$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a6f4cb91-b1f3-37be-bb8e-0628d67efcf4.roa File: a6f4cb91-b1f3-37be-bb8e-0628d67efcf4.roa (raw, json) Hash identifier: 0w3FAcAZ6GK4nOSRCAQ3V7hUaAYEmxRpS0C5kbXZfJE= Subject key identifier: 64:DA:9D:F7:91:3F:2D:F5:77:2A:93:70:5A:CD:BC:CF:78:2F:CC:AE Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285847012055F073C206B5DFDA7C00 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a6f4cb91-b1f3-37be-bb8e-0628d67efcf4.roa Signing time: Mon 26 Aug 2024 13:00:41 +0000 ROA not before: Mon 26 Aug 2024 13:00:41 +0000 ROA not after: Sun 24 Nov 2024 14:00:41 +0000 asID: 6167 IP address blocks: 174.220.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Oct 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:01:20:55:f0:73:c2:06:b5:df:da:7c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 26 13:00:41 2024 GMT Not After : Nov 24 14:00:41 2024 GMT Subject: CN=204b3da8-cd41-4edb-b3bb-28a9de6986f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:93:63:5f:82:d6:48:2a:31:e5:26:26:78:82: cb:e5:7a:f7:5d:78:c5:72:2b:4c:40:73:cf:ad:ee: 84:36:1e:71:38:b1:5d:3b:f4:be:f7:ab:02:20:f3: e4:fd:94:98:3c:63:4c:06:31:11:f7:7e:2c:78:29: 51:ab:40:68:a4:53:19:04:65:1b:b6:23:38:ef:e1: 70:17:fd:a1:57:5e:84:65:f7:99:63:27:7a:bb:8d: 9d:c4:4d:fa:2f:56:92:3d:e3:b9:6d:5f:62:19:d7: 1b:7a:da:2b:d4:8a:bc:c2:ed:75:7c:d5:66:90:e8: 66:08:60:8e:29:19:89:38:ea:a1:d0:fc:87:37:d1: fa:4d:a8:cc:15:88:d9:33:46:e0:1e:2b:e9:cf:88: c5:2f:e8:f2:27:30:c5:09:34:fe:23:84:44:47:5b: 9b:51:4e:eb:5e:53:b8:48:15:e4:b8:6e:b0:26:46: f3:a8:e0:b8:7c:97:02:ac:00:4c:73:e1:ba:76:71: 72:73:60:a3:94:ba:40:79:78:ad:30:c0:9c:f4:a9: 70:d2:1b:90:fa:c1:64:01:94:8a:58:75:68:47:fe: 67:c5:e7:ca:ee:8f:80:f8:0c:f0:14:55:3d:f0:a4: a0:64:36:7f:51:5b:bd:b5:b7:8d:68:fa:df:52:10: 45:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:DA:9D:F7:91:3F:2D:F5:77:2A:93:70:5A:CD:BC:CF:78:2F:CC:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a6f4cb91-b1f3-37be-bb8e-0628d67efcf4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.220.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:6e:48:60:70:61:e3:91:56:4c:6e:45:60:92:e0:97:e5:e3: 28:1a:85:1b:dc:60:16:a1:ae:a7:12:ba:f9:50:1f:d7:34:cc: c8:16:6d:c1:ef:db:33:da:a3:3d:07:4a:7a:fa:4f:98:a0:81: 3d:f2:45:01:83:74:51:27:86:c5:93:4a:e8:d7:97:a0:fc:f3: 2b:40:05:02:44:0d:2d:3e:48:78:76:a2:3f:c3:a7:d9:03:3f: 88:7d:c2:51:3e:61:fb:15:b5:35:3e:67:fa:ba:72:ac:af:17: 83:61:83:6f:b6:18:19:55:ad:7a:4a:41:33:c5:fa:ce:a8:a5: 34:12:37:86:1a:30:8f:62:95:fa:6e:9d:ef:29:b3:6f:b7:1e: c9:f9:65:2e:63:a2:f0:a5:dd:71:7e:0b:cf:38:0e:82:19:60: 9f:37:4d:3f:73:d6:2f:f6:f4:b7:43:ea:c9:c3:72:fb:cb:95: 30:ad:89:3e:89:4c:3c:2e:3e:50:18:44:f2:63:7b:67:14:f3: 24:34:f5:11:39:d3:01:eb:65:f2:3a:f0:36:39:51:1d:28:87: d4:17:60:ab:75:55:89:36:8f:44:45:d5:a3:81:5e:3f:01:14: be:1d:3c:43:65:24:9a:47:cb:a3:ba:a2:d5:9f:7b:80:1e:9d: b1:0e:8d:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcBIFXwc8IGtd/afAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI0MDgyNjEzMDA0MVoXDTI0MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk MjA0YjNkYTgtY2Q0MS00ZWRiLWIzYmItMjhhOWRlNjk4NmYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZNjX4LWSCox5SYmeILL5Xr3XXjFcitMQHPP re6ENh5xOLFdO/S+96sCIPPk/ZSYPGNMBjER934seClRq0BopFMZBGUbtiM47+Fw F/2hV16EZfeZYyd6u42dxE36L1aSPeO5bV9iGdcbetor1Iq8wu11fNVmkOhmCGCO KRmJOOqh0PyHN9H6TajMFYjZM0bgHivpz4jFL+jyJzDFCTT+I4RER1ubUU7rXlO4 SBXkuG6wJkbzqOC4fJcCrABMc+G6dnFyc2CjlLpAeXitMMCc9Klw0huQ+sFkAZSK WHVoR/5nxefK7o+A+AzwFFU98KSgZDZ/UVu9tbeNaPrfUhBFZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGTanfeRPy31dyqTcFrNvM94L8yuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYTZmNGNiOTEtYjFmMy0z N2JlLWJiOGUtMDYyOGQ2N2VmY2Y0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErtwQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGduSGBwYeORVkxuRWCS4Jfl4ygahRvcYBahrqcSuvlQH9c0zMgWbcHv 2zPaoz0HSnr6T5iggT3yRQGDdFEnhsWTSujXl6D88ytABQJEDS0+SHh2oj/Dp9kD P4h9wlE+YfsVtTU+Z/q6cqyvF4Nhg2+2GBlVrXpKQTPF+s6opTQSN4YaMI9ilfpu ne8ps2+3Hsn5ZS5jovCl3XF+C884DoIZYJ83TT9z1i/29LdD6snDcvvLlTCtiT6J TDwuPlAYRPJje2cU8yQ09RE50wHrZfI68DY5UR0oh9QXYKt1VYk2j0RF1aOBXj8B FL4dPENlJJpHy6O6otWfe4AenbEOjXc= -----END CERTIFICATE-----Generated at Tue Oct 22 20:18:10 2024 by rpki-client on console-fra.rpki-client.org