:96:f8:e8:9a:47:ca:c0:0e:ef:ff:40:cd:5c:e0:2b:11: c7:cb:40:d6:d6:9d:ab:21:78:46:5f:d1:0e:c8:0c:de:16:62: fc:08:38:2d:36:66:d3:29:21:6b:01:33:94:23:1d:a7:60:2d: c6:1d:ef:19:3e:f8:62:1c:55:c6:2c:a0:70:35:73:95:35:08: 0c:aa:ca:20:ba:03:07:76:ce:7b:94:59:c4:0f:2f:d3:c9:6a: 1e:8d:21:c2:a2:04:54:f3:93:c9:ea:31:aa:7a:1d:c6:48:c8: e7:6d:a0:b5:27:1f:5c:30:8b:d7:3f:83:f0:07:2d:c6:b4:ac: 0e:9f:0a:2f:e2:d6:d2:dc:98:7a:2e:0f:03:27:4c:da:f9:9a: fc:d1:ba:71:26:49:3c:b6:36:e3:ce:2b:91:0e:99:7a:17:b2: df:52:93:05:d3:52:8a:3d:db:0e:62:8a:25:90:dc:55:9c:27: 14:8d:f5:23:43:45:2a:4c:86:be:4f:0a:a4:bb:ae:7e:e9:a5: 64:78:08:3a:2a:c2:65:42:15:a9:bf:38:24:d7:88:dc:6d:bd: 2a:3c:85:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdoa42/lNsK9hCUUMowDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWRkOGJlOGEtYmVhZC00ZDViLWE4MTgtNGQxNDgyZjQ3 OWZmMB4XDTI0MTAwMjEzMDA0MloXDTI0MTIzMTE0MDA0MlowLzEtMCsGA1UEAxMk NDU4ZjdkZTAtYWU2MC00ZmVkLWFkYmUtOTFhNzRlM2IzMDIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0hpSaXU/etqjVx6dUIUtSGSG+lIWJMoKRcXv hIQyfYjucZfMY0MUgN48M0kkhkpMWifP/5RN8QlabmiAJEssgWER7FjOMBsdMvvb w/Gp93dzJG/TziSBKRtF4kQ3TS4meydUl4iQ0CHlnxWULahoU4InjU2KOa5xutMQ TMkh/cHaep9way2q34E+eojCjywXy2HD1s17/SZW/bxu07zyiev6OURrB3mWJzPY nt4U91G56M//np2LEkCB2BFKKFDpS98iPq7qWFC6ySmcPLwmVEL/93yCFuWbOGps D5XKk8cZg7LTTJtlkmnQBnw28fPqDs+siBFnV7GHYyVKeiMzlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEeXM04X/a37MjP2LBddBdcX5xP/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4 YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0ODJmNDc5ZmYvYTcwODFjZTYtZDBhNS0z OThhLTkwZTQtMmJmNGRmMGQ4NWU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWRkOGJlOGEtYmVhZC00ZDViLWE4 MTgtNGQxNDgyZjQ3OWZmLzFkZDhiZThhLWJlYWQtNGQ1Yi1hODE4LTRkMTQ4MmY0 NzlmZi5jcmwwHwYDVR0jBBgwFoAU4yhAhJRGSB1vsr1QLE5krzJWszcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0 ODJmNDc5ZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPkiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEU8SZI9rIghENyKBJiDr7JXIvY7ZRNY9XlV4rF7ZyNeDMe6wjGplvjo mkfKwA7v/0DNXOArEcfLQNbWnasheEZf0Q7IDN4WYvwIOC02ZtMpIWsBM5QjHadg LcYd7xk++GIcVcYsoHA1c5U1CAyqyiC6Awd2znuUWcQPL9PJah6NIcKiBFTzk8nq Map6HcZIyOdtoLUnH1wwi9c/g/AHLca0rA6fCi/i1tLcmHouDwMnTNr5mvzRunEm STy2NuPOK5EOmXoXst9SkwXTUoo92w5iiiWQ3FWcJxSN9SNDRSpMhr5PCqS7rn7p pWR4CDoqwmVCFam/OCTXiNxtvSo8hVQ= -----END CERTIFICATE-----Generated at Thu Nov 21 21:45:10 2024 by rpki-client on console-ams.rpki-client.org