$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/868c54f6-3f30-3b0d-9ad5-b7be17303a76.roa File: 868c54f6-3f30-3b0d-9ad5-b7be17303a76.roa (raw, json) Hash identifier: Dd6jjLg2qT3O1CKrNjbS6eQ8hPB2JYxWew1RBIzHsaA= Subject key identifier: 40:43:52:BC:D4:21:C8:9B:9A:0E:0E:F2:B8:EE:55:31:42:8B:32:A9 Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F432858471FD5FB53B28F6EA15E649480 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/868c54f6-3f30-3b0d-9ad5-b7be17303a76.roa Signing time: Fri 06 Sep 2024 13:00:41 +0000 ROA not before: Fri 06 Sep 2024 13:00:41 +0000 ROA not after: Thu 05 Dec 2024 14:00:41 +0000 asID: 33363 IP address blocks: 72.31.228.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:1f:d5:fb:53:b2:8f:6e:a1:5e:64:94:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Sep 6 13:00:41 2024 GMT Not After : Dec 5 14:00:41 2024 GMT Subject: CN=87e20776-7e11-4bf2-8768-dbbb592488f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f6:e8:a8:2c:3c:c4:bb:95:ff:e3:49:37:a1: d5:7e:1c:1e:2b:0f:8f:7b:7a:88:04:c3:8d:85:d2: b4:a3:2a:b8:bf:b2:5d:cd:c4:76:fe:bd:56:bf:0c: 9d:27:7e:af:08:8d:ab:42:fe:33:16:a2:8c:3e:82: 56:af:46:2f:db:c0:eb:3c:fa:15:ba:c1:e5:3c:8f: bf:98:c0:d2:6b:92:3e:9f:00:cc:9a:58:7e:70:49: e1:f9:6d:ca:c7:9c:49:d3:f9:ce:d1:2b:39:45:d6: a9:61:cb:b8:92:5f:4e:bc:59:de:75:94:4b:09:79: b9:da:d9:bc:8a:fe:92:6f:1c:34:2a:b3:7c:4b:1b: 5f:88:90:c5:65:42:94:e6:ca:24:9e:38:45:d8:dd: 77:b0:ef:38:32:fa:47:b2:8e:01:71:b8:f3:7c:8d: de:44:78:c9:19:17:ad:aa:b9:b7:18:c2:32:dd:52: d8:2d:2a:94:65:ff:2e:d3:b9:3d:79:b9:a8:8e:f7: aa:e2:9c:e8:7f:07:a4:3c:c7:e2:71:81:36:44:38: 3d:63:8e:fb:db:67:f3:48:d1:ea:c7:f3:d0:a2:a2: 06:a0:8a:e1:f5:bf:b7:81:e2:ef:68:78:16:ed:de: c9:0c:0f:a0:87:63:9f:17:1a:66:21:2d:01:7e:c6: e2:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:43:52:BC:D4:21:C8:9B:9A:0E:0E:F2:B8:EE:55:31:42:8B:32:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/868c54f6-3f30-3b0d-9ad5-b7be17303a76.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv4: 72.31.228.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:2d:41:a2:89:3d:4c:6a:87:64:7b:7f:0a:48:41:39:1d:6c: 26:0c:b6:83:4c:9d:ca:2b:2a:08:ba:79:2c:91:c9:1b:a7:80: ce:b2:a6:f1:72:1f:ba:35:d8:8e:4c:9b:e8:3a:26:a4:ae:a4: f9:75:d3:7b:39:44:57:50:1b:fc:34:86:2f:58:30:06:97:4a: bb:4b:cb:bd:a9:7e:d9:12:36:8b:b8:da:3b:17:ed:dc:1c:3f: 56:f0:11:b9:fc:00:14:99:43:43:4c:94:4e:bb:26:df:07:d1: 51:0e:01:82:ab:61:24:a4:02:e7:5a:80:06:5f:83:f6:22:43: bf:05:61:83:7f:1a:00:74:a8:5f:1c:f5:88:05:6b:22:a6:b4: 76:17:d5:7a:98:ae:4e:1d:1e:9a:2a:68:2f:c5:c8:58:91:84: b5:ff:56:68:5d:56:9e:46:f6:f2:65:64:f4:1a:58:6c:54:53: d9:1a:b0:ea:1d:e1:44:8b:97:0e:0a:96:f2:2f:ca:f5:23:31: 26:a4:c9:01:70:08:fd:b5:65:42:66:b4:cd:cb:c3:cc:f1:1a: ad:4b:6f:4a:bd:10:bd:0d:03:dd:f4:50:9a:57:c9:ad:13:59: e6:96:03:7a:28:cd:b0:8c:81:e6:74:3f:af:cc:94:60:0e:4b: ba:fb:92:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcf1ftTso9uoV5klIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI0MDkwNjEzMDA0MVoXDTI0MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk ODdlMjA3NzYtN2UxMS00YmYyLTg3NjgtZGJiYjU5MjQ4OGY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvboqCw8xLuV/+NJN6HVfhweKw+Pe3qIBMON hdK0oyq4v7JdzcR2/r1WvwydJ36vCI2rQv4zFqKMPoJWr0Yv28DrPPoVusHlPI+/ mMDSa5I+nwDMmlh+cEnh+W3Kx5xJ0/nO0Ss5RdapYcu4kl9OvFnedZRLCXm52tm8 iv6Sbxw0KrN8SxtfiJDFZUKU5soknjhF2N13sO84MvpHso4BcbjzfI3eRHjJGRet qrm3GMIy3VLYLSqUZf8u07k9ebmojveq4pzofwekPMficYE2RDg9Y47722fzSNHq x/PQoqIGoIrh9b+3geLvaHgW7d7JDA+gh2OfFxpmIS0BfsbiTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEBDUrzUIcibmg4O8rjuVTFCizKpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvODY4YzU0ZjYtM2YzMC0z YjBkLTlhZDUtYjdiZTE3MzAzYTc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSB/kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJgtQaKJPUxqh2R7fwpIQTkdbCYMtoNMncorKgi6eSyRyRungM6ypvFy H7o12I5Mm+g6JqSupPl103s5RFdQG/w0hi9YMAaXSrtLy72pftkSNou42jsX7dwc P1bwEbn8ABSZQ0NMlE67Jt8H0VEOAYKrYSSkAudagAZfg/YiQ78FYYN/GgB0qF8c 9YgFayKmtHYX1XqYrk4dHpoqaC/FyFiRhLX/VmhdVp5G9vJlZPQaWGxUU9kasOod 4USLlw4KlvIvyvUjMSakyQFwCP21ZUJmtM3Lw8zxGq1Lb0q9EL0NA930UJpXya0T WeaWA3oozbCMgeZ0P6/MlGAOS7r7kp0= -----END CERTIFICATE-----Generated at Thu Nov 21 21:09:25 2024 by rpki-client on console-fra.rpki-client.org