$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/77fea8a5-65d2-3763-8908-9c8452de4d41.roa File: 77fea8a5-65d2-3763-8908-9c8452de4d41.roa (raw, json) Hash identifier: dfG+Bn7wuOvUlDGzXKnrvujujTDReGQo6+Di6YF3xIk= Subject key identifier: 21:FA:AE:13:72:04:E0:DB:28:5E:C4:C6:C2:04:1B:C9:6F:83:A3:E1 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285847537B8C7B13E93C3C7B410E80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/77fea8a5-65d2-3763-8908-9c8452de4d41.roa Signing time: Wed 25 Sep 2024 01:00:31 +0000 ROA not before: Wed 25 Sep 2024 01:00:31 +0000 ROA not after: Tue 24 Dec 2024 02:00:31 +0000 asID: 701 IP address blocks: 70.20.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:53:7b:8c:7b:13:e9:3c:3c:7b:41:0e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Sep 25 01:00:31 2024 GMT Not After : Dec 24 02:00:31 2024 GMT Subject: CN=502c9e6a-9e01-42a2-a351-9d289537711a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:3a:c6:96:c6:9e:c6:ac:03:97:1d:ba:b4:4b: 63:cf:1e:1a:f8:61:68:2a:2d:5d:49:1f:4f:8e:77: ce:95:da:25:86:7b:ee:cf:9a:2b:91:51:e1:47:b9: 32:c0:fd:e8:e5:b4:8a:d2:0f:32:59:59:83:85:16: d3:35:c5:66:60:f3:e7:a1:64:99:b3:b8:97:53:a4: 1e:5b:b5:2b:30:42:e3:d9:a9:75:6e:22:b3:91:ca: dc:dd:15:10:45:d3:e1:ea:b6:ec:83:b6:5e:54:47: b1:69:bc:87:7a:86:f6:7b:87:ba:9d:a8:74:48:4d: 54:08:b2:9d:29:64:53:5b:05:f0:66:32:5b:ad:ad: 82:bc:ad:37:81:a5:43:38:30:84:14:ba:fc:87:b8: a2:06:18:91:2e:3d:c7:a0:0d:ac:75:6d:a9:61:15: b0:b2:d6:69:14:87:85:84:83:05:be:4c:88:21:6f: b3:b1:c0:cf:f1:f3:42:16:4d:a3:d1:df:83:df:1c: 68:4b:e0:8e:aa:34:1b:3e:2c:f2:72:a8:4a:e9:fa: fd:a7:64:21:2c:b1:15:a8:33:9b:75:19:3c:5b:a2: f0:0e:90:4d:42:43:0e:5f:09:c5:f9:61:38:77:81: 6a:ae:68:44:3e:31:b6:99:f7:a4:bd:82:21:19:2a: 06:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:FA:AE:13:72:04:E0:DB:28:5E:C4:C6:C2:04:1B:C9:6F:83:A3:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/77fea8a5-65d2-3763-8908-9c8452de4d41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 70.20.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:05:69:f5:dd:1c:a8:ca:df:b2:dd:42:e2:46:48:68:2b:c7: 89:8b:0c:c9:e2:a3:5b:74:58:2d:08:a9:9d:19:f2:67:ce:5d: 65:ab:13:cd:ef:ee:f6:39:ae:1b:f7:60:e2:13:0f:c3:92:6e: 6a:c4:6e:d9:6e:7d:9c:0a:d0:53:68:34:73:58:1c:02:4a:5b: 9b:72:9d:82:1e:d9:22:7f:8a:fc:aa:86:0a:f2:2d:fc:ae:be: e4:70:f5:73:32:06:3f:07:85:07:8a:4f:37:64:25:0d:e4:5d: 4a:36:67:2b:b6:d0:cd:99:c5:d0:78:95:3b:8e:6c:62:ac:13: 98:74:2b:40:5d:81:6b:a6:5d:9a:35:33:be:5f:94:d5:f3:65: 7e:91:86:d2:4e:b4:cc:ff:ed:3f:6c:32:9a:f0:24:ba:fa:16: 14:70:56:72:6c:04:6d:77:6d:89:74:a2:c3:30:bb:3e:08:3d: fb:6a:1f:d8:0b:ad:54:ce:74:04:a2:e0:09:20:01:08:59:d1: c4:6e:87:2a:4c:c5:93:5c:86:86:79:58:e5:40:f6:83:c2:22: 13:57:ff:cc:02:49:43:7f:5b:a3:1b:af:01:ef:35:37:de:c3: 30:f2:d5:91:06:95:86:1a:e9:27:a3:83:4a:08:92:93:26:9b: f5:7e:ec:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdTe4x7E+k8PHtBDoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI0MDkyNTAxMDAzMVoXDTI0MTIyNDAyMDAzMVowLzEtMCsGA1UEAxMk NTAyYzllNmEtOWUwMS00MmEyLWEzNTEtOWQyODk1Mzc3MTFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzrGlsaexqwDlx26tEtjzx4a+GFoKi1dSR9P jnfOldolhnvuz5orkVHhR7kywP3o5bSK0g8yWVmDhRbTNcVmYPPnoWSZs7iXU6Qe W7UrMELj2al1biKzkcrc3RUQRdPh6rbsg7ZeVEexabyHeob2e4e6nah0SE1UCLKd KWRTWwXwZjJbra2CvK03gaVDODCEFLr8h7iiBhiRLj3HoA2sdW2pYRWwstZpFIeF hIMFvkyIIW+zscDP8fNCFk2j0d+D3xxoS+COqjQbPizycqhK6fr9p2QhLLEVqDOb dRk8W6LwDpBNQkMOXwnF+WE4d4FqrmhEPjG2mfekvYIhGSoGrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCH6rhNyBODbKF7ExsIEG8lvg6PhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNzdmZWE4YTUtNjVkMi0z NzYzLTg5MDgtOWM4NDUyZGU0ZDQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERhQQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIsFafXdHKjK37LdQuJGSGgrx4mLDMnio1t0WC0IqZ0Z8mfOXWWrE83v 7vY5rhv3YOITD8OSbmrEbtlufZwK0FNoNHNYHAJKW5tynYIe2SJ/ivyqhgryLfyu vuRw9XMyBj8HhQeKTzdkJQ3kXUo2Zyu20M2ZxdB4lTuObGKsE5h0K0BdgWumXZo1 M75flNXzZX6RhtJOtMz/7T9sMprwJLr6FhRwVnJsBG13bYl0osMwuz4IPftqH9gL rVTOdASi4AkgAQhZ0cRuhypMxZNchoZ5WOVA9oPCIhNX/8wCSUN/W6MbrwHvNTfe wzDy1ZEGlYYa6Sejg0oIkpMmm/V+7Pk= -----END CERTIFICATE-----Generated at Thu Nov 21 23:41:35 2024 by rpki-client on console-ams.rpki-client.org