$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1aec0eb8-1346-3ea7-bda3-4185c8790a0e.roa File: 1aec0eb8-1346-3ea7-bda3-4185c8790a0e.roa (raw, json) Hash identifier: r6S227ZDHaBzjC2gOw1snFGXWdl3U+8/HosKvS2OQ/w= Subject key identifier: 3D:A9:5E:A0:88:2D:33:C4:FB:06:B4:9C:28:A0:96:2F:8B:B7:98:39 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285847E1F9FD333394A21D68CE0120 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1aec0eb8-1346-3ea7-bda3-4185c8790a0e.roa Signing time: Fri 15 Nov 2024 02:00:28 +0000 ROA not before: Fri 15 Nov 2024 02:00:28 +0000 ROA not after: Thu 13 Feb 2025 02:00:28 +0000 asID: 6167 IP address blocks: 174.201.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e1:f9:fd:33:33:94:a2:1d:68:ce:01:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Nov 15 02:00:28 2024 GMT Not After : Feb 13 02:00:28 2025 GMT Subject: CN=1cefa123-709b-4a77-bd55-dca03b9707aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:e9:df:d2:62:d5:4c:48:09:0c:97:bb:f4:00: 35:4a:78:82:4b:de:73:89:0a:b6:b4:3a:53:91:77: d6:7b:8d:77:34:dd:4c:8f:85:ad:9f:79:2a:30:c4: cb:e5:91:b1:c4:2e:b3:0b:49:0b:17:8b:ff:2d:75: 1d:ea:31:1c:3a:46:12:d6:f6:32:be:e9:1c:c0:45: 2d:e0:0c:e4:cd:19:bd:65:c6:ae:ad:dd:41:1f:33: 53:f2:63:82:ea:bf:44:67:68:22:bd:e6:f7:a3:95: 72:72:04:b6:ff:cf:55:28:b3:ea:26:1c:aa:87:51: f9:14:3f:4d:49:22:a4:d9:44:a5:8b:49:cc:63:73: b0:63:44:41:94:f0:82:58:22:fc:4a:a2:79:08:bc: 98:80:e2:6f:d6:a2:d2:d3:d6:28:58:73:39:2d:28: 04:33:5c:54:5b:52:6e:dc:f3:d8:ea:43:80:49:e0: d9:58:d6:4f:fe:52:f7:9f:9e:e5:b0:59:88:6f:a8: 9b:3c:d3:3a:2c:d0:1c:bf:83:c9:02:0d:a8:99:1d: d8:5c:b6:ac:a5:05:15:0f:8e:16:c3:da:ae:d3:7b: c7:be:a6:70:1f:2f:08:7b:18:fe:d9:5e:84:d8:49: 81:f9:61:25:1d:eb:9a:6c:c8:33:60:37:77:14:07: 93:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:A9:5E:A0:88:2D:33:C4:FB:06:B4:9C:28:A0:96:2F:8B:B7:98:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1aec0eb8-1346-3ea7-bda3-4185c8790a0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.201.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:56:cd:5a:6a:25:e0:7f:c2:f8:b3:8f:3d:9d:c7:d6:4f:31: bd:1b:7b:d6:6e:7b:74:eb:17:ba:f2:6f:bc:01:12:17:6c:8d: e0:94:e3:ee:fe:d6:2d:b9:74:35:4d:24:ce:76:08:2a:da:04: ce:6e:db:79:cf:07:52:b2:54:c6:ae:29:7a:f0:db:74:75:5a: 52:9c:f8:85:9b:75:c6:ce:89:9e:5e:24:49:20:3b:91:e0:e7: 8c:bb:79:7f:5a:bc:99:89:9e:b7:bd:8c:e4:89:b6:e8:f2:1a: 37:1c:1a:4b:f2:52:68:fd:e9:50:f8:11:6f:47:0d:e6:c7:38: 23:81:4c:d8:b8:b4:d8:6c:a9:18:7d:73:04:d0:70:43:55:ca: 70:72:92:db:cc:ec:ee:db:67:51:60:f0:fc:e0:17:cc:a5:f5: 35:b0:21:f8:84:b4:30:bd:72:65:9c:ef:4b:32:21:82:1f:74: 09:7b:3e:5c:16:72:8e:9c:31:69:dc:d7:9c:7c:9c:87:5c:b7: 1f:e6:1d:eb:90:d3:72:b8:9e:fd:4f:66:b5:17:8b:41:9a:27: bf:4e:8f:96:f6:b8:7a:ef:d0:d3:e1:ad:89:53:9d:96:93:a8: 74:90:cc:61:ad:9d:0f:2c:d9:e2:39:d8:ee:30:6b:48:b2:39: 30:6d:b2:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfh+f0zM5SiHWjOASAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI0MTExNTAyMDAyOFoXDTI1MDIxMzAyMDAyOFowLzEtMCsGA1UEAxMk MWNlZmExMjMtNzA5Yi00YTc3LWJkNTUtZGNhMDNiOTcwN2FhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4unf0mLVTEgJDJe79AA1SniCS95ziQq2tDpT kXfWe413NN1Mj4Wtn3kqMMTL5ZGxxC6zC0kLF4v/LXUd6jEcOkYS1vYyvukcwEUt 4AzkzRm9Zcaurd1BHzNT8mOC6r9EZ2giveb3o5VycgS2/89VKLPqJhyqh1H5FD9N SSKk2USli0nMY3OwY0RBlPCCWCL8SqJ5CLyYgOJv1qLS09YoWHM5LSgEM1xUW1Ju 3PPY6kOASeDZWNZP/lL3n57lsFmIb6ibPNM6LNAcv4PJAg2omR3YXLaspQUVD44W w9qu03vHvqZwHy8Iexj+2V6E2EmB+WElHeuabMgzYDd3FAeT0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD2pXqCILTPE+wa0nCigli+Lt5g5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMWFlYzBlYjgtMTM0Ni0z ZWE3LWJkYTMtNDE4NWM4NzkwYTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErskQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEpWzVpqJeB/wvizjz2dx9ZPMb0be9Zue3TrF7ryb7wBEhdsjeCU4+7+ 1i25dDVNJM52CCraBM5u23nPB1KyVMauKXrw23R1WlKc+IWbdcbOiZ5eJEkgO5Hg 54y7eX9avJmJnre9jOSJtujyGjccGkvyUmj96VD4EW9HDebHOCOBTNi4tNhsqRh9 cwTQcENVynByktvM7O7bZ1Fg8PzgF8yl9TWwIfiEtDC9cmWc70syIYIfdAl7PlwW co6cMWnc15x8nIdctx/mHeuQ03K4nv1PZrUXi0GaJ79Oj5b2uHrv0NPhrYlTnZaT qHSQzGGtnQ8s2eI52O4wa0iyOTBtsmQ= -----END CERTIFICATE-----Generated at Thu Nov 21 23:41:14 2024 by rpki-client on console-ams.rpki-client.org