$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c3f9bec5-8977-39ee-a8ad-199602882af1.roa File: c3f9bec5-8977-39ee-a8ad-199602882af1.roa (raw, json) Hash identifier: tVOoF1WnbHVtHY2Ylz52Pq5Cg9C267zDNB67/s9PT9Y= Subject key identifier: 45:98:44:70:B8:2E:B0:4A:91:D2:91:0E:5C:13:3C:9C:46:8F:61:25 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285847E1FA078703D15C8D51670466 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c3f9bec5-8977-39ee-a8ad-199602882af1.roa Signing time: Fri 15 Nov 2024 02:00:28 +0000 ROA not before: Fri 15 Nov 2024 02:00:28 +0000 ROA not after: Thu 13 Feb 2025 02:00:28 +0000 asID: 6167 IP address blocks: 174.216.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e1:fa:07:87:03:d1:5c:8d:51:67:04:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Nov 15 02:00:28 2024 GMT Not After : Feb 13 02:00:28 2025 GMT Subject: CN=52ec541d-9c2b-4c9d-a2a4-da5ab6e39d29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:b0:10:70:b3:6f:44:eb:8f:00:6a:dd:73:92: 96:3c:73:6a:1d:e4:a9:85:62:89:d7:b7:8c:68:ed: 98:17:f4:c1:3e:0b:4c:91:55:36:83:fa:1b:52:27: 27:ac:ad:f4:af:8b:e8:7f:04:36:d2:43:46:4a:7d: 10:8f:9d:98:e7:c1:23:cf:58:2e:58:0e:68:bb:2f: 48:34:73:d1:e3:4c:34:b7:3a:4f:85:c4:6b:2e:78: 7a:c3:5c:0b:09:35:5b:17:83:e3:48:22:e0:bd:8c: be:d5:19:fd:e4:15:85:bc:a5:3f:4e:69:3c:c6:c2: 67:ae:d8:9d:2b:93:f1:bb:09:67:29:99:ae:fd:b1: e6:0b:8f:b0:e0:93:1f:02:02:4a:d1:ca:ec:63:33: 5c:bf:e6:2d:f1:c0:ad:0f:68:9a:97:26:d4:6d:51: b7:b9:3d:fe:86:e4:1d:5b:be:45:8d:fe:60:21:dc: 9a:81:d8:46:6d:3b:27:d9:2a:26:28:45:8f:74:9a: a0:10:59:24:16:2b:87:4f:06:51:bb:35:24:fc:0c: a0:2d:92:63:1c:d6:8d:a1:0e:80:61:92:f7:af:fd: bf:4a:b2:95:cc:97:46:a9:c1:c1:e6:d9:2b:d8:43: 8b:11:b4:d8:60:07:f4:8f:0c:12:6f:da:b9:dd:b5: f1:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:98:44:70:B8:2E:B0:4A:91:D2:91:0E:5C:13:3C:9C:46:8F:61:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c3f9bec5-8977-39ee-a8ad-199602882af1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.216.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:13:f2:37:da:21:7d:d7:74:ae:9c:bb:5b:48:d1:87:36:83: 4b:a4:ef:18:3f:7a:31:9d:ac:79:fa:61:98:ea:72:36:5a:d7: 1f:bb:e4:d7:68:f6:90:26:17:0c:87:97:5c:c2:45:71:36:35: 98:4a:08:1d:5b:c0:99:f0:1a:1b:a2:aa:e9:b3:4c:48:5b:a4: f1:85:a6:ca:67:b5:e7:e5:4c:74:a1:b7:e8:a1:7a:9b:35:51: 93:90:d3:a9:67:db:14:50:5e:8b:4b:84:77:93:9a:a1:5b:74: 26:da:d8:78:36:ab:c7:88:c1:4c:c6:21:62:de:04:f7:49:36: b7:0c:50:bd:2d:c5:fa:32:a4:9e:f0:15:8a:70:79:fb:1c:65: df:02:5c:96:47:2c:00:4f:70:9f:10:7d:84:c5:b3:1f:cf:c1: 18:d0:27:98:5a:1c:83:18:b8:2b:d7:99:c4:c1:24:c2:64:34: ca:6e:24:09:76:d8:e1:bb:9d:bd:eb:1d:25:b9:5a:59:46:a2: f1:39:47:9e:8d:08:56:7a:9e:30:aa:48:cc:60:91:1a:8a:9b: f8:f6:53:dd:65:f6:96:70:ba:45:1f:b5:66:59:7f:80:80:e0: a9:27:d8:64:aa:86:8f:24:bf:b3:ff:06:b7:ca:93:ca:f8:eb: d7:02:4f:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfh+geHA9FcjVFnBGYwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI0MTExNTAyMDAyOFoXDTI1MDIxMzAyMDAyOFowLzEtMCsGA1UEAxMk NTJlYzU0MWQtOWMyYi00YzlkLWEyYTQtZGE1YWI2ZTM5ZDI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzbAQcLNvROuPAGrdc5KWPHNqHeSphWKJ17eM aO2YF/TBPgtMkVU2g/obUicnrK30r4vofwQ20kNGSn0Qj52Y58Ejz1guWA5ouy9I NHPR40w0tzpPhcRrLnh6w1wLCTVbF4PjSCLgvYy+1Rn95BWFvKU/Tmk8xsJnrtid K5PxuwlnKZmu/bHmC4+w4JMfAgJK0crsYzNcv+Yt8cCtD2ialybUbVG3uT3+huQd W75Fjf5gIdyagdhGbTsn2SomKEWPdJqgEFkkFiuHTwZRuzUk/AygLZJjHNaNoQ6A YZL3r/2/SrKVzJdGqcHB5tkr2EOLEbTYYAf0jwwSb9q53bXxVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEWYRHC4LrBKkdKRDlwTPJxGj2ElMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYzNmOWJlYzUtODk3Ny0z OWVlLWE4YWQtMTk5NjAyODgyYWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErtjQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHoT8jfaIX3XdK6cu1tI0Yc2g0uk7xg/ejGdrHn6YZjqcjZa1x+75Ndo 9pAmFwyHl1zCRXE2NZhKCB1bwJnwGhuiqumzTEhbpPGFpspnteflTHSht+iheps1 UZOQ06ln2xRQXotLhHeTmqFbdCba2Hg2q8eIwUzGIWLeBPdJNrcMUL0txfoypJ7w FYpwefscZd8CXJZHLABPcJ8QfYTFsx/PwRjQJ5haHIMYuCvXmcTBJMJkNMpuJAl2 2OG7nb3rHSW5WllGovE5R56NCFZ6njCqSMxgkRqKm/j2U91l9pZwukUftWZZf4CA 4Kkn2GSqho8kv7P/BrfKk8r469cCTxA= -----END CERTIFICATE-----Generated at Thu Nov 21 22:39:52 2024 by rpki-client on console-fra.rpki-client.org