$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/258c7044-4fef-36c7-b5b0-0558e77e5c06.roa File: 258c7044-4fef-36c7-b5b0-0558e77e5c06.roa (raw, json) Hash identifier: XcDF8TSVX/t4QcmT+eTk0YoWGPxOHTeqP2d6NjE97O4= Subject key identifier: C1:1F:A1:EA:79:EA:EC:99:4F:BD:0D:31:64:99:F7:8D:15:AD:C6:39 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858474585FFF792CF0D7976A4E160 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/258c7044-4fef-36c7-b5b0-0558e77e5c06.roa Signing time: Fri 20 Sep 2024 01:00:31 +0000 ROA not before: Fri 20 Sep 2024 01:00:31 +0000 ROA not after: Thu 19 Dec 2024 02:00:31 +0000 asID: 20940 IP address blocks: 72.246.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:45:85:ff:f7:92:cf:0d:79:76:a4:e1:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 20 01:00:31 2024 GMT Not After : Dec 19 02:00:31 2024 GMT Subject: CN=a58c6178-f201-4545-9e15-e84b4ba1922c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:03:63:b3:82:87:ca:6e:94:5d:df:c5:19:e3: c6:2e:fc:87:b1:11:34:9d:53:c0:d4:d6:76:4d:19: f1:7c:0c:29:9b:49:f2:5d:b5:38:45:eb:9f:2a:11: 0f:29:59:ae:e8:0f:af:e6:cd:21:82:06:6b:c1:ae: ea:d0:77:44:09:33:b2:29:0c:8b:f2:a2:28:fc:a2: 83:e7:bc:2d:e3:98:d2:7f:0f:93:51:c3:52:c6:f6: 56:f9:90:2f:84:b7:15:e5:c8:c3:d8:7a:ab:1b:40: b2:f4:e6:fb:06:bc:0f:22:74:ba:ce:ee:dd:73:08: b6:46:b9:c5:34:ce:c4:5e:54:9b:00:ae:68:75:da: 15:95:7b:79:c3:71:6a:bb:0c:a9:bb:42:72:42:87: 82:4d:b9:a4:09:e2:39:a9:ab:94:db:0f:77:fe:be: b0:3d:b4:e2:ac:4e:36:21:fe:20:f4:86:3b:2f:7e: 69:3b:b9:8d:aa:54:8b:86:5d:be:03:82:7a:95:80: 99:8f:34:a4:b2:c3:59:e4:19:ef:8c:75:e1:bb:6d: 76:2d:fc:f7:17:3b:69:31:05:75:45:c6:93:ac:81: f6:5c:1e:6d:aa:4c:04:94:ad:d9:58:8f:7e:ab:57: b4:55:1d:06:ae:c1:c9:f5:9c:fb:3c:51:01:64:8a: 11:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:1F:A1:EA:79:EA:EC:99:4F:BD:0D:31:64:99:F7:8D:15:AD:C6:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/258c7044-4fef-36c7-b5b0-0558e77e5c06.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 72.246.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:8d:3a:82:f1:d8:87:4c:8a:12:68:f3:ec:79:9f:17:ed:78: c6:f6:9f:48:fa:89:1a:84:d1:20:10:76:09:57:c5:ff:2c:54: bc:52:de:5a:47:24:a3:70:ec:e0:13:4f:43:36:10:14:2e:4d: b7:8a:7f:17:30:04:ee:dc:de:2c:d9:f3:c8:79:3c:f4:50:7e: d4:8a:35:3b:63:ef:5e:72:6f:83:71:ff:1d:3e:4c:da:26:20: 96:93:c7:96:f2:c6:84:91:a5:11:25:cd:4f:ec:8a:24:44:1a: a0:8a:5c:46:fe:90:f1:2a:43:52:67:4f:7b:44:a6:7a:bd:55: 83:a4:75:7f:d2:3c:3d:7b:b6:07:73:11:af:93:11:b3:d2:5b: a1:9f:ce:d8:b3:0e:9e:b1:3a:20:0d:14:25:e1:4f:3b:8c:c5: 51:a1:f1:da:1d:5d:27:03:31:98:4b:4d:bb:fd:94:86:43:e4: c1:be:43:e1:5e:6a:8f:e1:26:80:fa:20:93:1f:a6:3f:0f:a8: 77:30:88:fb:64:fb:e4:9c:0a:5b:e0:7e:e8:92:e9:45:ac:9b: 72:ad:94:5c:be:a8:96:5e:19:4a:67:59:78:d5:01:af:5d:48: a4:82:0c:36:28:b6:b6:46:05:61:7e:df:b3:12:d4:e0:db:cb: 1f:d6:73:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdFhf/3ks8NeXak4WAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MDkyMDAxMDAzMVoXDTI0MTIxOTAyMDAzMVowLzEtMCsGA1UEAxMk YTU4YzYxNzgtZjIwMS00NTQ1LTllMTUtZTg0YjRiYTE5MjJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQNjs4KHym6UXd/FGePGLvyHsRE0nVPA1NZ2 TRnxfAwpm0nyXbU4ReufKhEPKVmu6A+v5s0hggZrwa7q0HdECTOyKQyL8qIo/KKD 57wt45jSfw+TUcNSxvZW+ZAvhLcV5cjD2HqrG0Cy9Ob7BrwPInS6zu7dcwi2RrnF NM7EXlSbAK5oddoVlXt5w3Fquwypu0JyQoeCTbmkCeI5qauU2w93/r6wPbTirE42 If4g9IY7L35pO7mNqlSLhl2+A4J6lYCZjzSkssNZ5BnvjHXhu212Lfz3FztpMQV1 RcaTrIH2XB5tqkwElK3ZWI9+q1e0VR0GrsHJ9Zz7PFEBZIoRhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMEfoep56uyZT70NMWSZ940VrcY5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjU4YzcwNDQtNGZlZi0z NmM3LWI1YjAtMDU1OGU3N2U1YzA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPYoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACmNOoLx2IdMihJo8+x5nxfteMb2n0j6iRqE0SAQdglXxf8sVLxS3lpH JKNw7OATT0M2EBQuTbeKfxcwBO7c3izZ88h5PPRQftSKNTtj715yb4Nx/x0+TNom IJaTx5byxoSRpRElzU/siiREGqCKXEb+kPEqQ1JnT3tEpnq9VYOkdX/SPD17tgdz Ea+TEbPSW6GfztizDp6xOiANFCXhTzuMxVGh8dodXScDMZhLTbv9lIZD5MG+Q+Fe ao/hJoD6IJMfpj8PqHcwiPtk++ScClvgfuiS6UWsm3KtlFy+qJZeGUpnWXjVAa9d SKSCDDYotrZGBWF+37MS1ODbyx/Wc5k= -----END CERTIFICATE-----Generated at Thu Nov 21 23:39:08 2024 by rpki-client on console-ams.rpki-client.org