$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/438abf06-355b-3925-b81c-ed0f431c4a35.roa File: 438abf06-355b-3925-b81c-ed0f431c4a35.roa (raw, json) Hash identifier: pT6LOw2J4JfcDNHqYBUl4cJVmoweNgvbWIvvOm3K3Ys= Subject key identifier: 24:5D:D7:7F:52:15:AB:0B:34:1B:8A:20:1B:98:3D:93:A1:73:3F:F1 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F432858474850C154BCB30EB81524F680 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/438abf06-355b-3925-b81c-ed0f431c4a35.roa Signing time: Sat 21 Sep 2024 01:00:33 +0000 ROA not before: Sat 21 Sep 2024 01:00:33 +0000 ROA not after: Fri 20 Dec 2024 02:00:33 +0000 asID: 3223 IP address blocks: 172.94.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:48:50:c1:54:bc:b3:0e:b8:15:24:f6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Sep 21 01:00:33 2024 GMT Not After : Dec 20 02:00:33 2024 GMT Subject: CN=4209296d-6265-4257-8e7b-cd3a2e584d0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:2d:fd:3e:cf:a5:da:3c:de:16:c5:27:41:a5: e5:16:af:f1:c5:0b:0e:84:e5:24:93:92:58:8c:0d: 9f:28:f9:d6:e0:8f:82:78:30:47:41:8d:e5:cd:d0: 60:1e:5a:7e:f9:56:f2:bd:4d:06:7b:01:3b:2a:c5: c9:b5:26:28:42:d9:74:6d:90:f8:04:30:12:7c:30: 85:0e:eb:41:f2:97:b2:2f:88:0d:7e:d9:2c:56:8c: 39:b9:be:f9:bb:47:c8:82:7d:b9:e0:d5:5d:0e:22: 69:44:e2:28:59:ab:ed:99:f9:cf:ad:82:ff:e1:c8: 18:28:f6:38:7e:e0:c2:0f:5e:9b:0f:19:40:8d:e6: d9:21:83:04:f3:81:04:e4:4a:e7:e5:01:aa:5e:88: 27:3c:67:a9:e3:22:4f:96:22:ca:a4:21:cb:3f:48: c9:36:14:5a:ee:53:73:cc:c7:30:85:54:3b:70:17: cc:7f:8c:23:1e:73:2a:f8:54:60:73:92:1d:b5:c2: a7:09:64:9a:a0:08:3e:79:ca:a1:c1:4a:a4:37:ad: 6e:e9:e0:a7:a3:c6:6a:7f:b8:a9:a4:35:ec:5c:4e: 03:5b:65:71:b5:f7:bc:04:00:43:cd:83:b7:be:01: 83:c5:a1:9b:45:e4:b2:63:9a:f3:3a:5a:25:9b:8c: 46:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:5D:D7:7F:52:15:AB:0B:34:1B:8A:20:1B:98:3D:93:A1:73:3F:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/438abf06-355b-3925-b81c-ed0f431c4a35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:34:5b:58:0b:0f:db:62:7f:b1:8a:17:0b:49:e7:00:86:01: 58:50:b5:b1:52:b0:27:6c:96:06:a5:c8:3d:6d:41:c4:f9:3a: 04:7a:83:4f:c2:2e:c2:21:4d:3c:2d:40:28:8c:ef:25:03:17: 05:36:17:23:01:4a:44:ef:24:a0:dd:c5:70:18:7e:68:6e:ab: 0c:cd:c8:e4:7d:af:8c:a9:46:d6:15:1e:ec:df:fc:63:fe:6c: 7b:f7:bd:8a:e1:a8:b0:14:75:35:5c:1a:2a:98:41:e8:d0:f0: b2:ef:df:c7:a9:7e:d8:33:31:61:cb:e6:fa:cf:1b:44:51:4a: c4:28:96:bd:f2:10:68:5a:df:18:ce:23:dc:1a:f2:15:87:8a: 99:5c:8f:25:9c:6d:8d:a0:14:28:ba:f2:c3:b8:8e:c3:a8:7c: 47:0b:02:ed:70:e0:d8:cb:84:07:23:20:c4:21:20:dc:5f:a8: 44:a7:1d:3a:ea:90:68:7d:36:2a:5e:5c:ef:2c:9d:c0:a7:79: 73:41:f7:e2:68:d1:c9:c9:6e:42:ed:6a:f8:9b:f9:6e:e1:ba: 84:77:2a:15:7b:c2:f8:bd:43:1f:81:d1:a1:e0:17:1d:f6:c8: 1f:3f:5b:ab:5f:76:bd:70:eb:d2:c9:f4:1d:90:73:f2:d8:bf: b0:09:7d:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdIUMFUvLMOuBUk9oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI0MDkyMTAxMDAzM1oXDTI0MTIyMDAyMDAzM1owLzEtMCsGA1UEAxMk NDIwOTI5NmQtNjI2NS00MjU3LThlN2ItY2QzYTJlNTg0ZDBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyS39Ps+l2jzeFsUnQaXlFq/xxQsOhOUkk5JY jA2fKPnW4I+CeDBHQY3lzdBgHlp++VbyvU0GewE7KsXJtSYoQtl0bZD4BDASfDCF DutB8peyL4gNftksVow5ub75u0fIgn254NVdDiJpROIoWavtmfnPrYL/4cgYKPY4 fuDCD16bDxlAjebZIYME84EE5Ern5QGqXognPGep4yJPliLKpCHLP0jJNhRa7lNz zMcwhVQ7cBfMf4wjHnMq+FRgc5IdtcKnCWSaoAg+ecqhwUqkN61u6eCno8Zqf7ip pDXsXE4DW2Vxtfe8BABDzYO3vgGDxaGbReSyY5rzOlolm4xGYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCRd139SFasLNBuKIBuYPZOhcz/xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNDM4YWJmMDYtMzU1Yi0z OTI1LWI4MWMtZWQwZjQzMWM0YTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAY0W1gLD9tif7GKFwtJ5wCGAVhQtbFSsCdslgalyD1tQcT5OgR6g0/C LsIhTTwtQCiM7yUDFwU2FyMBSkTvJKDdxXAYfmhuqwzNyOR9r4ypRtYVHuzf/GP+ bHv3vYrhqLAUdTVcGiqYQejQ8LLv38epftgzMWHL5vrPG0RRSsQolr3yEGha3xjO I9wa8hWHiplcjyWcbY2gFCi68sO4jsOofEcLAu1w4NjLhAcjIMQhINxfqESnHTrq kGh9NipeXO8sncCneXNB9+Jo0cnJbkLtavib+W7huoR3KhV7wvi9Qx+B0aHgFx32 yB8/W6tfdr1w69LJ9B2Qc/LYv7AJfYQ= -----END CERTIFICATE-----Generated at Thu Nov 21 23:36:40 2024 by rpki-client on console-ams.rpki-client.org