$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2178fe6b-7e1e-3e50-8a4a-79c2e8d45f2a.roa File: 2178fe6b-7e1e-3e50-8a4a-79c2e8d45f2a.roa (raw, json) Hash identifier: kgGn2jdWXFJqp5ZzqSIpI/A8cxRTHvsyfX80ru9SgMQ= Subject key identifier: C8:10:DA:CF:32:B3:AC:2C:24:5C:01:9E:16:EF:0C:AF:40:7D:DF:F1 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285845979A76D41957EF9B09466D00 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2178fe6b-7e1e-3e50-8a4a-79c2e8d45f2a.roa Signing time: Fri 19 Apr 2024 01:04:22 +0000 ROA not before: Fri 19 Apr 2024 01:04:22 +0000 ROA not after: Thu 18 Jul 2024 01:04:22 +0000 asID: 6167 IP address blocks: 72.97.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:97:9a:76:d4:19:57:ef:9b:09:46:6d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 19 01:04:22 2024 GMT Not After : Jul 18 01:04:22 2024 GMT Subject: CN=44a88a20-af78-4ce7-a8ee-cf8a24d90931 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:6e:18:c0:74:22:3d:a5:ad:a8:16:b0:8c:54: 47:68:7f:2b:aa:c3:0e:9e:6e:2f:83:5e:4c:9f:04: 59:8a:09:3c:e7:3b:39:4d:40:99:3c:1d:00:57:76: c2:5c:69:97:cc:4a:3d:eb:74:db:64:6b:12:e7:9f: 19:63:ea:79:16:c9:94:4b:66:5b:e8:41:d9:e2:fe: 5d:c3:a0:e8:82:2f:f3:25:fa:12:96:1f:33:72:2d: d1:27:24:f0:cf:b0:17:36:e4:7c:3f:13:9e:29:a5: e0:f8:30:4b:df:f8:94:4e:16:7d:49:78:09:ff:c9: 15:3f:8c:55:ae:77:52:b2:a8:db:84:be:92:74:fa: b8:26:d7:39:40:c9:07:bd:30:3a:af:67:25:3d:86: 64:59:7c:52:6e:63:2d:90:6c:27:6f:6c:fd:29:62: 71:44:e2:13:4b:eb:c8:21:c8:4f:1f:42:15:31:01: b1:b7:3b:96:3c:fa:55:aa:2b:d5:22:fd:72:76:ea: d6:6a:b1:05:7d:7a:cb:04:20:86:f6:ea:b0:ca:6e: 30:9f:c8:e9:a3:47:5b:d6:68:ca:89:cb:e4:7d:7a: d2:66:79:92:82:01:40:49:97:08:52:15:81:7a:ee: 60:31:57:9c:f1:5b:c6:62:6b:40:9f:a9:68:42:0a: dc:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:10:DA:CF:32:B3:AC:2C:24:5C:01:9E:16:EF:0C:AF:40:7D:DF:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2178fe6b-7e1e-3e50-8a4a-79c2e8d45f2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.97.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:1b:04:23:24:66:c0:74:55:f4:fd:3d:81:4a:e1:22:bb:e4: a9:88:2c:bf:49:62:86:d6:0b:5d:6b:1b:dd:e1:51:e7:bc:69: 76:df:81:0b:eb:cf:d0:3c:c3:17:2e:a9:b4:e5:a9:bc:9e:2d: ec:0c:af:7c:88:34:21:3f:1d:a5:06:8d:e5:52:39:c7:55:cd: 26:8b:2d:be:70:08:e7:a8:88:06:89:d4:94:4a:bb:50:dd:3c: 3b:b3:07:0b:33:c0:b3:70:37:d0:f4:f5:22:42:d5:f7:6d:22: fb:6e:5c:56:26:b3:08:de:19:39:c3:32:f7:1b:da:be:90:9e: ad:04:4c:21:9f:3b:3e:6b:f7:7f:3e:3d:ee:cb:a0:65:9c:d9: a8:63:8b:52:56:f6:31:44:13:f0:1f:c8:a7:b8:e0:90:3f:25: 5a:d6:af:55:dd:95:bb:a2:ec:f7:00:03:86:e3:37:39:6a:33: e7:94:42:97:f8:18:9a:8c:62:ad:a2:57:ab:e5:37:c3:ad:24: dc:17:ad:c4:08:32:ec:32:10:52:ce:51:08:68:e8:75:90:71: 3c:02:76:4f:41:f6:ed:8d:42:5d:16:ca:61:cf:45:f0:65:5b: f3:89:51:41:17:ab:46:4c:79:ea:62:2a:a7:b0:f7:a2:6b:45: 85:a1:97:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWXmnbUGVfvmwlGbQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI0MDQxOTAxMDQyMloXDTI0MDcxODAxMDQyMlowLzEtMCsGA1UEAxMk NDRhODhhMjAtYWY3OC00Y2U3LWE4ZWUtY2Y4YTI0ZDkwOTMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkW4YwHQiPaWtqBawjFRHaH8rqsMOnm4vg15M nwRZigk85zs5TUCZPB0AV3bCXGmXzEo963TbZGsS558ZY+p5FsmUS2Zb6EHZ4v5d w6Dogi/zJfoSlh8zci3RJyTwz7AXNuR8PxOeKaXg+DBL3/iUThZ9SXgJ/8kVP4xV rndSsqjbhL6SdPq4Jtc5QMkHvTA6r2clPYZkWXxSbmMtkGwnb2z9KWJxROITS+vI IchPH0IVMQGxtzuWPPpVqivVIv1ydurWarEFfXrLBCCG9uqwym4wn8jpo0db1mjK icvkfXrSZnmSggFASZcIUhWBeu5gMVec8VvGYmtAn6loQgrcjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMgQ2s8ys6wsJFwBnhbvDK9Afd/xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMjE3OGZlNmItN2UxZS0z ZTUwLThhNGEtNzljMmU4ZDQ1ZjJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSGEYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD4bBCMkZsB0VfT9PYFK4SK75KmILL9JYobWC11rG93hUee8aXbfgQvr z9A8wxcuqbTlqbyeLewMr3yINCE/HaUGjeVSOcdVzSaLLb5wCOeoiAaJ1JRKu1Dd PDuzBwszwLNwN9D09SJC1fdtIvtuXFYmswjeGTnDMvcb2r6Qnq0ETCGfOz5r938+ Pe7LoGWc2ahji1JW9jFEE/AfyKe44JA/JVrWr1Xdlbui7PcAA4bjNzlqM+eUQpf4 GJqMYq2iV6vlN8OtJNwXrcQIMuwyEFLOUQho6HWQcTwCdk9B9u2NQl0WymHPRfBl W/OJUUEXq0ZMeepiKqew96JrRYWhl78= -----END CERTIFICATE-----Generated at Sat May 11 02:54:05 2024 by rpki-client on console-fra.rpki-client.org