$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f0f3eac0-d4f4-33d5-8658-eb62ed60b007.roa File: f0f3eac0-d4f4-33d5-8658-eb62ed60b007.roa (raw, json) Hash identifier: oEk73IREz+nB8sBf706NZD75HcFMz1z5tt4IEpXx+Rw= Subject key identifier: D3:DA:01:E1:39:35:12:DF:97:99:62:88:7F:58:35:7E:A4:E1:9E:E1 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285847E1FA0548F58258EEA1396C80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f0f3eac0-d4f4-33d5-8658-eb62ed60b007.roa Signing time: Fri 15 Nov 2024 02:00:28 +0000 ROA not before: Fri 15 Nov 2024 02:00:28 +0000 ROA not after: Thu 13 Feb 2025 02:00:28 +0000 asID: 6167 IP address blocks: 174.214.176.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e1:fa:05:48:f5:82:58:ee:a1:39:6c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Nov 15 02:00:28 2024 GMT Not After : Feb 13 02:00:28 2025 GMT Subject: CN=3bb70fc9-29d3-4a0c-bb23-2565525a490a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:2a:57:1e:de:f1:cc:0c:de:3a:ba:0b:cd:e1: 22:56:fd:35:74:73:74:31:cd:61:f7:2a:3a:0b:1f: d8:a7:bd:20:4e:24:20:f7:b0:54:81:5a:35:9b:66: c1:4c:09:76:14:70:78:10:63:f6:24:03:47:ad:6e: c1:90:74:a0:a2:20:ea:d2:fa:58:cc:8b:41:39:09: a1:26:7e:43:3b:2a:30:89:52:6f:5a:84:ec:83:5f: 25:a6:58:e2:91:85:c3:29:0c:44:e1:36:aa:f7:21: 45:c6:e8:a9:ea:3a:1e:d6:26:fe:f5:8d:e2:29:f6: ba:e2:64:91:38:5b:38:fa:13:cc:3a:4d:0c:45:da: 5b:e0:dc:55:11:61:f0:79:4a:b5:70:4b:f5:6d:f0: a3:a1:68:2e:95:9d:77:dc:3d:d2:07:1c:8c:5b:68: bc:42:25:f4:f1:8e:a0:10:aa:11:62:10:03:4a:21: 72:c5:40:c5:4d:ee:86:01:cb:10:45:7e:fe:81:05: ea:74:fc:89:b7:63:62:76:61:ab:d9:8c:9a:bc:44: 0a:86:04:1e:76:bc:af:7d:fb:dd:77:e4:c5:3e:0e: 90:c1:28:5c:b0:c0:fc:db:0a:77:18:0a:04:9a:6c: 8c:f1:35:ef:26:00:90:25:18:82:ec:34:dd:e3:fa: 67:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:DA:01:E1:39:35:12:DF:97:99:62:88:7F:58:35:7E:A4:E1:9E:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f0f3eac0-d4f4-33d5-8658-eb62ed60b007.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.214.176.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:7e:0a:34:79:f6:c5:dd:6a:dc:8b:0b:fa:c7:f8:3c:40:f6: 1e:21:f7:16:d3:12:2c:9c:9b:87:b5:13:b6:68:a6:67:fe:81: 50:07:ba:0c:ae:0c:71:b8:a4:9a:66:2e:19:c7:0d:96:42:5f: c2:19:a0:94:91:5b:fd:c5:7f:b2:48:4b:df:52:94:66:c2:02: 7b:7a:2a:b6:69:8e:1e:54:fa:fa:0f:a3:0d:0d:6c:1a:17:46: ea:47:3a:2d:2e:e5:74:15:28:a3:19:d7:3f:9a:fe:fc:88:c2: bc:68:3a:79:42:51:94:d0:60:34:6b:02:d4:02:79:d6:02:a1: 4b:91:dc:8c:2b:0c:16:dc:ee:fe:a9:5b:21:b2:5e:29:ad:c2: 02:83:71:4d:af:03:f1:4b:a1:f7:f1:d6:86:8a:b9:93:ec:fd: 73:6a:77:f3:ee:ef:e1:11:6f:dc:38:b2:43:0e:b3:92:ec:96: 30:bf:43:58:08:5f:00:c0:2e:bc:39:fe:5f:dc:c8:be:dc:f5: fd:44:61:36:2a:31:21:12:84:f9:f6:a9:7e:84:b7:b1:e6:20: 19:f8:b6:86:cc:f0:b1:f0:fe:66:ab:3e:2b:16:00:ed:a3:78: 5a:4d:64:33:f8:0d:14:d7:64:d8:ee:cb:39:5d:d2:ce:50:94: 9a:fa:48:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfh+gVI9YJY7qE5bIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI0MTExNTAyMDAyOFoXDTI1MDIxMzAyMDAyOFowLzEtMCsGA1UEAxMk M2JiNzBmYzktMjlkMy00YTBjLWJiMjMtMjU2NTUyNWE0OTBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSpXHt7xzAzeOroLzeEiVv01dHN0Mc1h9yo6 Cx/Yp70gTiQg97BUgVo1m2bBTAl2FHB4EGP2JANHrW7BkHSgoiDq0vpYzItBOQmh Jn5DOyowiVJvWoTsg18lpljikYXDKQxE4Taq9yFFxuip6joe1ib+9Y3iKfa64mSR OFs4+hPMOk0MRdpb4NxVEWHweUq1cEv1bfCjoWgulZ133D3SBxyMW2i8QiX08Y6g EKoRYhADSiFyxUDFTe6GAcsQRX7+gQXqdPyJt2NidmGr2YyavEQKhgQedryvffvd d+TFPg6QwShcsMD82wp3GAoEmmyM8TXvJgCQJRiC7DTd4/pnnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNPaAeE5NRLfl5liiH9YNX6k4Z7hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZjBmM2VhYzAtZDRmNC0z M2Q1LTg2NTgtZWI2MmVkNjBiMDA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrtawMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACV+CjR59sXdatyLC/rH+DxA9h4h9xbTEiycm4e1E7Zopmf+gVAHugyu DHG4pJpmLhnHDZZCX8IZoJSRW/3Ff7JIS99SlGbCAnt6KrZpjh5U+voPow0NbBoX RupHOi0u5XQVKKMZ1z+a/vyIwrxoOnlCUZTQYDRrAtQCedYCoUuR3IwrDBbc7v6p WyGyXimtwgKDcU2vA/FLoffx1oaKuZPs/XNqd/Pu7+ERb9w4skMOs5LsljC/Q1gI XwDALrw5/l/cyL7c9f1EYTYqMSEShPn2qX6Et7HmIBn4tobM8LHw/marPisWAO2j eFpNZDP4DRTXZNjuyzld0s5QlJr6SM8= -----END CERTIFICATE-----Generated at Thu Nov 21 23:41:57 2024 by rpki-client on console-ams.rpki-client.org