$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/444c752c-17be-3988-8d19-da817f43ea78.roa File: 444c752c-17be-3988-8d19-da817f43ea78.roa (raw, json) Hash identifier: JdG/G6wxO8iW070KZWp9XTv/bLHisZq8/ehsv/g+5ps= Subject key identifier: 99:A2:81:87:06:B5:D3:42:6F:C1:AE:61:6E:EA:33:D5:DA:2F:01:17 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285847F3D0CC8E2A778784EE2E5580 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/444c752c-17be-3988-8d19-da817f43ea78.roa Signing time: Thu 21 Nov 2024 11:22:05 +0000 ROA not before: Thu 21 Nov 2024 11:22:05 +0000 ROA not after: Wed 19 Feb 2025 11:22:05 +0000 asID: 53356 IP address blocks: 172.94.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f3:d0:cc:8e:2a:77:87:84:ee:2e:55:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Nov 21 11:22:05 2024 GMT Not After : Feb 19 11:22:05 2025 GMT Subject: CN=c952698e-ae93-4e3f-ae01-d7bef029c948 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b1:78:2c:fd:5e:41:9d:bb:d3:05:ed:49:93: d4:0f:6f:de:1d:ac:f0:1f:b3:3d:cd:31:b3:5b:4b: c6:0d:c9:ae:2b:1f:89:bd:0f:49:f5:60:8f:08:9f: f8:50:99:ca:18:2a:07:5e:c3:15:4a:fb:08:db:e3: b2:eb:25:a4:62:7e:59:04:f9:7d:71:29:fb:f1:2c: a2:58:c0:8f:1e:24:33:d5:62:ab:8e:18:f7:eb:f0: 2d:e3:5d:5d:ce:1d:24:2c:c6:de:77:41:72:5e:78: 6b:a3:ee:eb:f4:43:93:62:82:38:7b:b6:3c:b7:28: e1:01:e3:87:bc:8d:50:08:93:ec:55:c4:37:99:15: 0e:8d:fc:64:27:44:1b:c7:d6:28:34:af:6d:04:ca: 7b:7f:0e:00:da:7b:82:f5:e7:29:2d:b8:eb:ed:6c: 4b:ad:88:b3:ae:56:60:ce:f2:5e:61:e8:55:16:0c: ae:31:6f:82:44:d7:28:1a:46:1a:38:ab:7a:7e:2b: 90:ea:8f:29:91:3d:f1:c0:ee:35:05:8a:76:a9:0a: 2c:95:1a:56:b5:60:c1:5c:24:60:3c:75:22:2a:c3: 91:f8:18:55:80:51:38:7a:5d:64:69:4a:6b:1b:46: 19:cd:3b:8e:5b:86:0c:d5:cc:9f:c7:5f:85:8b:26: 39:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:A2:81:87:06:B5:D3:42:6F:C1:AE:61:6E:EA:33:D5:DA:2F:01:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/444c752c-17be-3988-8d19-da817f43ea78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.76.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:e5:29:94:b0:26:3c:85:07:16:35:06:b6:7d:36:9c:5b:b9: ab:dd:b8:cf:38:5f:c4:74:16:0c:76:21:8f:13:1e:6f:60:c2: a9:bd:f1:62:73:27:b4:83:9a:8f:96:33:68:62:2b:9a:fd:fb: ab:26:28:2e:c6:37:20:e0:9a:73:6b:72:0c:ac:0e:b6:b5:4d: 34:1f:b9:ae:bf:ce:58:50:52:f2:ee:46:1c:3b:bf:7d:e2:bc: 2c:fa:80:3d:5d:e7:cc:30:60:4a:99:ac:3e:f9:ad:d5:16:cf: e2:0c:18:5f:a5:72:18:e9:d5:d4:61:f4:fc:9c:67:5a:2e:e7: 0a:a5:fe:a0:82:9d:bd:14:a2:94:b9:7e:a0:bb:33:df:b5:fb: 8c:be:c5:a3:3f:19:b5:32:02:1a:3d:3e:1f:0d:1a:06:65:05: e4:fe:82:d4:58:e6:cc:14:d0:d9:13:5a:70:a5:5a:c6:51:89: 3f:2c:77:a3:2e:de:3d:c8:14:f2:43:7e:89:69:99:e5:e9:27: a9:4b:6f:ff:e8:0e:da:4a:58:ec:a1:a6:45:6a:3d:f6:9d:a2: be:71:5c:67:b4:c3:5c:c6:97:64:5b:25:15:81:b3:f5:2d:bb: f4:78:0a:38:4b:ca:28:16:c5:3d:68:b4:a2:c2:3c:e8:0a:8f: 28:8e:7d:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfz0MyOKneHhO4uVYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI0MTEyMTExMjIwNVoXDTI1MDIxOTExMjIwNVowLzEtMCsGA1UEAxMk Yzk1MjY5OGUtYWU5My00ZTNmLWFlMDEtZDdiZWYwMjljOTQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbF4LP1eQZ270wXtSZPUD2/eHazwH7M9zTGz W0vGDcmuKx+JvQ9J9WCPCJ/4UJnKGCoHXsMVSvsI2+Oy6yWkYn5ZBPl9cSn78Syi WMCPHiQz1WKrjhj36/At411dzh0kLMbed0FyXnhro+7r9EOTYoI4e7Y8tyjhAeOH vI1QCJPsVcQ3mRUOjfxkJ0Qbx9YoNK9tBMp7fw4A2nuC9ecpLbjr7WxLrYizrlZg zvJeYehVFgyuMW+CRNcoGkYaOKt6fiuQ6o8pkT3xwO41BYp2qQoslRpWtWDBXCRg PHUiKsOR+BhVgFE4el1kaUprG0YZzTuOW4YM1cyfx1+FiyY5LQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJmigYcGtdNCb8GuYW7qM9XaLwEXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNDQ0Yzc1MmMtMTdiZS0z OTg4LThkMTktZGE4MTdmNDNlYTc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF5MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAILlKZSwJjyFBxY1BrZ9NpxbuavduM84X8R0Fgx2IY8THm9gwqm98WJz J7SDmo+WM2hiK5r9+6smKC7GNyDgmnNrcgysDra1TTQfua6/zlhQUvLuRhw7v33i vCz6gD1d58wwYEqZrD75rdUWz+IMGF+lchjp1dRh9PycZ1ou5wql/qCCnb0UopS5 fqC7M9+1+4y+xaM/GbUyAho9Ph8NGgZlBeT+gtRY5swU0NkTWnClWsZRiT8sd6Mu 3j3IFPJDfolpmeXpJ6lLb//oDtpKWOyhpkVqPfador5xXGe0w1zGl2RbJRWBs/Ut u/R4CjhLyigWxT1otKLCPOgKjyiOfVM= -----END CERTIFICATE-----Generated at Fri Nov 22 05:50:33 2024 by rpki-client on console-fra.rpki-client.org