$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/b901d0b0-12e7-3431-9cd8-0764317e0506.roa File: b901d0b0-12e7-3431-9cd8-0764317e0506.roa (raw, json) Hash identifier: nmGqqrj1OHvcVbIimdhy0WkfB5XBRU1eeUdXu9OzX+U= Subject key identifier: 33:9A:D1:AD:DE:D6:F0:E5:19:62:22:FC:AE:55:2F:EF:6C:7F:08:1C Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F43285847DC64AE5C05C0040A23A31E90 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/b901d0b0-12e7-3431-9cd8-0764317e0506.roa Signing time: Wed 13 Nov 2024 02:00:28 +0000 ROA not before: Wed 13 Nov 2024 02:00:28 +0000 ROA not after: Tue 11 Feb 2025 02:00:28 +0000 asID: 11090 IP address blocks: 72.35.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:dc:64:ae:5c:05:c0:04:0a:23:a3:1e:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Nov 13 02:00:28 2024 GMT Not After : Feb 11 02:00:28 2025 GMT Subject: CN=0a772976-4e3c-419d-8a20-d6a9c6335c80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:8c:20:6f:cf:33:53:13:86:96:79:83:93:54: ef:84:a3:58:89:c1:3f:81:4a:3e:d6:1b:09:9e:e3: 2a:18:be:ca:d3:af:cd:a8:bc:bc:4c:4d:7d:ba:c4: 4d:31:86:36:62:4e:f7:eb:25:8f:16:53:4c:6e:d3: 0f:30:34:61:ce:d7:ae:39:59:f3:df:b0:be:96:fd: de:be:19:29:5a:65:ef:fa:20:90:10:24:7d:79:63: b8:a6:94:dc:06:73:b0:8c:62:8a:5f:f3:f6:d4:26: bd:9b:0e:6f:c6:9c:93:16:69:16:ee:e2:8e:e2:33: 5d:df:45:72:06:35:06:79:09:5e:11:61:b2:e4:f8: 80:ee:a2:f4:8c:ec:32:cf:72:76:d0:a8:db:23:b2: f3:35:8b:3d:23:23:6c:91:8d:b4:61:84:6e:49:f6: 49:34:69:c5:68:f5:e0:ce:0f:06:13:95:4e:ec:5b: 47:c7:d2:f0:bc:84:74:ca:a1:9b:55:91:fa:df:f3: da:21:83:cc:5d:0f:de:4b:f7:3a:bd:2d:ed:56:64: ed:2f:e3:2a:01:23:d1:ac:cf:b4:f5:10:1a:41:e5: 4c:0d:09:70:ea:c5:6f:5e:1d:ba:86:4a:8e:98:a3: 06:95:ce:92:80:9c:99:ae:6c:f4:0e:69:9d:69:27: 57:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:9A:D1:AD:DE:D6:F0:E5:19:62:22:FC:AE:55:2F:EF:6C:7F:08:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/b901d0b0-12e7-3431-9cd8-0764317e0506.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 72.35.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:24:e7:08:89:0b:a0:d7:a0:eb:6e:11:64:62:7e:03:a6:e7: 8c:1f:14:b9:8f:64:09:1f:1d:3c:4f:8d:80:1e:49:b5:15:8a: dc:84:01:1e:9c:b5:53:00:7d:a1:fe:04:20:00:e7:18:d4:23: 9c:58:21:b2:ab:0e:43:50:ff:1b:47:7f:38:d9:19:7f:fe:34: fb:57:4d:24:09:7c:37:90:5f:d6:6a:43:11:0c:a9:cb:6e:bf: 52:3d:9b:98:f1:65:cb:aa:6b:38:10:24:91:1b:4a:30:83:41: 39:a6:99:3d:85:ef:39:95:24:69:d7:9e:9f:7d:ea:9e:21:e0: 45:9a:9e:83:cc:0b:3a:3e:6f:40:38:7a:75:37:33:55:ff:28: 6e:87:9a:d3:ed:7e:11:00:d3:8e:a9:30:25:3f:0f:25:51:8f: 8c:a9:59:c3:b7:38:ff:4a:83:4e:d2:04:84:a5:37:12:02:65: a0:e8:60:52:09:58:14:02:e6:c7:24:39:0a:01:8d:ed:c3:ec: 0b:cd:ac:0d:cb:1f:71:6f:a2:00:0c:66:bb:58:92:82:aa:4c: e7:98:05:6b:40:c5:71:8e:39:23:44:0b:46:4c:de:70:8f:b3: dd:ff:bb:05:58:1c:cf:7f:6f:d2:21:a5:cf:c6:db:a3:21:52: fc:8d:80:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfcZK5cBcAECiOjHpAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI0MTExMzAyMDAyOFoXDTI1MDIxMTAyMDAyOFowLzEtMCsGA1UEAxMk MGE3NzI5NzYtNGUzYy00MTlkLThhMjAtZDZhOWM2MzM1YzgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA54wgb88zUxOGlnmDk1TvhKNYicE/gUo+1hsJ nuMqGL7K06/NqLy8TE19usRNMYY2Yk736yWPFlNMbtMPMDRhzteuOVnz37C+lv3e vhkpWmXv+iCQECR9eWO4ppTcBnOwjGKKX/P21Ca9mw5vxpyTFmkW7uKO4jNd30Vy BjUGeQleEWGy5PiA7qL0jOwyz3J20KjbI7LzNYs9IyNskY20YYRuSfZJNGnFaPXg zg8GE5VO7FtHx9LwvIR0yqGbVZH63/PaIYPMXQ/eS/c6vS3tVmTtL+MqASPRrM+0 9RAaQeVMDQlw6sVvXh26hkqOmKMGlc6SgJyZrmz0DmmdaSdXLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDOa0a3e1vDlGWIi/K5VL+9sfwgcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvYjkwMWQwYjAtMTJlNy0z NDMxLTljZDgtMDc2NDMxN2UwNTA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSCNsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIkk5wiJC6DXoOtuEWRifgOm54wfFLmPZAkfHTxPjYAeSbUVityEAR6c tVMAfaH+BCAA5xjUI5xYIbKrDkNQ/xtHfzjZGX/+NPtXTSQJfDeQX9ZqQxEMqctu v1I9m5jxZcuqazgQJJEbSjCDQTmmmT2F7zmVJGnXnp996p4h4EWanoPMCzo+b0A4 enU3M1X/KG6HmtPtfhEA046pMCU/DyVRj4ypWcO3OP9Kg07SBISlNxICZaDoYFIJ WBQC5sckOQoBje3D7AvNrA3LH3FvogAMZrtYkoKqTOeYBWtAxXGOOSNEC0ZM3nCP s93/uwVYHM9/b9Ihpc/G26MhUvyNgK8= -----END CERTIFICATE-----Generated at Sun Nov 24 17:22:19 2024 by rpki-client on console-fra.rpki-client.org