$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c953c05a-7407-3f43-8c0e-6815a764dc2a.roa File: c953c05a-7407-3f43-8c0e-6815a764dc2a.roa (raw, json) Hash identifier: N+tS8AWeynT8vdznIjrn6jYzKJmauUSyo3bZnCud6hA= Subject key identifier: 04:5F:42:F1:39:59:4D:12:43:F8:69:89:48:87:C5:C6:91:30:93:4D Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584762D63F03870CEAD38E0956E0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c953c05a-7407-3f43-8c0e-6815a764dc2a.roa Signing time: Mon 30 Sep 2024 13:00:42 +0000 ROA not before: Mon 30 Sep 2024 13:00:42 +0000 ROA not after: Sun 29 Dec 2024 14:00:42 +0000 asID: 22394 IP address blocks: 141.207.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:62:d6:3f:03:87:0c:ea:d3:8e:09:56:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Sep 30 13:00:42 2024 GMT Not After : Dec 29 14:00:42 2024 GMT Subject: CN=b5316acc-35e5-4a68-a206-ae3da26921a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:90:18:f3:b8:b7:a2:a9:87:ab:eb:ba:dd:13: 68:47:35:8b:03:8d:df:03:f4:63:96:77:5b:59:5d: 99:8d:3a:a5:6d:b3:b3:08:d5:dc:af:8d:cf:e9:49: 34:a9:00:08:d8:91:6a:8c:39:1a:10:58:35:6d:35: d4:45:48:09:88:3d:d9:77:5f:b6:75:b8:84:01:81: c6:a4:f4:89:bc:c5:f7:9f:c6:36:c2:53:4f:f2:6a: 8a:58:1e:72:2c:8c:70:9d:9c:f8:dd:0c:4b:de:98: ed:d2:48:ec:bb:4a:6b:31:ed:13:38:1f:b5:90:44: 23:9e:1e:10:b8:22:e0:fc:4e:a4:35:f9:55:53:5d: 37:8e:f0:e7:70:52:65:54:05:ed:63:3c:28:1d:eb: 62:fd:58:44:74:5b:4f:54:68:64:6c:08:1e:e5:20: f3:4b:b9:ab:d5:4a:cd:f8:81:7d:12:83:31:5c:00: 63:7c:06:4c:6d:05:85:9b:de:27:a9:20:f6:f4:d5: 70:ee:35:f5:4e:a4:6c:d5:46:2c:8c:b3:07:57:3f: 74:9f:93:8d:1d:54:16:fc:3a:bd:19:b4:27:9c:26: 3c:23:b8:33:1b:d9:fa:59:69:b2:71:d5:9f:a4:c2: 25:c2:bd:24:7f:73:21:35:1c:cd:a3:e7:66:a0:b4: 72:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:5F:42:F1:39:59:4D:12:43:F8:69:89:48:87:C5:C6:91:30:93:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c953c05a-7407-3f43-8c0e-6815a764dc2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 141.207.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:7c:0e:5a:54:bc:75:81:94:9c:a7:64:fb:35:4f:20:75:a7: f7:c5:6d:13:f6:0b:c6:8e:2c:a0:20:ff:53:ed:ac:4b:ea:8c: ad:03:66:ad:06:b2:c9:f7:bc:62:25:95:f3:de:89:6d:f6:f1: 14:9d:65:1d:9e:b0:25:9b:28:ba:91:e2:da:58:28:49:b3:b7: c0:fb:58:d1:ad:29:40:4a:1f:25:d7:23:65:e6:58:de:6c:ac: 7d:ea:c7:6e:bf:d9:87:e5:8d:9d:d4:71:b6:61:3c:7d:6a:81: ea:c4:c3:55:ec:11:f3:96:dd:5a:85:0c:a6:66:0e:b2:93:b6: 7b:ac:05:36:2d:4b:af:37:0c:3c:08:38:33:ea:33:13:df:96: e8:e2:b6:51:60:16:f0:2a:8f:e6:b0:48:0a:cd:86:fa:a8:0c: 5f:83:b1:8b:ff:a6:f7:8a:ca:a7:32:91:e6:88:8c:44:36:bd: 04:c7:07:3e:49:38:37:d5:92:10:96:3e:c5:e6:c6:49:20:5b: b8:bb:79:73:97:66:29:b7:c0:58:a7:d0:49:d8:51:5e:24:81: f5:d0:dd:e4:69:a2:0e:e0:13:8d:be:05:31:98:bc:22:17:23: f9:92:a1:d3:59:7f:aa:d0:a1:ec:19:53:1d:34:d8:41:5f:e3: d0:90:9a:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdi1j8Dhwzq044JVuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI0MDkzMDEzMDA0MloXDTI0MTIyOTE0MDA0MlowLzEtMCsGA1UEAxMk YjUzMTZhY2MtMzVlNS00YTY4LWEyMDYtYWUzZGEyNjkyMWE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpAY87i3oqmHq+u63RNoRzWLA43fA/Rjlndb WV2ZjTqlbbOzCNXcr43P6Uk0qQAI2JFqjDkaEFg1bTXURUgJiD3Zd1+2dbiEAYHG pPSJvMX3n8Y2wlNP8mqKWB5yLIxwnZz43QxL3pjt0kjsu0prMe0TOB+1kEQjnh4Q uCLg/E6kNflVU103jvDncFJlVAXtYzwoHeti/VhEdFtPVGhkbAge5SDzS7mr1UrN +IF9EoMxXABjfAZMbQWFm94nqSD29NVw7jX1TqRs1UYsjLMHVz90n5ONHVQW/Dq9 GbQnnCY8I7gzG9n6WWmycdWfpMIlwr0kf3MhNRzNo+dmoLRyJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFARfQvE5WU0SQ/hpiUiHxcaRMJNNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYzk1M2MwNWEtNzQwNy0z ZjQzLThjMGUtNjgxNWE3NjRkYzJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEjc8QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF98DlpUvHWBlJynZPs1TyB1p/fFbRP2C8aOLKAg/1PtrEvqjK0DZq0G ssn3vGIllfPeiW328RSdZR2esCWbKLqR4tpYKEmzt8D7WNGtKUBKHyXXI2XmWN5s rH3qx26/2YfljZ3UcbZhPH1qgerEw1XsEfOW3VqFDKZmDrKTtnusBTYtS683DDwI ODPqMxPflujitlFgFvAqj+awSArNhvqoDF+DsYv/pveKyqcykeaIjEQ2vQTHBz5J ODfVkhCWPsXmxkkgW7i7eXOXZim3wFin0EnYUV4kgfXQ3eRpog7gE42+BTGYvCIX I/mSodNZf6rQoewZUx002EFf49CQmiA= -----END CERTIFICATE-----Generated at Thu Nov 21 23:41:49 2024 by rpki-client on console-ams.rpki-client.org