$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/95107feb-574b-3db6-b519-81160424e826.roa File: 95107feb-574b-3db6-b519-81160424e826.roa (raw, json) Hash identifier: nBF+pRll2BA8BHdoP4ftgR3PvOKhkGmu2nIIBYVm0kU= Subject key identifier: 2B:41:28:49:6A:56:C8:1A:86:70:83:DB:A7:9E:58:0F:9B:1D:10:96 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858474C80D132C163786E028B2D40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/95107feb-574b-3db6-b519-81160424e826.roa Signing time: Sun 22 Sep 2024 13:00:40 +0000 ROA not before: Sun 22 Sep 2024 13:00:40 +0000 ROA not after: Sat 21 Dec 2024 14:00:40 +0000 asID: 24319 IP address blocks: 72.247.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:4c:80:d1:32:c1:63:78:6e:02:8b:2d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 22 13:00:40 2024 GMT Not After : Dec 21 14:00:40 2024 GMT Subject: CN=ff380a17-99c5-4def-a04c-e00d5488e2a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:75:b9:44:c9:ff:eb:6c:ba:a5:78:71:92:e7: df:97:64:b9:eb:d8:b4:11:4e:6a:6e:e7:80:74:f6: 85:f0:27:41:9d:4d:f2:6c:43:32:a2:c9:02:19:a4: 95:88:22:94:66:0b:eb:2b:ba:35:eb:61:da:71:bd: d2:94:12:e7:5b:03:ba:08:d4:a8:53:47:81:93:ad: 42:86:2c:f8:6c:20:9e:88:32:aa:8a:44:05:4d:ce: a0:65:74:a5:e9:d0:3e:cb:da:d8:48:76:db:e6:cf: e7:c4:b2:76:a2:8c:0c:1c:69:5d:7f:c9:19:1d:fb: 6f:a7:2b:7b:6a:8c:de:e5:2b:c9:71:c1:c4:a0:3c: ba:59:d6:2c:96:50:66:55:15:34:53:e1:4b:bf:ba: da:da:8d:1c:66:b1:c5:a6:fd:b2:d3:9f:5a:6a:da: 87:8f:ab:14:8d:9f:f6:12:38:a0:b0:7f:0c:16:bf: 63:dd:06:b6:dd:f8:32:97:85:7f:cf:1d:7d:d3:07: 3b:e1:8b:64:dc:cd:0c:b3:8b:9c:71:5c:95:17:79: ea:d1:80:bb:9f:4b:09:94:f1:d9:b2:07:28:ba:a6: 9d:3c:ea:de:44:89:3f:db:3c:32:57:82:9e:40:28: fa:bd:49:9a:12:6b:e2:3f:db:df:97:55:31:98:bf: 0d:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:41:28:49:6A:56:C8:1A:86:70:83:DB:A7:9E:58:0F:9B:1D:10:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/95107feb-574b-3db6-b519-81160424e826.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 72.247.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:4f:14:24:ab:85:2a:98:c6:c9:a2:03:e2:73:4c:ae:b8:56: 43:df:97:22:85:bb:93:ac:b7:7a:ae:0d:cb:50:d1:cd:47:a1: a3:f7:96:78:17:b2:f8:7a:4c:94:78:9a:bb:f9:44:ee:c7:e2: cd:23:5b:50:e3:27:b1:14:50:64:f4:79:d5:2c:13:39:82:9c: a9:92:96:a3:78:61:b7:e8:58:52:69:ce:30:59:d2:3e:6b:ac: 24:83:c0:34:48:34:55:9f:e0:75:7e:59:ea:50:dd:70:b4:4d: ff:ad:60:9c:83:9b:d7:e7:5b:8b:b1:45:86:e6:da:b0:01:6e: 52:b3:35:3f:bf:4c:1d:dd:7c:10:d6:33:47:1f:81:19:44:62: 12:32:1f:fa:05:fd:19:72:ba:02:f4:75:ff:0d:3b:f1:fa:fc: 28:ba:89:c3:84:45:a4:dc:8f:e0:84:69:45:af:b8:79:48:e1: 8f:74:8d:de:82:a7:15:d7:f7:3d:1b:a2:cd:f5:45:eb:c0:eb: 18:b6:4a:ea:e9:44:59:f3:b0:2b:5b:2e:dd:7a:36:43:eb:fa: ae:b2:4f:7d:ce:0e:fc:a2:5f:f6:b0:18:c7:5d:79:5f:9b:94: 2c:f6:e2:d3:aa:0f:eb:7f:61:84:90:ad:ee:d4:c4:bb:46:1a: f3:47:8c:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdMgNEywWN4bgKLLUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MDkyMjEzMDA0MFoXDTI0MTIyMTE0MDA0MFowLzEtMCsGA1UEAxMk ZmYzODBhMTctOTljNS00ZGVmLWEwNGMtZTAwZDU0ODhlMmEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHW5RMn/62y6pXhxkuffl2S569i0EU5qbueA dPaF8CdBnU3ybEMyoskCGaSViCKUZgvrK7o162Hacb3SlBLnWwO6CNSoU0eBk61C hiz4bCCeiDKqikQFTc6gZXSl6dA+y9rYSHbb5s/nxLJ2oowMHGldf8kZHftvpyt7 aoze5SvJccHEoDy6WdYsllBmVRU0U+FLv7ra2o0cZrHFpv2y059aatqHj6sUjZ/2 EjigsH8MFr9j3Qa23fgyl4V/zx190wc74Ytk3M0Ms4uccVyVF3nq0YC7n0sJlPHZ sgcouqadPOreRIk/2zwyV4KeQCj6vUmaEmviP9vfl1UxmL8N9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCtBKElqVsgahnCD26eeWA+bHRCWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTUxMDdmZWItNTc0Yi0z ZGI2LWI1MTktODExNjA0MjRlODI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPfxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEFPFCSrhSqYxsmiA+JzTK64VkPflyKFu5Ost3quDctQ0c1HoaP3lngX svh6TJR4mrv5RO7H4s0jW1DjJ7EUUGT0edUsEzmCnKmSlqN4YbfoWFJpzjBZ0j5r rCSDwDRINFWf4HV+WepQ3XC0Tf+tYJyDm9fnW4uxRYbm2rABblKzNT+/TB3dfBDW M0cfgRlEYhIyH/oF/RlyugL0df8NO/H6/Ci6icOERaTcj+CEaUWvuHlI4Y90jd6C pxXX9z0bos31RevA6xi2SurpRFnzsCtbLt16NkPr+q6yT33ODvyiX/awGMddeV+b lCz24tOqD+t/YYSQre7UxLtGGvNHjIA= -----END CERTIFICATE-----Generated at Fri Nov 22 22:27:25 2024 by rpki-client on console-fra.rpki-client.org