$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0ca5a6c5-9398-327b-b211-f731d3821588.roa File: 0ca5a6c5-9398-327b-b211-f731d3821588.roa (raw, json) Hash identifier: d4/ZA5Kkw4PeMmnNi6IdqAqdA9AS8fUa5rwZgXXP2EY= Subject key identifier: 9C:88:EC:0F:86:FE:49:D0:FD:9E:43:65:2B:54:8D:00:40:26:3D:B7 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858474B1B521AD47824B5B16ADD80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0ca5a6c5-9398-327b-b211-f731d3821588.roa Signing time: Sun 22 Sep 2024 01:00:32 +0000 ROA not before: Sun 22 Sep 2024 01:00:32 +0000 ROA not after: Sat 21 Dec 2024 02:00:32 +0000 asID: 12222 IP address blocks: 72.247.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:4b:1b:52:1a:d4:78:24:b5:b1:6a:dd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 22 01:00:32 2024 GMT Not After : Dec 21 02:00:32 2024 GMT Subject: CN=847e72a4-d1e7-4761-89fc-cd0325680b4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:76:cd:ef:b2:c6:c6:3b:6e:6f:4e:0d:29:bb: bd:98:be:37:ac:cf:1f:a5:e8:31:d9:64:87:17:6f: 28:32:7a:6e:ca:73:02:46:1e:73:af:f1:02:ba:45: 36:a2:ab:8d:a6:0e:7b:45:41:2c:50:7d:f7:d3:ff: f8:eb:5b:dc:7e:44:28:19:41:95:ff:14:1b:a7:48: f3:aa:c3:71:60:db:fb:19:70:16:81:28:85:55:a7: a4:77:a3:09:2f:7c:48:42:69:3c:a0:94:4c:13:5d: 5b:06:c2:41:6d:2f:e2:53:12:be:36:6f:cb:65:e3: 35:64:4b:9f:f1:b5:e2:2f:32:4d:47:7f:52:fc:ea: 3b:6d:85:3a:ad:dd:df:50:86:1a:eb:59:4c:aa:2b: 68:0b:a8:f7:bd:8f:a7:b5:ee:6e:d4:7b:01:c3:ed: 81:d4:4c:70:6d:a9:cd:d1:58:00:d4:10:bd:2d:ff: 8f:3d:e1:e2:d2:05:38:89:a9:d8:f8:3a:0e:70:76: 4a:59:d5:50:1d:95:79:ab:0c:b9:5a:fa:d4:bf:15: b5:fc:c0:f9:8d:b1:35:da:86:b8:c9:61:f7:7f:6b: ab:4a:27:ec:dd:6a:de:b6:0a:8d:74:0b:08:e6:49: 56:7c:41:3e:e9:a7:ad:44:ac:de:9e:b3:20:d9:a3: c9:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:88:EC:0F:86:FE:49:D0:FD:9E:43:65:2B:54:8D:00:40:26:3D:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0ca5a6c5-9398-327b-b211-f731d3821588.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 72.247.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:30:39:42:43:f3:39:d6:5f:f6:2e:80:d8:c0:f4:aa:86:80: e4:7a:b6:30:8f:50:2d:8f:0d:34:df:ed:0b:26:4d:1f:e9:eb: 86:7b:88:d8:55:d3:64:64:b3:50:fe:0b:e3:ef:9d:8c:51:7b: 50:83:23:c0:30:fd:b9:b3:4c:e3:df:71:c2:88:7d:be:c9:16: e2:ed:ea:c3:e6:f3:3e:82:09:ea:8a:fe:fa:bf:87:2f:91:42: 8c:14:8a:74:24:36:47:d7:c7:ef:47:c4:e1:21:72:45:60:32: 4d:92:a3:36:79:65:93:ab:23:33:9a:5c:55:f4:ea:c4:7b:24: 35:0e:91:af:6b:76:1f:0b:27:31:a2:fb:9b:ca:4c:85:af:98: f4:11:b9:1c:4f:c7:ad:65:21:69:1c:39:ff:54:4a:2b:49:bf: c8:5b:5a:b7:97:6e:64:ac:a6:a0:08:c8:18:91:02:6c:5e:8b: 01:98:79:21:08:47:78:ef:c5:0b:8a:17:0f:49:69:95:96:bf: 43:06:3c:97:60:92:d1:a5:f7:0f:d0:e8:37:3e:2a:a5:6b:f2: 26:c2:a1:ec:56:d2:c0:b2:50:e7:bd:77:ab:06:73:e0:59:6b: 7d:05:62:5a:a7:d8:2d:5a:b8:53:3f:dc:bc:5a:54:16:5e:45: b5:98:72:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdLG1Ia1HgktbFq3YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MDkyMjAxMDAzMloXDTI0MTIyMTAyMDAzMlowLzEtMCsGA1UEAxMk ODQ3ZTcyYTQtZDFlNy00NzYxLTg5ZmMtY2QwMzI1NjgwYjRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAknbN77LGxjtub04NKbu9mL43rM8fpegx2WSH F28oMnpuynMCRh5zr/ECukU2oquNpg57RUEsUH330//461vcfkQoGUGV/xQbp0jz qsNxYNv7GXAWgSiFVaekd6MJL3xIQmk8oJRME11bBsJBbS/iUxK+Nm/LZeM1ZEuf 8bXiLzJNR39S/Oo7bYU6rd3fUIYa61lMqitoC6j3vY+nte5u1HsBw+2B1ExwbanN 0VgA1BC9Lf+PPeHi0gU4ianY+DoOcHZKWdVQHZV5qwy5WvrUvxW1/MD5jbE12oa4 yWH3f2urSifs3WretgqNdAsI5klWfEE+6aetRKzenrMg2aPJ1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJyI7A+G/knQ/Z5DZStUjQBAJj23MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMGNhNWE2YzUtOTM5OC0z MjdiLWIyMTEtZjczMWQzODIxNTg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPfYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHAwOUJD8znWX/YugNjA9KqGgOR6tjCPUC2PDTTf7QsmTR/p64Z7iNhV 02Rks1D+C+PvnYxRe1CDI8Aw/bmzTOPfccKIfb7JFuLt6sPm8z6CCeqK/vq/hy+R QowUinQkNkfXx+9HxOEhckVgMk2SozZ5ZZOrIzOaXFX06sR7JDUOka9rdh8LJzGi +5vKTIWvmPQRuRxPx61lIWkcOf9USitJv8hbWreXbmSspqAIyBiRAmxeiwGYeSEI R3jvxQuKFw9JaZWWv0MGPJdgktGl9w/Q6Dc+KqVr8ibCoexW0sCyUOe9d6sGc+BZ a30FYlqn2C1auFM/3LxaVBZeRbWYcsA= -----END CERTIFICATE-----Generated at Mon Nov 25 22:16:28 2024 by rpki-client on console-fra.rpki-client.org