$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f8942720-130a-31b6-8fc0-d586e4dff4a1.roa File: f8942720-130a-31b6-8fc0-d586e4dff4a1.roa (raw, json) Hash identifier: eoOgY9l25rRmPO9t0lXnBfvgPP1cwtZpaH6jycNGRSI= Subject key identifier: F6:95:B8:FF:BF:28:7E:74:08:C5:2F:CB:EB:59:98:33:AD:56:3E:44 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285847012055E1C8E1C3149B970800 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f8942720-130a-31b6-8fc0-d586e4dff4a1.roa Signing time: Mon 26 Aug 2024 13:00:41 +0000 ROA not before: Mon 26 Aug 2024 13:00:41 +0000 ROA not after: Sun 24 Nov 2024 14:00:41 +0000 asID: 6167 IP address blocks: 174.220.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Oct 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:01:20:55:e1:c8:e1:c3:14:9b:97:08:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 26 13:00:41 2024 GMT Not After : Nov 24 14:00:41 2024 GMT Subject: CN=f1ba9e29-211b-4627-94f2-dd1af6e1edb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:d3:77:d7:f1:fd:c3:81:34:fb:ca:0c:b7:dd: f3:fb:94:65:3e:d9:fe:e6:51:a7:ad:4b:a9:1e:9b: 8c:55:81:bc:e6:2b:88:28:63:a0:f3:b3:d5:36:dd: a4:db:aa:83:b3:39:e8:9c:5b:81:96:a7:ac:d7:8f: f8:dc:0e:b2:7c:a9:7d:ce:5a:97:af:94:79:52:14: 9e:14:1b:3e:a4:c2:d4:7a:db:22:3a:0d:5f:39:1f: 5f:2e:c7:79:9a:1e:a9:14:db:fe:39:89:94:2d:75: 6d:c6:e4:92:84:b9:2a:97:63:88:4e:8e:38:78:0e: c8:bf:1f:48:64:e2:a3:ce:f5:11:3c:c5:79:ec:89: 7f:a0:a1:d0:d3:22:30:1a:59:ac:d6:db:2d:b0:2c: eb:d9:0a:75:d3:a9:95:2e:a3:65:e7:54:5c:9b:bd: f9:29:3f:5c:9c:4a:c8:ab:fd:0c:8a:e8:f3:a4:62: 57:af:76:a9:05:50:a3:05:17:25:bb:7c:09:67:aa: a7:a4:7c:cd:45:e8:1c:50:d6:d9:22:11:f4:08:97: 5b:72:5b:06:6a:15:7c:c4:2f:88:18:ed:9b:60:c3: 28:92:b0:1d:9e:fd:5b:32:74:4f:94:c3:ea:42:9e: fb:68:8f:d4:8e:06:a7:9a:a5:d8:38:91:06:fa:fd: fb:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:95:B8:FF:BF:28:7E:74:08:C5:2F:CB:EB:59:98:33:AD:56:3E:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f8942720-130a-31b6-8fc0-d586e4dff4a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.220.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:f6:be:ee:96:a2:86:cd:35:ca:12:76:c1:bb:b5:66:62:b5: a8:30:f6:fb:3d:e7:90:90:2e:60:66:46:92:f9:1f:5b:01:0e: 0c:34:69:50:ac:f5:e3:27:7a:22:b3:a2:91:36:a9:07:c5:da: b5:7a:6f:d6:b4:4c:83:2f:ef:ab:14:04:e8:32:98:f5:e6:c7: 64:c7:3a:e8:c7:95:62:f0:ad:35:5f:aa:9c:82:30:36:90:c9: f5:04:f8:0c:9c:1a:09:e4:0e:11:68:4f:28:cb:39:f4:e6:60: 32:28:2c:22:ed:11:7f:d3:52:9d:f4:05:44:2f:69:7b:e7:87: 02:d2:3a:4e:ef:54:07:71:3f:1d:77:f8:93:4f:e8:8d:80:36: f9:76:1d:ed:6d:7f:a0:d1:7c:83:d5:26:38:78:bd:db:83:09: 25:a2:7f:bc:f9:a4:fe:fd:5b:aa:40:66:30:3b:5a:91:ca:0c: 61:f5:65:2d:76:fe:f2:33:da:73:9c:d2:97:ba:30:99:d5:b3: 20:01:2e:af:3b:2d:d2:0b:b1:54:16:ae:71:e6:7b:ca:5d:5a: 8f:e0:df:28:02:bc:09:8e:fd:de:2a:2a:62:63:ef:23:f0:a9: 9b:21:98:3d:8e:ef:7d:bd:ce:c7:00:8c:01:32:2d:11:6f:2c: 0a:01:72:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcBIFXhyOHDFJuXCAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI0MDgyNjEzMDA0MVoXDTI0MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk ZjFiYTllMjktMjExYi00NjI3LTk0ZjItZGQxYWY2ZTFlZGI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9N31/H9w4E0+8oMt93z+5RlPtn+5lGnrUup HpuMVYG85iuIKGOg87PVNt2k26qDsznonFuBlqes14/43A6yfKl9zlqXr5R5UhSe FBs+pMLUetsiOg1fOR9fLsd5mh6pFNv+OYmULXVtxuSShLkql2OITo44eA7Ivx9I ZOKjzvURPMV57Il/oKHQ0yIwGlms1tstsCzr2Qp106mVLqNl51Rcm735KT9cnErI q/0MiujzpGJXr3apBVCjBRclu3wJZ6qnpHzNRegcUNbZIhH0CJdbclsGahV8xC+I GO2bYMMokrAdnv1bMnRPlMPqQp77aI/UjganmqXYOJEG+v37OQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPaVuP+/KH50CMUvy+tZmDOtVj5EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZjg5NDI3MjAtMTMwYS0z MWI2LThmYzAtZDU4NmU0ZGZmNGExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErtwAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKj2vu6WoobNNcoSdsG7tWZitagw9vs955CQLmBmRpL5H1sBDgw0aVCs 9eMneiKzopE2qQfF2rV6b9a0TIMv76sUBOgymPXmx2THOujHlWLwrTVfqpyCMDaQ yfUE+AycGgnkDhFoTyjLOfTmYDIoLCLtEX/TUp30BUQvaXvnhwLSOk7vVAdxPx13 +JNP6I2ANvl2He1tf6DRfIPVJjh4vduDCSWif7z5pP79W6pAZjA7WpHKDGH1ZS12 /vIz2nOc0pe6MJnVsyABLq87LdILsVQWrnHme8pdWo/g3ygCvAmO/d4qKmJj7yPw qZshmD2O7329zscAjAEyLRFvLAoBcjQ= -----END CERTIFICATE-----Generated at Tue Oct 22 20:18:32 2024 by rpki-client on console-fra.rpki-client.org