$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8a68452c-9164-34f9-851d-74b68c2c3f99.roa File: 8a68452c-9164-34f9-851d-74b68c2c3f99.roa (raw, json) Hash identifier: tkmqwA5zhjKW8S/wYUG/JHwa+sSo28HMhCg4/C2+Th8= Subject key identifier: FA:28:7B:CF:A2:03:36:3E:C9:52:EF:D6:35:9D:30:F2:5E:84:72:25 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584730960B0E341DF24E9F626B80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8a68452c-9164-34f9-851d-74b68c2c3f99.roa Signing time: Thu 12 Sep 2024 13:00:41 +0000 ROA not before: Thu 12 Sep 2024 13:00:41 +0000 ROA not after: Wed 11 Dec 2024 14:00:41 +0000 asID: 6167 IP address blocks: 174.42.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:30:96:0b:0e:34:1d:f2:4e:9f:62:6b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Sep 12 13:00:41 2024 GMT Not After : Dec 11 14:00:41 2024 GMT Subject: CN=b2f90922-89ac-49a4-8c50-fff9ce13471a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:0c:84:05:13:4b:36:ea:19:45:e0:49:cd:c5: c2:d4:0e:9d:e7:0d:24:c0:90:2f:8b:5b:b3:9e:ee: 15:6e:dd:57:90:06:f5:97:37:34:6b:95:aa:8b:63: 6c:6f:c7:d2:0e:63:96:0d:6c:c4:fe:59:20:de:8b: e4:22:d0:92:46:d1:9e:e7:77:e8:c0:66:cc:ba:b6: 8b:79:5a:ee:68:37:07:02:33:8b:61:a3:0a:0a:60: 8c:69:0f:f4:cc:b4:6c:23:d8:5b:28:20:6f:b7:6d: 6f:d1:7f:4c:56:97:2e:84:a8:f3:fa:c2:23:9d:a5: 3f:bb:7c:90:5f:6b:b8:97:40:01:0f:d1:0c:d2:18: d2:35:9d:e7:94:06:4b:93:81:c3:32:1f:9d:4f:b2: d6:90:9e:bf:84:26:f3:48:f0:be:03:96:d9:7d:5f: 74:35:40:7f:05:6a:89:59:29:8b:6d:0a:7f:63:ed: 3e:ac:5a:fb:84:b7:8a:f2:5c:72:85:f2:3f:a0:a8: 7d:bb:9d:60:63:57:2d:57:91:58:52:32:01:c7:0a: 12:ad:d6:63:ca:33:ca:10:cf:bd:53:d5:76:a0:56: 9e:ce:41:da:24:66:06:d6:88:57:1e:65:25:c1:d3: eb:de:72:82:63:b3:a5:f5:1c:9d:ef:25:93:7d:59: e4:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:28:7B:CF:A2:03:36:3E:C9:52:EF:D6:35:9D:30:F2:5E:84:72:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8a68452c-9164-34f9-851d-74b68c2c3f99.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.42.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:c7:48:1d:3a:de:14:70:76:1e:4f:fc:7c:26:17:0e:8d:3e: 31:b7:a2:d4:36:93:52:7f:c8:ee:eb:27:1a:39:6c:82:5d:ed: b9:5b:88:99:a6:97:87:d2:e6:b0:20:7f:c6:e9:ee:a4:11:43: d0:86:25:38:fe:29:d1:cd:88:34:7f:c4:98:37:40:0d:a9:77: 97:fa:3f:1d:df:a7:38:c5:e8:0a:7e:19:07:f5:b9:98:b0:84: 0d:a7:1d:eb:4f:0f:b4:a7:d6:a3:23:50:7b:a6:5a:9c:39:c8: 53:57:28:68:15:04:d5:34:5c:dc:ff:86:b5:ac:9d:e7:0b:3e: 55:7f:34:31:d0:fd:7c:4e:d1:af:13:3c:b3:3e:00:08:5d:8e: a3:0c:e5:90:23:85:2c:a0:50:da:1e:3d:aa:3d:39:f3:d6:a0: 26:f5:05:0e:50:56:21:42:8b:2a:60:10:3d:3d:1b:6f:7f:3f: 83:db:d0:b8:f5:de:a4:d9:0d:74:0b:51:bb:17:34:4f:ea:b4: d9:46:5d:bb:e0:51:71:19:be:6f:fc:e6:98:4e:5a:9c:0d:41: 2b:ed:30:dd:7f:83:bd:df:65:a0:bc:e8:b5:39:a0:b1:3d:1a: 07:73:52:85:fb:7e:25:0a:a2:0d:39:d0:c6:ae:80:59:c6:7b: 6a:20:8c:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcwlgsONB3yTp9ia4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI0MDkxMjEzMDA0MVoXDTI0MTIxMTE0MDA0MVowLzEtMCsGA1UEAxMk YjJmOTA5MjItODlhYy00OWE0LThjNTAtZmZmOWNlMTM0NzFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwyEBRNLNuoZReBJzcXC1A6d5w0kwJAvi1uz nu4Vbt1XkAb1lzc0a5Wqi2Nsb8fSDmOWDWzE/lkg3ovkItCSRtGe53fowGbMuraL eVruaDcHAjOLYaMKCmCMaQ/0zLRsI9hbKCBvt21v0X9MVpcuhKjz+sIjnaU/u3yQ X2u4l0ABD9EM0hjSNZ3nlAZLk4HDMh+dT7LWkJ6/hCbzSPC+A5bZfV90NUB/BWqJ WSmLbQp/Y+0+rFr7hLeK8lxyhfI/oKh9u51gY1ctV5FYUjIBxwoSrdZjyjPKEM+9 U9V2oFaezkHaJGYG1ohXHmUlwdPr3nKCY7Ol9Ryd7yWTfVnkmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPooe8+iAzY+yVLv1jWdMPJehHIlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOGE2ODQ1MmMtOTE2NC0z NGY5LTg1MWQtNzRiNjhjMmMzZjk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCriqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIXHSB063hRwdh5P/HwmFw6NPjG3otQ2k1J/yO7rJxo5bIJd7blbiJmm l4fS5rAgf8bp7qQRQ9CGJTj+KdHNiDR/xJg3QA2pd5f6Px3fpzjF6Ap+GQf1uZiw hA2nHetPD7Sn1qMjUHumWpw5yFNXKGgVBNU0XNz/hrWsnecLPlV/NDHQ/XxO0a8T PLM+AAhdjqMM5ZAjhSygUNoePao9OfPWoCb1BQ5QViFCiypgED09G29/P4Pb0Lj1 3qTZDXQLUbsXNE/qtNlGXbvgUXEZvm/85phOWpwNQSvtMN1/g73fZaC86LU5oLE9 GgdzUoX7fiUKog050MaugFnGe2ogjCI= -----END CERTIFICATE-----Generated at Thu Nov 21 22:39:41 2024 by rpki-client on console-fra.rpki-client.org