$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1e6ff693-73d2-3f96-8db3-7727cb7e12d8.roa File: 1e6ff693-73d2-3f96-8db3-7727cb7e12d8.roa (raw, json) Hash identifier: EtTCxitCvgg1GPu1JXvJLpYct1HOJPKl7zQNFBXYEEY= Subject key identifier: 48:7A:9D:F5:35:99:E1:BA:4F:2F:60:5E:90:65:7B:17:48:07:9D:28 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584784567F11A04DF76847938480 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1e6ff693-73d2-3f96-8db3-7727cb7e12d8.roa Signing time: Sat 12 Oct 2024 13:00:42 +0000 ROA not before: Sat 12 Oct 2024 13:00:42 +0000 ROA not after: Fri 10 Jan 2025 14:00:42 +0000 asID: 9009 IP address blocks: 172.94.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:84:56:7f:11:a0:4d:f7:68:47:93:84:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 12 13:00:42 2024 GMT Not After : Jan 10 14:00:42 2025 GMT Subject: CN=3701a6e8-3720-4e66-89bf-c6d97963b868 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:5a:27:b8:9c:39:7c:a9:73:22:3f:5f:19:cc: fa:63:a2:a7:21:90:dc:89:11:8c:2f:f3:1c:ba:39: 9d:64:c9:c1:4d:a3:de:ad:1e:84:32:3f:c1:64:d9: 55:8f:36:48:09:1b:7a:79:6f:63:d7:83:cf:29:41: 84:22:bc:94:82:42:d0:b5:68:20:00:c5:b8:08:5b: 1e:cf:f7:53:57:bf:f0:f5:da:a8:97:42:e1:21:18: c6:f6:71:f0:e3:7d:5a:c1:07:19:09:05:3d:97:37: 00:90:dc:1e:23:05:f8:35:5a:6b:37:99:1d:af:6c: 94:8a:d1:ae:e7:bd:e7:3d:ca:d1:b2:b2:28:3a:2c: a0:77:9d:99:c2:14:31:0e:11:ef:41:6e:d1:68:c0: ef:1d:f0:78:7a:b2:44:5a:eb:3a:c6:c9:f1:d0:ce: c8:fd:74:38:4d:fe:a9:62:cd:88:44:bb:82:7a:dc: 17:9a:48:dd:20:13:17:d0:5c:db:7c:4f:6c:43:67: 00:c9:4f:f2:17:34:f9:f3:bb:91:1a:a5:b3:f5:d3: fb:9b:17:97:dd:e0:ed:ec:d9:b2:46:85:c7:78:b2: e6:78:b3:b0:ab:3a:8e:54:2c:66:0a:30:78:00:5a: f1:f0:42:57:a0:9a:f0:5a:f8:15:df:ca:e7:09:15: 9b:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:7A:9D:F5:35:99:E1:BA:4F:2F:60:5E:90:65:7B:17:48:07:9D:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1e6ff693-73d2-3f96-8db3-7727cb7e12d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:22:f9:9b:3a:f7:b0:5e:4b:33:ab:95:11:82:fa:99:56:0e: 92:0e:60:ad:c3:28:10:b9:d6:a8:0f:85:9a:3c:95:92:7c:fb: 0f:29:e6:7c:36:a9:fc:67:d4:af:72:11:cc:26:d7:b3:ce:bc: 8b:45:b7:43:43:ab:bd:46:12:d1:90:f2:9a:dc:bb:55:cf:4d: 8c:d0:e8:59:1d:e4:a4:58:94:41:b8:e1:fb:b0:1e:b3:80:72: ac:13:a0:7d:56:6e:65:b3:64:54:d3:60:75:06:18:03:e3:24: 39:ba:63:e0:11:c2:08:f0:fc:1e:8d:a8:1c:17:ca:d7:0f:51: 22:38:45:8e:2e:66:18:c9:28:17:37:87:49:24:3c:0e:3a:46: de:87:4a:d4:af:60:70:84:f0:c7:17:eb:1b:6c:3f:2d:39:44: f9:09:56:78:68:fa:6b:f1:b9:77:4d:ba:f2:11:e7:4a:a4:4f: e7:08:60:0f:d7:80:67:12:9d:63:49:61:a2:71:b1:37:5c:b8: 13:2e:c9:5f:2b:3d:be:5e:c9:db:92:ee:1a:5f:6c:2c:70:c6: 3f:ea:ac:0b:55:b1:17:9b:34:79:4e:82:23:aa:9b:67:82:9f: c3:e9:93:42:42:da:7b:bb:24:11:95:56:86:da:2b:65:2b:6c: 6b:34:ae:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeEVn8RoE33aEeThIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI0MTAxMjEzMDA0MloXDTI1MDExMDE0MDA0MlowLzEtMCsGA1UEAxMk MzcwMWE2ZTgtMzcyMC00ZTY2LTg5YmYtYzZkOTc5NjNiODY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVonuJw5fKlzIj9fGcz6Y6KnIZDciRGML/Mc ujmdZMnBTaPerR6EMj/BZNlVjzZICRt6eW9j14PPKUGEIryUgkLQtWggAMW4CFse z/dTV7/w9dqol0LhIRjG9nHw431awQcZCQU9lzcAkNweIwX4NVprN5kdr2yUitGu 573nPcrRsrIoOiygd52ZwhQxDhHvQW7RaMDvHfB4erJEWus6xsnx0M7I/XQ4Tf6p Ys2IRLuCetwXmkjdIBMX0FzbfE9sQ2cAyU/yFzT587uRGqWz9dP7mxeX3eDt7Nmy RoXHeLLmeLOwqzqOVCxmCjB4AFrx8EJXoJrwWvgV38rnCRWbGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEh6nfU1meG6Ty9gXpBlexdIB50oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMWU2ZmY2OTMtNzNkMi0z Zjk2LThkYjMtNzcyN2NiN2UxMmQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4dMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG8i+Zs697BeSzOrlRGC+plWDpIOYK3DKBC51qgPhZo8lZJ8+w8p5nw2 qfxn1K9yEcwm17POvItFt0NDq71GEtGQ8prcu1XPTYzQ6Fkd5KRYlEG44fuwHrOA cqwToH1WbmWzZFTTYHUGGAPjJDm6Y+ARwgjw/B6NqBwXytcPUSI4RY4uZhjJKBc3 h0kkPA46Rt6HStSvYHCE8McX6xtsPy05RPkJVnho+mvxuXdNuvIR50qkT+cIYA/X gGcSnWNJYaJxsTdcuBMuyV8rPb5eyduS7hpfbCxwxj/qrAtVsRebNHlOgiOqm2eC n8Ppk0JC2nu7JBGVVobaK2UrbGs0rhc= -----END CERTIFICATE-----Generated at Sun Nov 24 23:08:19 2024 by rpki-client on console-ams.rpki-client.org