$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/d95300ce-edc2-374f-9bbe-f66958b3ae81.roa File: d95300ce-edc2-374f-9bbe-f66958b3ae81.roa (raw, json) Hash identifier: mdOx5rpVrMqXHBH6eAgMaHRptpiEUQL6tLJde2aPu3w= Subject key identifier: A0:21:52:33:8C:62:BE:49:5C:0B:53:54:A0:69:94:94:E9:CA:80:43 Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F43285847DC64AE0D6AD082460B9ED5C0 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/d95300ce-edc2-374f-9bbe-f66958b3ae81.roa Signing time: Wed 13 Nov 2024 02:00:28 +0000 ROA not before: Wed 13 Nov 2024 02:00:28 +0000 ROA not after: Tue 11 Feb 2025 02:00:28 +0000 asID: 11090 IP address blocks: 72.35.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:dc:64:ae:0d:6a:d0:82:46:0b:9e:d5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Nov 13 02:00:28 2024 GMT Not After : Feb 11 02:00:28 2025 GMT Subject: CN=5615677a-9ba5-46f0-8a93-4d0a2e47f733 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:d7:24:d7:9e:ba:50:67:d4:35:4c:f8:28:09: f9:01:8b:6f:11:47:23:07:07:fd:bd:1a:af:bb:28: dd:e9:1a:ec:69:77:cd:f0:5a:9e:d9:50:38:c2:82: f4:3e:79:a8:13:10:cc:19:eb:16:ab:c9:b1:7a:99: 4c:a2:87:ae:14:29:b9:53:9b:b7:cc:a2:d1:7d:73: 97:14:4c:06:2b:5d:8c:0b:69:0c:9f:cd:e3:7f:01: b0:d8:e6:c7:72:dc:0f:5a:24:38:1e:03:d4:8e:83: e9:cb:ca:16:73:c8:e6:cb:35:d6:d8:09:c2:af:7b: d0:06:94:58:0e:da:3c:08:e1:a3:ff:c9:92:29:42: a4:06:1f:f7:f1:64:a0:1a:ca:8a:79:d5:9d:c8:46: 50:ae:4f:25:4b:19:6e:85:30:e7:2d:f8:3b:0c:ab: 49:e4:d5:ce:32:08:9a:8e:b9:f8:99:08:b9:46:cd: 2b:9b:36:b1:ed:ce:8f:e5:27:91:a6:66:2a:c8:ad: 90:81:0a:ad:ef:fb:bd:0f:bc:87:43:4c:94:ed:91: 22:4b:d2:84:cd:7c:cc:eb:d4:db:fb:55:bf:85:b4: e3:a2:6f:4b:5e:93:ed:c8:16:29:4c:4c:f8:25:96: 9a:5f:ce:32:fc:9b:8a:ca:1f:03:5d:62:b3:25:01: 41:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:21:52:33:8C:62:BE:49:5C:0B:53:54:A0:69:94:94:E9:CA:80:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/d95300ce-edc2-374f-9bbe-f66958b3ae81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 72.35.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:ec:37:c3:82:f5:f4:35:61:16:e4:85:fe:ab:a6:d3:2d:3e: 53:6d:93:58:30:2a:08:cf:58:69:ce:50:63:2c:20:f4:7b:f4: 7e:f4:1e:5d:89:0e:a0:86:c0:e1:d8:a7:0f:95:0c:9c:01:63: d8:b2:10:5c:90:c9:ea:03:b5:02:b3:3a:06:e4:0d:7f:d9:36: 8a:f0:b5:37:7a:7e:84:df:8e:fe:bc:f2:ad:a4:4a:54:6f:a4: 60:f6:9b:f6:12:f1:94:b4:f6:4a:1b:dd:a1:c9:a9:25:1d:97: 31:6d:3a:fe:c6:ee:22:e4:6e:c5:fa:08:5b:c3:17:74:60:d2: c2:14:0c:5b:f6:ec:ec:f7:77:5d:dd:aa:d8:95:07:e2:35:e4: bb:3b:40:b1:db:7c:8e:a8:ee:4d:08:92:06:cd:87:5c:86:02: e8:5e:a4:6d:99:87:e6:d7:4d:51:ad:73:24:c9:5b:fe:16:60: 2e:bd:86:b7:2d:d1:e4:c0:5e:45:cf:10:1a:ec:2b:13:02:1e: d8:ff:d5:63:4c:a4:07:b5:e7:ed:0e:c2:4d:ea:0e:5d:d8:28: e1:0f:25:f0:2d:cc:00:4b:8e:32:e2:6b:c9:6d:02:16:6e:62: 49:6e:3d:cb:d6:da:24:e8:58:ea:01:d8:22:ad:05:e4:28:2d: 66:48:0a:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfcZK4NatCCRgue1cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI0MTExMzAyMDAyOFoXDTI1MDIxMTAyMDAyOFowLzEtMCsGA1UEAxMk NTYxNTY3N2EtOWJhNS00NmYwLThhOTMtNGQwYTJlNDdmNzMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdck1566UGfUNUz4KAn5AYtvEUcjBwf9vRqv uyjd6RrsaXfN8Fqe2VA4woL0PnmoExDMGesWq8mxeplMooeuFCm5U5u3zKLRfXOX FEwGK12MC2kMn83jfwGw2ObHctwPWiQ4HgPUjoPpy8oWc8jmyzXW2AnCr3vQBpRY Dto8COGj/8mSKUKkBh/38WSgGsqKedWdyEZQrk8lSxluhTDnLfg7DKtJ5NXOMgia jrn4mQi5Rs0rmzax7c6P5SeRpmYqyK2QgQqt7/u9D7yHQ0yU7ZEiS9KEzXzM69Tb +1W/hbTjom9LXpPtyBYpTEz4JZaaX84y/JuKyh8DXWKzJQFBaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKAhUjOMYr5JXAtTVKBplJTpyoBDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvZDk1MzAwY2UtZWRjMi0z NzRmLTliYmUtZjY2OTU4YjNhZTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSCN4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFDsN8OC9fQ1YRbkhf6rptMtPlNtk1gwKgjPWGnOUGMsIPR79H70Hl2J DqCGwOHYpw+VDJwBY9iyEFyQyeoDtQKzOgbkDX/ZNorwtTd6foTfjv688q2kSlRv pGD2m/YS8ZS09kob3aHJqSUdlzFtOv7G7iLkbsX6CFvDF3Rg0sIUDFv27Oz3d13d qtiVB+I15Ls7QLHbfI6o7k0IkgbNh1yGAuhepG2Zh+bXTVGtcyTJW/4WYC69hrct 0eTAXkXPEBrsKxMCHtj/1WNMpAe15+0Owk3qDl3YKOEPJfAtzABLjjLia8ltAhZu YkluPcvW2iToWOoB2CKtBeQoLWZICnQ= -----END CERTIFICATE-----Generated at Thu Nov 21 17:30:26 2024 by rpki-client on console-fra.rpki-client.org