$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/08340f91-5c11-3164-9641-ece7f93755e1.roa File: 08340f91-5c11-3164-9641-ece7f93755e1.roa (raw, json) Hash identifier: tuc4oksMfRH9z23mt2uTBcs4ofGT4vfihYBTGs27wyc= Subject key identifier: D6:EB:3E:0E:3A:05:E0:59:F7:CB:71:11:03:04:17:8E:06:59:44:C1 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F432858476B363F39EAC8B601A719DA80 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/08340f91-5c11-3164-9641-ece7f93755e1.roa Signing time: Thu 03 Oct 2024 13:00:41 +0000 ROA not before: Thu 03 Oct 2024 13:00:41 +0000 ROA not after: Wed 01 Jan 2025 14:00:41 +0000 asID: 9009 IP address blocks: 172.94.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:6b:36:3f:39:ea:c8:b6:01:a7:19:da:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 3 13:00:41 2024 GMT Not After : Jan 1 14:00:41 2025 GMT Subject: CN=b567975d-4290-4df0-9a12-03467723c295 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e1:18:32:3e:f2:bd:25:3b:90:e4:35:7b:d8: 01:36:b8:c8:c9:98:b5:8b:11:bc:3c:e8:2c:42:90: 4d:c6:7d:c7:71:3f:42:b4:e2:80:8e:98:d5:28:ab: bf:d8:bf:26:2d:ab:76:29:15:eb:48:89:a0:ac:fa: af:69:ce:e8:22:84:53:5c:a1:5a:b3:67:d0:c2:6c: 4c:3a:1b:27:f6:dc:b0:9a:6e:b4:bf:79:f1:07:89: 72:81:1d:89:8a:c6:da:07:e5:6e:18:9b:5d:11:c9: 1d:83:ca:d5:1b:0a:9c:df:6f:74:f0:c0:5b:fc:a7: 3d:c4:b1:f9:4f:05:05:74:73:75:46:28:20:0f:45: 24:cf:60:37:9c:b3:0d:38:c8:d4:2d:40:1d:eb:7a: d8:63:4b:4b:2e:24:d6:b0:98:f6:66:a4:ba:36:22: 83:fe:01:5f:e8:f1:c9:bc:f9:36:6a:5f:bc:cd:4a: a4:c7:4d:68:f3:b7:4e:dc:88:5c:d7:35:9d:66:ac: dd:09:f8:42:22:0c:b3:f6:d7:c9:82:8b:9d:8f:88: 53:7c:2d:ee:b4:b0:84:73:06:07:ab:58:a3:0b:9b: ca:cf:eb:40:07:3b:08:53:d2:95:94:30:fa:e2:c9: 16:e1:d5:6a:fe:84:34:02:74:a5:73:f4:a1:81:20: 26:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:EB:3E:0E:3A:05:E0:59:F7:CB:71:11:03:04:17:8E:06:59:44:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/08340f91-5c11-3164-9641-ece7f93755e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:60:96:b0:6a:e6:49:6f:ba:c1:74:82:67:f3:ce:ef:e2:dc: 13:bb:77:64:d3:ac:8c:47:1f:8e:9f:41:f6:57:06:38:03:fc: 70:94:ff:c4:a3:2e:84:7a:2c:8c:d9:0c:7f:19:09:9a:6f:0d: 10:da:d0:0d:62:c4:65:1c:77:0f:a3:53:94:bc:61:29:8e:e3: 29:35:9a:10:a0:c2:0f:1b:8e:47:ef:7b:67:f4:ad:89:59:f4: 93:32:2a:f4:43:b2:27:31:9c:4d:31:36:10:71:c1:dd:ae:c2: 1e:31:22:67:a8:fc:e6:49:bf:43:f9:c1:c3:0b:a0:ab:2f:12: 96:ec:86:b2:38:2c:82:4f:cb:76:45:fd:3b:b4:41:7f:bd:4f: 6b:34:ed:f2:c2:44:6b:3d:2f:be:17:fa:23:93:4c:bf:4d:89: 5e:ac:98:f0:6e:32:fc:3d:96:8e:ee:b2:80:23:e1:f9:8b:5d: f2:c8:ea:de:91:7d:fa:2c:de:1a:b1:50:d2:9a:d8:d5:03:d2: cc:69:b3:8e:1f:0b:9c:ba:2f:cd:0a:07:5f:73:08:a0:b2:b3: 5c:97:19:bb:1e:b5:e6:40:48:42:a8:44:64:7c:83:8c:50:9f: 21:57:9f:18:1f:47:b8:ce:43:a1:00:64:b5:23:8e:e1:65:e8: ea:7e:cf:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdrNj856si2AacZ2oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI0MTAwMzEzMDA0MVoXDTI1MDEwMTE0MDA0MVowLzEtMCsGA1UEAxMk YjU2Nzk3NWQtNDI5MC00ZGYwLTlhMTItMDM0Njc3MjNjMjk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+EYMj7yvSU7kOQ1e9gBNrjIyZi1ixG8POgs QpBNxn3HcT9CtOKAjpjVKKu/2L8mLat2KRXrSImgrPqvac7oIoRTXKFas2fQwmxM Ohsn9tywmm60v3nxB4lygR2JisbaB+VuGJtdEckdg8rVGwqc32908MBb/Kc9xLH5 TwUFdHN1RiggD0Ukz2A3nLMNOMjULUAd63rYY0tLLiTWsJj2ZqS6NiKD/gFf6PHJ vPk2al+8zUqkx01o87dO3Ihc1zWdZqzdCfhCIgyz9tfJgoudj4hTfC3utLCEcwYH q1ijC5vKz+tABzsIU9KVlDD64skW4dVq/oQ0AnSlc/ShgSAmxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNbrPg46BeBZ98txEQMEF44GWUTBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMDgzNDBmOTEtNWMxMS0z MTY0LTk2NDEtZWNlN2Y5Mzc1NWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4mMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA1glrBq5klvusF0gmfzzu/i3BO7d2TTrIxHH46fQfZXBjgD/HCU/8Sj LoR6LIzZDH8ZCZpvDRDa0A1ixGUcdw+jU5S8YSmO4yk1mhCgwg8bjkfve2f0rYlZ 9JMyKvRDsicxnE0xNhBxwd2uwh4xImeo/OZJv0P5wcMLoKsvEpbshrI4LIJPy3ZF /Tu0QX+9T2s07fLCRGs9L74X+iOTTL9NiV6smPBuMvw9lo7usoAj4fmLXfLI6t6R ffos3hqxUNKa2NUD0sxps44fC5y6L80KB19zCKCys1yXGbseteZASEKoRGR8g4xQ nyFXnxgfR7jOQ6EAZLUjjuFl6Op+z9U= -----END CERTIFICATE-----Generated at Sun Nov 24 23:58:59 2024 by rpki-client on console-fra.rpki-client.org