$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cecd56b1-7e2b-3f23-9635-89b5421c2af2.roa File: cecd56b1-7e2b-3f23-9635-89b5421c2af2.roa (raw, json) Hash identifier: sEJ4xQVc+9X2NzCbGcVVRuRyi//sjENnQkaeP42ZMog= Subject key identifier: DE:5E:21:A1:3E:A3:30:C9:0D:BD:6A:2A:5F:E9:B4:20:1F:33:9C:BC Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584730960A5E8F9807E51E15F800 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cecd56b1-7e2b-3f23-9635-89b5421c2af2.roa Signing time: Thu 12 Sep 2024 13:00:41 +0000 ROA not before: Thu 12 Sep 2024 13:00:41 +0000 ROA not after: Wed 11 Dec 2024 14:00:41 +0000 asID: 22394 IP address blocks: 174.41.238.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:30:96:0a:5e:8f:98:07:e5:1e:15:f8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Sep 12 13:00:41 2024 GMT Not After : Dec 11 14:00:41 2024 GMT Subject: CN=3b1d666f-4f37-437b-af2e-907eb30e1427 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:93:47:0b:06:be:4f:9a:7b:b5:1d:09:a7:0c: 7c:e7:56:8b:63:8e:ff:6a:ec:45:fd:68:47:8f:85: 7a:ff:27:0b:4d:b3:c3:a0:2f:0a:e0:55:09:37:e5: 5c:94:c2:b3:55:c8:fd:3c:05:04:47:5c:31:86:e3: 17:94:fb:64:7d:d0:02:24:5a:94:95:89:2b:f9:6a: b1:31:10:80:c5:c1:8c:ae:de:1d:8f:6e:b5:df:07: 5b:f7:1b:8b:72:1e:b7:31:0b:ed:18:3c:0c:d6:35: d8:ea:6b:e5:56:4e:12:e3:0c:0d:dd:97:dc:2f:d4: b2:91:5a:e6:2f:69:c2:b2:87:58:81:f1:7e:c6:a1: 2f:99:45:64:53:42:43:bb:89:04:b7:8c:94:8d:45: 2b:6b:be:be:4d:01:c4:aa:50:ba:ec:54:44:44:aa: 96:f8:80:63:61:40:aa:8f:70:d4:a4:e2:f2:01:95: fd:af:1d:b2:ef:0e:f1:9b:09:21:ca:01:66:59:16: c5:77:12:6a:b1:8e:31:ad:82:91:42:a3:1f:16:0d: 2d:74:28:35:1d:f4:2f:40:f9:f8:56:2f:55:7f:71: 70:55:3a:6c:68:7d:6b:57:a1:a1:23:6a:51:74:f0: 3a:0e:92:62:27:4d:8f:2d:95:89:81:b2:4c:a2:3e: 17:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:5E:21:A1:3E:A3:30:C9:0D:BD:6A:2A:5F:E9:B4:20:1F:33:9C:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cecd56b1-7e2b-3f23-9635-89b5421c2af2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.41.238.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:7b:8d:0d:02:3f:5e:c0:b7:83:d7:b0:c7:25:d9:3d:d1:43: a7:31:e2:83:bc:f7:ec:7d:b8:91:f6:57:4f:b6:c7:9b:97:53: 45:52:f2:ba:cc:90:40:17:07:38:61:b9:40:02:1b:6d:e1:72: 59:1c:29:74:e0:fb:41:9c:3f:03:1a:01:b7:f2:d0:27:22:59: b7:2c:d1:3c:cc:f4:c2:ce:00:d3:09:da:9e:22:24:ba:96:38: 2d:20:91:d3:75:ca:31:e5:8b:df:3c:84:06:62:3c:08:2a:a5: 07:10:8b:3b:6b:4c:02:23:7b:72:33:7e:cc:6c:ff:a0:22:c4: c5:79:ed:f1:8a:d2:23:9d:38:a8:a7:03:48:ee:2b:99:c9:12: 53:84:14:18:a0:3a:bb:5f:2b:d6:0f:dd:10:58:00:6d:f2:2b: 3a:ab:75:ba:59:b8:c0:f3:1d:05:bd:5a:8b:d9:ed:e3:6f:f0: 54:9e:a6:c9:48:66:b0:91:28:23:c7:49:12:9e:08:b4:9d:08: 49:64:dc:2b:50:74:8c:42:e2:b6:fe:fb:43:ef:54:63:87:53: d8:71:df:f6:f1:cc:98:90:34:bd:2d:32:29:68:fb:59:5f:60: f5:ef:b4:3a:00:c9:ba:25:77:7f:e3:41:3a:7c:94:f1:04:71: 72:ad:ee:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcwlgpej5gH5R4V+AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI0MDkxMjEzMDA0MVoXDTI0MTIxMTE0MDA0MVowLzEtMCsGA1UEAxMk M2IxZDY2NmYtNGYzNy00MzdiLWFmMmUtOTA3ZWIzMGUxNDI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhpNHCwa+T5p7tR0Jpwx851aLY47/auxF/WhH j4V6/ycLTbPDoC8K4FUJN+VclMKzVcj9PAUER1wxhuMXlPtkfdACJFqUlYkr+Wqx MRCAxcGMrt4dj2613wdb9xuLch63MQvtGDwM1jXY6mvlVk4S4wwN3ZfcL9SykVrm L2nCsodYgfF+xqEvmUVkU0JDu4kEt4yUjUUra76+TQHEqlC67FRERKqW+IBjYUCq j3DUpOLyAZX9rx2y7w7xmwkhygFmWRbFdxJqsY4xrYKRQqMfFg0tdCg1HfQvQPn4 Vi9Vf3FwVTpsaH1rV6GhI2pRdPA6DpJiJ02PLZWJgbJMoj4XWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN5eIaE+ozDJDb1qKl/ptCAfM5y8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvY2VjZDU2YjEtN2UyYi0z ZjIzLTk2MzUtODliNTQyMWMyYWYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrinuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHh7jQ0CP17At4PXsMcl2T3RQ6cx4oO89+x9uJH2V0+2x5uXU0VS8rrM kEAXBzhhuUACG23hclkcKXTg+0GcPwMaAbfy0CciWbcs0TzM9MLOANMJ2p4iJLqW OC0gkdN1yjHli988hAZiPAgqpQcQiztrTAIje3Izfsxs/6AixMV57fGK0iOdOKin A0juK5nJElOEFBigOrtfK9YP3RBYAG3yKzqrdbpZuMDzHQW9WovZ7eNv8FSepslI ZrCRKCPHSRKeCLSdCElk3CtQdIxC4rb++0PvVGOHU9hx3/bxzJiQNL0tMilo+1lf YPXvtDoAybold3/jQTp8lPEEcXKt7tc= -----END CERTIFICATE-----Generated at Thu Nov 21 23:41:50 2024 by rpki-client on console-ams.rpki-client.org