$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d026be99-1cce-306a-9800-7c2d9aa87a80.roa File: d026be99-1cce-306a-9800-7c2d9aa87a80.roa (raw, json) Hash identifier: hJgYcztFJm8hcPGK8EdsZDPPb9LM4Z7wPVOiVnAYoVs= Subject key identifier: 62:04:BF:74:70:AC:DA:A3:8A:7B:C6:F6:CA:1E:2B:19:7A:F4:B9:65 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858474420BEDFCD5AD640011A2540 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d026be99-1cce-306a-9800-7c2d9aa87a80.roa Signing time: Thu 19 Sep 2024 13:00:42 +0000 ROA not before: Thu 19 Sep 2024 13:00:42 +0000 ROA not after: Wed 18 Dec 2024 14:00:42 +0000 asID: 701 IP address blocks: 207.86.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:44:20:be:df:cd:5a:d6:40:01:1a:25:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Sep 19 13:00:42 2024 GMT Not After : Dec 18 14:00:42 2024 GMT Subject: CN=1b97eeac-5376-4a1b-9e32-7c68a30c1f2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:0b:55:c4:b5:c1:41:79:4a:0e:27:07:e4:85: ee:18:fa:12:ab:32:0f:5b:9a:31:3d:2d:cb:61:5b: 7b:56:12:eb:aa:63:6e:b7:b2:53:4d:4c:ab:b3:70: 75:fd:33:93:4e:7a:5d:a7:ec:2a:43:ce:6b:98:3a: da:5c:48:13:ff:cc:5b:f7:97:a1:54:70:1b:ec:1e: 65:5f:a4:94:60:ca:1d:e1:dc:58:85:a8:ff:67:5f: 0b:59:f7:b1:ea:d6:95:9b:2a:db:96:eb:e2:54:ef: cd:d3:7c:80:c8:fd:cd:6f:16:da:7e:58:73:e9:fb: 2b:82:b0:d8:9e:99:7e:3a:34:76:45:f7:e0:7b:cd: dd:21:5b:be:cc:cf:02:ba:f2:1e:13:05:22:d4:8b: 77:dd:39:1d:9c:66:df:34:e1:43:06:08:21:2a:0a: b1:24:61:1c:d9:9d:89:6b:57:e5:2e:8e:41:26:63: 25:2e:87:d2:03:1c:d3:69:66:7d:bd:bf:88:5f:1a: 03:d9:dd:29:80:73:7f:41:24:a7:f6:a4:4b:d5:5c: 68:a4:40:ec:d0:b5:8a:b8:2d:f6:00:89:3a:bb:02: 9d:83:0e:11:86:ec:57:c6:fa:5a:8f:a7:72:58:a3: 80:01:8c:e5:ec:13:05:4e:d1:de:db:6f:50:92:5f: cf:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:04:BF:74:70:AC:DA:A3:8A:7B:C6:F6:CA:1E:2B:19:7A:F4:B9:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d026be99-1cce-306a-9800-7c2d9aa87a80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 207.86.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:12:08:6d:69:0e:b6:cd:51:23:40:03:1c:a7:22:ab:8f:ad: cb:21:55:9d:a5:76:b1:6b:1e:8a:28:51:c9:62:b2:49:ef:71: 82:6f:d3:f7:0f:f8:2d:23:da:f7:e9:1f:54:80:eb:57:e8:b9: 99:c6:db:d4:4d:57:ad:40:5d:76:07:ed:d0:d0:76:14:55:1f: 08:fa:9f:7d:cc:04:db:c0:d3:dc:67:a3:52:66:57:e3:28:c8: a3:b9:cc:45:0c:e4:f4:15:d3:61:d4:bf:f8:32:5a:1d:57:8a: 15:dd:5e:46:36:bb:f9:64:6a:7e:47:14:eb:ca:49:c9:77:6d: be:f3:d3:7a:5f:40:af:ed:4a:8a:cd:a2:96:b5:1f:10:fc:24: 33:87:76:20:e1:b2:ee:77:f5:49:37:c1:0c:70:2c:ad:6d:7e: bd:ab:07:03:21:33:bf:0e:e7:ba:60:1c:4a:08:1a:47:07:7d: d1:cc:e1:a7:dd:68:bb:f2:e8:30:3e:92:c3:05:49:f1:88:a8: 40:93:a4:42:4c:8f:b4:d3:8f:e2:6e:70:04:8c:b7:2f:fc:12: 8e:09:c6:c8:31:6f:ef:da:d4:bb:46:5c:68:c7:36:e1:3c:6d: 6c:d7:1f:1e:97:e2:16:37:6a:67:8c:62:1b:89:03:e9:af:78: 0f:d7:3f:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdEIL7fzVrWQAEaJUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI0MDkxOTEzMDA0MloXDTI0MTIxODE0MDA0MlowLzEtMCsGA1UEAxMk MWI5N2VlYWMtNTM3Ni00YTFiLTllMzItN2M2OGEzMGMxZjJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhwtVxLXBQXlKDicH5IXuGPoSqzIPW5oxPS3L YVt7VhLrqmNut7JTTUyrs3B1/TOTTnpdp+wqQ85rmDraXEgT/8xb95ehVHAb7B5l X6SUYMod4dxYhaj/Z18LWfex6taVmyrbluviVO/N03yAyP3Nbxbaflhz6fsrgrDY npl+OjR2Rffge83dIVu+zM8CuvIeEwUi1It33TkdnGbfNOFDBgghKgqxJGEc2Z2J a1flLo5BJmMlLofSAxzTaWZ9vb+IXxoD2d0pgHN/QSSn9qRL1VxopEDs0LWKuC32 AIk6uwKdgw4RhuxXxvpaj6dyWKOAAYzl7BMFTtHe229Qkl/PtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGIEv3RwrNqjinvG9soeKxl69LllMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZDAyNmJlOTktMWNjZS0z MDZhLTk4MDAtN2MyZDlhYTg3YTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz1Z9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG0SCG1pDrbNUSNAAxynIquPrcshVZ2ldrFrHoooUclisknvcYJv0/cP +C0j2vfpH1SA61fouZnG29RNV61AXXYH7dDQdhRVHwj6n33MBNvA09xno1JmV+Mo yKO5zEUM5PQV02HUv/gyWh1XihXdXkY2u/lkan5HFOvKScl3bb7z03pfQK/tSorN opa1HxD8JDOHdiDhsu539Uk3wQxwLK1tfr2rBwMhM78O57pgHEoIGkcHfdHM4afd aLvy6DA+ksMFSfGIqECTpEJMj7TTj+JucASMty/8Eo4Jxsgxb+/a1LtGXGjHNuE8 bWzXHx6X4hY3ameMYhuJA+mveA/XPxE= -----END CERTIFICATE-----Generated at Thu Nov 21 22:39:55 2024 by rpki-client on console-fra.rpki-client.org