$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ca837d82-1293-3c6f-aefa-d0676184fe9e.roa File: ca837d82-1293-3c6f-aefa-d0676184fe9e.roa (raw, json) Hash identifier: iw6imWbLa7yTrZ2JgHy6NNn+UbiKbsV6gB413PTXCPk= Subject key identifier: 6C:04:2E:BB:A1:6E:51:1A:D4:C0:4D:4E:BB:1B:90:A2:3E:D4:54:24 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858474585FF15892B2F92ED034B80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ca837d82-1293-3c6f-aefa-d0676184fe9e.roa Signing time: Fri 20 Sep 2024 01:00:31 +0000 ROA not before: Fri 20 Sep 2024 01:00:31 +0000 ROA not after: Thu 19 Dec 2024 02:00:31 +0000 asID: 55836 IP address blocks: 72.246.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:45:85:ff:15:89:2b:2f:92:ed:03:4b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 20 01:00:31 2024 GMT Not After : Dec 19 02:00:31 2024 GMT Subject: CN=94e68e09-8c23-4a76-af22-4a05dc9009af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:ce:2a:e9:25:2a:b9:5e:2d:bd:d9:bf:af:63: 93:0b:53:9e:8f:8f:28:07:84:e1:7a:94:af:2e:60: 34:40:af:8c:6c:ac:d6:1d:d3:0c:8e:97:86:6f:63: 84:ef:2b:99:6b:c3:cc:7a:80:d6:53:fb:1b:fb:66: 91:95:e5:10:75:18:90:c8:52:03:e7:c2:a7:f5:35: fd:de:2b:d4:0b:e6:8b:d2:28:71:dc:47:fa:46:d4: d1:20:b7:43:be:03:cb:fc:88:93:24:82:2a:9d:15: d9:29:0d:5a:2a:d1:fc:c9:a4:2a:c0:4c:8b:e8:96: 24:6b:4a:00:65:d6:51:9a:0e:fa:0c:93:d8:35:72: 98:8c:aa:c5:2b:2e:b5:f2:02:5f:fe:15:92:2d:50: 69:50:86:41:3e:9b:a8:b0:4f:08:78:c3:7f:2a:01: c7:19:35:3b:41:6f:8e:a4:08:9a:45:ee:b5:8c:73: 63:c2:8f:27:1c:4e:48:21:bd:88:ec:95:a1:09:c7: 26:11:16:01:57:8b:7a:19:c9:64:02:95:6e:67:9b: 40:2e:2f:69:7e:e2:57:af:15:7e:6b:d0:0a:19:09: 5c:7e:5d:11:6d:91:00:07:82:26:9d:8f:60:fd:b3: 6b:dc:1d:d7:2a:2d:15:e9:1a:c9:b7:34:e8:03:8e: 24:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:04:2E:BB:A1:6E:51:1A:D4:C0:4D:4E:BB:1B:90:A2:3E:D4:54:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ca837d82-1293-3c6f-aefa-d0676184fe9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 72.246.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:bf:9f:cb:d4:8d:19:4c:cc:7f:29:99:7f:d5:d7:7b:56:b3: 6d:11:31:03:22:63:6d:98:57:08:d6:11:14:d7:d2:e3:46:23: 31:11:f3:e0:e6:90:56:21:b5:1f:11:0d:39:f9:d6:9c:b4:f2: f9:eb:08:d7:dc:a1:57:3d:e0:a5:9e:6f:63:ab:58:d4:39:31: bc:7f:30:73:f7:a0:d5:d7:f7:5b:ec:08:c2:6a:d3:6d:75:08: cd:d2:fc:52:64:ad:b5:46:a9:da:3b:90:f1:32:95:65:ad:5d: 6e:0e:8c:6c:61:36:55:00:5a:a3:86:77:ae:6c:42:72:47:54: e0:c8:a3:85:7a:a2:4a:29:e2:df:7c:e5:ac:fe:7f:b9:fb:4b: 66:ff:2f:73:03:7f:f8:7b:cc:0b:6d:a2:9b:dd:7d:d8:6a:ba: a4:58:20:14:e9:77:8d:d1:95:f5:c4:3c:4c:ad:d0:0a:ff:42: a8:fc:fc:8e:28:d3:81:b3:aa:f5:4e:97:54:1e:d2:3d:2d:89: 4f:4e:14:45:4e:8d:97:67:8f:7e:73:dc:39:8b:9a:05:b2:11: 12:5f:fc:44:8b:df:24:86:4c:05:2c:2c:2b:37:26:40:7e:de: c2:f6:24:7d:98:fc:63:50:f8:fc:03:49:9f:2c:ca:c1:aa:a7: 39:88:66:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdFhf8ViSsvku0DS4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MDkyMDAxMDAzMVoXDTI0MTIxOTAyMDAzMVowLzEtMCsGA1UEAxMk OTRlNjhlMDktOGMyMy00YTc2LWFmMjItNGEwNWRjOTAwOWFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAms4q6SUquV4tvdm/r2OTC1Oej48oB4ThepSv LmA0QK+MbKzWHdMMjpeGb2OE7yuZa8PMeoDWU/sb+2aRleUQdRiQyFID58Kn9TX9 3ivUC+aL0ihx3Ef6RtTRILdDvgPL/IiTJIIqnRXZKQ1aKtH8yaQqwEyL6JYka0oA ZdZRmg76DJPYNXKYjKrFKy618gJf/hWSLVBpUIZBPpuosE8IeMN/KgHHGTU7QW+O pAiaRe61jHNjwo8nHE5IIb2I7JWhCccmERYBV4t6GclkApVuZ5tALi9pfuJXrxV+ a9AKGQlcfl0RbZEAB4ImnY9g/bNr3B3XKi0V6RrJtzToA44k3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGwELruhblEa1MBNTrsbkKI+1FQkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvY2E4MzdkODItMTI5My0z YzZmLWFlZmEtZDA2NzYxODRmZTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSPaYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG2/n8vUjRlMzH8pmX/V13tWs20RMQMiY22YVwjWERTX0uNGIzER8+Dm kFYhtR8RDTn51py08vnrCNfcoVc94KWeb2OrWNQ5Mbx/MHP3oNXX91vsCMJq0211 CM3S/FJkrbVGqdo7kPEylWWtXW4OjGxhNlUAWqOGd65sQnJHVODIo4V6okop4t98 5az+f7n7S2b/L3MDf/h7zAttopvdfdhquqRYIBTpd43RlfXEPEyt0Ar/Qqj8/I4o 04GzqvVOl1Qe0j0tiU9OFEVOjZdnj35z3DmLmgWyERJf/ESL3ySGTAUsLCs3JkB+ 3sL2JH2Y/GNQ+PwDSZ8sysGqpzmIZko= -----END CERTIFICATE-----Generated at Mon Nov 25 16:32:52 2024 by rpki-client on console-ams.rpki-client.org