$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/22845b30-572c-348e-9f79-8615080a5a69.roa File: 22845b30-572c-348e-9f79-8615080a5a69.roa (raw, json) Hash identifier: 3a2Wv6Sg9tt4i1WltgKZPF2b9aFYrPGcaEhs15BMH4o= Subject key identifier: 80:AD:5C:99:49:EB:3D:A0:13:65:87:EF:27:4D:1F:F7:88:A4:3E:C6 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285847F3CE4A9307C86E42E7C6F100 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/22845b30-572c-348e-9f79-8615080a5a69.roa Signing time: Thu 21 Nov 2024 11:17:02 +0000 ROA not before: Thu 21 Nov 2024 11:17:02 +0000 ROA not after: Wed 19 Feb 2025 11:17:02 +0000 asID: 53356 IP address blocks: 172.94.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f3:ce:4a:93:07:c8:6e:42:e7:c6:f1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Nov 21 11:17:02 2024 GMT Not After : Feb 19 11:17:02 2025 GMT Subject: CN=7f0f3cb5-cc19-4e6c-a8b4-9ce90adbafff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:9a:98:cb:bf:7c:24:b8:0f:49:3c:db:67:2c: bb:af:dc:a3:82:2e:dc:80:57:01:cb:cd:26:45:d9: e4:89:e0:db:90:8f:33:fe:4a:51:ea:88:37:48:3b: d6:24:43:49:7e:fc:d4:d3:20:3d:4a:a8:b6:db:60: d6:29:1c:f7:1d:99:2f:d7:4a:66:a9:39:e4:c2:f7: 83:c9:a3:6e:1f:2e:d1:81:6e:ef:80:b0:73:74:11: 1b:08:b6:7d:82:2f:72:12:e8:ad:45:54:a2:bc:96: 7b:f1:5f:1b:75:0a:8a:61:c4:e5:23:b0:54:92:28: 2a:e1:c4:13:e1:ea:d0:e2:e9:da:52:0a:d1:7b:ce: ef:4e:a3:8d:2c:f2:4c:7f:ff:e6:c2:13:27:fd:80: 8b:87:93:20:4d:b3:62:d0:2f:8b:a8:da:5f:dd:f0: 04:f4:fc:19:54:c4:b7:a2:88:0c:a5:eb:0d:c1:b2: 97:e9:a1:cb:71:fb:6d:7a:97:f7:aa:47:91:54:85: 61:6a:84:c7:7e:8b:35:a8:df:1f:c6:af:f2:dd:72: 2d:32:ba:c8:01:6b:8c:d8:83:cc:cb:8c:b0:89:3f: df:1e:3c:52:7c:ec:8a:32:47:a7:d0:58:85:d2:2a: 24:1a:51:3e:08:4f:80:26:7c:a3:e2:c7:49:66:84: e4:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:AD:5C:99:49:EB:3D:A0:13:65:87:EF:27:4D:1F:F7:88:A4:3E:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/22845b30-572c-348e-9f79-8615080a5a69.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:85:7e:5d:ad:9f:c3:d6:be:ea:42:e5:7c:6d:1a:75:6d:c6: 62:15:d1:93:1f:a2:85:64:cf:cb:5b:43:c2:0b:c5:28:0f:76: 88:27:18:5c:dc:58:2e:7b:55:f9:0e:60:ea:80:f3:1b:91:e1: 18:e9:7d:85:35:d3:24:5c:11:df:05:b2:cc:82:18:1e:ba:06: 5d:65:84:8e:6a:df:04:7e:b7:a3:4e:ea:14:e5:ed:1f:fa:bd: ca:27:62:e5:4a:66:65:f0:f2:38:89:f1:77:90:48:7c:93:bb: 2a:7c:81:03:66:ab:8c:d6:76:7f:55:8d:51:5b:81:0d:0e:1c: 62:a4:db:72:2d:7a:5b:73:ea:95:f1:36:8e:4c:93:13:a5:60: a0:54:35:d4:dd:84:5b:d5:9f:d3:7e:cf:e4:69:d8:51:7d:75: 06:e0:0b:31:bc:0e:f1:57:f2:bb:3b:62:ef:45:6c:04:c1:de: 0e:fb:6d:cc:98:56:52:e5:f3:f4:50:19:8c:85:6f:ea:42:2c: e1:0d:2d:cb:44:91:7f:6f:5f:68:b5:85:69:89:32:2f:31:43: 8f:3f:a8:d7:25:3c:79:21:b5:ad:7b:51:b6:2a:16:7a:24:07: c8:4a:75:30:14:32:6e:d1:66:9d:29:ae:bf:30:ad:66:1f:33: 9f:37:48:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfzzkqTB8huQufG8QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI0MTEyMTExMTcwMloXDTI1MDIxOTExMTcwMlowLzEtMCsGA1UEAxMk N2YwZjNjYjUtY2MxOS00ZTZjLWE4YjQtOWNlOTBhZGJhZmZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpqYy798JLgPSTzbZyy7r9yjgi7cgFcBy80m RdnkieDbkI8z/kpR6og3SDvWJENJfvzU0yA9Sqi222DWKRz3HZkv10pmqTnkwveD yaNuHy7RgW7vgLBzdBEbCLZ9gi9yEuitRVSivJZ78V8bdQqKYcTlI7BUkigq4cQT 4erQ4unaUgrRe87vTqONLPJMf//mwhMn/YCLh5MgTbNi0C+LqNpf3fAE9PwZVMS3 oogMpesNwbKX6aHLcfttepf3qkeRVIVhaoTHfos1qN8fxq/y3XItMrrIAWuM2IPM y4ywiT/fHjxSfOyKMken0FiF0iokGlE+CE+AJnyj4sdJZoTk/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFICtXJlJ6z2gE2WH7ydNH/eIpD7GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMjI4NDViMzAtNTcyYy0z NDhlLTlmNzktODYxNTA4MGE1YTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF5GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA2Ffl2tn8PWvupC5XxtGnVtxmIV0ZMfooVkz8tbQ8ILxSgPdognGFzc WC57VfkOYOqA8xuR4RjpfYU10yRcEd8FssyCGB66Bl1lhI5q3wR+t6NO6hTl7R/6 vconYuVKZmXw8jiJ8XeQSHyTuyp8gQNmq4zWdn9VjVFbgQ0OHGKk23Iteltz6pXx No5MkxOlYKBUNdTdhFvVn9N+z+Rp2FF9dQbgCzG8DvFX8rs7Yu9FbATB3g77bcyY VlLl8/RQGYyFb+pCLOENLctEkX9vX2i1hWmJMi8xQ48/qNclPHkhta17UbYqFnok B8hKdTAUMm7RZp0prr8wrWYfM583SD4= -----END CERTIFICATE-----Generated at Fri Nov 22 06:37:55 2024 by rpki-client on console-ams.rpki-client.org