$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/693bf772-b1c2-4f2f-976c-528b6f1d8e16/7c93e3f3-a129-33a8-bb54-4bd2abe6ff39.roa File: 7c93e3f3-a129-33a8-bb54-4bd2abe6ff39.roa (raw, json) Hash identifier: /jr1kfui0+RSBO4GIJkYD2Y6ghvW/Awqd/Oiq+WVoK0= Subject key identifier: ED:F1:28:44:45:CF:CA:A0:8F:70:F6:21:F1:8F:2C:9C:6A:89:70:A5 Certificate issuer: /CN=693bf772-b1c2-4f2f-976c-528b6f1d8e16 Certificate serial: 010D0C9F432858479C1129D76DEAD6129F7DE380 Authority key identifier: 04:3B:91:26:43:5A:E5:3D:B9:21:35:BF:18:C6:36:D0:DA:9D:41:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/693bf772-b1c2-4f2f-976c-528b6f1d8e16.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/693bf772-b1c2-4f2f-976c-528b6f1d8e16/7c93e3f3-a129-33a8-bb54-4bd2abe6ff39.roa Signing time: Mon 21 Oct 2024 01:00:31 +0000 ROA not before: Mon 21 Oct 2024 01:00:31 +0000 ROA not after: Sun 19 Jan 2025 02:00:31 +0000 asID: 33501 IP address blocks: 72.250.176.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/693bf772-b1c2-4f2f-976c-528b6f1d8e16/693bf772-b1c2-4f2f-976c-528b6f1d8e16.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/693bf772-b1c2-4f2f-976c-528b6f1d8e16/693bf772-b1c2-4f2f-976c-528b6f1d8e16.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/693bf772-b1c2-4f2f-976c-528b6f1d8e16.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:9c:11:29:d7:6d:ea:d6:12:9f:7d:e3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=693bf772-b1c2-4f2f-976c-528b6f1d8e16 Validity Not Before: Oct 21 01:00:31 2024 GMT Not After : Jan 19 02:00:31 2025 GMT Subject: CN=0f81f273-88f5-42b9-b656-e3907ad0edaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:37:9a:39:b0:33:48:26:dc:c7:39:46:23:33: 1f:e3:63:84:58:3c:64:e6:17:1c:d6:91:10:d2:96: e2:93:9e:17:98:1f:27:6b:2c:ea:9c:9c:e5:b7:75: 3e:07:24:c4:a4:8e:15:32:bb:7d:79:55:b1:fd:86: f6:95:c8:e4:03:06:f3:41:2b:71:93:73:95:7d:0f: 27:90:f2:ce:5f:90:77:b0:b4:e2:45:ac:e8:e9:c6: 1c:e3:c1:4b:57:f1:49:22:6f:29:75:99:1c:0e:36: 11:e5:4e:d8:a7:45:ce:64:49:26:72:b6:26:b2:a3: 27:39:44:0d:90:50:2f:5c:2f:a5:f7:55:b7:55:9e: 16:b1:9a:ae:9d:50:53:f4:c0:5e:f7:71:11:00:f4: 1c:69:cb:8e:24:47:d6:89:f6:47:6c:80:27:d0:e5: 00:31:0b:44:9c:41:00:cf:a6:e1:36:71:13:14:8a: 2d:53:38:59:31:e1:31:88:f6:5d:1e:5e:4b:a9:25: ae:4d:80:50:5d:85:70:0c:4e:a3:0a:11:f9:68:a9: d5:44:60:cf:f6:e4:a3:b1:ac:d9:a3:26:b0:93:dd: 24:31:cd:29:7b:4f:fa:08:07:14:fd:78:ff:6c:89: bb:d3:4d:57:42:58:54:76:4e:d4:e3:7e:c4:a9:8e: 5a:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:F1:28:44:45:CF:CA:A0:8F:70:F6:21:F1:8F:2C:9C:6A:89:70:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/693bf772-b1c2-4f2f-976c-528b6f1d8e16/7c93e3f3-a129-33a8-bb54-4bd2abe6ff39.