$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d881d009-cbf8-3a7d-aacb-3abbc815e32e.roa File: d881d009-cbf8-3a7d-aacb-3abbc815e32e.roa (raw, json) Hash identifier: DMa5QwzkSi+aRaanj9dKvcrS/gBewt7mX08wOyvYrJc= Subject key identifier: 09:7F:F4:5D:72:EC:15:E7:86:1C:83:7C:6D:F1:A0:5A:00:77:78:45 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858474C80D32604A1441749D85720 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d881d009-cbf8-3a7d-aacb-3abbc815e32e.roa Signing time: Sun 22 Sep 2024 13:00:40 +0000 ROA not before: Sun 22 Sep 2024 13:00:40 +0000 ROA not after: Sat 21 Dec 2024 14:00:40 +0000 asID: 701 IP address blocks: 71.255.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:4c:80:d3:26:04:a1:44:17:49:d8:57:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Sep 22 13:00:40 2024 GMT Not After : Dec 21 14:00:40 2024 GMT Subject: CN=fce8ef50-5b6c-4448-a7e4-e6c38ace1799 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:12:6b:72:89:77:1f:2a:c3:6b:d3:b8:1b:6d: bf:a6:20:30:91:61:a1:8e:c7:1d:fb:40:4d:2f:fa: 02:20:c3:0d:50:e9:8f:bf:3b:36:ae:d1:85:c7:03: c1:2f:8a:f2:36:ee:be:cd:59:13:a4:fd:8f:47:7a: 41:22:b9:be:5c:83:b6:15:bf:01:6e:e7:9c:70:6f: 85:61:d4:27:65:74:29:9c:2c:5c:20:e2:e0:0a:83: 6f:fa:f5:ec:5f:25:c0:82:ec:df:e4:6d:9f:ef:3c: d6:b0:72:3e:7c:69:9f:fa:6c:dd:97:d6:4d:5c:a0: f5:8d:24:62:54:c4:27:e0:f9:13:15:6a:2d:98:b9: 6c:b9:6a:e6:8d:4d:b1:45:1c:76:59:f5:81:a0:67: 03:77:f4:c0:a4:35:75:ac:b2:1b:c8:27:2b:33:11: cb:ff:04:d2:f5:7a:e2:36:69:d9:cf:d4:53:9d:c0: 43:8d:8a:29:b7:f7:dc:f0:cb:bf:e0:2d:38:4f:19: b0:47:a3:c1:02:dd:d0:bf:2e:e4:0a:b9:ca:ea:a0: 8a:73:40:b9:a7:25:28:a4:a5:1e:65:de:c1:2b:b8: 02:85:52:2a:f6:85:db:70:88:0d:9d:98:05:5f:47: cb:04:b0:c4:06:fa:46:d1:57:7f:f4:4d:3a:1e:7a: 0e:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:7F:F4:5D:72:EC:15:E7:86:1C:83:7C:6D:F1:A0:5A:00:77:78:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d881d009-cbf8-3a7d-aacb-3abbc815e32e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 71.255.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:31:ee:1a:da:3d:c5:4a:39:f5:68:fb:84:cc:f8:bc:09:8b: a2:18:ab:40:ac:09:0f:df:ff:7a:bf:aa:74:28:3e:c5:02:ab: 8c:af:8b:bd:23:82:42:cd:a5:4d:46:ed:d0:01:c0:41:be:09: 6a:ff:2e:de:7f:4d:43:e5:4f:e8:54:98:b6:5b:aa:a3:f2:e9: 47:0f:aa:e4:be:1e:53:b5:93:1a:b8:9d:fa:4a:39:cd:73:e2: b0:90:7e:45:d0:25:55:f2:83:ff:ba:1c:fe:b0:fb:28:43:43: 4e:a5:f9:69:44:24:77:95:68:41:26:72:53:13:d3:8b:02:43: 18:11:86:7a:b3:82:43:f7:f9:00:c8:3a:60:6f:ae:2f:b6:58: 4c:72:69:ad:25:a3:a4:b9:d6:2a:51:e0:d5:1a:2c:3e:7d:43: 79:ae:3a:d5:ca:9d:bd:26:97:2c:74:5b:7e:ef:eb:d7:5e:80: 19:fe:36:f7:46:d0:c4:7d:4c:79:c6:09:c5:63:2f:4a:5f:74: 2d:ee:04:8f:93:62:b4:a1:8c:39:19:3c:23:b5:56:09:db:cb: b5:c5:b2:32:1b:24:62:d3:06:cc:67:5e:e9:f2:af:42:12:91: 6c:9a:54:51:73:de:42:82:7a:48:9e:4e:c6:0c:77:58:df:9f: 1c:44:32:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdMgNMmBKFEF0nYVyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI0MDkyMjEzMDA0MFoXDTI0MTIyMTE0MDA0MFowLzEtMCsGA1UEAxMk ZmNlOGVmNTAtNWI2Yy00NDQ4LWE3ZTQtZTZjMzhhY2UxNzk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3BJrcol3HyrDa9O4G22/piAwkWGhjscd+0BN L/oCIMMNUOmPvzs2rtGFxwPBL4ryNu6+zVkTpP2PR3pBIrm+XIO2Fb8BbueccG+F YdQnZXQpnCxcIOLgCoNv+vXsXyXAguzf5G2f7zzWsHI+fGmf+mzdl9ZNXKD1jSRi VMQn4PkTFWotmLlsuWrmjU2xRRx2WfWBoGcDd/TApDV1rLIbyCcrMxHL/wTS9Xri NmnZz9RTncBDjYopt/fc8Mu/4C04TxmwR6PBAt3Qvy7kCrnK6qCKc0C5pyUopKUe Zd7BK7gChVIq9oXbcIgNnZgFX0fLBLDEBvpG0Vd/9E06HnoOgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAl/9F1y7BXnhhyDfG3xoFoAd3hFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZDg4MWQwMDktY2JmOC0z YTdkLWFhY2ItM2FiYmM4MTVlMzJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQER/8gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALAx7hraPcVKOfVo+4TM+LwJi6IYq0CsCQ/f/3q/qnQoPsUCq4yvi70j gkLNpU1G7dABwEG+CWr/Lt5/TUPlT+hUmLZbqqPy6UcPquS+HlO1kxq4nfpKOc1z 4rCQfkXQJVXyg/+6HP6w+yhDQ06l+WlEJHeVaEEmclMT04sCQxgRhnqzgkP3+QDI OmBvri+2WExyaa0lo6S51ipR4NUaLD59Q3muOtXKnb0mlyx0W37v69degBn+NvdG 0MR9THnGCcVjL0pfdC3uBI+TYrShjDkZPCO1Vgnby7XFsjIbJGLTBsxnXunyr0IS kWyaVFFz3kKCekieTsYMd1jfnxxEMtw= -----END CERTIFICATE-----Generated at Thu Nov 21 23:41:52 2024 by rpki-client on console-ams.rpki-client.org