$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/34b826bd-a21c-3c47-b0e6-8a054d590cda.roa File: 34b826bd-a21c-3c47-b0e6-8a054d590cda.roa (raw, json) Hash identifier: vTXONeaHxXQbGldZOJS2tovZ0gjlBzGArJcLNuBHbRc= Subject key identifier: 46:59:D1:9B:89:5E:F6:F1:1C:1B:50:71:41:EE:BD:2D:7B:47:25:F5 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584757AB8214E29B737830003900 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/34b826bd-a21c-3c47-b0e6-8a054d590cda.roa Signing time: Thu 26 Sep 2024 13:00:41 +0000 ROA not before: Thu 26 Sep 2024 13:00:41 +0000 ROA not after: Wed 25 Dec 2024 14:00:41 +0000 asID: 6167 IP address blocks: 72.105.104.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:57:ab:82:14:e2:9b:73:78:30:00:39:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Sep 26 13:00:41 2024 GMT Not After : Dec 25 14:00:41 2024 GMT Subject: CN=42c1491b-0d24-4f38-b5c0-4fb51ea97ba0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:b9:c1:62:4e:41:8d:fb:6b:aa:dd:38:7f:26: 28:85:04:71:c9:1b:93:05:56:bd:38:eb:96:da:d9: ed:cf:1d:35:13:a0:0b:c5:ab:13:13:86:69:b1:1a: 45:4f:29:25:5c:a7:95:dc:83:a8:f9:d9:57:7d:f1: 71:f9:52:7a:81:16:3f:43:c9:ac:ff:14:c5:eb:b0: c0:c1:c7:ab:38:f1:79:a2:96:1c:a5:e0:d7:71:f7: e9:b9:a9:91:42:12:2b:15:f2:03:ee:da:9e:9b:ea: 9e:52:92:be:22:79:a6:36:68:3d:f5:4b:2c:6e:a5: 40:42:bc:f9:99:70:90:42:36:ec:9b:e6:c5:06:a7: 8b:1f:59:26:44:99:5a:75:fc:15:b2:b8:48:ec:29: f3:e9:6d:4f:49:0c:85:6a:c5:e1:c3:d3:76:e1:7e: a4:02:17:a0:7a:6c:31:eb:d5:42:8b:5b:93:22:2c: d9:a0:93:e5:2e:31:af:51:9b:58:08:00:67:8f:6e: 3b:2c:83:eb:0d:64:a9:1b:17:7c:ac:de:d8:a3:89: cc:ed:12:e8:a2:02:4c:ff:b4:8f:4a:37:63:23:b9: ba:73:0c:f5:48:d0:b9:d8:06:f6:3a:e7:eb:dd:7d: d9:d0:ed:d5:65:96:ee:6a:3e:6d:02:46:06:dc:56: e3:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:59:D1:9B:89:5E:F6:F1:1C:1B:50:71:41:EE:BD:2D:7B:47:25:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/34b826bd-a21c-3c47-b0e6-8a054d590cda.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.105.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:19:43:79:8e:2b:86:cd:1f:0b:e5:b7:ca:51:f7:a0:6a:9f: 21:07:79:c5:0d:fc:9a:65:b5:99:c1:ca:8c:61:82:01:5a:d1: 53:b6:2c:d2:a6:b5:18:af:f8:87:0a:c1:a9:e9:bf:c3:df:a9: 7c:ab:fd:d6:1e:16:f1:ac:02:8a:54:e9:1d:78:4c:f2:0e:fa: 18:cf:6a:cc:33:fe:68:77:7a:16:67:65:0a:0c:45:ec:50:9d: 20:fe:75:09:18:fd:1e:ac:af:dc:e0:02:e6:fc:ff:08:3f:19: ca:20:24:36:5d:6f:13:29:7d:83:25:fa:21:4e:7c:c2:f4:b0: c8:02:b5:89:fa:67:24:4a:2d:31:71:2f:9f:56:0d:63:1c:c6: 32:f5:bb:d8:c9:b6:ff:62:be:ee:0b:b6:37:a2:84:a2:57:52: e9:73:52:d5:18:89:37:11:2c:8e:79:0d:f7:82:c5:40:7d:2c: f9:84:23:05:0a:83:08:6a:9f:36:d8:89:ac:68:2d:bb:3b:28: c7:63:c4:8d:3d:8a:df:c8:05:99:b2:8a:3a:fe:e7:4b:3f:1f: b8:75:45:57:6e:c1:01:d2:62:90:ee:19:bc:dd:65:35:2c:88: 5a:b8:ee:8a:5e:40:86:d1:42:86:c2:4e:5e:60:23:11:10:74: 94:20:22:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdXq4IU4ptzeDAAOQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI0MDkyNjEzMDA0MVoXDTI0MTIyNTE0MDA0MVowLzEtMCsGA1UEAxMk NDJjMTQ5MWItMGQyNC00ZjM4LWI1YzAtNGZiNTFlYTk3YmEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrnBYk5Bjftrqt04fyYohQRxyRuTBVa9OOuW 2tntzx01E6ALxasTE4ZpsRpFTyklXKeV3IOo+dlXffFx+VJ6gRY/Q8ms/xTF67DA wcerOPF5opYcpeDXcffpuamRQhIrFfID7tqem+qeUpK+InmmNmg99UssbqVAQrz5 mXCQQjbsm+bFBqeLH1kmRJladfwVsrhI7Cnz6W1PSQyFasXhw9N24X6kAhegemwx 69VCi1uTIizZoJPlLjGvUZtYCABnj247LIPrDWSpGxd8rN7Yo4nM7RLoogJM/7SP SjdjI7m6cwz1SNC52Ab2Oufr3X3Z0O3VZZbuaj5tAkYG3FbjkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEZZ0ZuJXvbxHBtQcUHuvS17RyX1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMzRiODI2YmQtYTIxYy0z YzQ3LWIwZTYtOGEwNTRkNTkwY2RhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSGloMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG0ZQ3mOK4bNHwvlt8pR96BqnyEHecUN/JpltZnByoxhggFa0VO2LNKm tRiv+IcKwanpv8PfqXyr/dYeFvGsAopU6R14TPIO+hjPaswz/mh3ehZnZQoMRexQ nSD+dQkY/R6sr9zgAub8/wg/GcogJDZdbxMpfYMl+iFOfML0sMgCtYn6ZyRKLTFx L59WDWMcxjL1u9jJtv9ivu4LtjeihKJXUulzUtUYiTcRLI55DfeCxUB9LPmEIwUK gwhqnzbYiaxoLbs7KMdjxI09it/IBZmyijr+50s/H7h1RVduwQHSYpDuGbzdZTUs iFq47opeQIbRQobCTl5gIxEQdJQgIog= -----END CERTIFICATE-----Generated at Thu Nov 21 22:39:24 2024 by rpki-client on console-fra.rpki-client.org