$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/5986a15c-31f2-3481-a490-90f8833a40b9.roa File: 5986a15c-31f2-3481-a490-90f8833a40b9.roa (raw, json) Hash identifier: mvxMxr1HRHKg4Obz3dEqGg3stgchb5WnMH4iEu498UY= Subject key identifier: BA:67:A6:95:66:20:C8:CC:F1:AC:1D:2D:60:EB:98:2F:C1:B3:56:B2 Certificate issuer: /CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3 Certificate serial: 010D0C9F432858475A763E648CFC5D83CD3E3D00 Authority key identifier: BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/5986a15c-31f2-3481-a490-90f8833a40b9.roa Signing time: Fri 27 Sep 2024 13:00:41 +0000 ROA not before: Fri 27 Sep 2024 13:00:41 +0000 ROA not after: Thu 26 Dec 2024 14:00:41 +0000 asID: 22765 IP address blocks: 72.20.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:5a:76:3e:64:8c:fc:5d:83:cd:3e:3d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3 Validity Not Before: Sep 27 13:00:41 2024 GMT Not After : Dec 26 14:00:41 2024 GMT Subject: CN=a6a1dc07-7d7e-4806-aa51-2a7d32db7abc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:5a:49:85:d2:6b:80:06:6a:91:0b:47:48:60: ff:fd:a6:64:85:f0:33:08:07:6f:3c:aa:1c:ff:2c: 15:02:94:a7:33:f9:b5:34:cf:04:47:d2:90:20:0d: e8:ce:6b:2b:75:12:fa:98:29:e3:51:90:07:63:b4: a1:ff:59:3f:14:0d:34:c6:35:0f:ec:6a:ff:02:bc: a2:6f:6c:60:2f:39:5b:18:fb:7b:7a:ca:1b:1f:68: e3:0e:64:fc:1f:8b:3c:20:bf:7b:a9:17:75:25:d8: d3:b4:19:ff:e9:be:1e:24:16:8b:88:d8:7c:92:d4: c8:66:e3:36:88:47:f0:0f:28:6f:a7:a6:1c:35:bd: c2:3e:13:f0:a2:19:bc:a1:61:08:36:6a:f3:40:d2: 4b:01:de:02:44:b6:aa:c9:30:c7:b4:65:b7:95:29: a4:ad:38:08:e9:4a:64:f6:08:1c:c7:63:e3:5b:ce: f8:c5:f8:a8:ac:1f:85:77:d8:da:f8:b5:02:f5:99: 52:d6:15:a2:7b:76:48:e9:34:d9:67:c7:90:28:e7: f0:93:06:44:77:dc:79:a0:e4:ee:ae:d2:47:50:ca: 6c:05:78:5e:89:95:61:77:fd:f4:28:12:39:b4:1b: 5e:f1:4c:85:9d:c0:f2:b1:6b:59:7a:66:ff:4e:cf: 7c:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:67:A6:95:66:20:C8:CC:F1:AC:1D:2D:60:EB:98:2F:C1:B3:56:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/5986a15c-31f2-3481-a490-90f8833a40b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.crl X509v3 Authority Key Identifier: keyid:BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer sbgp-ipAddrBlock: critical IPv4: 72.20.