$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c52a66f9-0de3-39eb-a6f1-281bac32c862.roa File: c52a66f9-0de3-39eb-a6f1-281bac32c862.roa (raw, json) Hash identifier: skX22LCGRcDntrrAjrTa4lIH8x0jWHZs9CIdFmLjxXM= Subject key identifier: D2:94:49:95:84:82:36:F2:29:49:71:24:DB:5E:C4:38:0D:20:05:81 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285847E1F9FE4586640E8CDC768180 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c52a66f9-0de3-39eb-a6f1-281bac32c862.roa Signing time: Fri 15 Nov 2024 02:00:28 +0000 ROA not before: Fri 15 Nov 2024 02:00:28 +0000 ROA not after: Thu 13 Feb 2025 02:00:28 +0000 asID: 6167 IP address blocks: 174.201.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e1:f9:fe:45:86:64:0e:8c:dc:76:81:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Nov 15 02:00:28 2024 GMT Not After : Feb 13 02:00:28 2025 GMT Subject: CN=c5a0a43e-a900-4746-8070-035d33a91593 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:e3:6c:c1:11:b2:55:42:5d:51:30:6a:66:6a: 0e:b8:cc:fd:37:79:26:08:6f:21:fd:46:62:c2:7f: 39:93:4a:38:fb:85:75:7c:fe:75:61:19:98:fe:b5: f7:59:c1:7c:de:dd:05:e8:bc:93:8d:40:83:f9:a5: b6:7a:52:bf:72:b1:f4:78:19:a4:85:10:55:54:f2: 3e:7e:31:d2:30:7a:a0:15:4f:03:9f:e3:68:e4:a5: b5:ec:1b:2b:b3:4a:ce:29:f2:e5:3e:b7:dd:f7:a8: 47:c6:d1:de:4b:de:60:28:77:33:67:ca:6d:88:57: 47:5a:11:46:bc:e8:22:7c:31:c6:82:a5:a3:49:25: b9:45:5f:c2:c6:40:16:b7:d6:e4:8e:54:bb:fe:4f: cf:27:3e:d2:56:5d:d5:0b:ea:21:bf:ff:c3:b7:4d: 7d:11:45:3e:78:0c:45:f7:31:a7:42:7d:fc:fc:4f: 85:31:d3:b3:c2:22:a0:db:f0:fd:32:11:c8:92:0b: 87:02:96:6e:29:84:3c:30:cb:62:2a:c5:10:30:55: be:f4:c5:39:9e:7b:cf:17:fc:c4:92:2b:e1:a9:94: f3:d7:0e:54:fa:21:da:82:f0:9d:c0:02:78:57:f8: e0:ce:ff:bd:d0:f7:d7:20:da:44:7f:b0:5c:aa:3a: c8:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:94:49:95:84:82:36:F2:29:49:71:24:DB:5E:C4:38:0D:20:05:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c52a66f9-0de3-39eb-a6f1-281bac32c862.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.201.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:5f:c7:a9:56:72:19:25:d0:b7:36:c0:7c:78:68:27:18:4d: 02:38:cb:57:a9:4f:90:af:e3:3e:e0:bd:62:55:0a:c8:49:3a: f4:6e:15:99:ac:eb:65:f7:02:d2:76:21:21:6d:97:27:58:24: 33:1e:96:58:1c:6e:42:59:69:9d:db:ac:11:37:95:40:6e:d5: ff:61:50:70:4c:97:a9:90:d9:8f:4b:cd:9d:18:d8:7d:31:9d: 53:57:59:f4:07:d7:02:49:b6:26:0c:a0:5d:f6:85:9a:41:fb: 7c:3d:0e:e0:f9:9d:74:6f:43:95:c9:bc:eb:57:68:22:52:bb: b2:eb:ac:09:a9:7b:7a:19:77:14:c9:ef:7e:50:1a:33:d5:76: 55:3c:85:b0:82:27:80:10:b4:41:e4:44:0c:b2:46:1d:cb:5a: b8:36:ce:a1:3b:81:ae:d1:e7:54:fb:ad:9d:0c:1d:02:e8:e4: 16:be:e1:33:2d:7c:63:d2:6b:a9:d0:c7:42:80:da:4b:2d:6c: 46:79:07:75:61:08:72:52:59:05:20:ef:eb:68:54:de:4c:e3: 11:a4:d6:1f:95:f7:f3:05:94:cf:60:da:b5:18:4f:70:76:05: 04:92:ae:d0:70:35:20:e2:e5:c8:2a:52:a5:f4:77:d4:43:db: 49:6b:02:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfh+f5FhmQOjNx2gYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI0MTExNTAyMDAyOFoXDTI1MDIxMzAyMDAyOFowLzEtMCsGA1UEAxMk YzVhMGE0M2UtYTkwMC00NzQ2LTgwNzAtMDM1ZDMzYTkxNTkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+NswRGyVUJdUTBqZmoOuMz9N3kmCG8h/UZi wn85k0o4+4V1fP51YRmY/rX3WcF83t0F6LyTjUCD+aW2elK/crH0eBmkhRBVVPI+ fjHSMHqgFU8Dn+No5KW17Bsrs0rOKfLlPrfd96hHxtHeS95gKHczZ8ptiFdHWhFG vOgifDHGgqWjSSW5RV/CxkAWt9bkjlS7/k/PJz7SVl3VC+ohv//Dt019EUU+eAxF 9zGnQn38/E+FMdOzwiKg2/D9MhHIkguHApZuKYQ8MMtiKsUQMFW+9MU5nnvPF/zE kivhqZTz1w5U+iHagvCdwAJ4V/jgzv+90PfXINpEf7BcqjrIYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNKUSZWEgjbyKUlxJNtexDgNIAWBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYzUyYTY2ZjktMGRlMy0z OWViLWE2ZjEtMjgxYmFjMzJjODYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErsnQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABJfx6lWchkl0Lc2wHx4aCcYTQI4y1epT5Cv4z7gvWJVCshJOvRuFZms 62X3AtJ2ISFtlydYJDMellgcbkJZaZ3brBE3lUBu1f9hUHBMl6mQ2Y9LzZ0Y2H0x nVNXWfQH1wJJtiYMoF32hZpB+3w9DuD5nXRvQ5XJvOtXaCJSu7LrrAmpe3oZdxTJ 735QGjPVdlU8hbCCJ4AQtEHkRAyyRh3LWrg2zqE7ga7R51T7rZ0MHQLo5Ba+4TMt fGPSa6nQx0KA2kstbEZ5B3VhCHJSWQUg7+toVN5M4xGk1h+V9/MFlM9g2rUYT3B2 BQSSrtBwNSDi5cgqUqX0d9RD20lrAq8= -----END CERTIFICATE-----Generated at Thu Nov 21 22:39:53 2024 by rpki-client on console-fra.rpki-client.org