$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e09acd9b-bfda-365c-95cd-5d3a226620f4.roa File: e09acd9b-bfda-365c-95cd-5d3a226620f4.roa (raw, json) Hash identifier: xgTkgFcXmGSVAwdMKDq9Hiz16tjnW7UnY8wh9VQoRXw= Subject key identifier: 04:31:11:72:24:93:27:A7:6A:AB:F9:56:8D:81:46:30:F8:CA:65:EA Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285847537B83EBDEF8A8997E4845E0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e09acd9b-bfda-365c-95cd-5d3a226620f4.roa Signing time: Wed 25 Sep 2024 01:00:31 +0000 ROA not before: Wed 25 Sep 2024 01:00:31 +0000 ROA not after: Tue 24 Dec 2024 02:00:31 +0000 asID: 701 IP address blocks: 71.240.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:53:7b:83:eb:de:f8:a8:99:7e:48:45:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Sep 25 01:00:31 2024 GMT Not After : Dec 24 02:00:31 2024 GMT Subject: CN=c0a94403-5314-4251-b9a3-9025a1bc5bde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:34:c3:e6:66:81:65:76:54:2b:69:6e:9c:04: 66:07:2b:06:65:5f:9f:3a:22:98:73:f2:76:3a:ad: bb:9f:5e:83:f5:a7:14:5c:66:4a:8d:4a:1e:bb:86: 17:94:e3:80:d1:5f:71:bf:34:fb:30:04:e8:16:a9: c1:e9:8f:39:d0:0a:60:01:19:19:67:aa:80:c4:6e: 23:a1:fb:26:1a:29:f6:62:40:80:d6:ca:b7:1d:f0: 73:2d:0e:56:98:8a:bc:f8:04:01:b5:fa:61:43:24: fa:2d:a4:e4:10:ee:8b:97:09:28:cb:93:6a:f2:10: 75:9d:6a:1a:96:91:12:35:3e:10:b0:69:7e:04:16: 5e:e0:31:8e:6d:75:a3:f8:2c:c9:d5:01:29:81:20: 79:c9:98:05:c5:5a:9f:ab:9d:90:a3:57:cc:ed:62: b6:42:d4:c9:e5:e8:be:c7:5b:ad:66:a4:df:c0:15: ba:31:e8:f3:93:7d:b6:c2:c4:1c:b7:7d:36:aa:6f: c7:9c:de:a7:6f:c2:8c:50:79:62:5f:7c:32:e7:3f: c6:2f:94:ae:9e:1c:75:71:2b:f0:20:25:27:aa:6b: 2e:5a:49:ae:11:78:0b:7a:55:bf:31:5c:45:2f:e5: 5b:29:ca:49:aa:aa:04:e1:47:06:bc:34:30:34:8c: dd:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:31:11:72:24:93:27:A7:6A:AB:F9:56:8D:81:46:30:F8:CA:65:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e09acd9b-bfda-365c-95cd-5d3a226620f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 71.240.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:c3:b8:a3:10:ec:e2:34:81:f5:64:43:42:d2:8f:a7:ee:b0: 81:f4:7f:63:f4:df:5a:6d:c4:ca:a0:49:c1:ba:1d:9f:64:a9: d7:3e:a8:fd:9b:37:d0:19:47:29:e2:60:ed:59:c6:29:e2:a3: 12:f9:85:83:c5:cd:f7:d0:52:91:e4:d3:18:15:99:8b:6b:4f: 3b:c4:d7:09:1e:c3:d5:20:9e:bd:ad:21:0d:94:08:e0:49:fd: 0b:69:83:68:44:25:39:f9:79:a0:c4:bd:1e:fd:03:03:b9:a9: c6:8f:9a:41:9a:92:76:73:53:02:ea:96:c2:1d:a5:77:8e:b6: de:3e:6c:ff:52:6d:cc:38:db:0b:20:7d:9d:2d:d8:78:12:91: a1:f7:7e:fc:be:b7:23:4c:2d:c5:58:0f:51:eb:e7:8c:6a:83: 00:59:08:0c:00:58:d7:9d:4a:b5:b5:dd:9e:0a:c1:64:bd:34: e5:95:e7:e3:1d:7f:48:64:c7:3f:b4:63:64:c0:ec:37:0f:8e: 0a:3a:61:de:b8:56:46:ab:7c:66:de:8f:ff:29:0f:e5:59:40: aa:af:5d:ca:76:16:46:61:de:4e:09:11:99:d2:e9:5b:c2:4d: ac:10:f5:ba:79:84:c5:fa:1b:2e:26:35:78:5c:b5:cb:68:00: a4:db:7d:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdTe4Pr3viomX5IReAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI0MDkyNTAxMDAzMVoXDTI0MTIyNDAyMDAzMVowLzEtMCsGA1UEAxMk YzBhOTQ0MDMtNTMxNC00MjUxLWI5YTMtOTAyNWExYmM1YmRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDTD5maBZXZUK2lunARmBysGZV+fOiKYc/J2 Oq27n16D9acUXGZKjUoeu4YXlOOA0V9xvzT7MAToFqnB6Y850ApgARkZZ6qAxG4j ofsmGin2YkCA1sq3HfBzLQ5WmIq8+AQBtfphQyT6LaTkEO6Llwkoy5Nq8hB1nWoa lpESNT4QsGl+BBZe4DGObXWj+CzJ1QEpgSB5yZgFxVqfq52Qo1fM7WK2QtTJ5ei+ x1utZqTfwBW6Mejzk322wsQct302qm/HnN6nb8KMUHliX3wy5z/GL5Sunhx1cSvw ICUnqmsuWkmuEXgLelW/MVxFL+VbKcpJqqoE4UcGvDQwNIzdDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAQxEXIkkyenaqv5Vo2BRjD4ymXqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZTA5YWNkOWItYmZkYS0z NjVjLTk1Y2QtNWQzYTIyNjYyMGY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHR/AAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEDDuKMQ7OI0gfVkQ0LSj6fusIH0f2P031ptxMqgScG6HZ9kqdc+qP2b N9AZRyniYO1ZxinioxL5hYPFzffQUpHk0xgVmYtrTzvE1wkew9Ugnr2tIQ2UCOBJ /Qtpg2hEJTn5eaDEvR79AwO5qcaPmkGaknZzUwLqlsIdpXeOtt4+bP9Sbcw42wsg fZ0t2HgSkaH3fvy+tyNMLcVYD1Hr54xqgwBZCAwAWNedSrW13Z4KwWS9NOWV5+Md f0hkxz+0Y2TA7DcPjgo6Yd64VkarfGbej/8pD+VZQKqvXcp2FkZh3k4JEZnS6VvC TawQ9bp5hMX6Gy4mNXhctctoAKTbfac= -----END CERTIFICATE-----Generated at Thu Nov 21 23:41:54 2024 by rpki-client on console-ams.rpki-client.org