$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/b6720d34-db30-38d9-91ae-45f07ef69322.roa File: b6720d34-db30-38d9-91ae-45f07ef69322.roa (raw, json) Hash identifier: yC1xS88DEIhFUiB9VeACoU71PCEcsrAD4wWyzCvWi5U= Subject key identifier: F8:0D:6D:63:E8:07:96:F5:8A:D3:3D:09:EB:3B:67:71:64:5C:0E:68 Certificate issuer: /CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4 Certificate serial: 010D0C9F43285847E094C5BD75757658FA146040 Authority key identifier: 7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/b6720d34-db30-38d9-91ae-45f07ef69322.roa Signing time: Thu 14 Nov 2024 14:00:40 +0000 ROA not before: Thu 14 Nov 2024 14:00:40 +0000 ROA not after: Wed 12 Feb 2025 14:00:40 +0000 asID: 198949 IP address blocks: 72.10.96.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e0:94:c5:bd:75:75:76:58:fa:14:60:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4 Validity Not Before: Nov 14 14:00:40 2024 GMT Not After : Feb 12 14:00:40 2025 GMT Subject: CN=d2b7e97a-6df2-415a-966b-dc1e31a65e4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:37:df:b7:c1:8f:12:a2:1f:41:46:9a:73:64: e0:08:f4:03:31:18:15:18:96:a9:bf:01:ca:54:3c: 7a:15:39:14:70:f7:10:8d:9b:1e:8c:05:45:eb:0e: 34:aa:4d:8a:73:1b:e1:fe:5c:b0:af:a8:a2:d4:2a: 6e:42:74:c5:d1:98:04:5a:96:04:9d:04:6c:f9:b0: 58:cd:69:b4:02:4a:1c:bb:66:ca:b8:bf:11:d7:72: 0f:e4:2b:08:92:31:ff:8a:5c:7a:9c:e8:05:d0:0c: f8:e2:95:f8:83:3a:6a:33:82:56:1d:c9:49:fc:ad: 0e:2a:f5:81:d6:66:7d:22:6d:d3:8d:0a:e1:65:a9: db:56:2a:19:3a:44:44:87:9f:e1:21:47:07:7d:8b: 76:cd:4e:99:38:02:cd:d3:76:03:f6:5b:8a:32:67: 06:7c:6d:23:07:d0:22:8f:bc:ed:51:2a:af:bc:fb: 58:fb:d1:6c:69:80:34:d1:72:72:3f:44:8f:59:60: cc:49:32:af:f1:e2:f2:a4:f4:b2:32:bf:4b:35:d9: 43:31:ab:05:9a:1a:8d:64:e1:c4:7f:63:eb:35:0e: e7:67:6c:95:62:1f:b5:89:10:09:2a:2b:1c:e9:6e: 93:d7:2c:f2:75:11:a3:5f:98:03:6b:6f:5c:66:6c: b0:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:0D:6D:63:E8:07:96:F5:8A:D3:3D:09:EB:3B:67:71:64:5C:0E:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/b6720d34-db30-38d9-91ae-45f07ef69322.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.crl X509v3 Authority Key Identifier: keyid:7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer sbgp-ipAddrBlock: critical IPv4: 72.10.