$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/24184dbc-2171-3a7d-9666-7a1ac9937de5.roa File: 24184dbc-2171-3a7d-9666-7a1ac9937de5.roa (raw, json) Hash identifier: vIxtFtIXsMHOLe0+c6Sj+yeOcMPsKaZZI/5mGlFgJfI= Subject key identifier: 5C:48:D4:87:C1:4C:FC:69:C5:8B:CB:CD:24:85:19:3C:47:AB:1B:6E Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285847012057411777121DFED9C180 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/24184dbc-2171-3a7d-9666-7a1ac9937de5.roa Signing time: Mon 26 Aug 2024 13:00:41 +0000 ROA not before: Mon 26 Aug 2024 13:00:41 +0000 ROA not after: Sun 24 Nov 2024 14:00:41 +0000 asID: 6167 IP address blocks: 174.224.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Oct 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:01:20:57:41:17:77:12:1d:fe:d9:c1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 26 13:00:41 2024 GMT Not After : Nov 24 14:00:41 2024 GMT Subject: CN=86854480-b1f2-4bf4-ab36-253ca177377c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:4d:53:b7:93:fd:56:7c:5a:9e:b3:7e:e3:2c: 3d:de:f1:a8:82:5d:91:af:d9:ec:65:a9:b8:0f:9c: 76:13:c7:82:b2:b7:2b:29:88:ea:0a:b3:b5:9c:82: 49:f9:ba:bb:9f:08:74:65:3c:e2:cb:06:59:c3:f3: 2c:8b:30:92:e6:05:88:00:db:a0:ee:d8:f0:1c:ac: 2e:b8:f6:46:6d:4b:9e:2a:7c:a9:73:8a:a6:80:95: 79:d4:22:5d:26:75:e2:64:3b:a0:d8:f2:7a:94:93: 81:4a:08:e2:80:20:1e:13:61:31:6b:41:62:e1:39: 04:db:ac:1d:9d:54:4a:b3:89:ae:89:ae:a7:c1:f4: 64:15:f6:f1:be:8c:24:97:83:72:eb:b4:c2:40:8b: 52:52:5b:2b:03:97:68:e2:78:cc:f2:db:a3:84:20: 97:3d:6d:d6:00:28:04:bb:23:aa:4a:af:58:ae:f8: 94:06:5e:fd:cd:1d:fc:36:2a:84:23:81:fa:77:0e: 79:b7:a6:6c:25:9d:6e:fb:62:3a:79:70:e3:44:42: 13:04:df:6f:9a:12:f0:39:72:1d:83:9a:13:57:52: ae:eb:24:eb:a9:8c:13:82:10:42:c2:8f:25:0b:0b: 69:a9:b8:da:60:1c:59:4b:0d:2f:c4:a1:4c:86:88: 8c:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:48:D4:87:C1:4C:FC:69:C5:8B:CB:CD:24:85:19:3C:47:AB:1B:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/24184dbc-2171-3a7d-9666-7a1ac9937de5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.224.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:7c:e2:93:e4:49:58:c7:92:22:09:59:38:41:43:94:d3:b6: f5:43:fb:35:3f:af:9d:48:2e:c8:ea:2a:51:60:52:5f:90:db: a7:c3:4f:7b:3a:48:31:88:8c:9b:82:1d:54:5a:8a:05:ca:b1: dd:d1:0d:25:f7:4d:44:d1:38:d7:59:b6:1c:35:5d:5b:a5:0e: 86:c3:d9:8f:1f:76:b5:c9:e6:4b:99:2f:df:fc:61:9a:b0:4e: ba:8b:42:c2:e6:d5:8e:20:69:9d:d7:48:3b:97:7f:a5:c3:ae: b9:60:1d:33:73:71:04:f8:06:2a:bf:35:6d:73:46:73:56:ec: 3b:b3:a0:2f:01:c5:d8:84:28:a4:6a:d8:25:86:82:85:a5:cd: a5:94:10:3c:5d:59:c4:29:82:d8:c0:09:be:7b:4b:00:9c:35: 2f:66:4f:bf:77:04:48:04:91:4d:6e:cf:8d:3c:41:34:23:ac: fe:9f:e7:dd:d1:3a:cf:03:b1:75:17:89:1e:73:ab:e4:f5:ed: 5c:96:36:cd:a4:d9:0d:ba:e9:23:91:03:1e:6e:0d:a6:92:ba: e9:5e:ce:53:d4:81:66:69:da:33:d4:0d:03:a7:fb:e5:16:33: 0c:b6:99:fc:a1:cf:46:8e:1f:38:fc:d2:64:6f:a2:ca:83:06: 7c:b4:a5:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcBIFdBF3cSHf7ZwYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI0MDgyNjEzMDA0MVoXDTI0MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk ODY4NTQ0ODAtYjFmMi00YmY0LWFiMzYtMjUzY2ExNzczNzdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5U1Tt5P9VnxanrN+4yw93vGogl2Rr9nsZam4 D5x2E8eCsrcrKYjqCrO1nIJJ+bq7nwh0ZTziywZZw/MsizCS5gWIANug7tjwHKwu uPZGbUueKnypc4qmgJV51CJdJnXiZDug2PJ6lJOBSgjigCAeE2Exa0Fi4TkE26wd nVRKs4muia6nwfRkFfbxvowkl4Ny67TCQItSUlsrA5do4njM8tujhCCXPW3WACgE uyOqSq9YrviUBl79zR38NiqEI4H6dw55t6ZsJZ1u+2I6eXDjREITBN9vmhLwOXId g5oTV1Ku6yTrqYwTghBCwo8lCwtpqbjaYBxZSw0vxKFMhoiMcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFxI1IfBTPxpxYvLzSSFGTxHqxtuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMjQxODRkYmMtMjE3MS0z YTdkLTk2NjYtN2ExYWM5OTM3ZGU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDruCIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI584pPkSVjHkiIJWThBQ5TTtvVD+zU/r51ILsjqKlFgUl+Q26fDT3s6 SDGIjJuCHVRaigXKsd3RDSX3TUTRONdZthw1XVulDobD2Y8fdrXJ5kuZL9/8YZqw TrqLQsLm1Y4gaZ3XSDuXf6XDrrlgHTNzcQT4Biq/NW1zRnNW7DuzoC8BxdiEKKRq 2CWGgoWlzaWUEDxdWcQpgtjACb57SwCcNS9mT793BEgEkU1uz408QTQjrP6f593R Os8DsXUXiR5zq+T17VyWNs2k2Q266SORAx5uDaaSuulezlPUgWZp2jPUDQOn++UW Mwy2mfyhz0aOHzj80mRvosqDBny0pb4= -----END CERTIFICATE-----Generated at Tue Oct 22 20:17:32 2024 by rpki-client on console-fra.rpki-client.org