$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/07eb506e-887a-384d-8cce-e202c6ddf908.roa File: 07eb506e-887a-384d-8cce-e202c6ddf908.roa (raw, json) Hash identifier: rO1A4Pc5MvFrnfA4WExt/W/o0AgiHYQuwwu5jqLAjnY= Subject key identifier: 97:77:EE:F7:EE:D9:F9:2A:22:8F:62:C5:90:AC:AE:9D:68:6C:3E:3A Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584701204291D71EBE72CD8A1580 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/07eb506e-887a-384d-8cce-e202c6ddf908.roa Signing time: Mon 26 Aug 2024 13:00:41 +0000 ROA not before: Mon 26 Aug 2024 13:00:41 +0000 ROA not after: Sun 24 Nov 2024 14:00:41 +0000 asID: 6167 IP address blocks: 174.200.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Oct 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:01:20:42:91:d7:1e:be:72:cd:8a:15:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 26 13:00:41 2024 GMT Not After : Nov 24 14:00:41 2024 GMT Subject: CN=67b3f8a1-14e5-4e62-8327-da6be54d112f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:57:0a:08:8f:c5:a8:ff:22:aa:d8:7d:a9:42: 10:4c:68:39:82:66:09:ca:fb:5d:02:a5:bd:07:66: 17:95:df:65:58:ed:04:33:c2:ae:39:de:9c:60:b3: c5:66:44:b9:fc:14:7c:03:de:a7:31:69:a4:31:f1: 07:bb:e5:cf:62:eb:39:32:16:b9:5c:72:c5:bd:32: 53:b7:c0:48:7f:51:a7:d4:d4:e4:89:82:7a:fc:46: b3:a2:06:be:a5:9b:9c:22:6e:6d:d1:a3:46:e5:20: 54:fc:e5:80:fa:3e:99:e8:8f:7f:ee:50:ce:59:63: aa:7b:2b:95:0d:e2:d3:1d:83:2a:f8:04:72:8d:a2: 3f:3d:4b:c1:d7:8e:70:cd:df:40:ae:7d:a8:36:34: e2:aa:ff:bc:ea:8e:d1:ef:12:e3:ad:23:f1:e7:50: f2:23:c6:18:bf:bd:f5:4f:af:d6:9b:19:b7:2d:a3: 91:fd:bc:43:72:ed:df:80:30:58:3d:36:7c:7f:5d: 74:ca:3b:2c:29:3b:5b:bc:3c:ed:f2:60:ba:28:a6: 50:6e:2d:e4:d3:a4:e8:6b:96:50:c6:45:2c:1a:92: cd:78:73:b3:96:ba:e6:39:14:07:99:18:13:c0:b5: 94:95:81:4d:96:85:40:99:19:f9:7b:6b:c7:fe:b3: 0e:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:77:EE:F7:EE:D9:F9:2A:22:8F:62:C5:90:AC:AE:9D:68:6C:3E:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/07eb506e-887a-384d-8cce-e202c6ddf908.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.200.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:6b:c8:79:a0:61:04:ed:0d:34:0c:17:7a:a0:a3:bd:34:c4: 45:6b:d5:b1:c0:e3:c3:56:d0:df:21:d0:7f:8d:a7:33:9b:0d: d0:34:81:96:80:0c:57:ec:39:8e:c4:7f:2a:59:9a:54:4f:26: ac:7a:2d:d6:1d:04:b7:ad:c3:18:45:98:9e:f1:3c:a9:c1:bb: b1:62:08:2b:f2:74:68:e9:3f:1e:fc:8a:e4:a2:f4:d2:0a:d9: 17:71:12:0c:7d:51:89:c3:35:c0:dc:84:45:dd:e6:92:8a:d4: c7:13:fe:a4:fe:cb:32:5d:eb:ad:be:c8:76:72:58:9a:b3:0c: b9:8c:51:af:7e:17:f9:ab:87:96:eb:48:80:77:5a:bf:6d:58: 8f:9c:b8:e0:d6:b8:1e:85:9f:de:09:c7:97:a5:3f:37:16:85: 07:98:c6:d5:14:9c:29:d4:34:8d:5f:b9:5b:78:5a:16:12:52: e0:41:97:4d:d9:40:2d:7d:c0:72:96:c1:c1:2f:83:d0:c6:8c: 6e:e3:0f:37:21:48:d1:71:64:61:da:7e:7e:4e:04:b9:5e:29: 24:68:85:13:85:55:58:31:2a:e0:a9:a0:4c:3e:f6:70:da:c5: d6:ea:00:5c:f8:ee:3b:33:4a:bb:fc:7d:17:ed:55:e9:e6:75: cf:99:be:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcBIEKR1x6+cs2KFYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI0MDgyNjEzMDA0MVoXDTI0MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk NjdiM2Y4YTEtMTRlNS00ZTYyLTgzMjctZGE2YmU1NGQxMTJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVcKCI/FqP8iqth9qUIQTGg5gmYJyvtdAqW9 B2YXld9lWO0EM8KuOd6cYLPFZkS5/BR8A96nMWmkMfEHu+XPYus5Mha5XHLFvTJT t8BIf1Gn1NTkiYJ6/Eazoga+pZucIm5t0aNG5SBU/OWA+j6Z6I9/7lDOWWOqeyuV DeLTHYMq+ARyjaI/PUvB145wzd9Arn2oNjTiqv+86o7R7xLjrSPx51DyI8YYv731 T6/Wmxm3LaOR/bxDcu3fgDBYPTZ8f110yjssKTtbvDzt8mC6KKZQbi3k06Toa5ZQ xkUsGpLNeHOzlrrmORQHmRgTwLWUlYFNloVAmRn5e2vH/rMOqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJd37vfu2fkqIo9ixZCsrp1obD46MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMDdlYjUwNmUtODg3YS0z ODRkLThjY2UtZTIwMmM2ZGRmOTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErsiAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAElryHmgYQTtDTQMF3qgo700xEVr1bHA48NW0N8h0H+NpzObDdA0gZaA DFfsOY7EfypZmlRPJqx6LdYdBLetwxhFmJ7xPKnBu7FiCCvydGjpPx78iuSi9NIK 2RdxEgx9UYnDNcDchEXd5pKK1McT/qT+yzJd662+yHZyWJqzDLmMUa9+F/mrh5br SIB3Wr9tWI+cuODWuB6Fn94Jx5elPzcWhQeYxtUUnCnUNI1fuVt4WhYSUuBBl03Z QC19wHKWwcEvg9DGjG7jDzchSNFxZGHafn5OBLleKSRohROFVVgxKuCpoEw+9nDa xdbqAFz47jszSrv8fRftVenmdc+Zvnc= -----END CERTIFICATE-----Generated at Tue Oct 22 21:22:01 2024 by rpki-client on console-ams.rpki-client.org