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/693bf772-b1c2-4f2f-976c-528b6f1d8e16/693bf772-b1c2-4f2f-976c-528b6f1d8e16.crl X509v3 Authority Key Identifier: keyid:04:3B:91:26:43:5A:E5:3D:B9:21:35:BF:18:C6:36:D0:DA:9D:41:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/693bf772-b1c2-4f2f-976c-528b6f1d8e16.cer sbgp-ipAddrBlock: critical IPv4: 72.250.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:05:ab:bd:a3:b3:52:10:0c:ec:da:cb:71:4f:c3:46:55:74: 66:b9:1d:d4:83:c4:90:94:28:9f:b8:bf:05:80:56:de:b5:01: b4:d1:62:33:6c:28:4c:c7:de:d5:3b:13:00:6e:d2:58:4e:f0: 8f:68:f2:f0:1e:53:49:00:d6:13:ce:2c:73:47:4a:9c:cb:3e: 1f:2f:f3:eb:65:aa:54:29:bf:9b:be:67:dc:95:3f:af:da:6b: 7a:63:55:c0:bf:c8:91:f5:19:5e:05:fd:a1:a0:20:2d:41:a6: b8:44:5e:9b:43:eb:a6:3c:9a:fd:28:9b:d9:fe:5c:2b:07:b8: 35:1c:5c:35:13:33:bc:22:39:7f:41:73:a7:64:50:e9:02:1d: 7e:64:01:7f:49:ef:94:a6:64:46:1c:2c:42:ec:38:0c:4a:56: f3:f7:bf:05:48:9b:5e:5f:bb:28:0f:54:10:aa:c5:01:f0:6a: 1c:2f:97:dc:45:be:db:35:99:89:6b:56:c5:43:4a:9d:c6:4b: 4e:be:c4:de:58:96:f2:70:be:a9:1a:ee:87:2b:7f:44:22:62: ab:15:67:27:6c:93:e2:4f:1c:87:65:b9:a0:99:29:3e:83:a1: 31:c9:9b:79:84:fb:e1:c0:fa:da:2b:99:75:a5:70:e3:54:9d: e5:99:ca:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEecESnXberWEp9944AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjkzYmY3NzItYjFjMi00ZjJmLTk3NmMtNTI4YjZmMWQ4 ZTE2MB4XDTI0MTAyMTAxMDAzMVoXDTI1MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk MGY4MWYyNzMtODhmNS00MmI5LWI2NTYtZTM5MDdhZDBlZGFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzeaObAzSCbcxzlGIzMf42OEWDxk5hcc1pEQ 0pbik54XmB8nayzqnJzlt3U+ByTEpI4VMrt9eVWx/Yb2lcjkAwbzQStxk3OVfQ8n kPLOX5B3sLTiRazo6cYc48FLV/FJIm8pdZkcDjYR5U7Yp0XOZEkmcrYmsqMnOUQN kFAvXC+l91W3VZ4WsZqunVBT9MBe93ERAPQcacuOJEfWifZHbIAn0OUAMQtEnEEA z6bhNnETFIotUzhZMeExiPZdHl5LqSWuTYBQXYVwDE6jChH5aKnVRGDP9uSjsazZ oyawk90kMc0pe0/6CAcU/Xj/bIm7001XQlhUdk7U437EqY5afwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO3xKERFz8qgj3D2IfGPLJxqiXClMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82OTNi Zjc3Mi1iMWMyLTRmMmYtOTc2Yy01MjhiNmYxZDhlMTYvN2M5M2UzZjMtYTEyOS0z M2E4LWJiNTQtNGJkMmFiZTZmZjM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjkzYmY3NzItYjFjMi00ZjJmLTk3 NmMtNTI4YjZmMWQ4ZTE2LzY5M2JmNzcyLWIxYzItNGYyZi05NzZjLTUyOGI2ZjFk OGUxNi5jcmwwHwYDVR0jBBgwFoAUBDuRJkNa5T25ITW/GMY20NqdQacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82OTNiZjc3Mi1iMWMyLTRmMmYtOTc2Yy01Mjhi NmYxZDhlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESPqwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB8Fq72js1IQDOzay3FPw0ZVdGa5HdSDxJCUKJ+4vwWAVt61AbTRYjNs KEzH3tU7EwBu0lhO8I9o8vAeU0kA1hPOLHNHSpzLPh8v8+tlqlQpv5u+Z9yVP6/a a3pjVcC/yJH1GV4F/aGgIC1BprhEXptD66Y8mv0om9n+XCsHuDUcXDUTM7wiOX9B c6dkUOkCHX5kAX9J75SmZEYcLELsOAxKVvP3vwVIm15fuygPVBCqxQHwahwvl9xF vts1mYlrVsVDSp3GS06+xN5YlvJwvqka7ocrf0QiYqsVZydsk+JPHIdluaCZKT6D oTHJm3mE++HA+tormXWlcONUneWZyi8= -----END CERTIFICATE-----Generated at Sat Nov 23 18:43:53 2024 by rpki-client on console-ams.rpki-client.org