$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/308232c7-7251-38cc-86fe-9125a605bda8.roa File: 308232c7-7251-38cc-86fe-9125a605bda8.roa (raw, json) Hash identifier: onxfCsjNztLGh6xM+kM5SqkcasqKY/SGHU+juZfBMy0= Subject key identifier: B6:27:55:D6:76:00:53:20:42:5F:80:F9:09:AF:40:0E:A9:DE:F4:35 Certificate issuer: /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Certificate serial: 010D0C9F432858474B1B4BD40A6314B1C68E2D80 Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/308232c7-7251-38cc-86fe-9125a605bda8.roa Signing time: Sun 22 Sep 2024 01:00:32 +0000 ROA not before: Sun 22 Sep 2024 01:00:32 +0000 ROA not after: Sat 21 Dec 2024 02:00:32 +0000 asID: 394437 IP address blocks: 72.20.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:4b:1b:4b:d4:0a:63:14:b1:c6:8e:2d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Validity Not Before: Sep 22 01:00:32 2024 GMT Not After : Dec 21 02:00:32 2024 GMT Subject: CN=c6c32435-263b-4110-bdee-fc49ae902891 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e1:23:3b:6f:87:93:08:75:bf:e5:f2:8d:4a: fa:d5:b8:dd:3d:38:17:08:07:51:06:b4:53:03:b7: 07:6c:43:0b:47:ac:0b:80:c9:58:f7:b9:59:c5:5e: b5:9f:dd:65:ba:a5:ea:b8:79:78:9c:fb:3a:99:37: 47:36:fa:59:03:e4:20:ab:74:18:9d:08:7f:02:c4: 95:cc:0e:e5:f4:31:97:83:7c:f2:ba:f8:f1:99:7d: 64:42:bf:f0:dc:fb:8e:87:15:1b:05:f3:67:ae:fd: 89:79:5e:08:1b:46:7a:50:5c:82:3f:0f:f3:f6:f5: 39:2a:ca:de:82:22:e3:b5:6d:2b:90:dc:2e:b4:a6: 90:13:6b:ad:44:c5:34:e8:95:07:43:2d:01:15:35: ff:c5:05:23:72:71:e5:56:d9:1d:33:5f:25:6f:60: 72:9a:22:39:43:06:3f:d5:b3:61:33:fc:56:91:c8: c1:4a:31:49:a1:b7:8f:67:ca:93:85:11:42:bf:55: 81:34:45:41:dc:d7:d6:8b:a6:41:99:c2:c3:55:09: f1:08:8e:53:a4:7b:a0:1e:3d:9e:61:61:0a:52:5a: 8f:55:c8:2d:3d:30:39:4e:d1:67:98:87:11:98:7a: 6d:5c:3b:5b:4c:82:f2:c5:79:18:08:a1:79:68:d0: 0e:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:27:55:D6:76:00:53:20:42:5F:80:F9:09:AF:40:0E:A9:DE:F4:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/308232c7-7251-38cc-86fe-9125a605bda8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl X509v3 Authority Key Identifier: keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer sbgp-ipAddrBlock: critical IPv4: 72.20.