$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/3aea2da0-5e0d-3dc8-8210-80aa9e669320.roa File: 3aea2da0-5e0d-3dc8-8210-80aa9e669320.roa (raw, json) Hash identifier: /Vm4mOlkG8F8Mh0D2SpT2h2mtxje+Pj7+0h0qOzCaVc= Subject key identifier: BE:9B:7E:85:D8:9D:24:5E:8B:75:B3:2C:FF:1F:89:D5:4C:A0:19:09 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584740BEB333C2F635E0FA550B80 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/3aea2da0-5e0d-3dc8-8210-80aa9e669320.roa Signing time: Wed 18 Sep 2024 07:55:55 +0000 ROA not before: Wed 18 Sep 2024 07:55:55 +0000 ROA not after: Tue 17 Dec 2024 08:55:55 +0000 asID: 9009 IP address blocks: 172.94.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:40:be:b3:33:c2:f6:35:e0:fa:55:0b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Sep 18 07:55:55 2024 GMT Not After : Dec 17 08:55:55 2024 GMT Subject: CN=c0fbe2cb-6d40-4a7c-af83-b1590d9c6318 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:65:1e:b4:02:cd:f1:7a:75:ee:62:f5:1f:07: 42:f8:cf:ad:f5:48:9b:d9:e4:2d:1c:b8:97:ee:a0: 1a:ad:b7:00:59:5b:a5:04:6d:b9:d0:b1:2f:5f:36: 5b:55:46:e5:02:46:b2:20:00:8c:21:5c:9c:02:a5: a3:22:20:c4:79:d4:8d:39:2b:f1:a5:ec:b2:19:2a: f3:82:3e:22:d0:40:a5:2d:fb:e9:e3:7b:77:be:4d: f0:26:f6:b8:26:21:af:fc:37:bf:d6:8d:c5:56:d4: 94:e1:b7:67:d6:31:1d:91:25:ed:c6:46:89:77:af: 3d:e6:6a:0d:a1:51:14:6b:3a:62:b1:67:9f:d4:3e: 7a:8f:62:42:07:12:92:94:0f:78:59:e3:71:c4:66: 7d:5d:60:6e:dc:2e:4b:3d:e3:5f:0f:30:f3:58:d9: 90:50:ff:6e:dd:fd:47:b9:52:97:86:66:a6:89:6d: 4a:5b:b9:cd:c9:ca:29:7c:84:b2:b7:db:fe:14:8f: 2f:09:75:29:66:2c:13:3f:62:71:3d:31:ed:ce:b6: da:dc:5a:2c:5a:02:31:f4:b9:42:79:f4:66:85:c3: 79:8b:a4:91:e3:a7:f3:e9:2f:c6:13:29:f7:78:c0: 68:04:63:88:fd:67:c4:b8:ff:13:08:de:2b:81:92: 10:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:9B:7E:85:D8:9D:24:5E:8B:75:B3:2C:FF:1F:89:D5:4C:A0:19:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/3aea2da0-5e0d-3dc8-8210-80aa9e669320.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.94.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:0b:2c:37:e0:67:c8:cd:df:29:ae:c4:57:67:4b:da:4d:01: da:09:96:f9:b8:db:66:91:6e:05:b7:ce:ac:cf:d7:6a:d8:e2: 72:f4:24:06:ce:57:7e:04:52:07:a5:22:27:f9:99:4c:7c:1f: 58:88:27:40:5b:5e:11:f7:0e:40:d1:67:05:c9:d3:b8:df:3a: 3e:d4:51:73:c8:3b:2a:2a:4c:50:85:e4:d0:50:93:7f:4f:3a: 35:b2:bf:1d:4c:e5:d7:66:57:96:33:fa:a7:3f:58:c1:ef:66: 39:60:f8:62:0e:21:8b:3f:2f:87:41:04:bc:13:03:b9:11:08: 1a:bf:df:32:b2:73:84:2f:4f:66:fc:2b:45:40:b7:51:13:5a: ce:b4:ac:c7:83:d3:87:9f:f6:15:c6:05:aa:2b:e2:f1:98:45: b2:ec:e7:13:c7:97:94:42:26:82:a8:e0:1d:2f:c8:d2:45:e4: c9:56:b8:3a:81:be:d6:67:02:e1:3e:b8:99:a9:1d:df:25:dc: b8:3e:ef:d3:73:6a:78:df:fc:86:e5:57:42:51:3f:bc:c7:5f: 52:65:5c:1f:ba:fd:18:a0:99:0e:74:f3:c9:3e:38:8f:3c:7f: ee:4d:24:3a:4a:ab:ae:aa:b4:3d:f2:1a:da:af:02:d7:d4:9e: 43:c1:a4:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdAvrMzwvY14PpVC4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI0MDkxODA3NTU1NVoXDTI0MTIxNzA4NTU1NVowLzEtMCsGA1UEAxMk YzBmYmUyY2ItNmQ0MC00YTdjLWFmODMtYjE1OTBkOWM2MzE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiWUetALN8Xp17mL1HwdC+M+t9Uib2eQtHLiX 7qAarbcAWVulBG250LEvXzZbVUblAkayIACMIVycAqWjIiDEedSNOSvxpeyyGSrz gj4i0EClLfvp43t3vk3wJva4JiGv/De/1o3FVtSU4bdn1jEdkSXtxkaJd6895moN oVEUazpisWef1D56j2JCBxKSlA94WeNxxGZ9XWBu3C5LPeNfDzDzWNmQUP9u3f1H uVKXhmamiW1KW7nNycopfISyt9v+FI8vCXUpZiwTP2JxPTHtzrba3FosWgIx9LlC efRmhcN5i6SR46fz6S/GEyn3eMBoBGOI/WfEuP8TCN4rgZIQ0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL6bfoXYnSRei3WzLP8fidVMoBkJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvM2FlYTJkYTAtNWUwZC0z ZGM4LTgyMTAtODBhYTllNjY5MzIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF5eMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACwLLDfgZ8jN3ymuxFdnS9pNAdoJlvm422aRbgW3zqzP12rY4nL0JAbO V34EUgelIif5mUx8H1iIJ0BbXhH3DkDRZwXJ07jfOj7UUXPIOyoqTFCF5NBQk39P OjWyvx1M5ddmV5Yz+qc/WMHvZjlg+GIOIYs/L4dBBLwTA7kRCBq/3zKyc4QvT2b8 K0VAt1ETWs60rMeD04ef9hXGBaor4vGYRbLs5xPHl5RCJoKo4B0vyNJF5MlWuDqB vtZnAuE+uJmpHd8l3Lg+79Nzanjf/IblV0JRP7zHX1JlXB+6/RigmQ5088k+OI88 f+5NJDpKq66qtD3yGtqvAtfUnkPBpA8= -----END CERTIFICATE-----Generated at Thu Nov 21 23:36:40 2024 by rpki-client on console-ams.rpki-client.org