$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c52a66f9-0de3-39eb-a6f1-281bac32c862.roa File: c52a66f9-0de3-39eb-a6f1-281bac32c862.roa (raw, json) Hash identifier: CRaRh8ilHgjEXI9DvQwOKioZ8i5/iJAFveDwpDiqjeY= Subject key identifier: 08:A5:25:35:2B:ED:6A:B3:11:AA:12:0A:B3:ED:FD:98:C5:87:5E:FC Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285847012044AC29A00B621A940880 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c52a66f9-0de3-39eb-a6f1-281bac32c862.roa Signing time: Mon 26 Aug 2024 13:00:41 +0000 ROA not before: Mon 26 Aug 2024 13:00:41 +0000 ROA not after: Sun 24 Nov 2024 14:00:41 +0000 asID: 6167 IP address blocks: 174.201.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Oct 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:01:20:44:ac:29:a0:0b:62:1a:94:08:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 26 13:00:41 2024 GMT Not After : Nov 24 14:00:41 2024 GMT Subject: CN=826ba291-6625-4a48-80bb-29c808757c00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:7d:2d:72:da:a3:95:0a:ca:1c:7f:4c:e3:4d: b9:83:61:69:11:c8:98:72:f4:17:c7:26:f0:cc:9a: 8a:6e:0b:cb:35:0d:2d:b4:fb:36:43:e8:51:19:dd: 60:eb:78:5c:c1:af:94:a5:86:0f:8b:56:50:3a:4e: c5:c6:4e:29:97:43:d6:2b:43:e9:00:df:e0:a5:c2: 70:b3:82:d5:5c:bf:57:ae:b3:34:62:3b:90:2c:fb: 03:73:fd:18:3d:9e:61:64:a0:cb:a3:c7:06:d2:0b: d0:95:f9:41:e2:55:c0:ef:43:f1:ef:cf:f0:e6:5e: bc:e0:6f:ce:17:31:36:50:19:0a:ba:68:20:10:79: f7:cb:ee:1f:5c:26:a8:1e:0d:3b:a7:fd:85:84:06: ac:b0:38:b6:81:cf:83:83:0f:73:5c:8d:8d:39:6b: 77:d3:fe:68:27:a0:53:bb:b0:85:1e:1f:ec:55:25: 67:2b:7c:71:22:02:1c:14:c8:a0:8e:ba:d1:ab:55: 61:a1:8d:fc:af:a8:5c:51:99:e4:76:87:9a:b8:8d: e8:32:18:37:91:4f:ea:ee:2d:41:bb:c6:6c:80:bc: 5f:43:81:30:01:03:91:09:d5:01:e8:46:1b:20:8f: c9:1f:a8:52:d3:68:8a:21:cc:41:36:b4:44:f7:05: 01:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:A5:25:35:2B:ED:6A:B3:11:AA:12:0A:B3:ED:FD:98:C5:87:5E:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c52a66f9-0de3-39eb-a6f1-281bac32c862.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.201.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:0d:fa:cd:dc:cf:5d:8b:ba:19:a6:09:b4:76:7a:be:5d:41: 20:42:41:36:6e:eb:b0:c8:f8:5f:8b:d0:da:71:fb:b3:40:90: 44:4e:73:f2:86:0b:27:0d:5b:a3:6e:e0:ba:55:2d:01:c5:42: 89:f9:2e:76:a5:f1:5c:eb:d5:5e:06:3a:f6:85:78:8e:2a:82: 76:6f:b6:77:27:29:b0:f6:32:9b:39:ce:17:a3:fa:8d:9f:45: cc:9a:e4:a4:17:ff:52:f6:34:72:90:8d:74:8b:f9:c2:35:a3: 3a:70:8b:3f:0a:7d:37:ae:7d:ce:58:54:52:17:e7:7e:20:22: 24:a6:75:98:33:bd:3b:fa:04:e8:c5:11:d8:e5:67:96:ca:aa: ce:b6:a3:e5:39:b2:5e:81:d7:1b:77:88:9a:cb:19:67:2d:bb: 0b:43:b5:36:45:49:98:fb:cf:bb:a3:98:91:e9:c4:77:b5:8a: 3c:ee:69:f9:e6:f1:a2:18:02:32:27:24:7b:e7:95:17:8c:09: aa:b0:59:c3:3a:a8:c5:a7:04:ac:49:7d:fd:1b:f7:6b:c5:78: 56:ea:1f:10:99:41:c2:34:5b:8c:83:f7:3f:59:56:c7:52:da: 18:6c:2a:53:58:40:c2:84:b6:aa:08:2e:f7:1f:bf:66:65:96: 81:4a:a8:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcBIESsKaALYhqUCIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI0MDgyNjEzMDA0MVoXDTI0MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk ODI2YmEyOTEtNjYyNS00YTQ4LTgwYmItMjljODA4NzU3YzAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz30tctqjlQrKHH9M4025g2FpEciYcvQXxybw zJqKbgvLNQ0ttPs2Q+hRGd1g63hcwa+UpYYPi1ZQOk7Fxk4pl0PWK0PpAN/gpcJw s4LVXL9XrrM0YjuQLPsDc/0YPZ5hZKDLo8cG0gvQlflB4lXA70Px78/w5l684G/O FzE2UBkKumggEHn3y+4fXCaoHg07p/2FhAassDi2gc+Dgw9zXI2NOWt30/5oJ6BT u7CFHh/sVSVnK3xxIgIcFMigjrrRq1VhoY38r6hcUZnkdoeauI3oMhg3kU/q7i1B u8ZsgLxfQ4EwAQORCdUB6EYbII/JH6hS02iKIcxBNrRE9wUBqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAilJTUr7WqzEaoSCrPt/ZjFh178MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYzUyYTY2ZjktMGRlMy0z OWViLWE2ZjEtMjgxYmFjMzJjODYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErsnQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEAN+s3cz12LuhmmCbR2er5dQSBCQTZu67DI+F+L0Npx+7NAkEROc/KG CycNW6Nu4LpVLQHFQon5Lnal8Vzr1V4GOvaFeI4qgnZvtncnKbD2Mps5zhej+o2f Rcya5KQX/1L2NHKQjXSL+cI1ozpwiz8KfTeufc5YVFIX534gIiSmdZgzvTv6BOjF EdjlZ5bKqs62o+U5sl6B1xt3iJrLGWctuwtDtTZFSZj7z7ujmJHpxHe1ijzuafnm 8aIYAjInJHvnlReMCaqwWcM6qMWnBKxJff0b92vFeFbqHxCZQcI0W4yD9z9ZVsdS 2hhsKlNYQMKEtqoILvcfv2ZlloFKqDc= -----END CERTIFICATE-----Generated at Tue Oct 22 21:23:02 2024 by rpki-client on console-ams.rpki-client.org