$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4231cd24-3dea-3f18-9e1a-433cde661cef.roa File: 4231cd24-3dea-3f18-9e1a-433cde661cef.roa (raw, json) Hash identifier: /0upe9Yd78dkSD4quaBRcY2hwcffN1ubW9tW4kfBm7w= Subject key identifier: 23:FD:05:58:E5:60:B1:54:43:4F:EB:B6:EB:6B:7F:D5:C8:64:8E:E0 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858477EC123BA6DDC03E1868CE580 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4231cd24-3dea-3f18-9e1a-433cde661cef.roa Signing time: Thu 10 Oct 2024 13:00:41 +0000 ROA not before: Thu 10 Oct 2024 13:00:41 +0000 ROA not after: Wed 08 Jan 2025 14:00:41 +0000 asID: 6167 IP address blocks: 72.97.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:7e:c1:23:ba:6d:dc:03:e1:86:8c:e5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 10 13:00:41 2024 GMT Not After : Jan 8 14:00:41 2025 GMT Subject: CN=1d637fe5-d86b-4f87-ae59-557336cdcb42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f7:b3:6a:8c:4c:ea:06:02:d4:48:f8:37:b8: 5a:99:37:af:48:aa:af:db:00:b1:3c:89:c4:25:6b: 29:1e:5d:30:7f:d7:99:cb:cb:57:21:2a:23:e2:58: 75:d2:79:64:bb:83:9f:4e:53:16:89:30:8b:7d:ca: 4e:e0:84:a1:58:0e:60:8d:ba:5a:b3:89:e0:bc:b6: 56:c9:87:d4:50:ed:17:fb:69:cc:fd:57:8a:e4:eb: a7:cc:ee:cf:8e:6f:6c:31:9e:71:1e:74:a2:8d:1d: 5c:06:e5:68:bf:9e:0d:fc:d5:a1:5e:9d:e7:4d:5c: a3:0b:43:fb:3e:15:78:20:3d:1a:86:89:7b:e7:f3: db:3c:bc:ac:0b:d0:e2:69:6e:81:65:b2:59:aa:ec: 6f:d7:dd:ff:2f:40:e5:60:63:b0:13:1b:16:75:6c: cb:81:65:6a:05:75:ea:cc:d5:4a:d3:68:03:64:36: 14:c8:ee:e6:ae:e5:5b:f8:25:ee:7b:a9:d0:f2:9e: 12:8c:20:53:e3:80:17:dd:84:17:d2:48:6e:f6:d7: 7a:6a:f6:39:c7:45:10:31:68:51:03:f3:59:ce:c4: a0:0c:7b:77:6a:e6:02:06:8f:03:23:c3:1a:31:83: 71:e7:cf:f9:29:b6:7e:07:2b:ab:ab:43:e4:29:55: 46:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:FD:05:58:E5:60:B1:54:43:4F:EB:B6:EB:6B:7F:D5:C8:64:8E:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4231cd24-3dea-3f18-9e1a-433cde661cef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.97.236.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:d4:19:25:ff:08:4b:eb:f5:2e:2f:c0:8f:fa:17:9c:c7:f3: a9:50:05:fe:b1:50:00:88:40:b6:79:a7:63:de:25:b1:42:ac: b5:af:9b:4c:17:6b:85:dd:3c:51:66:a6:54:cc:05:8e:99:b9: f7:ed:e1:14:ba:6b:9f:5a:2b:82:b7:37:bf:68:7a:26:31:f8: 06:30:87:36:74:f7:08:23:4f:a2:44:70:e1:fc:e3:7d:02:b1: 4e:da:68:cd:3a:26:01:4d:66:3f:2b:41:ee:4d:4f:ce:39:16: 89:f6:f4:27:65:80:a6:f7:a5:60:15:84:a3:a3:4d:df:4d:ca: 4d:46:d4:20:31:db:a1:28:b8:52:a1:c8:85:20:93:b5:e0:8b: d2:1a:86:17:6b:e0:c1:b7:55:13:ee:bd:ec:03:02:ce:c5:f4: 1a:fe:4b:f5:20:b7:a8:71:18:24:6c:41:3e:b2:ef:a7:1a:88: 7a:c8:6e:0a:5c:98:3c:98:a5:b7:af:a6:5a:d8:d1:06:a4:e3: ee:5e:f5:95:20:98:26:b9:07:9a:ce:27:8c:e5:c2:65:c8:eb: f0:ef:de:62:d2:c3:2d:44:cd:0b:0d:bc:ab:d5:6c:81:cf:8f: 9b:45:e8:d6:83:a4:f0:0b:d8:0f:be:9c:4a:f5:3b:50:89:2f: 62:60:73:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd+wSO6bdwD4YaM5YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI0MTAxMDEzMDA0MVoXDTI1MDEwODE0MDA0MVowLzEtMCsGA1UEAxMk MWQ2MzdmZTUtZDg2Yi00Zjg3LWFlNTktNTU3MzM2Y2RjYjQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPezaoxM6gYC1Ej4N7hamTevSKqv2wCxPInE JWspHl0wf9eZy8tXISoj4lh10nlku4OfTlMWiTCLfcpO4IShWA5gjbpas4ngvLZW yYfUUO0X+2nM/VeK5OunzO7Pjm9sMZ5xHnSijR1cBuVov54N/NWhXp3nTVyjC0P7 PhV4ID0ahol75/PbPLysC9DiaW6BZbJZquxv193/L0DlYGOwExsWdWzLgWVqBXXq zNVK02gDZDYUyO7mruVb+CXue6nQ8p4SjCBT44AX3YQX0khu9td6avY5x0UQMWhR A/NZzsSgDHt3auYCBo8DI8MaMYNx58/5KbZ+Byurq0PkKVVG9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCP9BVjlYLFUQ0/rtutrf9XIZI7gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNDIzMWNkMjQtM2RlYS0z ZjE4LTllMWEtNDMzY2RlNjYxY2VmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSGHsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJHUGSX/CEvr9S4vwI/6F5zH86lQBf6xUACIQLZ5p2PeJbFCrLWvm0wX a4XdPFFmplTMBY6Zufft4RS6a59aK4K3N79oeiYx+AYwhzZ09wgjT6JEcOH8430C sU7aaM06JgFNZj8rQe5NT845Fon29CdlgKb3pWAVhKOjTd9Nyk1G1CAx26EouFKh yIUgk7Xgi9Iahhdr4MG3VRPuvewDAs7F9Br+S/Ugt6hxGCRsQT6y76caiHrIbgpc mDyYpbevplrY0Qak4+5e9ZUgmCa5B5rOJ4zlwmXI6/Dv3mLSwy1EzQsNvKvVbIHP j5tF6NaDpPAL2A++nEr1O1CJL2Jgc34= -----END CERTIFICATE-----Generated at Thu Nov 21 22:39:27 2024 by rpki-client on console-fra.rpki-client.org