$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c52b75db-73ab-3192-9a90-b60ac67f8d25.roa File: c52b75db-73ab-3192-9a90-b60ac67f8d25.roa (raw, json) Hash identifier: 5Rzivj12X7k4yGRPwQMFG61F29cNC5KlRI+ECAJbhgc= Subject key identifier: 2F:32:92:30:58:0D:E9:2B:CA:65:EF:85:3D:F2:35:8E:66:48:93:8F Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F432858471FD5FB47CD12E4B0891FA680 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c52b75db-73ab-3192-9a90-b60ac67f8d25.roa Signing time: Fri 06 Sep 2024 13:00:41 +0000 ROA not before: Fri 06 Sep 2024 13:00:41 +0000 ROA not after: Thu 05 Dec 2024 14:00:41 +0000 asID: 33363 IP address blocks: 72.31.202.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:1f:d5:fb:47:cd:12:e4:b0:89:1f:a6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Sep 6 13:00:41 2024 GMT Not After : Dec 5 14:00:41 2024 GMT Subject: CN=1a0e4afb-09b0-42b7-acf7-9cf97a0130f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:ce:a6:71:11:8a:42:1b:99:77:8e:39:75:3a: ef:24:25:24:ba:45:c2:13:a6:97:39:d8:01:9b:ca: 39:af:e5:f8:24:49:a6:8d:67:0e:d3:08:2e:8b:0a: d4:f6:15:be:23:95:9c:53:57:ea:0f:05:f5:6e:6b: d5:07:0b:6d:89:e0:9e:1b:46:c1:f6:f1:90:54:ed: 67:d4:24:e1:3f:fc:1a:94:bd:36:a2:84:a8:3a:2f: e5:ae:13:17:0a:95:22:65:a4:01:d7:6c:3d:12:3a: 30:8d:29:d9:a4:7e:31:e3:85:16:78:68:39:bf:fe: e8:b4:0b:7e:b2:5f:40:6e:33:23:54:b6:86:b4:4c: f2:03:4c:b6:fe:30:91:45:b7:a3:7e:fe:e6:2c:5f: ca:78:12:60:ec:8c:e4:39:68:3c:3c:38:8a:c9:c0: 4e:b6:ee:ee:9b:a8:57:eb:89:5c:9c:cb:34:d8:96: e7:15:df:b7:09:b6:9c:86:59:58:cb:d8:12:7c:61: a8:32:e5:98:f7:86:47:c2:08:34:75:91:90:01:a0: 86:ae:7b:e9:3d:77:00:dc:6e:88:f1:54:7c:01:c6: 8e:e9:b3:f2:e7:1d:f3:18:a7:ff:bd:12:21:3e:63: 48:94:69:c4:02:9f:ce:da:95:1a:98:5a:a5:67:c7: c6:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:32:92:30:58:0D:E9:2B:CA:65:EF:85:3D:F2:35:8E:66:48:93:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c52b75db-73ab-3192-9a90-b60ac67f8d25.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv4: 72.31.202.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:86:c3:b8:26:e6:d4:40:df:70:c2:8c:57:1d:4c:03:b8:67: fe:4d:5d:4f:c0:2a:50:1f:a4:50:10:8b:1f:27:f0:d1:b6:5f: ca:df:95:5a:61:49:62:e1:d7:9d:03:49:6e:eb:f7:da:4b:13: 3e:39:8d:50:da:2c:68:7c:2e:7c:06:75:e8:bc:98:fd:8d:48: e8:b0:39:4b:4e:8d:f3:f7:f3:86:e8:3a:bc:52:22:c1:e1:49: ea:a8:af:86:a4:54:80:53:cf:62:d8:b3:74:bd:f6:54:80:43: 18:8e:9e:22:47:c5:5d:39:97:e6:b6:71:47:e9:07:b8:ff:7c: 6d:5f:f2:a9:e6:c9:cb:2c:8e:9e:ad:df:3b:53:6d:a8:b6:2c: 74:78:66:88:95:6a:9b:62:1c:ec:ab:ae:8e:6d:7e:1a:bb:c5: 32:8a:19:cb:0e:a1:fd:bb:a3:21:77:6a:86:d0:99:6a:66:43: c2:41:78:d7:98:57:71:0d:54:69:5c:2d:86:26:79:54:c3:f6: bc:af:81:4c:13:cf:59:43:1f:f7:f1:5b:55:ae:0a:19:68:63: 97:d2:c7:bb:2c:90:2a:2b:c4:e2:58:cf:2b:1a:bc:84:43:32: 4a:6f:13:83:30:ea:c2:dc:4c:74:0f:e3:ae:18:9a:ae:40:24: 6a:43:ab:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcf1ftHzRLksIkfpoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI0MDkwNjEzMDA0MVoXDTI0MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk MWEwZTRhZmItMDliMC00MmI3LWFjZjctOWNmOTdhMDEzMGY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj86mcRGKQhuZd445dTrvJCUkukXCE6aXOdgB m8o5r+X4JEmmjWcO0wguiwrU9hW+I5WcU1fqDwX1bmvVBwttieCeG0bB9vGQVO1n 1CThP/walL02ooSoOi/lrhMXCpUiZaQB12w9EjowjSnZpH4x44UWeGg5v/7otAt+ sl9AbjMjVLaGtEzyA0y2/jCRRbejfv7mLF/KeBJg7IzkOWg8PDiKycBOtu7um6hX 64lcnMs02JbnFd+3CbachllYy9gSfGGoMuWY94ZHwgg0dZGQAaCGrnvpPXcA3G6I 8VR8AcaO6bPy5x3zGKf/vRIhPmNIlGnEAp/O2pUamFqlZ8fGXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC8ykjBYDekrymXvhT3yNY5mSJOPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvYzUyYjc1ZGItNzNhYi0z MTkyLTlhOTAtYjYwYWM2N2Y4ZDI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSB/KMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADyGw7gm5tRA33DCjFcdTAO4Z/5NXU/AKlAfpFAQix8n8NG2X8rflVph SWLh150DSW7r99pLEz45jVDaLGh8LnwGdei8mP2NSOiwOUtOjfP384boOrxSIsHh Seqor4akVIBTz2LYs3S99lSAQxiOniJHxV05l+a2cUfpB7j/fG1f8qnmycssjp6t 3ztTbai2LHR4ZoiVaptiHOyrro5tfhq7xTKKGcsOof27oyF3aobQmWpmQ8JBeNeY V3ENVGlcLYYmeVTD9ryvgUwTz1lDH/fxW1WuChloY5fSx7sskCorxOJYzysavIRD MkpvE4Mw6sLcTHQP464Ymq5AJGpDqxk= -----END CERTIFICATE-----Generated at Thu Nov 21 21:48:09 2024 by rpki-client on console-ams.rpki-client.org