$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/28215abb-4cb1-3b52-aac5-5a03c1c63b00.roa File: 28215abb-4cb1-3b52-aac5-5a03c1c63b00.roa (raw, json) Hash identifier: JG/HHJOnDKn4NRRAjMwIjzMb+oZI42F/+5wU6P/VKUk= Subject key identifier: 85:5D:5C:FB:5C:3A:1E:9D:B7:AB:07:3F:D6:21:C5:85:B9:D4:D6:9B Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F432858474B1B5478DECE56EDFEADEB00 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/28215abb-4cb1-3b52-aac5-5a03c1c63b00.roa Signing time: Sun 22 Sep 2024 01:00:32 +0000 ROA not before: Sun 22 Sep 2024 01:00:32 +0000 ROA not after: Sat 21 Dec 2024 02:00:32 +0000 asID: 40676 IP address blocks: 172.94.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:4b:1b:54:78:de:ce:56:ed:fe:ad:eb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Sep 22 01:00:32 2024 GMT Not After : Dec 21 02:00:32 2024 GMT Subject: CN=f31dcf40-b5c8-492c-a61d-83c9c1313f67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:6e:15:49:63:b2:e7:1f:c8:de:5f:b3:5f:0d: 5c:13:03:8e:31:6a:02:1f:82:0f:e3:ee:c0:ee:f9: aa:1a:6d:94:95:0a:b3:c8:0d:27:cd:3c:42:6e:84: d5:a8:6b:86:81:7b:38:7b:1d:1e:3b:83:59:8f:3f: 2a:8a:fe:4c:36:20:77:9c:ee:6e:6b:1d:f6:53:27: 2a:0f:bd:99:31:af:4a:a6:cf:5b:49:9a:0d:75:0c: f4:ba:67:c1:fd:de:fd:72:43:bd:33:33:67:37:00: 93:ef:f6:36:89:0a:5b:43:2d:1a:ab:2b:a7:61:0b: 21:36:d8:cb:f3:de:b5:aa:e9:50:4c:ac:14:27:61: 89:37:06:8c:76:13:0f:9f:c3:6f:77:0f:08:0f:82: 5c:f1:46:02:51:e0:e4:14:06:40:71:d6:16:9d:3c: ac:93:bf:65:d9:7b:c1:ac:0a:b4:42:bf:28:ee:55: 13:00:73:86:ff:3d:38:02:68:3b:75:29:dc:51:d2: e3:bc:7c:55:eb:50:9a:a6:1a:ea:5c:08:eb:68:91: e1:e6:54:c4:0f:f1:c0:f8:a8:b7:71:84:e5:f9:c2: 36:00:c4:38:4a:9e:68:4c:79:f7:f5:46:45:ea:f8: fb:4b:e3:7b:70:16:41:58:ad:a1:7c:56:5a:e2:fb: b3:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:5D:5C:FB:5C:3A:1E:9D:B7:AB:07:3F:D6:21:C5:85:B9:D4:D6:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/28215abb-4cb1-3b52-aac5-5a03c1c63b00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:71:ea:0e:12:f5:ae:83:08:a6:7e:f4:2a:6b:e3:81:d7:89: 75:9b:9a:53:fa:52:fd:68:3d:64:b5:8b:32:ee:ec:3f:45:6a: b8:03:88:1f:78:82:1f:c0:ee:8c:ee:ff:78:4d:bd:4d:92:2e: 86:fa:16:b2:09:97:aa:7a:7d:93:b1:7d:4b:6c:a6:84:25:d4: 58:1b:0e:c7:53:0d:f2:27:25:13:0b:82:c4:b0:d3:13:ca:b9: 6d:36:00:b4:d4:10:f4:40:97:e0:35:9d:ae:80:0a:12:8d:64: b4:55:b5:6f:96:2f:88:9e:7a:63:12:40:ea:04:26:e0:90:ba: ea:31:50:8c:1a:68:ee:68:fb:2f:8e:82:79:7c:4d:7c:be:0a: 1a:6d:0b:3b:43:a5:9d:05:ca:26:cb:c2:a2:20:a1:3b:f3:51: ed:18:4f:0b:f0:44:ac:e7:ae:da:42:56:f5:9e:82:2a:10:e5: 40:2b:27:a1:8d:90:3f:f8:83:b3:95:ce:88:59:27:e6:48:45: d9:74:1b:36:b7:b6:76:ea:a2:00:97:22:52:1a:63:27:32:dd: d7:1f:83:b9:4f:e9:7e:b5:c4:81:12:c2:55:b1:36:93:80:e4: c9:0d:62:b3:40:8f:04:90:e8:fc:17:46:39:8d:4a:b7:17:44: c9:ab:04:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdLG1R43s5W7f6t6wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI0MDkyMjAxMDAzMloXDTI0MTIyMTAyMDAzMlowLzEtMCsGA1UEAxMk ZjMxZGNmNDAtYjVjOC00OTJjLWE2MWQtODNjOWMxMzEzZjY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv24VSWOy5x/I3l+zXw1cEwOOMWoCH4IP4+7A 7vmqGm2UlQqzyA0nzTxCboTVqGuGgXs4ex0eO4NZjz8qiv5MNiB3nO5uax32Uycq D72ZMa9Kps9bSZoNdQz0umfB/d79ckO9MzNnNwCT7/Y2iQpbQy0aqyunYQshNtjL 8961qulQTKwUJ2GJNwaMdhMPn8Nvdw8ID4Jc8UYCUeDkFAZAcdYWnTysk79l2XvB rAq0Qr8o7lUTAHOG/z04Amg7dSncUdLjvHxV61CaphrqXAjraJHh5lTED/HA+Ki3 cYTl+cI2AMQ4Sp5oTHn39UZF6vj7S+N7cBZBWK2hfFZa4vuz2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIVdXPtcOh6dt6sHP9YhxYW51NabMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMjgyMTVhYmItNGNiMS0z YjUyLWFhYzUtNWEwM2MxYzYzYjAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF51MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGBx6g4S9a6DCKZ+9Cpr44HXiXWbmlP6Uv1oPWS1izLu7D9FargDiB94 gh/A7ozu/3hNvU2SLob6FrIJl6p6fZOxfUtspoQl1FgbDsdTDfInJRMLgsSw0xPK uW02ALTUEPRAl+A1na6AChKNZLRVtW+WL4ieemMSQOoEJuCQuuoxUIwaaO5o+y+O gnl8TXy+ChptCztDpZ0FyibLwqIgoTvzUe0YTwvwRKznrtpCVvWegioQ5UArJ6GN kD/4g7OVzohZJ+ZIRdl0Gza3tnbqogCXIlIaYycy3dcfg7lP6X61xIESwlWxNpOA 5MkNYrNAjwSQ6PwXRjmNSrcXRMmrBFI= -----END CERTIFICATE-----Generated at Fri Nov 22 00:23:35 2024 by rpki-client on console-fra.rpki-client.org