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:3e:58:12:9b:d1:2d:ca:f0:6c:04:b3:28:14:40:ab:64:76: b0:98:a0:e1:4c:89:eb:d1:6e:59:69:48:bc:1f:50:c0:7a:c7: e7:06:85:65:6c:97:fd:79:38:5e:c9:2b:ae:7e:7f:d3:bd:38: ac:44:49:8f:bc:88:57:24:86:6c:18:04:15:1b:1e:56:fe:f5: eb:b1:51:8b:da:42:83:95:c4:ae:e1:57:67:09:75:9b:e7:f1: be:00:de:06:dc:cf:c1:3d:21:e5:ba:58:3e:9c:bd:4d:1f:58: 0d:8a:cf:ff:1c:ec:09:89:40:40:fc:e5:0c:94:37:9e:d4:f9: 6b:f4:e5:cb:9a:87:37:a2:db:a4:7e:26:7e:88:dc:ea:b4:c4: cd:4d:c5:8f:63:e7:1f:2a:56:9c:20:ab:a6:f9:34:6f:12:64: 49:df:c6:33:1e:05:7e:06:a7:1e:d0:79:25:71:b5:c8:f8:e1: 9a:08:29:33:ce:af:7c:c7:1c:46:4a:23:60:49:21:70:41:8d: 83:1c:04:58:3e:b2:d3:c5:78:ba:4b:80:19:c6:ee:1a:f3:b7: c1:1c:b3:a6:9b:82:8f:ed:81:75:32:9a:fe:55:b9:41:5b:39: 41:27:3a:d8:02:4a:ab:bb:34:c3:87:fb:14:3c:fc:36:7c:89: f2:bd:7f:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfglMW9dXV2WPoUYEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzhmYmM0ODEtYTJjNy00Mzc5LWIyYzAtZGU0ZGYwNjBl MmI0MB4XDTI0MTExNDE0MDA0MFoXDTI1MDIxMjE0MDA0MFowLzEtMCsGA1UEAxMk ZDJiN2U5N2EtNmRmMi00MTVhLTk2NmItZGMxZTMxYTY1ZTRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjfft8GPEqIfQUaac2TgCPQDMRgVGJapvwHK VDx6FTkUcPcQjZsejAVF6w40qk2Kcxvh/lywr6ii1CpuQnTF0ZgEWpYEnQRs+bBY zWm0Akocu2bKuL8R13IP5CsIkjH/ilx6nOgF0Az44pX4gzpqM4JWHclJ/K0OKvWB 1mZ9Im3TjQrhZanbVioZOkREh5/hIUcHfYt2zU6ZOALN03YD9luKMmcGfG0jB9Ai j7ztUSqvvPtY+9FsaYA00XJyP0SPWWDMSTKv8eLypPSyMr9LNdlDMasFmhqNZOHE f2PrNQ7nZ2yVYh+1iRAJKisc6W6T1yzydRGjX5gDa29cZmywdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPgNbWPoB5b1itM9Ces7Z3FkXA5oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zOGZi YzQ4MS1hMmM3LTQzNzktYjJjMC1kZTRkZjA2MGUyYjQvYjY3MjBkMzQtZGIzMC0z OGQ5LTkxYWUtNDVmMDdlZjY5MzIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzhmYmM0ODEtYTJjNy00Mzc5LWIy YzAtZGU0ZGYwNjBlMmI0LzM4ZmJjNDgxLWEyYzctNDM3OS1iMmMwLWRlNGRmMDYw ZTJiNC5jcmwwHwYDVR0jBBgwFoAUe7WsRbLlDgq77ga840gjEBsnCwwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zOGZiYzQ4MS1hMmM3LTQzNzktYjJjMC1kZTRk ZjA2MGUyYjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFSApgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG4+WBKb0S3K8GwEsygUQKtkdrCYoOFMievRbllpSLwfUMB6x+cGhWVs l/15OF7JK65+f9O9OKxESY+8iFckhmwYBBUbHlb+9euxUYvaQoOVxK7hV2cJdZvn 8b4A3gbcz8E9IeW6WD6cvU0fWA2Kz/8c7AmJQED85QyUN57U+Wv05cuahzei26R+ Jn6I3Oq0xM1NxY9j5x8qVpwgq6b5NG8SZEnfxjMeBX4Gpx7QeSVxtcj44ZoIKTPO r3zHHEZKI2BJIXBBjYMcBFg+stPFeLpLgBnG7hrzt8Ecs6abgo/tgXUymv5VuUFb OUEnOtgCSqu7NMOH+xQ8/DZ8ifK9f/c= -----END CERTIFICATE-----Generated at Sun Nov 24 23:08:33 2024 by rpki-client on console-ams.rpki-client.org