$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8b95ee2f-7ef0-380e-848e-47d344eab792.roa File: 8b95ee2f-7ef0-380e-848e-47d344eab792.roa (raw, json) Hash identifier: fdvxunYXIsabiWqjqRNQLELk43LyQ/Cud85BufgsNNk= Subject key identifier: 3E:43:7E:0F:CF:98:32:0A:64:5C:F9:48:88:74:51:63:22:24:62:22 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285847E1FA04BF41E532099C258EC0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8b95ee2f-7ef0-380e-848e-47d344eab792.roa Signing time: Fri 15 Nov 2024 02:00:28 +0000 ROA not before: Fri 15 Nov 2024 02:00:28 +0000 ROA not after: Thu 13 Feb 2025 02:00:28 +0000 asID: 6167 IP address blocks: 174.214.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e1:fa:04:bf:41:e5:32:09:9c:25:8e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Nov 15 02:00:28 2024 GMT Not After : Feb 13 02:00:28 2025 GMT Subject: CN=c2d5b76c-a725-4e93-b568-30e2e57f81ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:6d:73:01:06:24:65:97:85:bb:3b:ac:53:1d: d2:c0:e8:ca:07:bd:90:18:ce:7f:5c:d0:7f:b5:0a: e3:14:fb:c5:3b:ee:2b:fe:3a:8e:23:49:54:43:52: 87:25:92:53:2b:9a:46:48:c2:05:78:74:d2:aa:ac: 1f:ca:51:45:bb:0a:77:ad:32:4f:08:67:ce:e1:2b: b4:70:aa:46:44:3f:bb:ca:85:8e:11:4a:d1:8c:e9: 29:c6:75:b7:65:0c:e3:94:b4:b5:4e:5c:71:d2:74: e1:fc:a3:27:bb:e5:1a:19:c6:5d:5a:b3:2b:a1:8b: da:8e:da:79:a7:5f:3c:72:8a:b4:0d:86:dd:06:7c: bc:80:23:e4:b2:32:84:e7:99:be:5a:72:4b:97:2f: b9:60:2c:4a:d9:bc:6d:f6:c9:8c:18:31:f2:49:6f: 40:e9:3e:df:a6:5a:9b:54:d1:41:2a:5b:d2:17:23: ad:e5:c7:28:b0:b4:b9:83:d1:6a:9e:89:7d:d0:5f: 02:65:a0:52:be:0d:71:6d:cb:d8:47:db:29:2e:fc: 69:66:46:5f:ef:62:a1:13:1d:17:8f:53:84:ea:e0: 44:c9:6c:98:b9:18:b2:b3:a1:13:49:b5:c5:05:f3: 2f:12:69:41:2c:ff:c2:1e:0b:52:a6:fd:40:db:a1: fe:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:43:7E:0F:CF:98:32:0A:64:5C:F9:48:88:74:51:63:22:24:62:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8b95ee2f-7ef0-380e-848e-47d344eab792.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.214.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:40:f0:a1:17:0c:7d:de:43:17:b2:bf:c1:8b:c1:30:32:46: 39:5b:fa:29:fe:13:99:b5:7f:1b:7a:5f:c0:2b:9d:0e:69:f7: b7:ed:4f:10:9e:de:72:3d:b6:5f:07:55:08:21:2c:b0:cc:bc: 4d:f3:c1:6b:54:79:20:f8:08:9f:6f:9f:28:85:c0:16:e9:8f: d2:ee:65:6b:31:c1:9d:e0:eb:ea:58:ca:bc:25:af:2b:d7:85: cf:7f:9d:17:8e:ef:24:2c:43:31:3f:02:57:c3:7f:94:8c:af: 2a:58:08:05:3d:de:2b:be:6d:52:af:d7:10:39:e5:88:99:4e: ee:ca:a1:0c:33:6e:c6:7c:e8:1c:f6:b5:02:94:08:40:4a:b2: ff:48:21:eb:ca:51:30:e2:b5:b2:c7:ed:c3:d2:c4:36:2c:30: f8:17:14:8d:18:d7:1f:4a:b7:bb:ec:d9:53:79:7f:d7:c0:b7: 4f:51:c5:96:60:bc:a6:65:0f:a4:d8:ec:eb:c1:40:5f:f8:4f: 34:a7:c8:57:3a:c2:a1:70:72:ba:c0:95:56:3a:43:0d:1b:16: 4d:0f:fc:de:78:83:20:f0:a7:03:1b:34:65:f8:a6:42:78:50: b1:07:3e:40:c0:af:44:c8:1a:80:0f:4e:17:da:46:58:4d:08: 9f:d0:b8:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfh+gS/QeUyCZwljsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI0MTExNTAyMDAyOFoXDTI1MDIxMzAyMDAyOFowLzEtMCsGA1UEAxMk YzJkNWI3NmMtYTcyNS00ZTkzLWI1NjgtMzBlMmU1N2Y4MWVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo21zAQYkZZeFuzusUx3SwOjKB72QGM5/XNB/ tQrjFPvFO+4r/jqOI0lUQ1KHJZJTK5pGSMIFeHTSqqwfylFFuwp3rTJPCGfO4Su0 cKpGRD+7yoWOEUrRjOkpxnW3ZQzjlLS1Tlxx0nTh/KMnu+UaGcZdWrMroYvajtp5 p188coq0DYbdBny8gCPksjKE55m+WnJLly+5YCxK2bxt9smMGDHySW9A6T7fplqb VNFBKlvSFyOt5ccosLS5g9Fqnol90F8CZaBSvg1xbcvYR9spLvxpZkZf72KhEx0X j1OE6uBEyWyYuRiys6ETSbXFBfMvEmlBLP/CHgtSpv1A26H+EwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD5Dfg/PmDIKZFz5SIh0UWMiJGIiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOGI5NWVlMmYtN2VmMC0z ODBlLTg0OGUtNDdkMzQ0ZWFiNzkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErtYgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFpA8KEXDH3eQxeyv8GLwTAyRjlb+in+E5m1fxt6X8ArnQ5p97ftTxCe 3nI9tl8HVQghLLDMvE3zwWtUeSD4CJ9vnyiFwBbpj9LuZWsxwZ3g6+pYyrwlryvX hc9/nReO7yQsQzE/AlfDf5SMrypYCAU93iu+bVKv1xA55YiZTu7KoQwzbsZ86Bz2 tQKUCEBKsv9IIevKUTDitbLH7cPSxDYsMPgXFI0Y1x9Kt7vs2VN5f9fAt09RxZZg vKZlD6TY7OvBQF/4TzSnyFc6wqFwcrrAlVY6Qw0bFk0P/N54gyDwpwMbNGX4pkJ4 ULEHPkDAr0TIGoAPThfaRlhNCJ/QuIc= -----END CERTIFICATE-----Generated at Thu Nov 21 22:39:41 2024 by rpki-client on console-fra.rpki-client.org