$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/c7ef47fc-e469-30de-8382-067e9d5f6188.roa File: c7ef47fc-e469-30de-8382-067e9d5f6188.roa (raw, json) Hash identifier: xArqB0BMB88Vh2Ggx9eu8qkc1h3JUdU9H0rdr3eM7Ow= Subject key identifier: DB:0F:8B:51:FD:53:B8:E3:27:28:C0:54:E5:D0:47:66:1E:F2:B3:7D Certificate issuer: /CN=9c69b321-69bc-41c4-a6e1-3491dbfc2544 Certificate serial: 010D0C9F4328584793B1121686F0DE259540D280 Authority key identifier: 1E:39:9B:D6:55:34:98:11:7A:EF:34:5A:1F:EF:2F:27:0A:BD:29:AC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/c7ef47fc-e469-30de-8382-067e9d5f6188.roa Signing time: Fri 18 Oct 2024 01:00:31 +0000 ROA not before: Fri 18 Oct 2024 01:00:31 +0000 ROA not after: Thu 16 Jan 2025 02:00:31 +0000 asID: 23470 IP address blocks: 172.96.160.0/24 maxlen: 24 172.96.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/9c69b321-69bc-41c4-a6e1-3491dbfc2544.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/9c69b321-69bc-41c4-a6e1-3491dbfc2544.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:93:b1:12:16:86:f0:de:25:95:40:d2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c69b321-69bc-41c4-a6e1-3491dbfc2544 Validity Not Before: Oct 18 01:00:31 2024 GMT Not After : Jan 16 02:00:31 2025 GMT Subject: CN=4b09d5b0-8f3c-4b98-b6ba-59aed21338e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:fc:79:86:41:c4:ef:31:d2:5d:ce:c8:04:f5: 8b:a4:16:b4:2b:b0:28:08:2f:a2:ec:3c:5e:27:60: aa:5e:53:e5:3f:c8:2c:01:20:14:7c:02:31:c7:d4: 79:d9:57:30:d3:0b:51:a7:75:79:a2:ce:d3:09:04: a7:5d:15:52:6e:e3:b4:bf:72:86:f5:46:d0:9b:95: 7d:2c:c1:ff:72:74:62:43:28:98:60:75:ef:e5:06: 66:e3:2a:d8:e1:dc:99:27:3c:03:ba:a1:b0:3c:6b: d1:ad:07:4f:04:10:1a:4c:79:46:91:2c:4a:19:5e: 92:28:c5:56:a7:c2:c0:ea:4c:6e:a1:d7:bb:5e:11: ec:44:ca:df:ab:85:e7:9a:3c:c6:44:de:27:1e:54: b0:32:d0:29:9e:d4:c8:aa:78:05:0e:b1:bb:b2:73: 8b:95:a7:16:c2:db:2a:9b:4b:42:c2:a4:86:2d:ce: 8e:50:f2:c5:29:cd:00:7f:d6:cb:a8:fc:65:fd:61: bf:9a:37:13:e9:10:23:ca:26:8c:36:51:10:10:0d: 24:28:32:ae:e0:05:d6:f6:53:09:bd:a7:f1:e6:24: dd:e3:11:3d:c2:cb:83:e7:40:8c:08:81:7b:97:f3: fc:fa:ed:9a:21:44:64:4d:ac:e5:19:bf:0e:a0:de: 09:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:0F:8B:51:FD:53:B8:E3:27:28:C0:54:E5:D0:47:66:1E:F2:B3:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/c7ef47fc-e469-30de-8382-067e9d5f6188.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/9c69b321-69bc-41c4-a6e1-3491dbfc2544.crl X509v3 Authority Key Identifier: keyid:1E:39:9B:D6:55:34:98:11:7A:EF:34:5A:1F:EF:2F:27:0A:BD:29:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544.cer sbgp-ipAddrBlock: critical IPv4: 172.96.160.