$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4348e425-e681-3817-bd5e-06cc8d151691.roa File: 4348e425-e681-3817-bd5e-06cc8d151691.roa (raw, json) Hash identifier: DNfsWIiRMBu1Op1mEvV39xBybBRKb9cWjjqGLncMeV0= Subject key identifier: 68:A3:F8:57:B4:6E:16:7B:16:8F:DC:2C:CE:00:4E:C8:C1:7E:38:51 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584701203F712B693AE0718AB480 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4348e425-e681-3817-bd5e-06cc8d151691.roa Signing time: Mon 26 Aug 2024 13:00:41 +0000 ROA not before: Mon 26 Aug 2024 13:00:41 +0000 ROA not after: Sun 24 Nov 2024 14:00:41 +0000 asID: 6167 IP address blocks: 174.196.104.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Oct 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:01:20:3f:71:2b:69:3a:e0:71:8a:b4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 26 13:00:41 2024 GMT Not After : Nov 24 14:00:41 2024 GMT Subject: CN=bbd35d0e-0bab-4f8a-a69c-378b6c7ee4aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:04:03:0c:fa:57:4c:2c:a1:8d:1e:b1:4f:b8: 7a:03:e2:69:04:79:0e:08:a2:3e:94:66:b9:2f:4d: 1e:1a:f3:76:54:3a:55:63:74:26:aa:5b:43:03:80: 81:ef:c4:a7:65:ca:7e:48:d0:00:c9:b7:f9:5e:04: 93:99:9a:7d:2c:35:2f:b6:14:65:fd:01:2e:a3:39: 05:ea:f5:42:86:0b:a5:5e:ee:ac:3c:b9:f6:d0:b8: 70:30:bf:24:b2:cf:58:7f:25:0e:29:73:23:a5:44: 7d:55:ba:6d:99:84:37:3c:de:c4:5f:11:eb:58:3a: 01:fa:d0:36:96:bb:35:50:66:75:c5:e9:b4:84:33: c8:e4:8e:8e:b2:a5:10:57:ff:cc:86:8e:d5:7e:81: 55:5f:89:fb:70:fb:6b:68:c8:1d:f3:a7:6d:3b:24: cd:76:7e:1e:cc:ef:04:67:b4:16:8c:91:e8:83:b9: 2c:8d:01:3c:46:89:27:06:ee:9e:d2:05:48:11:21: 4d:b1:0e:c5:98:07:d7:01:93:67:d2:90:a3:0d:27: c1:c1:31:5f:c2:56:b5:31:ec:8b:f3:5a:f1:51:48: 0d:ab:cd:e3:d5:9c:f6:2f:82:ab:45:5d:dc:5f:73: e5:73:93:6a:0a:5a:e1:b7:6a:dc:5b:62:de:c5:e9: 6e:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:A3:F8:57:B4:6E:16:7B:16:8F:DC:2C:CE:00:4E:C8:C1:7E:38:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4348e425-e681-3817-bd5e-06cc8d151691.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.196.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:85:7a:10:6a:32:40:35:e3:b7:25:d1:c9:db:ef:17:f8:b8: 26:3f:16:9b:6b:dd:d5:e8:9b:2c:a1:4a:43:fe:22:38:79:b2: e3:33:02:ba:b7:b5:88:75:22:d9:88:d3:7d:24:30:76:70:08: bb:c4:d0:dd:4b:46:19:46:71:06:bd:49:7e:7b:a2:f3:39:63: be:02:c8:19:b9:7c:c0:33:06:0b:84:d0:85:5e:9b:9a:a5:08: 70:db:c5:a5:39:17:67:2a:5a:a7:c2:ae:31:77:b0:f2:d4:c6: a1:9d:4f:51:37:ec:c1:bc:ed:e7:3a:d2:c6:cf:9f:80:3e:bb: de:e9:ba:d2:41:58:39:76:b6:8c:54:6d:dd:76:d8:4e:59:2e: f9:10:b9:d6:17:75:35:35:b5:a6:95:a8:0c:49:7d:dd:d3:82: c0:bb:ab:a7:27:4b:e4:92:ad:30:e0:4a:e7:16:f2:5c:31:cd: d3:b5:39:2e:d4:9d:c8:41:f3:89:74:ef:e6:f3:4d:04:a2:6a: 58:7d:e0:2d:be:f3:3a:a7:6e:44:31:7a:15:ec:fe:ec:b4:ec: 2b:78:d1:b1:15:85:e6:65:fe:95:50:20:b2:a4:87:7c:42:31: ad:4e:77:d0:15:71:94:52:2d:77:3e:ea:8a:d3:21:e0:96:d5: 16:72:86:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcBID9xK2k64HGKtIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI0MDgyNjEzMDA0MVoXDTI0MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk YmJkMzVkMGUtMGJhYi00ZjhhLWE2OWMtMzc4YjZjN2VlNGFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQQDDPpXTCyhjR6xT7h6A+JpBHkOCKI+lGa5 L00eGvN2VDpVY3QmqltDA4CB78SnZcp+SNAAybf5XgSTmZp9LDUvthRl/QEuozkF 6vVChgulXu6sPLn20LhwML8kss9YfyUOKXMjpUR9VbptmYQ3PN7EXxHrWDoB+tA2 lrs1UGZ1xem0hDPI5I6OsqUQV//Mho7VfoFVX4n7cPtraMgd86dtOyTNdn4ezO8E Z7QWjJHog7ksjQE8RoknBu6e0gVIESFNsQ7FmAfXAZNn0pCjDSfBwTFfwla1MeyL 81rxUUgNq83j1Zz2L4KrRV3cX3Plc5NqClrht2rcW2Lexelu9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGij+Fe0bhZ7Fo/cLM4ATsjBfjhRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNDM0OGU0MjUtZTY4MS0z ODE3LWJkNWUtMDZjYzhkMTUxNjkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrsRoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE2FehBqMkA147cl0cnb7xf4uCY/Fptr3dXomyyhSkP+Ijh5suMzArq3 tYh1ItmI030kMHZwCLvE0N1LRhlGcQa9SX57ovM5Y74CyBm5fMAzBguE0IVem5ql CHDbxaU5F2cqWqfCrjF3sPLUxqGdT1E37MG87ec60sbPn4A+u97putJBWDl2toxU bd122E5ZLvkQudYXdTU1taaVqAxJfd3TgsC7q6cnS+SSrTDgSucW8lwxzdO1OS7U nchB84l07+bzTQSialh94C2+8zqnbkQxehXs/uy07Ct40bEVheZl/pVQILKkh3xC Ma1Od9AVcZRSLXc+6orTIeCW1RZyhjk= -----END CERTIFICATE-----Generated at Tue Oct 22 21:22:22 2024 by rpki-client on console-ams.rpki-client.org