$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d5a624ba-3c79-3e47-9e76-e225b85f2da1.roa File: d5a624ba-3c79-3e47-9e76-e225b85f2da1.roa (raw, json) Hash identifier: UJ1MeTRzrg5bJ3u1WuZp1AK7FEjuqzo3FgvtgcfNiQI= Subject key identifier: CE:5F:48:41:C9:0A:80:3D:B3:8F:5B:16:DC:38:3B:57:B5:03:EB:3D Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285847537B874D1175AB67794BE480 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d5a624ba-3c79-3e47-9e76-e225b85f2da1.roa Signing time: Wed 25 Sep 2024 01:00:31 +0000 ROA not before: Wed 25 Sep 2024 01:00:31 +0000 ROA not after: Tue 24 Dec 2024 02:00:31 +0000 asID: 701 IP address blocks: 108.11.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:53:7b:87:4d:11:75:ab:67:79:4b:e4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Sep 25 01:00:31 2024 GMT Not After : Dec 24 02:00:31 2024 GMT Subject: CN=8e10e24a-065e-48a9-8b55-0ce03b36648c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c8:e0:f5:04:ea:32:46:cf:98:1c:2c:26:e6: 63:70:04:86:15:33:f1:08:c6:dc:fa:d9:1e:20:76: 5e:de:45:d5:54:39:19:26:26:16:48:7b:61:2b:0a: 49:d3:e0:d6:16:8b:a7:d4:5e:d3:9a:e3:55:71:73: 77:b0:f4:c1:94:77:14:e3:be:f3:16:5f:3f:88:da: 53:ad:33:83:21:56:49:b8:e4:eb:41:8d:09:03:04: 3f:d2:f3:f0:8b:0c:1c:cf:a2:6e:ad:7b:48:2d:5b: d3:c4:64:1e:43:3f:c9:05:9e:6d:07:9d:6b:b2:c5: ad:9f:d1:75:55:55:ea:7b:d9:99:d7:84:fc:cc:47: d2:cd:b3:35:4c:b0:65:28:ca:3a:d4:72:d7:35:4c: c9:50:e4:ca:98:d0:80:68:11:08:db:2f:6b:16:44: 3b:6b:04:d0:3d:62:45:f5:a8:e3:bf:3a:93:08:7a: 8c:d4:06:b0:e3:1d:a1:12:51:73:6b:03:a8:10:65: f8:07:6b:8b:56:ea:3e:d9:4a:26:b1:b4:aa:a7:9a: ba:86:c4:7e:0e:8c:55:6e:5b:b2:41:a0:f1:df:82: 4e:02:75:c2:eb:31:e0:48:5f:51:8b:2c:93:97:0d: 1d:8b:dd:9d:f1:00:b3:6b:2e:3b:82:b0:56:0e:f2: ff:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:5F:48:41:C9:0A:80:3D:B3:8F:5B:16:DC:38:3B:57:B5:03:EB:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d5a624ba-3c79-3e47-9e76-e225b85f2da1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 108.11.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:78:2b:c5:9f:b0:de:9e:39:87:5b:18:7a:82:8a:f1:c4:ce: 5c:d7:78:31:4c:a6:72:13:ce:38:e5:c0:c9:01:72:76:27:73: a4:68:0d:f9:c7:cc:8d:f2:a0:b6:bd:2a:64:7f:17:2f:60:a5: 2e:ee:b8:8d:24:2e:72:18:4b:3b:8a:47:31:3c:b3:91:64:00: 81:c2:ff:d1:2d:e4:44:ce:d0:23:26:41:27:aa:af:0c:ce:24: 23:f7:a8:2d:c1:8b:1c:f4:86:f7:f7:78:9e:cf:d3:c5:fc:26: 14:7c:46:73:a3:8d:67:36:b9:68:20:b3:70:6f:cf:de:55:0c: de:ba:cb:44:ae:00:dd:5d:f0:93:01:52:c1:cf:38:bb:41:b8: 29:97:05:d1:bf:d2:d7:c6:97:b7:a6:61:14:37:87:6c:fa:ea: a2:11:fa:c2:0c:5f:dd:6f:8d:c1:29:6b:e6:1f:20:45:ab:35: 9f:bb:80:99:c9:f7:f8:51:e8:46:4d:bd:ca:8e:f3:66:f4:ed: 8b:98:0f:7e:85:5e:00:d2:60:ba:bc:db:8e:bf:d8:9c:99:50: 0e:20:c7:72:42:77:2b:bc:1c:64:79:8a:f9:9d:67:a4:4c:f9: 89:bf:b0:6a:68:e8:da:f8:f5:49:76:2e:b3:58:ec:2b:f0:b9: dd:fb:d1:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdTe4dNEXWrZ3lL5IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI0MDkyNTAxMDAzMVoXDTI0MTIyNDAyMDAzMVowLzEtMCsGA1UEAxMk OGUxMGUyNGEtMDY1ZS00OGE5LThiNTUtMGNlMDNiMzY2NDhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMjg9QTqMkbPmBwsJuZjcASGFTPxCMbc+tke IHZe3kXVVDkZJiYWSHthKwpJ0+DWFoun1F7TmuNVcXN3sPTBlHcU477zFl8/iNpT rTODIVZJuOTrQY0JAwQ/0vPwiwwcz6JurXtILVvTxGQeQz/JBZ5tB51rssWtn9F1 VVXqe9mZ14T8zEfSzbM1TLBlKMo61HLXNUzJUOTKmNCAaBEI2y9rFkQ7awTQPWJF 9ajjvzqTCHqM1Aaw4x2hElFzawOoEGX4B2uLVuo+2UomsbSqp5q6hsR+DoxVbluy QaDx34JOAnXC6zHgSF9RiyyTlw0di92d8QCzay47grBWDvL/TwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM5fSEHJCoA9s49bFtw4O1e1A+s9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZDVhNjI0YmEtM2M3OS0z ZTQ3LTllNzYtZTIyNWI4NWYyZGExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGbAsAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF14K8WfsN6eOYdbGHqCivHEzlzXeDFMpnITzjjlwMkBcnYnc6RoDfnH zI3yoLa9KmR/Fy9gpS7uuI0kLnIYSzuKRzE8s5FkAIHC/9Et5ETO0CMmQSeqrwzO JCP3qC3Bixz0hvf3eJ7P08X8JhR8RnOjjWc2uWggs3Bvz95VDN66y0SuAN1d8JMB UsHPOLtBuCmXBdG/0tfGl7emYRQ3h2z66qIR+sIMX91vjcEpa+YfIEWrNZ+7gJnJ 9/hR6EZNvcqO82b07YuYD36FXgDSYLq8246/2JyZUA4gx3JCdyu8HGR5ivmdZ6RM +Ym/sGpo6Nr49Ul2LrNY7Cvwud370TY= -----END CERTIFICATE-----Generated at Thu Nov 21 23:41:52 2024 by rpki-client on console-ams.rpki-client.org