$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5843d5c8-e879-33a5-8add-cdca883db770.roa File: 5843d5c8-e879-33a5-8add-cdca883db770.roa (raw, json) Hash identifier: lhfbBqY30Lq+HtQoN5VhwYVtO7d0pxlzeom3ghenFXs= Subject key identifier: F7:EF:3F:6F:C4:0B:B2:98:FD:A1:BF:4F:A4:AB:0B:D2:52:2A:B7:57 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858474C80C7EDF5D50547017C2078 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5843d5c8-e879-33a5-8add-cdca883db770.roa Signing time: Sun 22 Sep 2024 13:00:40 +0000 ROA not before: Sun 22 Sep 2024 13:00:40 +0000 ROA not after: Sat 21 Dec 2024 14:00:40 +0000 asID: 701 IP address blocks: 71.102.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:4c:80:c7:ed:f5:d5:05:47:01:7c:20:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Sep 22 13:00:40 2024 GMT Not After : Dec 21 14:00:40 2024 GMT Subject: CN=24a90ec8-152b-4c0c-b6ab-c5d2fabdb4ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:6a:f6:67:dd:b6:d8:d5:06:29:95:79:64:19: e6:b2:ee:96:8d:a5:ad:b4:fb:b4:4e:9c:42:69:7f: e4:47:9b:b4:64:ea:cb:1e:27:22:9a:10:23:d3:57: be:9e:ae:13:9c:43:44:9a:44:db:1c:9e:a5:03:55: 6d:8e:e6:13:ac:4e:5c:9e:44:c8:b7:60:21:5f:9d: 5a:19:bb:dc:56:38:8e:9a:ba:91:cd:f3:a9:ee:3d: e4:d2:ad:d2:45:d4:44:26:04:d0:13:bc:7c:dd:56: 52:56:e9:51:be:70:c7:f5:ca:c8:b8:c2:c2:bc:95: f8:ce:cc:e3:31:e3:c3:cd:cf:11:00:ef:0a:92:54: 64:20:f9:76:a8:32:66:40:1c:b8:bc:11:08:a0:62: aa:80:bd:b7:de:a1:a7:6a:22:b7:c3:cb:a3:b8:f2: 4e:af:b9:18:69:f5:d4:2e:32:1d:32:29:fd:f2:c2: b7:6c:82:fe:23:ef:74:9e:3f:9a:c9:b3:9d:a1:bd: f0:ba:0f:58:a8:e1:f1:d7:2f:34:31:06:57:0f:db: af:ed:75:81:87:51:fc:88:58:2b:53:72:dc:80:a0: d8:be:a1:ee:f4:e3:df:6d:b6:9d:02:37:ce:4d:85: 95:91:08:54:1d:93:23:de:46:b5:3e:af:d9:f8:85: c9:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:EF:3F:6F:C4:0B:B2:98:FD:A1:BF:4F:A4:AB:0B:D2:52:2A:B7:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5843d5c8-e879-33a5-8add-cdca883db770.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 71.102.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:fd:b1:f0:4f:ce:ba:7a:01:0d:98:5c:fe:72:dd:a2:41:b2: a9:87:82:02:fb:34:50:f6:9d:18:e7:e3:9b:13:ad:44:01:b4: 1b:60:19:85:2c:97:03:31:99:ba:a1:a1:1e:4b:a4:8f:3e:46: e0:82:af:b7:67:2e:54:74:1e:bc:34:85:79:82:68:9b:61:22: 58:70:46:0e:da:d1:d2:7d:1d:03:f6:75:71:68:09:41:8c:cc: d2:27:9e:f9:9e:9c:90:2e:55:99:a5:c1:61:5c:7d:9c:ab:90: 81:2c:c8:0c:48:02:c1:8d:88:7c:38:04:28:8f:01:d3:ca:c5: 12:b3:cc:f9:99:9e:56:d0:b8:a7:6b:97:86:79:6b:f2:3d:ef: 07:2a:74:ba:57:a7:50:bf:72:fa:1c:cc:de:6a:4c:2d:ca:03: 87:8b:3e:69:49:da:d1:b6:89:68:be:78:f9:ae:00:fa:d7:c4: 9b:e8:b0:95:d2:35:d8:c5:54:92:b3:f1:1b:6d:97:25:06:15: f1:39:60:d1:fc:22:67:1f:50:01:a5:47:5f:94:44:ce:42:19: 33:2d:30:d5:3f:ec:a2:93:d8:0d:ba:89:c7:0f:cb:15:49:cf: 56:e4:e8:25:ce:f3:d0:8c:bf:c0:29:92:e7:ef:89:54:ea:18: 81:b1:7f:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdMgMft9dUFRwF8IHgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI0MDkyMjEzMDA0MFoXDTI0MTIyMTE0MDA0MFowLzEtMCsGA1UEAxMk MjRhOTBlYzgtMTUyYi00YzBjLWI2YWItYzVkMmZhYmRiNGFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/Gr2Z9222NUGKZV5ZBnmsu6WjaWttPu0TpxC aX/kR5u0ZOrLHicimhAj01e+nq4TnENEmkTbHJ6lA1VtjuYTrE5cnkTIt2AhX51a GbvcVjiOmrqRzfOp7j3k0q3SRdREJgTQE7x83VZSVulRvnDH9crIuMLCvJX4zszj MePDzc8RAO8KklRkIPl2qDJmQBy4vBEIoGKqgL233qGnaiK3w8ujuPJOr7kYafXU LjIdMin98sK3bIL+I+90nj+aybOdob3wug9YqOHx1y80MQZXD9uv7XWBh1H8iFgr U3LcgKDYvqHu9OPfbbadAjfOTYWVkQhUHZMj3ka1Pq/Z+IXJ2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPfvP2/EC7KY/aG/T6SrC9JSKrdXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNTg0M2Q1YzgtZTg3OS0z M2E1LThhZGQtY2RjYTg4M2RiNzcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFR2ZgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGL9sfBPzrp6AQ2YXP5y3aJBsqmHggL7NFD2nRjn45sTrUQBtBtgGYUs lwMxmbqhoR5LpI8+RuCCr7dnLlR0Hrw0hXmCaJthIlhwRg7a0dJ9HQP2dXFoCUGM zNInnvmenJAuVZmlwWFcfZyrkIEsyAxIAsGNiHw4BCiPAdPKxRKzzPmZnlbQuKdr l4Z5a/I97wcqdLpXp1C/cvoczN5qTC3KA4eLPmlJ2tG2iWi+ePmuAPrXxJvosJXS NdjFVJKz8RttlyUGFfE5YNH8ImcfUAGlR1+URM5CGTMtMNU/7KKT2A26iccPyxVJ z1bk6CXO89CMv8ApkufviVTqGIGxf+o= -----END CERTIFICATE-----Generated at Sun Nov 24 15:33:21 2024 by rpki-client on console-fra.rpki-client.org