$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/774db6f0-cf2d-395e-b5a7-40a5d21134d6.roa File: 774db6f0-cf2d-395e-b5a7-40a5d21134d6.roa (raw, json) Hash identifier: w7o/6be6tlv6CqwiMxmOzLF/E7Ilz+JkCuaTGoKC4mw= Subject key identifier: 09:1F:D8:87:FA:D0:47:F5:8E:1D:D9:AF:5D:6F:DD:ED:23:A5:52:23 Certificate issuer: /CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Certificate serial: 010D0C9F43285847ED24B9276893DB708EB1E410 Authority key identifier: 9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/774db6f0-cf2d-395e-b5a7-40a5d21134d6.roa Signing time: Tue 19 Nov 2024 02:00:27 +0000 ROA not before: Tue 19 Nov 2024 02:00:27 +0000 ROA not after: Mon 17 Feb 2025 02:00:27 +0000 asID: 16433 IP address blocks: 173.240.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ed:24:b9:27:68:93:db:70:8e:b1:e4:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Validity Not Before: Nov 19 02:00:27 2024 GMT Not After : Feb 17 02:00:27 2025 GMT Subject: CN=e2d85217-7552-4c1a-b33c-16e2ab9e357c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:70:09:b0:11:27:4e:ce:85:9e:e1:8d:83:f1: d8:98:56:82:2b:f9:1d:13:4d:2a:fc:48:a4:66:35: 5d:f3:fe:8c:89:de:9b:37:8d:22:cb:6e:14:9d:92: 3b:7a:64:5d:62:9d:98:7c:08:d1:c9:ba:ee:a8:45: c9:e6:40:93:8e:9c:44:d8:3f:07:e0:8e:36:c1:26: 1d:ab:2a:2f:fc:5e:f1:29:82:f8:9c:47:e0:40:8a: 15:ff:b3:cd:ab:ee:dd:85:5f:79:e4:8a:4e:26:7a: 04:70:e7:6d:71:8b:6a:d7:75:9e:ef:61:f4:46:20: 2a:20:26:04:7a:74:17:e3:02:d4:74:2f:65:6c:6e: 36:4c:18:52:3b:57:54:6a:67:e9:cb:e4:a5:26:28: 5e:0b:69:8b:7b:b6:2a:8b:22:e6:b3:27:08:f1:cb: c2:e6:dd:00:2c:c0:6d:21:0e:50:91:5e:c9:b7:d5: 3e:77:3d:3c:4d:83:e9:ca:8d:2a:1d:87:c2:e3:18: 20:be:74:95:9b:f1:d6:4f:99:99:17:39:16:03:3a: dc:21:69:2d:f1:8d:01:72:de:52:9b:a5:8d:06:eb: 38:cc:cd:e6:b7:81:06:7f:41:b1:0e:51:df:21:ff: 01:31:7f:2a:bc:80:54:fa:dc:c5:9a:0f:d1:09:44: 62:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:1F:D8:87:FA:D0:47:F5:8E:1D:D9:AF:5D:6F:DD:ED:23:A5:52:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/774db6f0-cf2d-395e-b5a7-40a5d21134d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl X509v3 Authority Key Identifier: keyid:9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer sbgp-ipAddrBlock: critical IPv4: 173.240.