$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/3924f1b7-789b-3758-bb3e-78e15e71890c.roa File: 3924f1b7-789b-3758-bb3e-78e15e71890c.roa (raw, json) Hash identifier: kZ4d05z9TpMs5qaXrR0CWOczCYyXG69XP9edLtqLq3M= Subject key identifier: 59:EC:4B:58:69:D2:C9:30:1D:2A:7D:E2:8B:7D:D8:67:FB:19:78:0D Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F4328584797E1467918C3DD7D6CA787B0 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/3924f1b7-789b-3758-bb3e-78e15e71890c.roa Signing time: Sat 19 Oct 2024 13:00:42 +0000 ROA not before: Sat 19 Oct 2024 13:00:42 +0000 ROA not after: Fri 17 Jan 2025 14:00:42 +0000 asID: 11290 IP address blocks: 72.11.160.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:97:e1:46:79:18:c3:dd:7d:6c:a7:87:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Oct 19 13:00:42 2024 GMT Not After : Jan 17 14:00:42 2025 GMT Subject: CN=574f44e7-e71c-483c-801d-b0d6fcca73e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a7:3b:b4:7f:97:e6:cb:eb:50:f9:2c:92:d1: 68:6e:d6:e5:65:64:b0:cf:a0:9a:df:84:0c:9f:9d: 70:e5:f1:da:bf:a0:4b:30:f8:f7:c9:76:b9:2e:07: c9:f0:8d:4d:b3:3e:1e:78:cd:ed:19:ad:bf:f3:8f: b8:60:cd:c6:a4:0e:f4:b6:97:5f:6f:06:7c:6a:35: 41:8e:04:4c:db:94:51:25:c3:66:12:d3:06:81:7f: da:99:00:54:56:c1:a6:01:e4:3d:80:33:35:2e:f9: 22:ff:6b:2f:79:d3:17:d6:66:f9:94:70:b1:65:a4: a9:db:6a:b0:e2:fd:06:ab:16:18:2a:a1:1b:24:10: d2:f9:87:0c:79:98:5a:76:70:8f:b3:62:52:24:8a: a3:83:a1:6e:d5:e9:c7:16:c5:fa:79:da:26:08:e3: e8:70:e3:cd:d2:be:b7:32:5e:9f:c8:bd:4e:43:cc: 4a:80:48:c2:2e:8e:29:65:66:54:e7:e3:f2:44:99: 54:96:f0:ab:05:1f:c8:a0:e0:f8:e3:fb:ad:88:e3: 58:ff:76:e8:ef:93:3f:4b:6e:1b:2a:96:0c:d0:c8: 64:33:a1:1d:7f:19:e9:da:6f:39:2e:88:67:34:d6: cb:24:66:2b:10:f2:2a:9c:e1:bd:e7:c8:3e:d1:9a: 60:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:EC:4B:58:69:D2:C9:30:1D:2A:7D:E2:8B:7D:D8:67:FB:19:78:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/3924f1b7-789b-3758-bb3e-78e15e71890c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv4: 72.11.160.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:0a:b6:71:13:86:67:75:0b:d9:09:41:88:cf:79:8a:1c:8d: 6b:a0:c8:13:07:34:1d:90:01:d0:3e:4b:19:eb:5e:5c:db:59: eb:eb:15:28:5b:42:5d:ea:d5:87:e8:6f:00:7b:af:37:01:38: d3:17:23:ed:b6:6d:36:00:2e:f2:ab:35:2e:9d:f7:b6:ac:90: e5:5f:d0:12:2d:1e:b4:a1:b9:61:40:f3:0b:e3:16:83:99:f5: e6:a6:b0:fd:8b:df:44:e3:86:5c:58:2d:82:d1:3b:e7:41:ce: 52:2d:34:63:5e:31:05:cd:07:93:88:1b:18:01:39:41:4b:61: 79:94:db:d5:0a:f4:e1:c1:cb:fe:6b:ba:37:57:72:52:e3:51: d6:3e:29:ad:e5:65:2c:40:99:27:2f:60:81:e0:07:d0:9c:0e: 3e:2e:eb:74:ab:75:c6:d9:2a:aa:bb:d4:a5:a6:6c:72:6e:2a: 16:e7:c2:10:b4:46:de:dd:7f:c7:19:ed:82:6c:8d:1b:00:ac: 75:01:fd:3c:ee:59:d8:2d:bf:06:77:52:19:eb:26:79:6d:43: b6:d5:ad:1d:d5:3a:f3:77:b8:54:d8:20:61:7a:42:4f:53:a4: 30:88:94:73:6d:a5:01:64:b7:17:10:35:58:83:75:76:32:f3: 48:0f:9d:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeX4UZ5GMPdfWynh7AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI0MTAxOTEzMDA0MloXDTI1MDExNzE0MDA0MlowLzEtMCsGA1UEAxMk NTc0ZjQ0ZTctZTcxYy00ODNjLTgwMWQtYjBkNmZjY2E3M2UyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6c7tH+X5svrUPksktFobtblZWSwz6Ca34QM n51w5fHav6BLMPj3yXa5LgfJ8I1Nsz4eeM3tGa2/84+4YM3GpA70tpdfbwZ8ajVB jgRM25RRJcNmEtMGgX/amQBUVsGmAeQ9gDM1Lvki/2svedMX1mb5lHCxZaSp22qw 4v0GqxYYKqEbJBDS+YcMeZhadnCPs2JSJIqjg6Fu1enHFsX6edomCOPocOPN0r63 Ml6fyL1OQ8xKgEjCLo4pZWZU5+PyRJlUlvCrBR/IoOD44/utiONY/3bo75M/S24b KpYM0MhkM6Edfxnp2m85LohnNNbLJGYrEPIqnOG958g+0ZpgTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFnsS1hp0skwHSp94ot92Gf7GXgNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvMzkyNGYxYjctNzg5Yi0z NzU4LWJiM2UtNzhlMTVlNzE4OTBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFSAugMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABUKtnEThmd1C9kJQYjPeYocjWugyBMHNB2QAdA+SxnrXlzbWevrFShb Ql3q1YfobwB7rzcBONMXI+22bTYALvKrNS6d97askOVf0BItHrShuWFA8wvjFoOZ 9eamsP2L30TjhlxYLYLRO+dBzlItNGNeMQXNB5OIGxgBOUFLYXmU29UK9OHBy/5r ujdXclLjUdY+Ka3lZSxAmScvYIHgB9CcDj4u63SrdcbZKqq71KWmbHJuKhbnwhC0 Rt7df8cZ7YJsjRsArHUB/TzuWdgtvwZ3UhnrJnltQ7bVrR3VOvN3uFTYIGF6Qk9T pDCIlHNtpQFktxcQNViDdXYy80gPnQ0= -----END CERTIFICATE-----Generated at Thu Nov 21 21:45:10 2024 by rpki-client on console-ams.rpki-client.org