$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/0af9e6a7-ec26-3b88-8fa4-8d3254986df9.roa File: 0af9e6a7-ec26-3b88-8fa4-8d3254986df9.roa (raw, json) Hash identifier: EHkOXU/jknBLaejDPaQ+imBrY7Qgpjp7s67xKTP9lYk= Subject key identifier: 2B:DE:67:7D:B3:6A:39:5F:DB:F8:DF:72:F2:73:7F:D5:88:08:0B:8E Certificate issuer: /CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f Certificate serial: 010D0C9F432858473A5B92C7E23744E5DF9768C0 Authority key identifier: 14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/0af9e6a7-ec26-3b88-8fa4-8d3254986df9.roa Signing time: Mon 16 Sep 2024 01:00:29 +0000 ROA not before: Mon 16 Sep 2024 01:00:29 +0000 ROA not after: Sun 15 Dec 2024 02:00:29 +0000 asID: 10430 IP address blocks: 72.233.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:3a:5b:92:c7:e2:37:44:e5:df:97:68:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f Validity Not Before: Sep 16 01:00:29 2024 GMT Not After : Dec 15 02:00:29 2024 GMT Subject: CN=81ecbee5-4fce-4d0a-bbd0-4fd799238dc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:5b:4f:a9:2c:12:a9:c4:4c:80:cf:e9:30:cc: d9:7a:62:1e:83:0c:24:7f:ec:66:d4:01:6e:08:19: a7:53:6a:84:38:d0:ff:69:8b:bb:ea:c8:bf:77:69: ab:59:2a:0b:53:b4:05:ca:99:25:4f:3e:73:10:30: 8d:38:1d:0c:43:dc:24:a2:58:ee:44:55:f0:06:ef: 58:f5:8f:c6:7c:b4:5f:c1:d1:7a:32:ce:fe:8a:a6: d7:46:8b:d3:7e:c7:c8:79:6d:45:26:3c:fa:08:95: a8:76:96:9e:db:80:e3:70:29:0d:bc:e7:64:df:a1: c0:5c:bc:da:e8:6f:ee:38:bc:ad:74:07:aa:68:d2: c4:51:7d:8e:8d:11:08:39:2b:67:78:6b:05:7e:4f: ce:ce:d9:75:90:d3:a3:1e:fa:70:7e:3a:66:7a:15: 93:ed:09:1f:1f:a5:ac:8a:c3:98:90:df:94:d3:f9: d5:6d:29:de:e0:64:44:dc:b0:9e:c0:28:16:f3:ba: cd:7e:37:54:af:e6:9c:ae:f8:45:d1:01:6e:7d:e2: f2:a1:f0:7a:48:1c:21:7a:c6:ad:a5:19:e0:d1:22: dc:c3:de:68:dc:54:ff:0f:dd:53:72:d4:28:4b:b5: 95:0f:52:c8:bd:de:df:ad:38:4b:98:76:ca:82:57: 7b:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:DE:67:7D:B3:6A:39:5F:DB:F8:DF:72:F2:73:7F:D5:88:08:0B:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/0af9e6a7-ec26-3b88-8fa4-8d3254986df9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl X509v3 Authority Key Identifier: keyid:14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer sbgp-ipAddrBlock: critical IPv4: 72.233.