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:85:4e:d4:aa:38:61:c5:06:43:8b:12:5d:fa:be:99:6c:83: 6e:c3:b6:d7:83:2a:e8:4a:41:c5:9c:2a:fe:d1:e6:c4:98:eb: 73:04:b1:36:a3:45:d2:1a:4d:d2:d1:bf:23:20:a0:83:8d:2a: df:3c:f3:d9:d3:fc:01:1c:c5:dc:ff:20:9f:30:25:80:e9:bf: 00:c4:28:87:92:82:b0:6e:9f:0f:d0:b9:ae:4e:45:c2:ae:6d: bc:c4:80:a8:36:4f:40:30:5d:7c:4c:8e:fc:d5:93:b5:2a:5c: ff:95:aa:2d:b3:b6:e9:e8:91:1f:5c:d6:df:3c:94:6d:74:29: ac:2d:aa:79:f9:3d:76:f2:9d:4e:d3:33:10:4c:19:b6:9f:c6: 2f:08:af:0b:e0:b8:d6:0b:da:04:c4:f9:a1:2d:d5:af:0f:3f: a7:88:3e:c5:7a:8e:7b:19:77:21:f2:16:bd:70:53:18:fa:4b: 25:72:8c:a9:95:b2:2d:0a:21:b4:e0:97:31:d6:97:fb:ee:28: 6f:bd:25:55:85:77:ff:5a:aa:e1:86:da:94:56:44:6b:ce:0a: 8f:2a:98:c0:7f:df:c1:4e:ca:0f:f5:2c:40:b6:70:de:99:58: 28:48:cf:41:1b:b9:2d:6f:27:b5:f1:b7:57:c2:09:f6:ee:6d: 45:fa:8f:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdadj5kjPxdg80+PQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTZhMjMzNDYtNWEwZS00OTc2LTliMzMtM2I0ZDFkOTBj ZmEzMB4XDTI0MDkyNzEzMDA0MVoXDTI0MTIyNjE0MDA0MVowLzEtMCsGA1UEAxMk YTZhMWRjMDctN2Q3ZS00ODA2LWFhNTEtMmE3ZDMyZGI3YWJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFpJhdJrgAZqkQtHSGD//aZkhfAzCAdvPKoc /ywVApSnM/m1NM8ER9KQIA3ozmsrdRL6mCnjUZAHY7Sh/1k/FA00xjUP7Gr/Aryi b2xgLzlbGPt7esobH2jjDmT8H4s8IL97qRd1JdjTtBn/6b4eJBaLiNh8ktTIZuM2 iEfwDyhvp6YcNb3CPhPwohm8oWEINmrzQNJLAd4CRLaqyTDHtGW3lSmkrTgI6Upk 9ggcx2PjW874xfiorB+Fd9ja+LUC9ZlS1hWie3ZI6TTZZ8eQKOfwkwZEd9x5oOTu rtJHUMpsBXheiZVhd/30KBI5tBte8UyFncDysWtZemb/Ts98SwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLpnppVmIMjM8awdLWDrmC/Bs1ayMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81NmEy MzM0Ni01YTBlLTQ5NzYtOWIzMy0zYjRkMWQ5MGNmYTMvNTk4NmExNWMtMzFmMi0z NDgxLWE0OTAtOTBmODgzM2E0MGI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNTZhMjMzNDYtNWEwZS00OTc2LTli MzMtM2I0ZDFkOTBjZmEzLzU2YTIzMzQ2LTVhMGUtNDk3Ni05YjMzLTNiNGQxZDkw Y2ZhMy5jcmwwHwYDVR0jBBgwFoAUvyAy5XvXgcfAsCmYszNV0WIz6JkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81NmEyMzM0Ni01YTBlLTQ5NzYtOWIzMy0zYjRk MWQ5MGNmYTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBTJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACqFTtSqOGHFBkOLEl36vplsg27DtteDKuhKQcWcKv7R5sSY63MEsTaj RdIaTdLRvyMgoIONKt8889nT/AEcxdz/IJ8wJYDpvwDEKIeSgrBunw/Qua5ORcKu bbzEgKg2T0AwXXxMjvzVk7UqXP+Vqi2ztunokR9c1t88lG10Kawtqnn5PXbynU7T MxBMGbafxi8IrwvguNYL2gTE+aEt1a8PP6eIPsV6jnsZdyHyFr1wUxj6SyVyjKmV si0KIbTglzHWl/vuKG+9JVWFd/9aquGG2pRWRGvOCo8qmMB/38FOyg/1LEC2cN6Z WChIz0EbuS1vJ7Xxt1fCCfbubUX6j4k= -----END CERTIFICATE-----Generated at Thu Nov 21 21:45:11 2024 by rpki-client on console-ams.rpki-client.org