$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/853a1e1d-2dc6-389e-a935-ecbae7789ae7.roa File: 853a1e1d-2dc6-389e-a935-ecbae7789ae7.roa (raw, json) Hash identifier: 2z90Ail9X7h/rvEVCf2dHujJQKjQsktoGlF5HXNmwJE= Subject key identifier: 4A:87:8A:D5:28:7A:FA:1B:89:75:A5:40:A7:36:25:F8:06:10:30:3E Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858474C80CBB48FDC0183DAD08300 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/853a1e1d-2dc6-389e-a935-ecbae7789ae7.roa Signing time: Sun 22 Sep 2024 13:00:40 +0000 ROA not before: Sun 22 Sep 2024 13:00:40 +0000 ROA not after: Sat 21 Dec 2024 14:00:40 +0000 asID: 701 IP address blocks: 72.89.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:4c:80:cb:b4:8f:dc:01:83:da:d0:83:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Sep 22 13:00:40 2024 GMT Not After : Dec 21 14:00:40 2024 GMT Subject: CN=609b829c-012e-490b-909a-7eb48412fb6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:0f:5a:4a:09:5c:d0:84:7d:65:20:46:08:e2: 93:58:5c:f6:f0:17:30:68:86:55:d7:35:f6:c7:b2: 87:79:ff:6c:d3:91:82:dc:5e:21:12:28:a2:08:47: f4:34:8a:c6:c5:a2:97:05:20:9e:32:83:6f:e5:4b: f9:21:05:33:1c:a9:95:ba:3e:78:b3:d6:d2:ab:ea: 50:ed:b9:ef:db:14:28:d0:35:c8:1f:47:d3:66:f8: 0d:8a:c7:5c:b6:12:53:a1:f1:26:1e:e8:b6:fd:18: ac:b2:27:bf:59:62:4c:99:51:ac:61:2a:92:02:49: 3c:9c:05:ea:27:7d:66:e8:ab:b5:22:51:2c:0e:0d: 48:e9:4b:e7:47:84:4c:28:52:fc:86:c5:48:3f:4c: 5c:bd:a1:ad:44:ea:82:6e:b8:dd:7b:2d:9e:33:b3: 33:65:18:19:2c:ea:c1:c6:bb:3d:7d:b5:cf:52:ea: 5b:45:26:db:6f:a6:40:a1:5d:77:88:f4:86:3f:e9: 02:2a:1d:7d:ff:8b:1c:74:eb:3f:61:bb:2c:bd:c8: 5a:bf:f5:ed:86:18:01:94:0c:5c:ad:d7:73:83:2f: fd:3d:90:5a:05:8c:76:10:c0:df:5e:1c:aa:db:1f: 97:44:5f:ed:f0:4f:ff:4b:4e:a5:fd:52:67:52:5d: 7d:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:87:8A:D5:28:7A:FA:1B:89:75:A5:40:A7:36:25:F8:06:10:30:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/853a1e1d-2dc6-389e-a935-ecbae7789ae7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.89.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:0b:d6:52:57:fa:3e:6a:e9:79:1f:85:6c:af:69:e3:fd:d4: ee:4d:84:35:80:e7:a7:91:8a:d2:18:cd:73:4a:19:6f:3f:f6: c8:ec:3f:98:a7:53:d1:ab:80:ce:29:b5:d1:28:e1:9c:09:30: 7e:5d:a0:ea:ab:cb:8a:83:d6:9d:d2:88:5a:bd:47:b4:ee:ae: dd:4b:56:2d:e1:c9:ae:74:be:74:a7:19:3d:8e:62:c1:38:35: 65:ff:d7:75:e5:38:de:f1:37:61:d3:ce:69:25:38:4d:f3:7b: 3b:e9:f9:6b:c0:f7:fd:8a:fd:49:c3:92:ac:fe:f0:ef:66:df: 07:d6:7e:34:0f:ff:37:e8:82:45:68:4b:65:b0:91:2f:70:9d: 29:fd:03:fe:a9:27:08:07:a1:89:97:85:86:a9:da:e6:93:08: 97:23:62:28:04:e3:47:36:ce:e6:20:c8:29:38:a8:2f:c4:5e: cc:bd:c2:61:3c:f0:3f:da:55:0e:31:26:c7:08:df:ee:39:ee: 1a:f4:d3:9d:9d:d0:f8:5e:d7:78:8a:40:89:11:86:2f:c5:a1: d3:fb:5b:4c:56:bd:8b:2e:fc:44:eb:9e:fe:a3:02:a2:eb:70: 56:af:75:71:bc:83:4a:30:4f:a3:ea:8e:93:7d:63:97:69:e8: 72:7a:14:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdMgMu0j9wBg9rQgwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI0MDkyMjEzMDA0MFoXDTI0MTIyMTE0MDA0MFowLzEtMCsGA1UEAxMk NjA5YjgyOWMtMDEyZS00OTBiLTkwOWEtN2ViNDg0MTJmYjZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApg9aSglc0IR9ZSBGCOKTWFz28BcwaIZV1zX2 x7KHef9s05GC3F4hEiiiCEf0NIrGxaKXBSCeMoNv5Uv5IQUzHKmVuj54s9bSq+pQ 7bnv2xQo0DXIH0fTZvgNisdcthJTofEmHui2/Rissie/WWJMmVGsYSqSAkk8nAXq J31m6Ku1IlEsDg1I6UvnR4RMKFL8hsVIP0xcvaGtROqCbrjdey2eM7MzZRgZLOrB xrs9fbXPUupbRSbbb6ZAoV13iPSGP+kCKh19/4scdOs/Ybssvchav/XthhgBlAxc rddzgy/9PZBaBYx2EMDfXhyq2x+XRF/t8E//S06l/VJnUl19cQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEqHitUoevobiXWlQKc2JfgGEDA+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvODUzYTFlMWQtMmRjNi0z ODllLWE5MzUtZWNiYWU3Nzg5YWU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHSFmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC8L1lJX+j5q6XkfhWyvaeP91O5NhDWA56eRitIYzXNKGW8/9sjsP5in U9GrgM4ptdEo4ZwJMH5doOqry4qD1p3SiFq9R7Turt1LVi3hya50vnSnGT2OYsE4 NWX/13XlON7xN2HTzmklOE3zezvp+WvA9/2K/UnDkqz+8O9m3wfWfjQP/zfogkVo S2WwkS9wnSn9A/6pJwgHoYmXhYap2uaTCJcjYigE40c2zuYgyCk4qC/EXsy9wmE8 8D/aVQ4xJscI3+457hr0052d0Phe13iKQIkRhi/FodP7W0xWvYsu/ETrnv6jAqLr cFavdXG8g0owT6PqjpN9Y5dp6HJ6FJw= -----END CERTIFICATE-----Generated at Thu Nov 21 23:41:37 2024 by rpki-client on console-ams.rpki-client.org