$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/38e45d24-87c2-3ad1-bf88-eee8f76faea7.roa File: 38e45d24-87c2-3ad1-bf88-eee8f76faea7.roa (raw, json) Hash identifier: 2D7IfR+NMC0hI5beq/tOjlOT3ueNbE5/qn0aIAYwwUA= Subject key identifier: 87:BA:02:13:EC:08:D9:42:88:14:7C:CB:26:1F:8A:5A:72:3E:DE:15 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285847DC64B066A5C315F95E91B380 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/38e45d24-87c2-3ad1-bf88-eee8f76faea7.roa Signing time: Wed 13 Nov 2024 02:00:28 +0000 ROA not before: Wed 13 Nov 2024 02:00:28 +0000 ROA not after: Tue 11 Feb 2025 02:00:28 +0000 asID: 212238 IP address blocks: 172.94.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:dc:64:b0:66:a5:c3:15:f9:5e:91:b3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Nov 13 02:00:28 2024 GMT Not After : Feb 11 02:00:28 2025 GMT Subject: CN=5a997634-edc0-482e-9b2e-87dceaac92e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:b4:e7:af:d5:e6:83:f8:f8:fa:54:ce:71:05: 9a:66:2d:43:c9:3a:68:6e:51:fe:0f:46:c6:5d:52: 89:e3:90:22:a5:0e:59:ed:eb:62:79:55:a3:32:17: 15:e5:ab:e7:4e:c9:e4:37:46:5f:1e:a6:06:2f:b7: 6a:db:32:d8:fd:fb:c2:69:72:3d:a2:3b:1a:87:68: ea:c5:97:87:0b:3c:ec:ea:b8:d9:9b:f4:96:98:20: ca:93:ad:79:e5:8f:0a:0b:4f:a3:a4:e8:0d:f5:dc: 52:a6:78:6d:a9:96:f4:6a:33:31:7c:30:98:02:a3: 8a:4e:ba:5d:59:84:8b:76:cb:f1:be:6a:3f:cf:1b: 62:67:31:b5:bf:8a:fe:6e:d4:f3:9f:9a:72:2d:4f: 18:55:d4:64:39:22:c5:10:0f:2f:37:32:0c:0b:d1: d0:96:81:04:78:3c:db:20:1a:33:58:25:45:eb:78: cf:ff:9f:e3:15:21:ab:1f:52:1d:58:81:13:0e:1e: 86:84:ef:81:0b:31:2b:10:f9:c0:19:01:f3:94:99: 4f:92:a2:f0:1b:45:f8:36:21:4d:66:3a:64:de:43: 47:c8:46:29:ba:e3:b9:23:d3:ff:a7:f5:9e:0d:26: fc:22:5a:ac:2d:67:e3:da:e2:68:00:e1:94:91:1f: de:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:BA:02:13:EC:08:D9:42:88:14:7C:CB:26:1F:8A:5A:72:3E:DE:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/38e45d24-87c2-3ad1-bf88-eee8f76faea7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.62.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:6c:4e:68:4b:ad:a7:ac:c0:b4:53:88:e3:5e:46:9c:34:e3: 11:9e:4d:e9:cc:c6:2c:7f:02:48:18:78:4a:bc:44:c5:92:60: b3:a6:0f:a0:7b:00:9a:ce:03:cc:6b:e9:e7:68:0d:06:cd:7a: 53:93:71:01:02:e6:7a:0a:42:06:28:41:12:2c:bb:af:b4:a0: 06:97:b2:e1:71:4c:a9:df:9d:cc:7a:99:fa:b3:73:39:60:d3: 5d:57:87:b2:b2:5a:5a:dd:67:19:64:40:2e:3b:fc:75:0a:82: 12:0b:6d:8f:2e:7c:86:d0:f4:0a:c7:78:69:2d:54:c8:23:5b: 94:00:42:cf:7d:e3:e0:28:74:24:a6:80:3a:71:b6:48:2e:24: 0e:58:df:f8:00:fa:b6:f3:7d:18:b7:71:e2:36:73:ac:71:13: 39:f7:a6:ec:8e:16:26:06:d9:a2:73:c9:0a:97:73:4a:1e:ac: 26:8d:d4:bb:aa:25:68:33:3c:db:0b:bb:19:9a:96:eb:2c:bc: ef:33:f2:dc:c9:c9:98:7f:06:92:82:9d:4c:9f:2e:77:06:a9: 10:a7:70:81:0e:76:55:ad:90:97:8e:a9:99:a5:7d:a4:e2:ce: 12:46:d0:31:93:e0:bd:cd:fd:9d:7c:4b:b1:11:7c:d9:b8:32: 93:27:80:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfcZLBmpcMV+V6Rs4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI0MTExMzAyMDAyOFoXDTI1MDIxMTAyMDAyOFowLzEtMCsGA1UEAxMk NWE5OTc2MzQtZWRjMC00ODJlLTliMmUtODdkY2VhYWM5MmU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLTnr9Xmg/j4+lTOcQWaZi1DyTpoblH+D0bG XVKJ45AipQ5Z7etieVWjMhcV5avnTsnkN0ZfHqYGL7dq2zLY/fvCaXI9ojsah2jq xZeHCzzs6rjZm/SWmCDKk6155Y8KC0+jpOgN9dxSpnhtqZb0ajMxfDCYAqOKTrpd WYSLdsvxvmo/zxtiZzG1v4r+btTzn5pyLU8YVdRkOSLFEA8vNzIMC9HQloEEeDzb IBozWCVF63jP/5/jFSGrH1IdWIETDh6GhO+BCzErEPnAGQHzlJlPkqLwG0X4NiFN Zjpk3kNHyEYpuuO5I9P/p/WeDSb8IlqsLWfj2uJoAOGUkR/eIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIe6AhPsCNlCiBR8yyYfilpyPt4VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMzhlNDVkMjQtODdjMi0z YWQxLWJmODgtZWVlOGY3NmZhZWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFlsTmhLraeswLRTiONeRpw04xGeTenMxix/AkgYeEq8RMWSYLOmD6B7 AJrOA8xr6edoDQbNelOTcQEC5noKQgYoQRIsu6+0oAaXsuFxTKnfncx6mfqzczlg 011Xh7KyWlrdZxlkQC47/HUKghILbY8ufIbQ9ArHeGktVMgjW5QAQs994+AodCSm gDpxtkguJA5Y3/gA+rbzfRi3ceI2c6xxEzn3puyOFiYG2aJzyQqXc0oerCaN1Luq JWgzPNsLuxmalussvO8z8tzJyZh/BpKCnUyfLncGqRCncIEOdlWtkJeOqZmlfaTi zhJG0DGT4L3N/Z18S7ERfNm4MpMngOw= -----END CERTIFICATE-----Generated at Fri Nov 22 04:37:32 2024 by rpki-client on console-ams.rpki-client.org