$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b18f878c-fe6b-3fa0-b914-a283ef1c8d2c.roa File: b18f878c-fe6b-3fa0-b914-a283ef1c8d2c.roa (raw, json) Hash identifier: k6jkhYhuLevbo2yEbsNWlNQRWs6F0lvdXfPH0R8JZ3k= Subject key identifier: CF:C9:4B:A7:87:6A:8B:74:C0:55:D3:35:E3:DD:AB:C8:7E:0A:36:01 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858479D768BB7830F19B4BD302280 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b18f878c-fe6b-3fa0-b914-a283ef1c8d2c.roa Signing time: Mon 21 Oct 2024 13:00:41 +0000 ROA not before: Mon 21 Oct 2024 13:00:41 +0000 ROA not after: Sun 19 Jan 2025 14:00:41 +0000 asID: 0 IP address blocks: 209.97.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Oct 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:9d:76:8b:b7:83:0f:19:b4:bd:30:22:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 21 13:00:41 2024 GMT Not After : Jan 19 14:00:41 2025 GMT Subject: CN=31e4a666-cc73-482b-b20b-f6a2631bd8b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:cc:ae:7d:4a:29:d9:95:b6:f5:58:b9:81:7d: 20:6b:59:01:32:3e:89:1b:a8:f4:8c:4d:7d:bc:47: ce:e3:ff:ec:c7:05:b1:7e:c1:10:49:66:fb:7a:d7: 80:b9:96:53:7d:04:fb:b9:90:5d:6f:06:5d:30:26: e0:af:21:0b:4f:aa:0d:ea:dc:27:74:9a:59:6b:d2: 27:6b:2f:e3:1e:08:42:25:7b:e2:0f:5a:42:58:f9: e9:f0:84:7a:6b:1c:6d:e6:87:3e:91:b2:d5:de:52: 3a:a6:ca:24:1f:f4:19:02:30:b3:f8:54:e9:35:95: 9b:19:74:22:3e:3e:a4:77:7b:3d:dc:e7:11:ca:b9: 38:73:61:ea:39:0e:5e:5a:c1:de:85:60:a2:61:55: 02:21:24:75:18:92:ac:10:ce:63:3a:a0:e7:03:07: 61:e5:87:a2:24:23:1e:81:9c:f1:e4:13:21:c1:d9: 47:46:4e:8a:e4:24:05:8b:76:c0:bc:90:30:17:a7: b3:a5:ce:98:5f:83:e0:ce:f0:04:2a:b3:74:30:82: 5d:3f:fa:02:f2:e6:cb:26:aa:35:aa:6c:f7:7a:dd: ed:8e:6e:46:76:bd:02:0f:c3:cf:be:ef:ec:bd:af: 91:e6:29:4e:03:d7:f5:c5:28:db:12:bf:49:a6:85: df:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:C9:4B:A7:87:6A:8B:74:C0:55:D3:35:E3:DD:AB:C8:7E:0A:36:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b18f878c-fe6b-3fa0-b914-a283ef1c8d2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 209.97.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:a5:1b:8e:1b:fa:b1:97:6a:19:b6:10:04:5d:02:40:13:7f: 34:9b:87:7b:f2:32:ae:a4:e1:fe:8c:49:ef:c7:2f:b7:93:eb: 42:88:90:3e:6b:c1:30:a6:da:7e:db:42:09:cf:8a:35:ac:fe: 1a:2d:f1:74:67:01:72:9c:a4:fa:8a:57:63:ca:d4:a2:79:5e: 3e:6c:ba:be:29:dd:78:db:1a:e3:1b:4a:bf:91:49:ea:c8:82: d2:82:ab:47:08:61:62:f0:4e:6b:a4:3e:f6:62:26:1b:78:9e: aa:d1:08:1b:c2:46:1b:6c:33:b3:fc:bd:fe:05:b0:ac:26:47: f1:d9:9b:f7:6c:b7:e6:ad:4e:d8:c1:01:87:51:e6:d4:c0:28: aa:e6:91:c1:00:d7:5f:11:67:2d:09:5c:ca:e6:1a:c2:f7:8d: 9c:63:0e:2e:f9:4e:ef:36:25:51:e8:da:24:a0:6e:c2:98:de: 86:e5:87:41:8e:92:54:50:05:fc:48:7f:44:11:f8:54:3e:01: 30:32:3f:95:43:5c:c5:56:82:fb:f9:98:b3:3a:b0:9f:14:bf: 77:04:39:fc:3f:f1:a0:61:76:79:8c:c5:80:eb:d2:f8:da:9e: 48:a0:2f:7d:d0:b3:91:e7:91:63:48:5e:b3:72:3f:00:1c:03: 60:c4:e7:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeddou3gw8ZtL0wIoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI0MTAyMTEzMDA0MVoXDTI1MDExOTE0MDA0MVowLzEtMCsGA1UEAxMk MzFlNGE2NjYtY2M3My00ODJiLWIyMGItZjZhMjYzMWJkOGIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMyufUop2ZW29Vi5gX0ga1kBMj6JG6j0jE19 vEfO4//sxwWxfsEQSWb7eteAuZZTfQT7uZBdbwZdMCbgryELT6oN6twndJpZa9In ay/jHghCJXviD1pCWPnp8IR6axxt5oc+kbLV3lI6psokH/QZAjCz+FTpNZWbGXQi Pj6kd3s93OcRyrk4c2HqOQ5eWsHehWCiYVUCISR1GJKsEM5jOqDnAwdh5YeiJCMe gZzx5BMhwdlHRk6K5CQFi3bAvJAwF6ezpc6YX4PgzvAEKrN0MIJdP/oC8ubLJqo1 qmz3et3tjm5Gdr0CD8PPvu/sva+R5ilOA9f1xSjbEr9JpoXfUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM/JS6eHaot0wFXTNePdq8h+CjYBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYjE4Zjg3OGMtZmU2Yi0z ZmEwLWI5MTQtYTI4M2VmMWM4ZDJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0WFgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI6lG44b+rGXahm2EARdAkATfzSbh3vyMq6k4f6MSe/HL7eT60KIkD5r wTCm2n7bQgnPijWs/hot8XRnAXKcpPqKV2PK1KJ5Xj5sur4p3XjbGuMbSr+RSerI gtKCq0cIYWLwTmukPvZiJht4nqrRCBvCRhtsM7P8vf4FsKwmR/HZm/dst+atTtjB AYdR5tTAKKrmkcEA118RZy0JXMrmGsL3jZxjDi75Tu82JVHo2iSgbsKY3oblh0GO klRQBfxIf0QR+FQ+ATAyP5VDXMVWgvv5mLM6sJ8Uv3cEOfw/8aBhdnmMxYDr0vja nkigL33Qs5HnkWNIXrNyPwAcA2DE56I= -----END CERTIFICATE-----Generated at Tue Oct 22 20:18:13 2024 by rpki-client on console-fra.rpki-client.org