$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/32a23c32-30aa-3814-87e4-f5250a5cd155.roa File: 32a23c32-30aa-3814-87e4-f5250a5cd155.roa (raw, json) Hash identifier: pzvQCciwz7mS+19ueiYPF+0x1bqqZjvrGkq0FDtNPOs= Subject key identifier: 81:AD:D0:E2:2F:8E:FC:43:1C:6C:19:51:87:52:60:81:2A:12:83:D6 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F432858479D76B251F86D67E6F00BF0C0 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/32a23c32-30aa-3814-87e4-f5250a5cd155.roa Signing time: Mon 21 Oct 2024 13:00:41 +0000 ROA not before: Mon 21 Oct 2024 13:00:41 +0000 ROA not after: Sun 19 Jan 2025 14:00:41 +0000 asID: 9009 IP address blocks: 172.94.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:9d:76:b2:51:f8:6d:67:e6:f0:0b:f0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 21 13:00:41 2024 GMT Not After : Jan 19 14:00:41 2025 GMT Subject: CN=c0030b36-663d-486d-9aac-2221560560c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:f1:d2:57:a6:90:fe:40:74:ec:ad:c6:c6:2a: 4e:4c:e4:6c:96:c7:8f:b9:8a:5c:29:61:3b:c3:22: 5d:b4:29:04:93:3a:6e:d8:0d:26:74:85:c5:4a:98: bd:6a:a2:cc:2b:56:86:b5:ba:d1:41:45:88:44:2b: a2:89:eb:77:77:9f:de:03:3e:34:3f:01:05:1c:af: 57:d7:b3:a3:15:5f:9d:99:b8:2e:d6:a3:34:b3:41: 7c:7c:f8:58:97:16:19:31:e6:4d:68:83:b8:93:9c: d7:46:ed:7b:b0:a6:92:3b:dd:0f:56:41:e8:42:48: db:2e:b9:28:e8:77:d8:83:c6:d6:56:62:d4:12:0b: 03:38:cf:3e:36:39:b4:6d:51:d8:e8:40:ed:fb:2b: a9:b1:59:db:d0:24:e8:23:06:c1:98:9e:69:a0:94: 53:8b:6b:f1:d9:68:8f:cf:02:56:46:01:05:75:c6: 9b:d0:60:0f:49:e1:b4:d4:8c:48:a6:0c:78:76:31: da:94:1a:44:74:97:ce:47:1f:1c:f7:0a:bc:b7:08: f4:bc:45:fa:63:7b:e9:7c:49:e9:23:a5:68:36:b8: 04:0d:9b:1e:3f:ed:44:da:dc:9e:25:2b:b8:27:cb: 29:91:e9:9a:b3:c9:9f:c8:da:a3:6e:e2:0c:fe:79: ee:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:AD:D0:E2:2F:8E:FC:43:1C:6C:19:51:87:52:60:81:2A:12:83:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/32a23c32-30aa-3814-87e4-f5250a5cd155.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:1b:de:57:9e:d5:55:08:05:6b:65:35:e4:2d:2a:80:af:84: 9f:a2:f4:d6:23:ef:ab:14:28:0e:9d:fc:59:cb:90:e0:fd:2b: 7b:64:fd:5b:54:1d:90:8a:55:8b:d2:fb:e4:93:5d:aa:3a:ce: e8:79:44:ef:62:3f:03:f1:df:37:e0:ac:82:6d:ef:30:38:20: 6c:1a:95:0d:00:0e:3a:67:be:62:aa:ee:51:df:46:15:1a:89: 96:28:48:3e:1c:8a:a0:d1:92:b5:cb:53:40:78:0b:57:4a:30: 3e:be:50:a4:98:4f:f8:6b:83:54:fb:61:db:fa:4d:b8:25:53: 20:8d:af:5e:27:b3:e9:e4:c5:54:89:99:3f:67:ea:f6:0e:5b: 1a:35:a2:76:26:e0:62:0e:20:31:f2:fc:37:a5:82:6b:b5:c3: 7f:01:d2:3a:da:91:e8:4f:7f:c3:3d:a8:60:7c:22:fd:27:86: 44:be:63:5b:b2:72:c6:a6:b3:0a:5f:e6:54:ae:06:35:43:e4: 90:ce:60:0d:83:d9:34:5d:33:77:e0:63:ce:78:30:96:cb:90: 24:f8:a0:37:50:a1:9b:a0:8a:65:44:d2:72:90:d1:c5:a7:ee: 1f:ab:d2:1d:13:08:15:f5:eb:52:a4:e2:c4:dd:8a:60:bd:2d: 7c:a8:1d:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeddrJR+G1n5vAL8MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI0MTAyMTEzMDA0MVoXDTI1MDExOTE0MDA0MVowLzEtMCsGA1UEAxMk YzAwMzBiMzYtNjYzZC00ODZkLTlhYWMtMjIyMTU2MDU2MGMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfHSV6aQ/kB07K3GxipOTORslsePuYpcKWE7 wyJdtCkEkzpu2A0mdIXFSpi9aqLMK1aGtbrRQUWIRCuiiet3d5/eAz40PwEFHK9X 17OjFV+dmbgu1qM0s0F8fPhYlxYZMeZNaIO4k5zXRu17sKaSO90PVkHoQkjbLrko 6HfYg8bWVmLUEgsDOM8+Njm0bVHY6EDt+yupsVnb0CToIwbBmJ5poJRTi2vx2WiP zwJWRgEFdcab0GAPSeG01IxIpgx4djHalBpEdJfORx8c9wq8twj0vEX6Y3vpfEnp I6VoNrgEDZseP+1E2tyeJSu4J8spkemas8mfyNqjbuIM/nnuKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIGt0OIvjvxDHGwZUYdSYIEqEoPWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMzJhMjNjMzItMzBhYS0z ODE0LTg3ZTQtZjUyNTBhNWNkMTU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIob3lee1VUIBWtlNeQtKoCvhJ+i9NYj76sUKA6d/FnLkOD9K3tk/VtU HZCKVYvS++STXao6zuh5RO9iPwPx3zfgrIJt7zA4IGwalQ0ADjpnvmKq7lHfRhUa iZYoSD4ciqDRkrXLU0B4C1dKMD6+UKSYT/hrg1T7Ydv6TbglUyCNr14ns+nkxVSJ mT9n6vYOWxo1onYm4GIOIDHy/Delgmu1w38B0jrakehPf8M9qGB8Iv0nhkS+Y1uy csamswpf5lSuBjVD5JDOYA2D2TRdM3fgY854MJbLkCT4oDdQoZugimVE0nKQ0cWn 7h+r0h0TCBX161Kk4sTdimC9LXyoHdM= -----END CERTIFICATE-----Generated at Thu Nov 21 23:36:40 2024 by rpki-client on console-ams.rpki-client.org