$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3a652f60-cec7-329a-b702-fd9ae911cdae.roa File: 3a652f60-cec7-329a-b702-fd9ae911cdae.roa (raw, json) Hash identifier: LD6sCuP0ryxRfe8oJxDz9JOgFJjRnzML6FIIfPiRJdk= Subject key identifier: BB:FF:6C:91:E3:42:E1:F2:68:FF:14:46:26:11:F9:A0:BC:63:12:F2 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584762D6415975B33629A5427F40 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3a652f60-cec7-329a-b702-fd9ae911cdae.roa Signing time: Mon 30 Sep 2024 13:00:42 +0000 ROA not before: Mon 30 Sep 2024 13:00:42 +0000 ROA not after: Sun 29 Dec 2024 14:00:42 +0000 asID: 22394 IP address blocks: 141.207.196.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:62:d6:41:59:75:b3:36:29:a5:42:7f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Sep 30 13:00:42 2024 GMT Not After : Dec 29 14:00:42 2024 GMT Subject: CN=0a1a390a-f49d-47f5-8af2-bd93548144d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a5:e8:05:2d:31:66:bd:18:d1:4b:ee:13:1d: dd:34:7c:87:df:a6:67:d0:5b:c7:d1:7f:97:16:87: 1d:d9:a0:83:3c:08:ac:1d:38:e8:50:88:39:72:5a: 62:b8:46:27:dd:04:ce:ac:82:26:79:18:9a:6b:4a: 84:fb:e0:c3:e3:ac:b0:d8:98:5e:1d:e9:82:82:cc: ee:aa:02:80:8d:fe:38:b6:68:47:78:73:81:44:72: 93:1e:e6:7d:31:76:28:5b:81:f7:3c:a0:54:3b:88: 18:bc:04:98:1d:bb:7a:88:4b:87:90:cc:cd:b8:b1: ec:14:31:59:28:7d:f4:a7:d1:7b:ce:b6:1e:fe:61: 7c:c2:74:bf:13:7b:75:21:12:76:b8:69:58:44:80: de:18:85:45:b0:b0:ea:98:1f:45:6c:75:42:91:f6: d6:44:44:d5:d2:1e:53:86:86:2d:d6:90:80:9e:fc: 7c:ae:ad:44:fa:e6:87:e8:5a:29:3a:54:3f:47:32: 47:47:18:3c:44:45:75:82:a9:fb:6f:f8:c3:68:7d: 06:30:b4:6d:a5:f7:ea:eb:5c:55:e5:8c:c0:58:5b: e0:5f:3c:6f:cd:aa:a7:da:c5:e5:81:54:df:28:8d: 88:28:7d:5f:89:f4:01:30:42:84:1c:03:bb:a0:12: fa:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:FF:6C:91:E3:42:E1:F2:68:FF:14:46:26:11:F9:A0:BC:63:12:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3a652f60-cec7-329a-b702-fd9ae911cdae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 141.207.196.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:e4:80:96:33:3d:46:70:b8:dd:7e:bb:c2:11:af:93:e6:1f: dc:4d:2b:90:84:71:52:90:cf:0e:c3:48:1c:7c:77:fa:2d:03: 0e:37:f7:e6:aa:e7:46:9f:5e:1c:e1:67:7a:3c:d3:9d:12:b0: 4c:e5:a2:d0:d0:1a:63:14:6c:a9:29:e8:94:dc:47:65:2c:19: 01:a7:6a:e1:e6:99:37:e2:9c:16:fd:d8:ba:bd:bb:25:de:e2: a3:8c:7d:f1:89:e2:32:d7:f3:73:fb:a2:f8:9a:b2:29:e2:27: ac:32:f5:1e:41:4a:f2:5c:f1:52:9f:01:67:08:99:47:98:f0: 23:68:d3:b2:f5:e2:ed:b5:9a:57:0d:ff:ee:51:b0:19:e6:16: 2b:6c:07:65:23:fa:dd:1f:18:32:e2:f8:6c:d7:20:63:8e:05: 96:da:6a:94:c9:66:dd:d4:05:40:52:19:f2:29:c0:93:92:11: 4e:c0:70:22:24:de:f1:6f:77:69:2f:58:79:75:6b:53:38:aa: b5:7c:89:87:1f:f5:51:f9:d1:7e:6d:3d:a8:92:0c:a5:5c:7a: 36:57:2c:00:70:8d:3f:aa:59:89:76:06:52:b8:cc:aa:86:89: a3:de:da:7d:e9:fe:26:62:29:29:01:37:59:8e:ea:e9:26:0d: 1f:0c:8a:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdi1kFZdbM2KaVCf0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI0MDkzMDEzMDA0MloXDTI0MTIyOTE0MDA0MlowLzEtMCsGA1UEAxMk MGExYTM5MGEtZjQ5ZC00N2Y1LThhZjItYmQ5MzU0ODE0NGQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqXoBS0xZr0Y0UvuEx3dNHyH36Zn0FvH0X+X Focd2aCDPAisHTjoUIg5clpiuEYn3QTOrIImeRiaa0qE++DD46yw2JheHemCgszu qgKAjf44tmhHeHOBRHKTHuZ9MXYoW4H3PKBUO4gYvASYHbt6iEuHkMzNuLHsFDFZ KH30p9F7zrYe/mF8wnS/E3t1IRJ2uGlYRIDeGIVFsLDqmB9FbHVCkfbWRETV0h5T hoYt1pCAnvx8rq1E+uaH6FopOlQ/RzJHRxg8REV1gqn7b/jDaH0GMLRtpffq61xV 5YzAWFvgXzxvzaqn2sXlgVTfKI2IKH1fifQBMEKEHAO7oBL6ZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLv/bJHjQuHyaP8URiYR+aC8YxLyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvM2E2NTJmNjAtY2VjNy0z MjlhLWI3MDItZmQ5YWU5MTFjZGFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjc/EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAELkgJYzPUZwuN1+u8IRr5PmH9xNK5CEcVKQzw7DSBx8d/otAw439+aq 50afXhzhZ3o8050SsEzlotDQGmMUbKkp6JTcR2UsGQGnauHmmTfinBb92Lq9uyXe 4qOMffGJ4jLX83P7oviasiniJ6wy9R5BSvJc8VKfAWcImUeY8CNo07L14u21mlcN /+5RsBnmFitsB2Uj+t0fGDLi+GzXIGOOBZbaapTJZt3UBUBSGfIpwJOSEU7AcCIk 3vFvd2kvWHl1a1M4qrV8iYcf9VH50X5tPaiSDKVcejZXLABwjT+qWYl2BlK4zKqG iaPe2n3p/iZiKSkBN1mO6ukmDR8MihM= -----END CERTIFICATE-----Generated at Thu Nov 21 22:39:25 2024 by rpki-client on console-fra.rpki-client.org