$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/98da9661-0d10-3896-a771-a2ee1d490a36.roa File: 98da9661-0d10-3896-a771-a2ee1d490a36.roa (raw, json) Hash identifier: koEcSDqgY2dsdNjCQDnDNv1juYntoLNMWteop55WXTY= Subject key identifier: D9:A1:33:A8:A2:8B:77:DF:F8:AA:1A:0B:FB:7E:71:C1:80:7F:C5:CD Certificate issuer: /CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4 Certificate serial: 010D0C9F43285847AB6C0BF09AB45B50121CF740 Authority key identifier: 7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/98da9661-0d10-3896-a771-a2ee1d490a36.roa Signing time: Sat 26 Oct 2024 13:00:42 +0000 ROA not before: Sat 26 Oct 2024 13:00:42 +0000 ROA not after: Fri 24 Jan 2025 14:00:42 +0000 asID: 29867 IP address blocks: 72.10.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ab:6c:0b:f0:9a:b4:5b:50:12:1c:f7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4 Validity Not Before: Oct 26 13:00:42 2024 GMT Not After : Jan 24 14:00:42 2025 GMT Subject: CN=28b42e16-f224-46f1-99c8-49c2cdb5cc57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:ce:f0:88:b5:1a:2a:4d:85:6d:72:49:8f:43: 94:1a:dd:bb:f2:16:27:74:cd:70:57:5f:c2:cc:1b: 0b:8e:48:00:c5:80:44:54:77:75:75:8d:6b:7b:38: 7c:bb:d2:16:6b:24:ee:70:4f:b3:3d:38:89:97:94: ea:c2:46:35:68:ea:7d:68:a6:0c:50:c3:c3:0e:cd: 40:ed:8a:4a:61:10:34:c2:8e:e2:7b:64:9a:12:f7: e7:75:9c:ee:6d:3f:d7:5c:47:c8:ff:d4:d0:c0:58: fc:fd:27:76:bb:dc:0b:35:ba:bc:f9:b5:fd:7e:30: 7b:96:c6:14:c7:72:6e:30:80:e7:96:87:28:92:61: ee:4a:75:42:6f:78:73:ed:28:33:65:39:27:64:f1: 7a:5d:2c:79:b4:33:ac:8b:2f:4b:70:59:18:c8:cb: d7:50:88:8a:a4:a1:c1:f9:d4:23:07:8d:dd:8c:55: 62:51:95:32:cc:d5:cd:21:f0:8c:0a:10:4c:a4:3d: 22:c0:64:59:6a:14:da:30:c0:c5:5c:d6:15:1e:57: b8:83:fd:b0:d8:2b:88:d9:a6:9f:d1:f6:b6:f3:4a: ab:ab:ed:3f:e7:8a:fc:09:b4:0f:65:fd:ce:b4:02: af:b5:85:da:3f:a7:c5:a3:e5:8f:17:eb:68:dc:d1: 6b:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:A1:33:A8:A2:8B:77:DF:F8:AA:1A:0B:FB:7E:71:C1:80:7F:C5:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/98da9661-0d10-3896-a771-a2ee1d490a36.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.crl X509v3 Authority Key Identifier: keyid:7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer sbgp-ipAddrBlock: critical IPv4: 72.10.