$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1eb0bc86-2aba-3c9d-8a75-c5b005e634ab.roa File: 1eb0bc86-2aba-3c9d-8a75-c5b005e634ab.roa (raw, json) Hash identifier: COelGQh0Rv2DeG1XXPkbcI/8sB1uF5U/RhdAj0FbwA8= Subject key identifier: CF:7D:85:70:3B:20:81:E0:1D:18:13:EF:82:80:21:A8:CE:C2:3B:9B Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858479D76C6D918EDE7A7031B1CA0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1eb0bc86-2aba-3c9d-8a75-c5b005e634ab.roa Signing time: Mon 21 Oct 2024 13:00:41 +0000 ROA not before: Mon 21 Oct 2024 13:00:41 +0000 ROA not after: Sun 19 Jan 2025 14:00:41 +0000 asID: 0 IP address blocks: 208.217.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:9d:76:c6:d9:18:ed:e7:a7:03:1b:1c:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 21 13:00:41 2024 GMT Not After : Jan 19 14:00:41 2025 GMT Subject: CN=85b1217a-3d16-4a23-8ad1-11facdac6651 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:49:10:3f:61:b6:ba:3f:3d:1e:a1:26:13:09: 57:10:68:fd:14:38:5b:00:bf:16:cb:4a:1b:d3:d2: 33:63:c0:cd:2a:c6:42:bb:fd:0f:e2:7f:6f:8a:32: a8:12:64:83:8d:58:de:9b:08:aa:53:2a:a6:c0:f0: 27:85:ea:ef:6a:29:61:6e:ac:4f:64:9c:0b:29:6a: dd:88:11:11:3c:92:71:79:9e:e2:bb:36:e5:65:26: fe:c6:7c:4c:fd:1c:9b:e7:b2:19:60:3b:d1:53:32: 61:93:ca:fc:a8:5e:2d:78:3c:f3:4f:ff:42:1b:d8: c6:30:ec:4b:c7:ce:e5:5d:52:24:3d:5d:34:d6:87: 7b:4d:c8:43:04:02:5c:69:28:96:85:bd:c5:63:66: 3a:2c:c4:f7:00:b5:6c:b9:7a:cd:39:4d:4e:57:f8: 27:71:60:e3:04:50:dc:cd:ed:28:a2:a0:0f:2b:f9: 60:dc:9f:17:d7:96:42:4e:a6:96:03:a2:dd:6c:75: 82:b2:c1:72:a6:31:79:e4:45:bd:1b:a0:cb:d2:a4: 06:b2:98:86:8b:9e:e9:3b:b1:89:4b:b4:f9:b7:bb: eb:30:5c:e9:39:46:03:96:ef:37:ca:73:68:73:c1: aa:26:01:c7:73:eb:70:93:69:8a:2b:33:d5:0b:19: 74:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:7D:85:70:3B:20:81:E0:1D:18:13:EF:82:80:21:A8:CE:C2:3B:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1eb0bc86-2aba-3c9d-8a75-c5b005e634ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 208.217.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:44:cf:d2:7c:c3:8e:e7:fd:50:33:c6:fb:69:f7:9d:84:54: 93:10:6a:fc:0d:42:6c:5c:7a:87:20:a6:a0:c9:b0:ab:be:ba: e9:0e:20:75:d0:aa:b0:5d:a1:97:e6:8f:e3:9c:06:b1:75:37: 56:ab:1b:82:93:9e:a4:9d:cd:65:c5:95:77:44:f3:c9:a5:80: ef:de:c5:10:b9:d2:a9:88:e8:0f:37:9d:4f:69:ac:4d:bf:30: ec:76:00:50:50:85:ef:c1:d4:38:d2:51:79:72:32:9e:89:17: f4:46:00:5f:f7:70:6c:53:2b:ed:bc:b0:43:18:e3:9a:85:57: 5a:fb:81:f5:3d:ab:b8:74:c7:f8:69:bf:63:58:27:dd:68:56: c2:87:9b:93:b6:11:be:29:86:c8:33:5c:00:11:5b:bd:ec:ae: 44:1b:ef:ea:26:b7:e6:f3:70:29:37:49:b2:2b:83:50:83:90: 60:b5:02:a4:d2:f2:b0:f2:24:62:ad:ec:04:e5:ec:78:3f:29: 28:57:c3:f7:df:4e:99:c0:d3:a5:90:77:5c:12:cd:9d:1d:13: 89:cc:0a:c7:55:2b:6a:52:2c:2d:2f:7f:d7:f7:e4:a1:34:30: 3b:cc:b2:83:b5:91:39:7e:d7:47:7f:6c:b4:04:9d:2e:85:3a: 67:4c:70:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeddsbZGO3npwMbHKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI0MTAyMTEzMDA0MVoXDTI1MDExOTE0MDA0MVowLzEtMCsGA1UEAxMk ODViMTIxN2EtM2QxNi00YTIzLThhZDEtMTFmYWNkYWM2NjUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEkQP2G2uj89HqEmEwlXEGj9FDhbAL8Wy0ob 09IzY8DNKsZCu/0P4n9vijKoEmSDjVjemwiqUyqmwPAnhervailhbqxPZJwLKWrd iBERPJJxeZ7iuzblZSb+xnxM/Ryb57IZYDvRUzJhk8r8qF4teDzzT/9CG9jGMOxL x87lXVIkPV001od7TchDBAJcaSiWhb3FY2Y6LMT3ALVsuXrNOU1OV/gncWDjBFDc ze0ooqAPK/lg3J8X15ZCTqaWA6LdbHWCssFypjF55EW9G6DL0qQGspiGi57pO7GJ S7T5t7vrMFzpOUYDlu83ynNoc8GqJgHHc+twk2mKKzPVCxl0vwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM99hXA7IIHgHRgT74KAIajOwjubMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMWViMGJjODYtMmFiYS0z YzlkLThhNzUtYzViMDA1ZTYzNGFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0NkgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEFEz9J8w47n/VAzxvtp952EVJMQavwNQmxceocgpqDJsKu+uukOIHXQ qrBdoZfmj+OcBrF1N1arG4KTnqSdzWXFlXdE88mlgO/exRC50qmI6A83nU9prE2/ MOx2AFBQhe/B1DjSUXlyMp6JF/RGAF/3cGxTK+28sEMY45qFV1r7gfU9q7h0x/hp v2NYJ91oVsKHm5O2Eb4phsgzXAARW73srkQb7+omt+bzcCk3SbIrg1CDkGC1AqTS 8rDyJGKt7ATl7Hg/KShXw/ffTpnA06WQd1wSzZ0dE4nMCsdVK2pSLC0vf9f35KE0 MDvMsoO1kTl+10d/bLQEnS6FOmdMcOo= -----END CERTIFICATE-----Generated at Sun Nov 24 23:10:32 2024 by rpki-client on console-ams.rpki-client.org