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:55:9f:ef:01:77:6e:70:a8:21:d4:5f:89:ca:0c:1d:34:85: ea:75:e3:c5:ac:db:ad:36:e6:ab:fe:17:e6:b1:07:2c:d5:6e: ce:81:18:8e:cb:38:1f:16:42:6d:bc:e7:bc:15:64:20:c1:9a: 62:de:e8:ad:bb:6a:a6:47:75:80:df:da:3b:05:29:4c:e0:c7: 20:51:36:c3:09:cc:37:82:dd:28:c7:df:cb:64:55:f7:bd:31: 6c:df:b9:5a:0b:8b:8e:06:15:48:74:b8:33:d4:0b:5d:3c:71: bc:cf:28:f8:32:0f:40:65:26:12:fe:38:94:95:7c:48:e1:12: 6e:49:a5:ab:97:3a:2c:71:1c:a9:65:88:13:2f:2b:2c:e3:8b: cd:48:cb:c2:b9:cf:bd:8e:f7:d3:69:e6:8b:d5:79:1d:ba:8e: 84:ce:c8:f9:42:6c:e1:d7:17:7e:fc:92:c7:d5:08:aa:d8:e2: 55:b7:60:e8:d1:a8:6d:6c:11:f6:30:53:92:20:23:ed:d6:83: 2d:4b:52:e8:49:54:00:2f:82:36:4d:74:82:cd:67:42:39:d0: 90:39:b1:8d:5d:d9:94:81:3c:38:e2:23:df:f7:ce:0b:d4:e2: ae:f5:9b:51:61:d7:2a:34:47:e7:f1:f8:19:e5:29:9a:bb:db: 27:d2:6a:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdLG0vUCmMUscaOLYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmYTA1YmYtNWI0Ni00YTU1LWJkNTUtNDg5MWQyMWNi MjRmMB4XDTI0MDkyMjAxMDAzMloXDTI0MTIyMTAyMDAzMlowLzEtMCsGA1UEAxMk YzZjMzI0MzUtMjYzYi00MTEwLWJkZWUtZmM0OWFlOTAyODkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAreEjO2+Hkwh1v+XyjUr61bjdPTgXCAdRBrRT A7cHbEMLR6wLgMlY97lZxV61n91luqXquHl4nPs6mTdHNvpZA+Qgq3QYnQh/AsSV zA7l9DGXg3zyuvjxmX1kQr/w3PuOhxUbBfNnrv2JeV4IG0Z6UFyCPw/z9vU5Ksre giLjtW0rkNwutKaQE2utRMU06JUHQy0BFTX/xQUjcnHlVtkdM18lb2BymiI5QwY/ 1bNhM/xWkcjBSjFJobePZ8qThRFCv1WBNEVB3NfWi6ZBmcLDVQnxCI5TpHugHj2e YWEKUlqPVcgtPTA5TtFnmIcRmHptXDtbTILyxXkYCKF5aNAOmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLYnVdZ2AFMgQl+A+QmvQA6p3vQ1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZh MDViZi01YjQ2LTRhNTUtYmQ1NS00ODkxZDIxY2IyNGYvMzA4MjMyYzctNzI1MS0z OGNjLTg2ZmUtOTEyNWE2MDViZGE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjRmYTA1YmYtNWI0Ni00YTU1LWJk NTUtNDg5MWQyMWNiMjRmLzI0ZmEwNWJmLTViNDYtNGE1NS1iZDU1LTQ4OTFkMjFj YjI0Zi5jcmwwHwYDVR0jBBgwFoAU92+M2Ffccz2Qz8H589/AOKXodIAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZhMDViZi01YjQ2LTRhNTUtYmQ1NS00ODkx ZDIxY2IyNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBScMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALZVn+8Bd25wqCHUX4nKDB00hep148Ws26025qv+F+axByzVbs6BGI7L OB8WQm2857wVZCDBmmLe6K27aqZHdYDf2jsFKUzgxyBRNsMJzDeC3SjH38tkVfe9 MWzfuVoLi44GFUh0uDPUC108cbzPKPgyD0BlJhL+OJSVfEjhEm5JpauXOixxHKll iBMvKyzji81Iy8K5z72O99Np5ovVeR26joTOyPlCbOHXF378ksfVCKrY4lW3YOjR qG1sEfYwU5IgI+3Wgy1LUuhJVAAvgjZNdILNZ0I50JA5sY1d2ZSBPDjiI9/3zgvU 4q71m1Fh1yo0R+fx+BnlKZq72yfSaiE= -----END CERTIFICATE-----Generated at Thu Nov 21 21:46:00 2024 by rpki-client on console-ams.rpki-client.org