$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/22a19058-15d4-3c24-ad19-6e59f9373829.roa File: 22a19058-15d4-3c24-ad19-6e59f9373829.roa (raw, json) Hash identifier: iAchSk1qQEHTYuVoVW/Tr6g0Y2HN0tl0CRhrzJM28fY= Subject key identifier: 2D:73:89:9F:6E:6A:7F:52:31:5D:C5:E8:D9:79:27:3C:D1:9D:4E:32 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858474C80D1064D3F692852DF6A80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/22a19058-15d4-3c24-ad19-6e59f9373829.roa Signing time: Sun 22 Sep 2024 13:00:40 +0000 ROA not before: Sun 22 Sep 2024 13:00:40 +0000 ROA not after: Sat 21 Dec 2024 14:00:40 +0000 asID: 16625 IP address blocks: 72.247.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:4c:80:d1:06:4d:3f:69:28:52:df:6a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 22 13:00:40 2024 GMT Not After : Dec 21 14:00:40 2024 GMT Subject: CN=d24a1b33-1415-488f-83c5-db1c87f1b8ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:16:e5:c7:2c:3f:c4:09:cd:31:af:5e:94:21: d7:9a:c2:43:a7:b5:5a:a7:2d:e3:fd:5c:21:bc:8d: 17:cc:1c:b3:ce:0c:e1:a3:6a:00:7f:d4:e4:64:86: c1:5e:d1:64:5e:59:a6:51:e3:99:bc:b6:4f:f0:f2: b7:b1:3b:9c:92:b1:51:a7:c8:d4:49:b0:be:3e:0a: b7:39:b6:dd:21:a3:4a:88:0e:97:2a:f1:20:d7:5a: 0b:11:3f:d7:4f:ab:9a:f9:e6:5e:6f:fd:d5:67:0c: af:fa:4b:79:e6:17:29:49:b0:c9:89:b6:43:6d:ec: cc:ae:92:6d:f0:da:eb:f9:bd:6e:9b:69:a5:ea:24: 35:de:9e:55:89:f0:6e:d8:ae:72:33:c6:66:ba:62: a4:5d:e6:88:a9:0b:8e:c6:a9:2d:37:dd:89:1e:b0: b6:ea:f3:cc:a9:08:e7:a8:3c:5d:a7:05:4c:a2:97: 23:e9:39:9a:8b:0a:62:37:25:eb:43:ec:3a:4b:7d: 54:9e:3e:44:b2:f3:fa:1b:ba:0a:74:c8:ab:68:18: a3:56:61:dd:a9:e3:fc:9f:32:6b:07:64:63:11:2f: 48:50:74:cc:94:b0:1c:a5:ab:9e:8c:80:41:2b:8c: 1d:23:e8:cf:25:da:3e:db:96:8d:56:12:40:3b:43: 77:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:73:89:9F:6E:6A:7F:52:31:5D:C5:E8:D9:79:27:3C:D1:9D:4E:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/22a19058-15d4-3c24-ad19-6e59f9373829.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 72.247.224.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:16:4f:92:90:f6:f9:a5:af:4e:e4:3d:7e:84:ef:73:91:d3: 3c:76:79:d5:19:84:19:86:0d:2a:07:0f:f7:4f:02:f5:ce:47: 27:bb:44:5a:1d:fd:e9:26:b3:e8:6e:16:da:3c:d9:6a:b3:7a: 8a:20:ef:cb:3a:38:46:e7:e1:9c:bf:ca:22:15:87:d6:6b:32: 57:35:8d:95:bd:8c:57:07:19:70:b6:ee:05:43:61:b4:fb:c4: ed:f4:e8:78:ee:63:35:ae:9a:78:44:64:20:0e:7e:56:6f:e2: 06:13:2d:ff:49:fe:aa:f8:20:cf:89:e7:37:e8:1f:bc:c0:8a: 26:25:8f:af:62:db:1f:3c:83:b1:1c:5b:4b:06:0a:f7:18:33: e3:0b:9c:d0:3c:9f:06:11:ba:c6:7b:d6:78:96:c0:54:72:08: 38:4a:fa:3c:b7:28:49:4b:a8:1f:ef:13:b8:8b:ff:62:4a:a0: 35:9b:ae:35:96:71:c6:e0:bc:4d:f2:99:cf:7c:4f:b7:62:ca: 20:74:c1:76:0a:e0:1a:89:04:86:b5:ca:35:64:3a:2b:8b:aa: c2:1e:d6:20:ee:58:3a:13:dd:a4:e3:56:bd:95:e1:da:ef:fc: 06:41:ec:57:5c:ae:94:5d:95:93:83:47:39:0c:a7:6d:7b:a9: e3:2f:2e:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdMgNEGTT9pKFLfaoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MDkyMjEzMDA0MFoXDTI0MTIyMTE0MDA0MFowLzEtMCsGA1UEAxMk ZDI0YTFiMzMtMTQxNS00ODhmLTgzYzUtZGIxYzg3ZjFiOGFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBblxyw/xAnNMa9elCHXmsJDp7Vapy3j/Vwh vI0XzByzzgzho2oAf9TkZIbBXtFkXlmmUeOZvLZP8PK3sTuckrFRp8jUSbC+Pgq3 ObbdIaNKiA6XKvEg11oLET/XT6ua+eZeb/3VZwyv+kt55hcpSbDJibZDbezMrpJt 8Nrr+b1um2ml6iQ13p5VifBu2K5yM8ZmumKkXeaIqQuOxqktN92JHrC26vPMqQjn qDxdpwVMopcj6TmaiwpiNyXrQ+w6S31Unj5EsvP6G7oKdMiraBijVmHdqeP8nzJr B2RjES9IUHTMlLAcpauejIBBK4wdI+jPJdo+25aNVhJAO0N3RwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC1ziZ9uan9SMV3F6Nl5JzzRnU4yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjJhMTkwNTgtMTVkNC0z YzI0LWFkMTktNmU1OWY5MzczODI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSPfgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC0WT5KQ9vmlr07kPX6E73OR0zx2edUZhBmGDSoHD/dPAvXORye7RFod /ekms+huFto82Wqzeoog78s6OEbn4Zy/yiIVh9ZrMlc1jZW9jFcHGXC27gVDYbT7 xO306HjuYzWumnhEZCAOflZv4gYTLf9J/qr4IM+J5zfoH7zAiiYlj69i2x88g7Ec W0sGCvcYM+MLnNA8nwYRusZ71niWwFRyCDhK+jy3KElLqB/vE7iL/2JKoDWbrjWW ccbgvE3ymc98T7diyiB0wXYK4BqJBIa1yjVkOiuLqsIe1iDuWDoT3aTjVr2V4drv /AZB7FdcrpRdlZODRzkMp217qeMvLoM= -----END CERTIFICATE-----Generated at Mon Nov 25 16:06:06 2024 by rpki-client on console-fra.rpki-client.org