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:33:3b:2f:cd:ea:b6:a5:d4:19:89:4e:59:ee:3f:2a:c0:ab: ad:0f:e9:9d:a0:43:a2:e1:e1:f6:d8:38:57:a7:46:5b:26:fa: b2:08:28:30:f1:c1:41:1d:f2:25:02:12:80:6b:dc:7a:16:23: 23:a5:6e:a8:c7:ef:fa:1a:51:99:f8:fd:55:14:5a:07:43:7c: 67:cd:a1:26:51:27:48:76:3b:52:26:0d:0d:19:a4:11:8e:03: 4e:94:1b:f5:7e:77:41:9f:09:b2:0a:51:21:e0:17:86:0f:f1: ff:f1:3f:54:c0:22:63:dc:f8:66:2a:1e:a6:5e:6d:ef:18:75: 9f:97:32:e6:f1:56:96:d4:eb:7f:fc:e9:17:27:af:c9:c4:0d: 4e:c2:4d:83:83:b5:83:2e:2d:33:4a:7e:d9:6b:29:41:63:44: b8:4c:4b:90:89:70:01:04:db:c8:f3:e5:7d:b1:69:90:c5:da: 0c:db:51:37:0d:1c:6a:7f:72:08:e0:05:4c:91:2c:e2:c8:2e: c0:79:1a:82:12:d9:b4:d6:f9:78:b7:ae:0d:4e:fc:61:40:29: af:8f:0f:86:ae:0b:aa:fe:9c:2a:b7:49:51:fd:e0:e8:74:8d: 32:12:c0:aa:7e:9d:5b:ed:2e:2e:bd:24:ee:2b:e8:6d:6a:41: 59:a6:04:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeTsRIWhvDeJZVA0oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWM2OWIzMjEtNjliYy00MWM0LWE2ZTEtMzQ5MWRiZmMy NTQ0MB4XDTI0MTAxODAxMDAzMVoXDTI1MDExNjAyMDAzMVowLzEtMCsGA1UEAxMk NGIwOWQ1YjAtOGYzYy00Yjk4LWI2YmEtNTlhZWQyMTMzOGUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvx5hkHE7zHSXc7IBPWLpBa0K7AoCC+i7Dxe J2CqXlPlP8gsASAUfAIxx9R52Vcw0wtRp3V5os7TCQSnXRVSbuO0v3KG9UbQm5V9 LMH/cnRiQyiYYHXv5QZm4yrY4dyZJzwDuqGwPGvRrQdPBBAaTHlGkSxKGV6SKMVW p8LA6kxuode7XhHsRMrfq4XnmjzGRN4nHlSwMtApntTIqngFDrG7snOLlacWwtsq m0tCwqSGLc6OUPLFKc0Af9bLqPxl/WG/mjcT6RAjyiaMNlEQEA0kKDKu4AXW9lMJ vafx5iTd4xE9wsuD50CMCIF7l/P8+u2aIURkTazlGb8OoN4JmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNsPi1H9U7jjJyjAVOXQR2Ye8rN9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85YzY5 YjMyMS02OWJjLTQxYzQtYTZlMS0zNDkxZGJmYzI1NDQvYzdlZjQ3ZmMtZTQ2OS0z MGRlLTgzODItMDY3ZTlkNWY2MTg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOWM2OWIzMjEtNjliYy00MWM0LWE2 ZTEtMzQ5MWRiZmMyNTQ0LzljNjliMzIxLTY5YmMtNDFjNC1hNmUxLTM0OTFkYmZj MjU0NC5jcmwwHwYDVR0jBBgwFoAUHjmb1lU0mBF67zRaH+8vJwq9KawwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85YzY5YjMyMS02OWJjLTQxYzQtYTZlMS0zNDkx ZGJmYzI1NDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrGCgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABYzOy/N6ral1BmJTlnuPyrAq60P6Z2gQ6Lh4fbYOFenRlsm+rIIKDDx wUEd8iUCEoBr3HoWIyOlbqjH7/oaUZn4/VUUWgdDfGfNoSZRJ0h2O1ImDQ0ZpBGO A06UG/V+d0GfCbIKUSHgF4YP8f/xP1TAImPc+GYqHqZebe8YdZ+XMubxVpbU63/8 6Rcnr8nEDU7CTYODtYMuLTNKftlrKUFjRLhMS5CJcAEE28jz5X2xaZDF2gzbUTcN HGp/cgjgBUyRLOLILsB5GoIS2bTW+Xi3rg1O/GFAKa+PD4auC6r+nCq3SVH94Oh0 jTISwKp+nVvtLi69JO4r6G1qQVmmBBM= -----END CERTIFICATE-----Generated at Thu Nov 21 21:43:04 2024 by rpki-client on console-ams.rpki-client.org