$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/df1e7984-c8e0-32ca-9422-9d07ad5d8b37.roa File: df1e7984-c8e0-32ca-9422-9d07ad5d8b37.roa (raw, json) Hash identifier: gmedTMeyYr9qn1liR6alJgGDM1VTky/ip7Sg6ftMyzk= Subject key identifier: 00:88:B9:F5:3C:79:22:30:77:A4:76:29:64:1B:62:2F:57:0B:93:CD Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285847E1FA07A78B5FA8EECFB3A260 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/df1e7984-c8e0-32ca-9422-9d07ad5d8b37.roa Signing time: Fri 15 Nov 2024 02:00:28 +0000 ROA not before: Fri 15 Nov 2024 02:00:28 +0000 ROA not after: Thu 13 Feb 2025 02:00:28 +0000 asID: 6167 IP address blocks: 174.216.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e1:fa:07:a7:8b:5f:a8:ee:cf:b3:a2:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Nov 15 02:00:28 2024 GMT Not After : Feb 13 02:00:28 2025 GMT Subject: CN=d67b0357-d936-4452-af69-0f50730fdf35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:71:d2:1b:dc:1b:fc:d9:85:a0:f2:c1:bb:fe: de:97:36:c9:51:e3:ac:6c:eb:a1:73:2f:4e:4c:b0: 1b:b3:e3:2c:5a:06:41:71:d9:c4:79:4c:db:94:bc: 12:7e:59:1e:92:bc:36:3d:bd:ac:71:47:a1:0e:11: 94:1d:ce:de:d3:72:d4:ae:6c:15:f5:d3:c8:dc:81: bb:2d:6f:cb:8a:6b:5c:05:74:3e:f2:59:55:f5:83: 29:9c:66:c7:ae:fc:cb:b8:0e:8c:a1:d5:f0:4c:02: 2f:53:c4:a9:a2:29:96:f4:c5:98:cf:b6:f8:35:47: e0:75:fc:54:ae:38:30:79:c2:b9:d8:6f:60:31:c0: d6:fe:2f:ac:51:8c:13:0f:75:67:10:c5:a5:fb:d1: 2f:db:2d:58:3b:83:29:58:b2:da:e1:70:b2:14:5f: ae:0f:97:15:44:17:af:e9:f3:76:ee:42:61:49:2c: 5b:24:41:c4:51:a0:56:da:9a:ab:bb:cc:8e:23:3f: 13:f9:aa:a4:f8:9f:ba:33:88:0e:30:27:07:c4:c0: 1a:1d:d3:48:f0:8f:c6:92:18:fe:38:82:29:d1:d2: ec:86:a9:4d:1b:94:46:f4:81:91:bd:bb:4b:7e:75: 38:ab:8a:af:32:16:b3:9b:ff:71:22:6e:60:fe:eb: fc:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:88:B9:F5:3C:79:22:30:77:A4:76:29:64:1B:62:2F:57:0B:93:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/df1e7984-c8e0-32ca-9422-9d07ad5d8b37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.216.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:34:26:b0:cd:11:db:c7:46:76:41:50:0b:53:22:75:69:38: 17:10:51:62:ee:d8:50:af:a3:f3:8c:ea:e6:05:14:64:d0:d5: 58:25:d8:bf:13:1d:76:e6:71:77:13:a5:fe:fc:95:79:a4:ce: 4e:98:94:42:79:ae:89:9c:59:68:73:a1:18:42:80:d1:bd:cc: 88:a6:71:80:e2:8f:e7:bc:75:02:f0:d8:a3:c2:f6:f8:76:f9: 55:2e:09:83:fe:15:33:36:4f:18:6c:7d:1d:aa:26:6c:70:bb: 11:ce:b8:7a:93:57:0e:4b:2e:e1:2c:ea:7f:15:7c:9a:ab:3a: d2:75:82:5d:9c:16:8d:82:52:82:21:2a:1e:c5:21:b6:3e:51: af:d9:5c:cd:89:50:62:8e:49:de:e8:d3:ff:c6:a8:02:1c:75: e5:97:7f:80:10:d6:3b:6c:fb:a4:f5:b2:e0:24:c1:78:8f:ea: b4:0d:8a:0c:e7:68:d6:1e:c9:4f:bd:ca:8f:76:23:03:10:2c: f6:fe:ed:b7:3e:fd:3e:17:d2:d7:a8:49:72:13:12:d3:2d:81: ad:3a:09:85:6a:f2:e0:11:76:9f:02:1a:ab:17:b6:06:48:fb: dd:1a:43:14:16:9c:4b:53:90:74:45:2d:b6:7b:f6:3c:36:62: e8:05:57:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfh+geni1+o7s+zomAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI0MTExNTAyMDAyOFoXDTI1MDIxMzAyMDAyOFowLzEtMCsGA1UEAxMk ZDY3YjAzNTctZDkzNi00NDUyLWFmNjktMGY1MDczMGZkZjM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg3HSG9wb/NmFoPLBu/7elzbJUeOsbOuhcy9O TLAbs+MsWgZBcdnEeUzblLwSflkekrw2Pb2scUehDhGUHc7e03LUrmwV9dPI3IG7 LW/LimtcBXQ+8llV9YMpnGbHrvzLuA6ModXwTAIvU8SpoimW9MWYz7b4NUfgdfxU rjgwecK52G9gMcDW/i+sUYwTD3VnEMWl+9Ev2y1YO4MpWLLa4XCyFF+uD5cVRBev 6fN27kJhSSxbJEHEUaBW2pqru8yOIz8T+aqk+J+6M4gOMCcHxMAaHdNI8I/Gkhj+ OIIp0dLshqlNG5RG9IGRvbtLfnU4q4qvMhazm/9xIm5g/uv8NwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFACIufU8eSIwd6R2KWQbYi9XC5PNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZGYxZTc5ODQtYzhlMC0z MmNhLTk0MjItOWQwN2FkNWQ4YjM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErtjwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEU0JrDNEdvHRnZBUAtTInVpOBcQUWLu2FCvo/OM6uYFFGTQ1Vgl2L8T HXbmcXcTpf78lXmkzk6YlEJ5romcWWhzoRhCgNG9zIimcYDij+e8dQLw2KPC9vh2 +VUuCYP+FTM2TxhsfR2qJmxwuxHOuHqTVw5LLuEs6n8VfJqrOtJ1gl2cFo2CUoIh Kh7FIbY+Ua/ZXM2JUGKOSd7o0//GqAIcdeWXf4AQ1jts+6T1suAkwXiP6rQNigzn aNYeyU+9yo92IwMQLPb+7bc+/T4X0teoSXITEtMtga06CYVq8uARdp8CGqsXtgZI +90aQxQWnEtTkHRFLbZ79jw2YugFV5M= -----END CERTIFICATE-----Generated at Thu Nov 21 22:39:58 2024 by rpki-client on console-fra.rpki-client.org