$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/db5d4128-fa27-3a18-bfb2-64cf96c831d8.roa File: db5d4128-fa27-3a18-bfb2-64cf96c831d8.roa (raw, json) Hash identifier: FQnCjrC+7/Ajnm/w7S+BOIOfRGjBoYZ9GSC5oDFVNCY= Subject key identifier: 52:44:67:05:08:33:D9:10:16:53:29:DC:E3:51:B2:43:E8:7D:32:3D Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858474C80D70DAF3315359ACA9B80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/db5d4128-fa27-3a18-bfb2-64cf96c831d8.roa Signing time: Sun 22 Sep 2024 13:00:40 +0000 ROA not before: Sun 22 Sep 2024 13:00:40 +0000 ROA not after: Sat 21 Dec 2024 14:00:40 +0000 asID: 701 IP address blocks: 72.85.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:4c:80:d7:0d:af:33:15:35:9a:ca:9b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Sep 22 13:00:40 2024 GMT Not After : Dec 21 14:00:40 2024 GMT Subject: CN=1dcf7f6b-5112-43e7-bac2-17116ed7cddf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:87:f3:29:5f:3b:17:30:24:d0:35:5c:31:b5: 66:66:10:45:e2:e2:b9:80:66:82:e3:85:fe:67:21: 36:44:57:e3:1c:d9:ab:3b:8a:d1:69:ed:1b:a1:25: 88:13:44:f8:45:22:8a:c4:ee:7f:59:65:7a:76:c0: ce:f3:91:bf:6f:17:39:e8:1a:cd:a7:63:df:8d:34: d5:d1:2b:cc:5c:81:07:ca:70:c3:bb:ca:a8:5d:f2: a5:83:01:f3:f8:5d:2d:be:41:f3:5b:d3:2f:70:6e: 9f:d8:91:c7:f8:be:9c:53:bc:49:f0:46:c0:68:12: 0a:6b:00:c7:b6:ff:a5:1f:e8:db:1e:7d:cc:b9:21: 2c:90:f0:a7:56:24:0e:50:aa:b9:3b:1f:f7:18:76: 04:9e:25:81:a4:46:dd:7b:b7:4d:b6:e6:80:03:f7: 09:61:33:06:d9:0d:e5:75:73:4a:b8:92:22:25:b8: c4:01:40:c1:52:2a:78:63:ab:01:3a:e2:82:e9:12: a7:1b:cb:eb:77:1c:76:ef:9b:04:7d:80:ca:0a:df: 6b:1e:16:08:4a:86:f8:26:70:f3:fb:38:18:42:03: 9d:c5:f4:be:31:8e:8d:17:a9:ca:ba:9b:cf:89:83: ce:22:3f:49:72:69:c1:09:24:33:1c:43:d3:7e:bc: 0a:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:44:67:05:08:33:D9:10:16:53:29:DC:E3:51:B2:43:E8:7D:32:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/db5d4128-fa27-3a18-bfb2-64cf96c831d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.85.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:3c:12:11:ca:7b:3d:d3:aa:c6:c5:eb:ad:63:0c:7a:ed:5c: ba:90:1b:a5:ad:97:20:ad:7a:45:cc:7c:49:19:b2:5e:ae:2d: 32:a1:ba:8c:49:e1:be:10:af:a1:ce:1d:c3:f5:a0:e0:fb:4c: a4:e9:ca:1f:bb:a2:17:96:67:41:55:be:f6:7a:85:cb:3f:f4: 35:bd:05:f0:94:88:71:8e:1f:ae:a6:60:df:38:7f:9f:63:1f: 41:ef:86:54:e7:c6:3c:4c:0b:93:53:e3:da:00:49:b0:37:40: 71:6d:5e:65:9d:73:54:9d:4a:57:2f:17:d0:97:84:6c:3b:bd: 39:fa:87:f5:ea:1f:46:38:af:37:ec:09:0a:14:32:88:b2:9a: 9a:b8:97:33:64:7b:4c:60:da:cb:55:8a:fc:68:10:16:06:e1: c8:56:8e:26:73:bb:a2:42:43:09:54:d3:21:6c:4a:af:36:aa: 42:2b:84:40:bd:95:cc:c8:4f:eb:0e:87:e5:cd:87:75:8b:a7: cf:bf:ec:50:07:91:49:60:c2:26:47:78:60:c8:e0:3f:f2:87: db:54:9a:27:6f:4e:5c:37:9e:50:16:43:57:ed:70:6e:3a:4b: 1f:02:b9:d7:0e:02:71:42:67:02:66:be:4f:f8:9f:6e:01:31: a5:4e:e3:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdMgNcNrzMVNZrKm4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI0MDkyMjEzMDA0MFoXDTI0MTIyMTE0MDA0MFowLzEtMCsGA1UEAxMk MWRjZjdmNmItNTExMi00M2U3LWJhYzItMTcxMTZlZDdjZGRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4fzKV87FzAk0DVcMbVmZhBF4uK5gGaC44X+ ZyE2RFfjHNmrO4rRae0boSWIE0T4RSKKxO5/WWV6dsDO85G/bxc56BrNp2PfjTTV 0SvMXIEHynDDu8qoXfKlgwHz+F0tvkHzW9MvcG6f2JHH+L6cU7xJ8EbAaBIKawDH tv+lH+jbHn3MuSEskPCnViQOUKq5Ox/3GHYEniWBpEbde7dNtuaAA/cJYTMG2Q3l dXNKuJIiJbjEAUDBUip4Y6sBOuKC6RKnG8vrdxx275sEfYDKCt9rHhYISob4JnDz +zgYQgOdxfS+MY6NF6nKupvPiYPOIj9JcmnBCSQzHEPTfrwKFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFJEZwUIM9kQFlMp3ONRskPofTI9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZGI1ZDQxMjgtZmEyNy0z YTE4LWJmYjItNjRjZjk2YzgzMWQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHSFWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFA8EhHKez3TqsbF661jDHrtXLqQG6WtlyCtekXMfEkZsl6uLTKhuoxJ 4b4Qr6HOHcP1oOD7TKTpyh+7oheWZ0FVvvZ6hcs/9DW9BfCUiHGOH66mYN84f59j H0HvhlTnxjxMC5NT49oASbA3QHFtXmWdc1SdSlcvF9CXhGw7vTn6h/XqH0Y4rzfs CQoUMoiympq4lzNke0xg2stVivxoEBYG4chWjiZzu6JCQwlU0yFsSq82qkIrhEC9 lczIT+sOh+XNh3WLp8+/7FAHkUlgwiZHeGDI4D/yh9tUmidvTlw3nlAWQ1ftcG46 Sx8CudcOAnFCZwJmvk/4n24BMaVO4+0= -----END CERTIFICATE-----Generated at Thu Nov 21 22:39:57 2024 by rpki-client on console-fra.rpki-client.org