$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5db54f0f-0d83-308c-8072-e00a60e20012.roa File: 5db54f0f-0d83-308c-8072-e00a60e20012.roa (raw, json) Hash identifier: gOJrmhaCYkH/BuOEdUJjddoC4y3PXGR48v9CTspqmjs= Subject key identifier: 8E:A6:E3:78:CF:F1:00:FC:DF:69:3D:CF:DF:93:7C:FD:6A:64:D4:99 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858479D76C79429F12B04A6982400 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5db54f0f-0d83-308c-8072-e00a60e20012.roa Signing time: Mon 21 Oct 2024 13:00:41 +0000 ROA not before: Mon 21 Oct 2024 13:00:41 +0000 ROA not after: Sun 19 Jan 2025 14:00:41 +0000 asID: 701 IP address blocks: 108.22.8.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:9d:76:c7:94:29:f1:2b:04:a6:98:24:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 21 13:00:41 2024 GMT Not After : Jan 19 14:00:41 2025 GMT Subject: CN=89b6d842-7143-405a-8624-4fe20dd6908f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:0b:e2:51:d7:48:fe:09:25:42:5f:c8:60:16: c4:92:d8:13:b5:9f:4f:67:f2:1f:67:f3:2e:c6:83: cd:09:be:ce:2b:dc:be:6e:f4:13:9d:1e:82:f5:0d: 9b:ad:d3:69:1a:31:ae:6f:e6:4b:c9:89:a9:9e:01: e7:da:b9:33:42:d5:35:97:bb:47:ce:94:91:6f:eb: f7:b1:f0:5c:46:98:30:b8:75:7b:80:56:91:33:b2: 2d:d2:cc:e8:6a:85:ef:78:0d:ba:c7:e5:b3:a5:fc: c8:0c:b2:61:4a:57:35:21:90:15:17:53:70:30:7f: 98:81:f5:fe:5e:96:52:a8:17:77:b4:d0:b2:2d:95: 05:b5:22:c9:3e:9e:1c:11:59:da:4d:c5:68:05:89: 31:05:1e:7b:f2:d0:44:4e:b9:d4:cf:29:48:97:fc: 2d:10:5d:1e:5b:b4:25:36:52:61:6d:63:1b:2a:23: 4c:49:53:24:f5:48:09:9e:20:45:a5:28:16:5b:23: 86:6b:e0:06:f0:27:6f:21:eb:39:84:fc:a0:da:cd: ec:d8:ae:83:00:75:e4:c2:03:59:2a:24:c5:38:32: f7:b9:c0:b1:f9:47:e9:d0:8d:3c:c3:63:99:a6:ca: 24:b1:06:e7:8d:91:87:9b:94:b2:ad:c5:f7:77:64: 8e:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:A6:E3:78:CF:F1:00:FC:DF:69:3D:CF:DF:93:7C:FD:6A:64:D4:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5db54f0f-0d83-308c-8072-e00a60e20012.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 108.22.8.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:b5:20:c5:e0:8a:dc:c7:a5:8d:e3:1a:59:d1:56:8c:ed:82: d5:5a:b4:04:97:d5:6b:12:d8:ae:c7:9d:05:f8:13:c8:62:07: 67:ca:a6:86:83:3c:73:73:57:e3:fb:31:26:a7:f4:b6:8b:50: 64:b5:4d:2a:8c:3e:5d:a8:5e:14:30:ee:0a:88:a2:d2:96:88: 36:fc:e8:06:4e:b7:b9:d3:7a:a3:4c:83:eb:41:0e:41:bc:45: 02:14:7b:2a:25:02:2f:0b:8b:67:bc:84:a9:87:48:24:af:5a: 3e:e6:e3:46:72:73:83:a5:aa:b3:4f:ad:65:52:4d:7d:69:bd: 0b:98:7f:9f:43:25:b8:e9:1a:37:f7:59:60:e9:1f:e4:62:91: 7f:b0:86:b2:ff:e3:bf:7c:b0:33:e2:35:0b:12:8b:e8:fa:3b: 70:97:59:bd:cf:14:b7:77:c8:6c:38:65:f0:5a:2b:11:ac:0f: 7e:ae:68:a5:cc:ef:6e:86:42:13:fa:da:0f:e5:fc:bd:a6:93: cf:81:07:56:0c:4f:e8:67:16:08:58:0e:9b:5b:2f:e1:27:35: fd:64:ca:e8:73:be:26:20:7c:c2:e1:13:d7:68:3d:5c:20:44: a4:f8:f6:44:ea:bb:ea:b5:b2:b6:be:d1:62:60:e7:f5:d8:f0: e3:cd:49:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeddseUKfErBKaYJAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI0MTAyMTEzMDA0MVoXDTI1MDExOTE0MDA0MVowLzEtMCsGA1UEAxMk ODliNmQ4NDItNzE0My00MDVhLTg2MjQtNGZlMjBkZDY5MDhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgviUddI/gklQl/IYBbEktgTtZ9PZ/IfZ/Mu xoPNCb7OK9y+bvQTnR6C9Q2brdNpGjGub+ZLyYmpngHn2rkzQtU1l7tHzpSRb+v3 sfBcRpgwuHV7gFaRM7It0szoaoXveA26x+WzpfzIDLJhSlc1IZAVF1NwMH+YgfX+ XpZSqBd3tNCyLZUFtSLJPp4cEVnaTcVoBYkxBR578tBETrnUzylIl/wtEF0eW7Ql NlJhbWMbKiNMSVMk9UgJniBFpSgWWyOGa+AG8CdvIes5hPyg2s3s2K6DAHXkwgNZ KiTFODL3ucCx+Ufp0I08w2OZpsoksQbnjZGHm5SyrcX3d2SOdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI6m43jP8QD832k9z9+TfP1qZNSZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNWRiNTRmMGYtMGQ4My0z MDhjLTgwNzItZTAwYTYwZTIwMDEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBbBYIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAO1IMXgitzHpY3jGlnRVoztgtVatASX1WsS2K7HnQX4E8hiB2fKpoaD PHNzV+P7MSan9LaLUGS1TSqMPl2oXhQw7gqIotKWiDb86AZOt7nTeqNMg+tBDkG8 RQIUeyolAi8Li2e8hKmHSCSvWj7m40Zyc4OlqrNPrWVSTX1pvQuYf59DJbjpGjf3 WWDpH+RikX+whrL/4798sDPiNQsSi+j6O3CXWb3PFLd3yGw4ZfBaKxGsD36uaKXM 726GQhP62g/l/L2mk8+BB1YMT+hnFghYDptbL+EnNf1kyuhzviYgfMLhE9doPVwg RKT49kTqu+q1sra+0WJg5/XY8OPNSaQ= -----END CERTIFICATE-----Generated at Thu Nov 21 23:41:28 2024 by rpki-client on console-ams.rpki-client.org