$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/33dd2e0a-3c38-3dfc-8538-02c19f370233.roa File: 33dd2e0a-3c38-3dfc-8538-02c19f370233.roa (raw, json) Hash identifier: nuFItcCMBIuz3ER19QHKkUfhuqxRI5yUOmIQWYUKY5w= Subject key identifier: 79:FC:11:14:9A:C8:2E:88:C3:0E:DC:FA:E0:21:AC:08:56:4B:B7:1E Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285847537B84B9E29A381B887F8840 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/33dd2e0a-3c38-3dfc-8538-02c19f370233.roa Signing time: Wed 25 Sep 2024 01:00:31 +0000 ROA not before: Wed 25 Sep 2024 01:00:31 +0000 ROA not after: Tue 24 Dec 2024 02:00:31 +0000 asID: 701 IP address blocks: 199.202.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:53:7b:84:b9:e2:9a:38:1b:88:7f:88:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Sep 25 01:00:31 2024 GMT Not After : Dec 24 02:00:31 2024 GMT Subject: CN=e8ab1196-a0f2-43d8-b106-0a6e886f005a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:8a:7a:27:da:43:26:ce:3c:0e:f8:d8:27:67: 53:48:f9:e4:8e:d3:c0:94:df:52:e6:f4:8f:8d:0b: 5d:e3:2d:46:b1:52:64:03:94:08:25:ce:1c:3b:98: 70:73:88:09:ac:28:12:a6:a1:e9:74:f5:5e:8f:b0: 0e:59:dc:47:c0:93:f7:a1:03:80:83:e3:c6:97:1e: ef:9a:6f:14:a7:2b:18:de:e2:15:0c:96:d9:4a:70: b4:c1:5e:43:f4:43:a0:77:f0:d3:64:48:70:aa:53: db:e0:7d:d5:e2:26:1d:ae:3c:96:25:f9:d7:a8:fb: 3b:7b:09:60:da:55:2a:f4:26:e2:56:18:f9:1c:24: 32:d5:a4:13:cd:b9:5e:ff:cb:31:e4:b2:e7:29:9c: bd:e6:50:ba:96:ee:b0:59:2a:68:f6:0b:e9:69:e6: c6:7d:40:c3:d9:22:c6:94:21:33:96:81:30:70:22: 71:a8:e6:31:6a:83:4a:eb:87:8a:9d:14:58:cd:2d: d9:c7:b9:51:11:20:cd:dd:15:11:d9:d1:0d:96:41: a8:76:a9:b0:82:47:04:9a:85:fa:7f:d0:c4:80:63: e3:8f:60:84:d2:4f:52:d1:3e:15:b8:6e:67:94:a3: 31:16:94:34:df:53:09:e5:95:4d:94:97:2f:3e:bf: 26:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:FC:11:14:9A:C8:2E:88:C3:0E:DC:FA:E0:21:AC:08:56:4B:B7:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/33dd2e0a-3c38-3dfc-8538-02c19f370233.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 199.202.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:e1:28:e3:19:31:2f:41:e7:77:62:73:81:4f:b8:a4:c4:fe: 33:d0:1b:65:8c:27:d5:ad:ac:ac:c3:3a:1f:48:f8:21:1f:2f: c7:4d:e8:d2:aa:68:1b:8a:64:09:67:24:a8:e7:40:d0:5e:3e: ba:6c:8b:ae:2f:f0:c8:ee:01:88:b7:fc:28:0d:28:f7:b2:58: 08:bf:2e:4a:ca:ec:bb:74:5d:c8:64:33:7b:7f:ad:af:52:25: 8e:fa:48:16:d5:d0:d5:46:66:29:4a:c7:6b:59:21:1d:ec:f9: 52:95:26:a6:5d:6b:63:34:be:51:21:25:53:06:01:1d:5a:c8: c9:0d:f4:b9:23:6e:14:56:e8:c4:b5:f9:90:1b:1c:6d:14:d2: e1:7c:fd:6c:7f:f2:94:39:66:07:f2:6f:70:62:3d:dd:1d:0c: 59:bd:9f:0a:e2:09:91:d3:7c:f2:0b:b3:de:5b:41:8c:29:f1: fd:68:4d:ef:41:18:fb:e3:ac:ad:81:54:b4:b9:58:2f:8e:b3: 2c:17:62:04:22:0b:44:58:30:ee:21:53:e9:32:4d:d9:7e:fe: 5c:4a:5f:59:d6:ba:d3:49:2b:27:65:db:78:e4:82:2c:73:26: 53:b7:b5:70:f7:16:64:7d:75:b7:59:37:99:6e:fa:bb:fc:ad: 2b:8a:e7:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdTe4S54po4G4h/iEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI0MDkyNTAxMDAzMVoXDTI0MTIyNDAyMDAzMVowLzEtMCsGA1UEAxMk ZThhYjExOTYtYTBmMi00M2Q4LWIxMDYtMGE2ZTg4NmYwMDVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYp6J9pDJs48DvjYJ2dTSPnkjtPAlN9S5vSP jQtd4y1GsVJkA5QIJc4cO5hwc4gJrCgSpqHpdPVej7AOWdxHwJP3oQOAg+PGlx7v mm8UpysY3uIVDJbZSnC0wV5D9EOgd/DTZEhwqlPb4H3V4iYdrjyWJfnXqPs7ewlg 2lUq9CbiVhj5HCQy1aQTzble/8sx5LLnKZy95lC6lu6wWSpo9gvpaebGfUDD2SLG lCEzloEwcCJxqOYxaoNK64eKnRRYzS3Zx7lRESDN3RUR2dENlkGodqmwgkcEmoX6 f9DEgGPjj2CE0k9S0T4VuG5nlKMxFpQ031MJ5ZVNlJcvPr8mKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHn8ERSayC6Iww7c+uAhrAhWS7ceMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMzNkZDJlMGEtM2MzOC0z ZGZjLTg1MzgtMDJjMTlmMzcwMjMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx8qAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALHhKOMZMS9B53dic4FPuKTE/jPQG2WMJ9WtrKzDOh9I+CEfL8dN6NKq aBuKZAlnJKjnQNBePrpsi64v8MjuAYi3/CgNKPeyWAi/LkrK7Lt0XchkM3t/ra9S JY76SBbV0NVGZilKx2tZIR3s+VKVJqZda2M0vlEhJVMGAR1ayMkN9LkjbhRW6MS1 +ZAbHG0U0uF8/Wx/8pQ5Zgfyb3BiPd0dDFm9nwriCZHTfPILs95bQYwp8f1oTe9B GPvjrK2BVLS5WC+OsywXYgQiC0RYMO4hU+kyTdl+/lxKX1nWutNJKydl23jkgixz JlO3tXD3FmR9dbdZN5lu+rv8rSuK53k= -----END CERTIFICATE-----Generated at Thu Nov 21 23:41:19 2024 by rpki-client on console-ams.rpki-client.org