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:0e:a4:3b:1a:f0:58:cc:16:1b:ef:c2:2d:87:19:ea:bf:5e: e2:03:9e:1d:77:51:1c:5f:14:ed:96:0d:5a:21:bc:21:d2:40: 2b:d0:07:e9:d5:69:cd:85:4a:64:06:14:51:20:fc:14:63:33: 49:dc:45:7a:19:5d:e7:41:ec:d2:9c:87:6f:f6:6a:56:20:9d: 6b:f0:e5:89:d2:2b:bd:40:e1:ab:0a:ab:01:b2:7f:4c:60:f8: 6f:37:3a:24:37:56:1e:10:40:2b:af:b5:5b:47:2e:a7:87:da: b4:3c:ab:8e:40:41:3d:82:49:64:11:d0:d1:bd:6f:f7:b1:43: 36:07:10:e9:f0:e6:c9:61:28:f2:11:30:7b:da:cd:c4:4e:d0: c2:f7:cc:8e:22:1b:a5:c8:65:3d:a7:5e:88:38:b7:80:3b:a7: 1b:9a:c6:eb:18:e9:b1:a0:02:05:5a:52:ee:47:82:e9:4b:13: 14:3c:6d:a4:22:76:5a:7c:73:60:c2:39:31:a6:92:99:55:51: 7e:ca:ab:ef:4a:c6:59:e6:c8:ef:44:eb:0d:3d:af:eb:64:7c: b6:28:92:1c:31:26:d9:86:73:34:5f:47:d9:7e:ff:6d:96:4e: 64:05:09:2c:15:81:75:a4:4a:35:41:64:c8:f7:d9:28:a4:9a: 87:89:c3:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEftJLknaJPbcI6x5BAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmRiZjYwNGYtMjRiMC00MjZlLTgwOWQtZTY1YjA4YmU1 ZDUwMB4XDTI0MTExOTAyMDAyN1oXDTI1MDIxNzAyMDAyN1owLzEtMCsGA1UEAxMk ZTJkODUyMTctNzU1Mi00YzFhLWIzM2MtMTZlMmFiOWUzNTdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnAJsBEnTs6FnuGNg/HYmFaCK/kdE00q/Eik ZjVd8/6Mid6bN40iy24UnZI7emRdYp2YfAjRybruqEXJ5kCTjpxE2D8H4I42wSYd qyov/F7xKYL4nEfgQIoV/7PNq+7dhV955IpOJnoEcOdtcYtq13We72H0RiAqICYE enQX4wLUdC9lbG42TBhSO1dUamfpy+SlJiheC2mLe7YqiyLmsycI8cvC5t0ALMBt IQ5QkV7Jt9U+dz08TYPpyo0qHYfC4xggvnSVm/HWT5mZFzkWAzrcIWkt8Y0Bct5S m6WNBus4zM3mt4EGf0GxDlHfIf8BMX8qvIBU+tzFmg/RCURi9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAkf2If60Ef1jh3Zr11v3e0jpVIjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yZGJm NjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjViMDhiZTVkNTAvNzc0ZGI2ZjAtY2YyZC0z OTVlLWI1YTctNDBhNWQyMTEzNGQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMmRiZjYwNGYtMjRiMC00MjZlLTgw OWQtZTY1YjA4YmU1ZDUwLzJkYmY2MDRmLTI0YjAtNDI2ZS04MDlkLWU2NWIwOGJl NWQ1MC5jcmwwHwYDVR0jBBgwFoAUnwuW5LWIWZ7uukF5kcCTydHD9UIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yZGJmNjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjVi MDhiZTVkNTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErfCAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAYOpDsa8FjMFhvvwi2HGeq/XuIDnh13URxfFO2WDVohvCHSQCvQB+nV ac2FSmQGFFEg/BRjM0ncRXoZXedB7NKch2/2alYgnWvw5YnSK71A4asKqwGyf0xg +G83OiQ3Vh4QQCuvtVtHLqeH2rQ8q45AQT2CSWQR0NG9b/exQzYHEOnw5slhKPIR MHvazcRO0ML3zI4iG6XIZT2nXog4t4A7pxuaxusY6bGgAgVaUu5HgulLExQ8baQi dlp8c2DCOTGmkplVUX7Kq+9KxlnmyO9E6w09r+tkfLYokhwxJtmGczRfR9l+/22W TmQFCSwVgXWkSjVBZMj32SikmoeJwzk= -----END CERTIFICATE-----Generated at Sat Nov 23 18:54:06 2024 by rpki-client on console-fra.rpki-client.org