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:40:3c:64:d8:77:2f:53:5a:74:cf:ef:e7:3d:f2:3e:df:df: 52:27:d5:02:d0:f1:25:09:5c:9e:96:36:36:ec:76:81:7e:f0: 08:dd:56:44:3d:41:d9:ef:90:43:27:bc:07:47:78:43:f7:5b: 27:84:e9:29:46:ce:14:fe:18:b5:39:44:1f:a1:59:4d:c1:7c: 6d:6a:fb:50:93:23:8e:e6:99:e6:38:cd:ec:49:ed:d9:e8:38: 82:92:ab:4d:17:ea:04:6f:77:85:99:07:51:52:93:98:66:de: 9b:a0:a0:d0:63:b2:78:b2:57:03:c6:a5:1f:e0:86:b1:9c:c0: 80:32:c1:a0:0a:0b:3c:d6:25:c5:bf:99:c2:09:58:73:57:a6: 05:af:72:0a:43:17:c2:31:78:34:c8:6d:1d:6a:32:9a:b5:66: 75:f1:1b:1b:e2:76:93:db:32:d3:ad:79:3b:00:73:57:b9:33: 5c:87:f0:c6:b7:44:c7:43:26:ad:62:30:c0:11:4c:4d:ff:65: be:16:02:56:4e:fa:a4:59:b8:8c:a9:5b:60:98:98:c8:03:4d: 92:db:17:a7:0f:93:97:54:b9:a2:3a:e0:5c:ec:8e:25:c8:a3: ad:a6:80:62:cd:f7:26:a9:d9:bb:56:4c:0c:c1:3d:e1:1c:30: b6:d6:a2:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc6W5LH4jdE5d+XaMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTliYmIwNmEtZTc1Yi00MWNiLWI5ZGEtMmNiMjhmNGMz NzNmMB4XDTI0MDkxNjAxMDAyOVoXDTI0MTIxNTAyMDAyOVowLzEtMCsGA1UEAxMk ODFlY2JlZTUtNGZjZS00ZDBhLWJiZDAtNGZkNzk5MjM4ZGMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnltPqSwSqcRMgM/pMMzZemIegwwkf+xm1AFu CBmnU2qEOND/aYu76si/d2mrWSoLU7QFypklTz5zEDCNOB0MQ9wkoljuRFXwBu9Y 9Y/GfLRfwdF6Ms7+iqbXRovTfsfIeW1FJjz6CJWodpae24DjcCkNvOdk36HAXLza 6G/uOLytdAeqaNLEUX2OjREIOStneGsFfk/Oztl1kNOjHvpwfjpmehWT7QkfH6Ws isOYkN+U0/nVbSne4GRE3LCewCgW87rNfjdUr+acrvhF0QFufeLyofB6SBwhesat pRng0SLcw95o3FT/D91TctQoS7WVD1LIvd7frThLmHbKgld77QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCveZ32zajlf2/jfcvJzf9WICAuOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lOWJi YjA2YS1lNzViLTQxY2ItYjlkYS0yY2IyOGY0YzM3M2YvMGFmOWU2YTctZWMyNi0z Yjg4LThmYTQtOGQzMjU0OTg2ZGY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTliYmIwNmEtZTc1Yi00MWNiLWI5 ZGEtMmNiMjhmNGMzNzNmL2U5YmJiMDZhLWU3NWItNDFjYi1iOWRhLTJjYjI4ZjRj MzczZi5jcmwwHwYDVR0jBBgwFoAUFO956WnzBTifjFrePYU31ZjFdQswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lOWJiYjA2YS1lNzViLTQxY2ItYjlkYS0yY2Iy OGY0YzM3M2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHSOmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB9APGTYdy9TWnTP7+c98j7f31In1QLQ8SUJXJ6WNjbsdoF+8AjdVkQ9 QdnvkEMnvAdHeEP3WyeE6SlGzhT+GLU5RB+hWU3BfG1q+1CTI47mmeY4zexJ7dno OIKSq00X6gRvd4WZB1FSk5hm3pugoNBjsniyVwPGpR/ghrGcwIAywaAKCzzWJcW/ mcIJWHNXpgWvcgpDF8IxeDTIbR1qMpq1ZnXxGxvidpPbMtOteTsAc1e5M1yH8Ma3 RMdDJq1iMMARTE3/Zb4WAlZO+qRZuIypW2CYmMgDTZLbF6cPk5dUuaI64FzsjiXI o62mgGLN9yap2btWTAzBPeEcMLbWopo= -----END CERTIFICATE-----Generated at Mon Nov 25 16:05:45 2024 by rpki-client on console-fra.rpki-client.org