$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/14c3f237-275e-3833-a08b-5bf8d7087ed1.roa File: 14c3f237-275e-3833-a08b-5bf8d7087ed1.roa (raw, json) Hash identifier: PqdE7xLxsOeHaDxHKHZ+7f2l6C+wXbUZT4Cp3AU99Hk= Subject key identifier: 48:87:01:A6:D3:0E:F2:8C:05:86:31:C4:63:5D:97:0C:A8:A8:3E:A0 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285847537B8C3B9E28D803AE3A66E0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/14c3f237-275e-3833-a08b-5bf8d7087ed1.roa Signing time: Wed 25 Sep 2024 01:00:31 +0000 ROA not before: Wed 25 Sep 2024 01:00:31 +0000 ROA not after: Tue 24 Dec 2024 02:00:31 +0000 asID: 701 IP address blocks: 68.238.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:53:7b:8c:3b:9e:28:d8:03:ae:3a:66:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Sep 25 01:00:31 2024 GMT Not After : Dec 24 02:00:31 2024 GMT Subject: CN=f9fb205a-17b2-4e27-bc9c-5b4b777a75d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:43:9c:a1:75:e2:c2:2e:a2:a2:67:fc:2f:28: 79:b4:ae:aa:5e:46:89:ba:81:30:8d:a8:25:01:cc: cf:2c:c7:5e:4a:3d:70:e2:3d:d3:66:d4:6b:e6:aa: 26:55:c0:50:0f:d0:7c:e7:a5:91:a3:11:9a:1c:04: 7d:c6:ba:10:32:87:c9:fc:cf:6d:a4:31:b2:3c:1a: de:30:9d:f3:5f:22:5c:31:0e:32:8f:4b:3c:c3:c1: 45:83:50:37:ae:a3:83:1b:06:fd:9f:e6:42:44:f6: f1:69:47:96:79:66:00:2f:90:61:8a:21:ce:29:05: 42:33:4b:0f:df:db:33:2d:dd:c4:68:07:62:4a:e0: a4:f0:00:de:8f:e6:42:6c:00:dd:aa:0a:7c:02:5c: 3e:ce:b3:94:f6:38:dd:9e:d1:28:22:b8:fd:03:f5: 65:6e:3c:2e:11:0b:fa:f3:57:78:ed:9f:e7:c1:5e: c7:5b:2d:25:64:09:16:bf:d4:c5:f6:1c:6d:ea:0e: 97:64:d8:da:d4:2f:9f:83:da:3f:9f:3c:38:9d:12: 7f:c2:89:d8:c9:6e:21:9e:ec:3d:e6:d3:f4:03:8f: eb:c1:f4:b1:3f:c7:5f:8f:05:0c:c5:11:3e:5b:5c: 9b:bf:d5:80:7a:e0:49:1a:84:54:0b:1e:b4:8e:59: 1c:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:87:01:A6:D3:0E:F2:8C:05:86:31:C4:63:5D:97:0C:A8:A8:3E:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/14c3f237-275e-3833-a08b-5bf8d7087ed1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 68.238.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:32:6e:66:d7:15:bb:04:3a:c8:2e:cd:c2:9c:5e:11:e9:5e: 2e:11:b8:08:32:2c:5e:f5:f9:41:49:7f:bb:b9:e7:50:59:10: fc:b1:0b:17:1f:87:6b:a6:84:77:c6:ff:25:14:72:18:88:a1: 57:25:96:a9:31:27:63:5a:4c:ce:67:06:05:8d:23:6f:5d:e6: aa:ae:f6:b5:05:71:e6:28:e4:01:fb:1d:7f:c8:c1:12:47:8b: cc:c0:ca:3e:fd:21:26:8f:74:a6:ca:ab:4e:af:b9:20:95:5a: b8:b3:c2:24:88:43:28:12:8a:5f:f0:c8:ff:1a:96:5e:83:c0: fa:02:68:9b:c5:f0:19:b5:8b:c7:8f:81:f4:06:43:9e:13:da: 9e:4a:d4:b0:c5:98:6d:7c:b9:b6:55:8d:cd:4d:3e:06:ae:f5: cd:a4:52:de:82:1b:b5:77:bf:73:40:d7:c7:92:68:54:5e:95: 96:4b:17:ec:f2:24:54:95:6e:b7:e8:09:01:fb:5e:c8:ab:d7: d6:65:b2:34:23:c4:0c:ff:9e:ee:72:1d:ce:e5:4b:9c:5c:02: 30:bf:d7:81:a7:c2:82:de:1f:fe:e1:ca:48:bf:4a:88:62:b2: 4a:49:9d:41:f3:ae:c0:f1:d5:bd:d1:99:b9:8e:47:87:0e:68: 25:a9:2a:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdTe4w7nijYA646ZuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI0MDkyNTAxMDAzMVoXDTI0MTIyNDAyMDAzMVowLzEtMCsGA1UEAxMk ZjlmYjIwNWEtMTdiMi00ZTI3LWJjOWMtNWI0Yjc3N2E3NWQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhkOcoXXiwi6iomf8Lyh5tK6qXkaJuoEwjagl AczPLMdeSj1w4j3TZtRr5qomVcBQD9B856WRoxGaHAR9xroQMofJ/M9tpDGyPBre MJ3zXyJcMQ4yj0s8w8FFg1A3rqODGwb9n+ZCRPbxaUeWeWYAL5BhiiHOKQVCM0sP 39szLd3EaAdiSuCk8ADej+ZCbADdqgp8Alw+zrOU9jjdntEoIrj9A/VlbjwuEQv6 81d47Z/nwV7HWy0lZAkWv9TF9hxt6g6XZNja1C+fg9o/nzw4nRJ/wonYyW4hnuw9 5tP0A4/rwfSxP8dfjwUMxRE+W1ybv9WAeuBJGoRUCx60jlkcVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEiHAabTDvKMBYYxxGNdlwyoqD6gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMTRjM2YyMzctMjc1ZS0z ODMzLWEwOGItNWJmOGQ3MDg3ZWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERO6wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACAybmbXFbsEOsguzcKcXhHpXi4RuAgyLF71+UFJf7u551BZEPyxCxcf h2umhHfG/yUUchiIoVcllqkxJ2NaTM5nBgWNI29d5qqu9rUFceYo5AH7HX/IwRJH i8zAyj79ISaPdKbKq06vuSCVWrizwiSIQygSil/wyP8all6DwPoCaJvF8Bm1i8eP gfQGQ54T2p5K1LDFmG18ubZVjc1NPgau9c2kUt6CG7V3v3NA18eSaFRelZZLF+zy JFSVbrfoCQH7Xsir19ZlsjQjxAz/nu5yHc7lS5xcAjC/14GnwoLeH/7hyki/Sohi skpJnUHzrsDx1b3RmbmOR4cOaCWpKkk= -----END CERTIFICATE-----Generated at Thu Nov 21 22:39:18 2024 by rpki-client on console-fra.rpki-client.org