$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3ee0695f-8448-3461-8ceb-6c29b7448f1d.roa File: 3ee0695f-8448-3461-8ceb-6c29b7448f1d.roa (raw, json) Hash identifier: oqtGKXkuiRnA9FeYIdzsDL3+cPkJMKQbgAFhIT2WrXw= Subject key identifier: 10:09:47:FF:4D:01:9B:7B:65:FA:84:50:99:38:E5:1B:75:19:07:90 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858477EC121B7F99F472B7D6E3200 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3ee0695f-8448-3461-8ceb-6c29b7448f1d.roa Signing time: Thu 10 Oct 2024 13:00:41 +0000 ROA not before: Thu 10 Oct 2024 13:00:41 +0000 ROA not after: Wed 08 Jan 2025 14:00:41 +0000 asID: 6167 IP address blocks: 72.108.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:7e:c1:21:b7:f9:9f:47:2b:7d:6e:32:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 10 13:00:41 2024 GMT Not After : Jan 8 14:00:41 2025 GMT Subject: CN=daab235c-80aa-4a56-9db9-2dd801892357 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:22:a1:00:c1:7a:63:bc:c9:8a:5b:87:69:f2: 48:ca:13:0e:a0:88:d7:c6:65:ec:3b:ac:b2:17:bd: e7:dd:f2:72:42:69:2c:d2:70:c1:7d:a0:5e:ab:04: 85:06:cf:59:7e:66:07:42:ec:1b:03:31:ba:52:15: 9e:90:e7:59:16:77:6d:de:8d:c8:52:bb:2b:f6:5a: a9:8d:a8:3a:23:61:68:7f:0a:6a:f3:03:8b:27:6e: e7:ab:6e:b9:f6:22:81:b6:04:06:f1:45:86:71:92: c6:16:8b:b2:1d:2b:43:33:05:6e:b6:59:91:0d:75: d7:b8:5f:f6:37:49:f3:ff:6c:cf:05:81:65:9d:af: 4d:5c:24:06:8f:d6:a5:b7:b0:c6:f1:2c:5b:3f:c5: 6a:87:c3:11:f4:93:d9:e6:81:5b:77:59:cf:22:ca: 53:1c:6a:26:69:c4:07:99:82:f5:d2:04:d9:e5:9b: 9b:8f:e4:aa:17:c9:7d:34:3c:bc:60:c0:d2:bf:d7: 49:77:a6:58:7d:37:75:a5:c1:fb:1d:f9:3a:08:50: 14:45:65:42:30:43:8c:a5:16:c0:10:3d:b1:6f:df: b1:68:78:33:ee:c6:25:c9:a4:50:67:0b:68:27:bf: bb:11:3e:d9:65:8f:fc:5c:73:73:91:34:44:0b:89: 94:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:09:47:FF:4D:01:9B:7B:65:FA:84:50:99:38:E5:1B:75:19:07:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3ee0695f-8448-3461-8ceb-6c29b7448f1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.108.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:74:cc:e3:cc:66:18:f9:7f:93:51:35:85:1b:6e:c4:12:06: 48:2a:21:c1:52:7e:29:90:44:d6:41:0d:7a:ac:51:0f:a9:c6: 43:6c:19:08:12:80:80:37:b1:21:84:ea:ff:ee:63:39:2e:55: e8:4d:e3:59:16:5d:dd:ca:c4:f8:90:2e:3e:f6:7a:df:5b:cf: b9:cd:81:69:c4:ab:b1:69:de:11:68:c0:23:bf:dc:85:87:5c: 60:30:08:01:8d:fb:34:8e:e8:c9:70:9b:1d:9c:12:b1:78:96: bf:d2:13:d3:9a:74:ac:a7:75:76:e4:96:ab:91:0c:4e:bb:51: 3d:a8:5e:72:2e:01:a5:79:be:f5:f3:f2:a2:ad:8d:8c:9a:6e: 8b:c5:a3:7e:c4:ec:ff:bc:c4:b4:9e:2e:04:7d:e7:c0:fd:ce: 12:0c:bf:27:56:73:dc:b9:4c:93:fb:78:58:34:ec:08:c5:57: ea:d3:da:d9:4c:e2:04:cb:2f:57:3b:b0:74:77:dc:ec:df:3c: 67:e8:11:b1:41:8d:12:70:22:46:af:e9:77:04:d1:87:62:cb: 1d:78:75:38:7f:27:e8:25:87:85:5e:a0:d4:b5:10:8b:45:2a: 88:67:0e:50:cf:f1:23:5a:6a:c3:1e:ad:ef:d9:00:3c:63:ea: 46:cb:5e:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd+wSG3+Z9HK31uMgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI0MTAxMDEzMDA0MVoXDTI1MDEwODE0MDA0MVowLzEtMCsGA1UEAxMk ZGFhYjIzNWMtODBhYS00YTU2LTlkYjktMmRkODAxODkyMzU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSKhAMF6Y7zJiluHafJIyhMOoIjXxmXsO6yy F73n3fJyQmks0nDBfaBeqwSFBs9ZfmYHQuwbAzG6UhWekOdZFndt3o3IUrsr9lqp jag6I2Fofwpq8wOLJ27nq2659iKBtgQG8UWGcZLGFouyHStDMwVutlmRDXXXuF/2 N0nz/2zPBYFlna9NXCQGj9alt7DG8SxbP8Vqh8MR9JPZ5oFbd1nPIspTHGomacQH mYL10gTZ5Zubj+SqF8l9NDy8YMDSv9dJd6ZYfTd1pcH7Hfk6CFAURWVCMEOMpRbA ED2xb9+xaHgz7sYlyaRQZwtoJ7+7ET7ZZY/8XHNzkTREC4mUIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBAJR/9NAZt7ZfqEUJk45Rt1GQeQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvM2VlMDY5NWYtODQ0OC0z NDYxLThjZWItNmMyOWI3NDQ4ZjFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASGyoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKl0zOPMZhj5f5NRNYUbbsQSBkgqIcFSfimQRNZBDXqsUQ+pxkNsGQgS gIA3sSGE6v/uYzkuVehN41kWXd3KxPiQLj72et9bz7nNgWnEq7Fp3hFowCO/3IWH XGAwCAGN+zSO6Mlwmx2cErF4lr/SE9OadKyndXbklquRDE67UT2oXnIuAaV5vvXz 8qKtjYyabovFo37E7P+8xLSeLgR958D9zhIMvydWc9y5TJP7eFg07AjFV+rT2tlM 4gTLL1c7sHR33OzfPGfoEbFBjRJwIkav6XcE0Ydiyx14dTh/J+glh4VeoNS1EItF KohnDlDP8SNaasMere/ZADxj6kbLXpE= -----END CERTIFICATE-----Generated at Thu Nov 21 23:41:22 2024 by rpki-client on console-ams.rpki-client.org