$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/15740c77-b589-342a-acb9-63eb1736faf5.roa File: 15740c77-b589-342a-acb9-63eb1736faf5.roa (raw, json) Hash identifier: W4cBR37gydQyGoV5/aG7yTqw4qrTpr59tBL7dmX8R5Y= Subject key identifier: 58:C9:77:D5:E2:80:E4:9F:A4:65:A3:0C:9B:B3:11:AC:91:C7:96:60 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285847DC64AB907F4EEE9AA866A780 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/15740c77-b589-342a-acb9-63eb1736faf5.roa Signing time: Wed 13 Nov 2024 02:00:28 +0000 ROA not before: Wed 13 Nov 2024 02:00:28 +0000 ROA not after: Tue 11 Feb 2025 02:00:28 +0000 asID: 212238 IP address blocks: 172.94.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:dc:64:ab:90:7f:4e:ee:9a:a8:66:a7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Nov 13 02:00:28 2024 GMT Not After : Feb 11 02:00:28 2025 GMT Subject: CN=032cce54-2fb2-4159-bd3b-1194bc88674c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:1b:37:82:61:08:2d:b5:d5:25:c4:e3:a7:3f: 84:7f:94:f1:92:c4:cd:79:a1:94:80:63:fc:9b:29: cd:79:b4:80:89:b7:04:1a:7e:fc:b7:19:76:1e:b3: dd:c8:e3:1a:a8:fe:40:00:31:39:38:da:62:e7:ef: b1:82:58:6f:7a:32:fe:93:be:55:08:08:9f:62:4e: 94:28:b2:85:2b:79:c1:cc:57:40:b1:90:51:29:d9: 7f:c1:f1:d4:0c:25:1c:b6:70:19:bf:08:9d:d8:78: 25:09:3c:5f:97:f8:7a:ae:9c:c9:95:1d:43:a5:55: 34:a5:b0:95:7f:da:0f:d9:c6:d0:ad:6c:59:c0:ec: 5f:64:9e:9c:59:7c:4f:30:a5:e5:b0:aa:3d:18:c0: 23:4c:3c:48:b4:da:7f:42:d9:7e:40:10:09:74:a5: 95:ae:f2:f5:da:75:f6:57:25:91:ae:4e:31:3b:14: 0b:8f:82:bd:c2:2f:45:d4:54:50:d3:82:51:16:99: d2:71:51:61:11:13:3c:88:7a:28:08:a5:e6:0c:14: 86:c0:74:b4:8b:8d:b6:eb:33:17:58:01:d3:49:dc: bc:0e:9b:bb:ec:ba:05:a8:4b:46:60:99:55:2a:ba: 79:8e:8e:6e:9a:3f:e2:d1:b9:bb:34:96:23:48:77: fc:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:C9:77:D5:E2:80:E4:9F:A4:65:A3:0C:9B:B3:11:AC:91:C7:96:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/15740c77-b589-342a-acb9-63eb1736faf5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:95:d5:3f:24:20:64:35:a6:fe:91:fa:61:10:7e:a8:10:83: 7d:22:34:58:5b:c1:0c:66:fa:c2:57:00:cb:0b:6b:84:17:4d: bc:d1:05:7f:03:43:09:89:81:d2:a8:99:ae:bf:18:46:b3:ba: 5b:2b:69:aa:f3:4b:ad:6e:35:18:d1:1f:7d:80:18:d8:1c:b2: 2c:13:e0:28:58:9d:70:c8:08:35:b6:dd:d6:0b:96:9a:0d:73: bf:34:4d:43:fe:a6:05:95:34:0b:d4:70:63:a9:5b:36:ca:b5: 48:30:26:58:30:ce:d7:49:92:b8:f2:d0:a9:aa:d2:c2:ed:7d: 6d:e6:59:b0:36:b2:ad:ea:e6:00:10:5c:7f:6f:74:bc:19:44: 34:1c:27:5d:75:fe:6f:2d:03:46:9c:c5:5c:a9:b5:00:f8:68: 7b:4d:06:27:4a:d4:e8:19:af:ee:8a:e2:98:bd:a0:2a:87:ef: b4:1a:1f:e8:32:9d:6b:19:5d:d1:19:1e:ef:49:4e:88:cd:ee: 61:ac:31:61:49:49:47:cf:46:2f:7e:16:dc:1a:0f:a8:0d:58: 25:fd:ac:9c:59:53:5f:b1:eb:89:13:07:da:4b:a7:fe:15:64: 12:93:27:b2:ff:20:fb:05:74:4e:2d:1c:43:a6:2f:9e:69:2e: 06:7c:62:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfcZKuQf07umqhmp4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI0MTExMzAyMDAyOFoXDTI1MDIxMTAyMDAyOFowLzEtMCsGA1UEAxMk MDMyY2NlNTQtMmZiMi00MTU5LWJkM2ItMTE5NGJjODg2NzRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRs3gmEILbXVJcTjpz+Ef5TxksTNeaGUgGP8 mynNebSAibcEGn78txl2HrPdyOMaqP5AADE5ONpi5++xglhvejL+k75VCAifYk6U KLKFK3nBzFdAsZBRKdl/wfHUDCUctnAZvwid2HglCTxfl/h6rpzJlR1DpVU0pbCV f9oP2cbQrWxZwOxfZJ6cWXxPMKXlsKo9GMAjTDxItNp/Qtl+QBAJdKWVrvL12nX2 VyWRrk4xOxQLj4K9wi9F1FRQ04JRFpnScVFhERM8iHooCKXmDBSGwHS0i4226zMX WAHTSdy8Dpu77LoFqEtGYJlVKrp5jo5umj/i0bm7NJYjSHf8cQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFjJd9XigOSfpGWjDJuzEayRx5ZgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMTU3NDBjNzctYjU4OS0z NDJhLWFjYjktNjNlYjE3MzZmYWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF5WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADaV1T8kIGQ1pv6R+mEQfqgQg30iNFhbwQxm+sJXAMsLa4QXTbzRBX8D QwmJgdKoma6/GEazulsraarzS61uNRjRH32AGNgcsiwT4ChYnXDICDW23dYLlpoN c780TUP+pgWVNAvUcGOpWzbKtUgwJlgwztdJkrjy0Kmq0sLtfW3mWbA2sq3q5gAQ XH9vdLwZRDQcJ111/m8tA0acxVyptQD4aHtNBidK1OgZr+6K4pi9oCqH77QaH+gy nWsZXdEZHu9JTojN7mGsMWFJSUfPRi9+FtwaD6gNWCX9rJxZU1+x64kTB9pLp/4V ZBKTJ7L/IPsFdE4tHEOmL55pLgZ8Yjw= -----END CERTIFICATE-----Generated at Fri Nov 22 04:22:53 2024 by rpki-client on console-fra.rpki-client.org