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:04:91:1b:19:af:9a:7c:66:da:a7:3f:58:d6:72:d8:ec:ad: 06:74:81:4e:57:62:b8:71:e2:b3:11:94:97:62:c0:95:90:29: 31:14:37:d9:4c:ce:36:d3:52:26:9a:ae:37:eb:40:14:6b:19: 61:d2:29:63:71:2d:c6:07:fc:f5:d3:a2:90:ed:73:14:48:61: 82:92:76:8a:ec:1e:63:c3:76:c1:67:82:68:ca:be:1e:5d:6f: 8d:9e:3d:de:ce:b8:29:50:f1:b7:34:06:c5:c5:34:c9:c9:32: 85:3b:93:47:11:ce:66:a8:67:dc:20:18:06:14:f0:74:1c:86: f4:95:8f:a7:7f:ae:a4:2c:69:c3:14:5c:44:f1:0d:89:e1:0b: 85:9f:c0:db:69:a0:3f:0e:00:55:bd:db:b2:6f:0b:f2:54:b8: a1:73:15:a3:0c:dd:01:83:c7:2e:bc:da:75:8c:e0:19:07:df: fc:c4:40:44:ae:37:b8:90:1c:be:0f:65:39:41:a9:73:fc:bb: f8:4b:76:5e:d4:a8:8c:02:a7:1a:61:a9:ff:65:08:4e:85:07: 62:eb:95:87:63:83:af:03:8c:15:f5:a2:4b:4c:0f:a8:31:16: ad:f1:a7:31:1a:2a:cd:0a:85:53:a3:a8:d8:9a:c8:2f:93:01: d1:80:5f:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEerbAvwmrRbUBIc90AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzhmYmM0ODEtYTJjNy00Mzc5LWIyYzAtZGU0ZGYwNjBl MmI0MB4XDTI0MTAyNjEzMDA0MloXDTI1MDEyNDE0MDA0MlowLzEtMCsGA1UEAxMk MjhiNDJlMTYtZjIyNC00NmYxLTk5YzgtNDljMmNkYjVjYzU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAic7wiLUaKk2FbXJJj0OUGt278hYndM1wV1/C zBsLjkgAxYBEVHd1dY1rezh8u9IWayTucE+zPTiJl5TqwkY1aOp9aKYMUMPDDs1A 7YpKYRA0wo7ie2SaEvfndZzubT/XXEfI/9TQwFj8/Sd2u9wLNbq8+bX9fjB7lsYU x3JuMIDnlocokmHuSnVCb3hz7SgzZTknZPF6XSx5tDOsiy9LcFkYyMvXUIiKpKHB +dQjB43djFViUZUyzNXNIfCMChBMpD0iwGRZahTaMMDFXNYVHle4g/2w2CuI2aaf 0fa280qrq+0/54r8CbQPZf3OtAKvtYXaP6fFo+WPF+to3NFrpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNmhM6iii3ff+KoaC/t+ccGAf8XNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zOGZi YzQ4MS1hMmM3LTQzNzktYjJjMC1kZTRkZjA2MGUyYjQvOThkYTk2NjEtMGQxMC0z ODk2LWE3NzEtYTJlZTFkNDkwYTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzhmYmM0ODEtYTJjNy00Mzc5LWIy YzAtZGU0ZGYwNjBlMmI0LzM4ZmJjNDgxLWEyYzctNDM3OS1iMmMwLWRlNGRmMDYw ZTJiNC5jcmwwHwYDVR0jBBgwFoAUe7WsRbLlDgq77ga840gjEBsnCwwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zOGZiYzQ4MS1hMmM3LTQzNzktYjJjMC1kZTRk ZjA2MGUyYjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASApsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB4EkRsZr5p8ZtqnP1jWctjsrQZ0gU5XYrhx4rMRlJdiwJWQKTEUN9lM zjbTUiaarjfrQBRrGWHSKWNxLcYH/PXTopDtcxRIYYKSdorsHmPDdsFngmjKvh5d b42ePd7OuClQ8bc0BsXFNMnJMoU7k0cRzmaoZ9wgGAYU8HQchvSVj6d/rqQsacMU XETxDYnhC4WfwNtpoD8OAFW927JvC/JUuKFzFaMM3QGDxy682nWM4BkH3/zEQESu N7iQHL4PZTlBqXP8u/hLdl7UqIwCpxphqf9lCE6FB2LrlYdjg68DjBX1oktMD6gx Fq3xpzEaKs0KhVOjqNiayC+TAdGAX6k= -----END CERTIFICATE-----Generated at Thu Nov 21 22:37:09 2024 by rpki-client on console-fra.rpki-client.org