$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4776008b-22e2-3978-ab1c-e936740befcc.roa File: 4776008b-22e2-3978-ab1c-e936740befcc.roa (raw, json) Hash identifier: 1v/wwhTNoDDJOZCgfAzU641Y6XnQr0maRGXD02amHc8= Subject key identifier: 02:2D:E9:30:7D:08:B5:5B:3C:A0:D6:06:BA:A3:1A:3C:C7:B0:E4:28 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F432858477BF66B1FFA5763BF77013080 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4776008b-22e2-3978-ab1c-e936740befcc.roa Signing time: Wed 09 Oct 2024 13:00:42 +0000 ROA not before: Wed 09 Oct 2024 13:00:42 +0000 ROA not after: Tue 07 Jan 2025 14:00:42 +0000 asID: 212238 IP address blocks: 172.94.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:7b:f6:6b:1f:fa:57:63:bf:77:01:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 9 13:00:42 2024 GMT Not After : Jan 7 14:00:42 2025 GMT Subject: CN=1253ee46-866c-4417-afd0-f175aa8ebbf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:4f:93:4e:a9:79:0d:82:b6:d1:d2:28:ca:7f: 5f:6f:59:79:ea:8b:a2:52:e2:a0:8e:7c:2f:5b:10: b3:c8:58:73:12:d8:83:94:f5:ae:83:ee:71:4f:28: 31:61:74:06:12:d5:31:d3:49:86:f3:1d:1f:77:7d: 0d:2d:81:b1:85:00:0b:e3:64:a8:67:76:e7:01:d2: e2:76:0c:64:67:c0:5e:59:76:ac:bf:bd:83:e3:c5: da:aa:b1:57:90:c6:be:2b:32:88:b7:d5:9f:5e:60: 09:5a:a0:ea:9f:9d:0d:52:1c:8e:12:0d:33:68:62: 45:d8:59:6e:f3:42:b8:63:76:0f:72:14:9d:01:3f: 48:a1:72:88:d8:36:99:3d:88:b9:9c:d3:58:f8:bc: 69:0d:22:75:87:3a:48:60:43:90:96:eb:82:a7:bc: 56:11:5b:cf:b3:9d:68:62:04:49:2d:b3:65:6f:bd: 51:34:41:34:90:c0:d6:67:2d:11:7f:fb:a0:c4:4b: d7:2c:41:ef:30:84:ca:ce:e0:e3:ee:4f:da:17:6b: 8c:73:81:13:99:c6:90:12:3e:24:a4:33:6e:43:b6: ff:82:a4:8f:c5:36:b7:e1:f9:92:1c:50:03:21:be: c8:ad:2d:dc:00:35:db:8d:35:ea:8b:db:3c:fa:7e: 10:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:2D:E9:30:7D:08:B5:5B:3C:A0:D6:06:BA:A3:1A:3C:C7:B0:E4:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4776008b-22e2-3978-ab1c-e936740befcc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:d5:b7:e8:93:c3:d5:3b:2a:d5:07:e6:41:d1:21:1c:24:23: 77:ad:ca:ac:a0:12:76:f5:70:81:40:6e:f0:8e:b7:a2:c9:d7: 60:e5:1e:d6:6c:6f:64:44:1e:6a:ff:9c:5b:26:c8:a6:45:f0: b2:2b:21:11:75:be:fc:4e:38:94:ac:58:e5:0c:22:ce:dc:47: fd:19:0f:86:97:5f:b5:28:41:c2:09:f0:4b:62:6e:db:7c:ad: 28:7c:74:89:2e:42:70:7e:a6:a7:4d:ef:24:6f:08:5f:e0:d6: 0a:66:47:a0:d6:14:7d:50:3f:ef:41:10:ab:9d:cc:51:dd:1b: 5a:3e:2d:6c:fc:8a:44:42:24:d8:75:f6:32:e5:10:e3:dc:92: 7a:51:b5:f2:5f:89:75:2b:5e:0e:d6:c3:35:c6:9f:28:4b:7a: f7:bf:41:66:2f:bb:9d:e9:46:af:f4:6d:3a:c8:5b:c3:81:61: c8:e6:49:0f:18:36:89:a2:9b:e6:ef:2a:03:67:03:9b:1a:0f: 20:93:f3:a1:1c:a6:e3:25:87:89:c2:37:cf:b9:87:12:a9:19: 85:57:6f:03:22:4f:ad:d5:da:5f:68:53:db:13:0e:30:69:95: dc:22:44:de:42:14:54:6a:36:9f:58:97:29:a9:d0:74:8e:38: a2:7d:35:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd79msf+ldjv3cBMIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI0MTAwOTEzMDA0MloXDTI1MDEwNzE0MDA0MlowLzEtMCsGA1UEAxMk MTI1M2VlNDYtODY2Yy00NDE3LWFmZDAtZjE3NWFhOGViYmYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqE+TTql5DYK20dIoyn9fb1l56ouiUuKgjnwv WxCzyFhzEtiDlPWug+5xTygxYXQGEtUx00mG8x0fd30NLYGxhQAL42SoZ3bnAdLi dgxkZ8BeWXasv72D48XaqrFXkMa+KzKIt9WfXmAJWqDqn50NUhyOEg0zaGJF2Flu 80K4Y3YPchSdAT9IoXKI2DaZPYi5nNNY+LxpDSJ1hzpIYEOQluuCp7xWEVvPs51o YgRJLbNlb71RNEE0kMDWZy0Rf/ugxEvXLEHvMITKzuDj7k/aF2uMc4ETmcaQEj4k pDNuQ7b/gqSPxTa34fmSHFADIb7IrS3cADXbjTXqi9s8+n4Q3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAIt6TB9CLVbPKDWBrqjGjzHsOQoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNDc3NjAwOGItMjJlMi0z OTc4LWFiMWMtZTkzNjc0MGJlZmNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF5sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIXVt+iTw9U7KtUH5kHRIRwkI3etyqygEnb1cIFAbvCOt6LJ12DlHtZs b2REHmr/nFsmyKZF8LIrIRF1vvxOOJSsWOUMIs7cR/0ZD4aXX7UoQcIJ8Etibtt8 rSh8dIkuQnB+pqdN7yRvCF/g1gpmR6DWFH1QP+9BEKudzFHdG1o+LWz8ikRCJNh1 9jLlEOPcknpRtfJfiXUrXg7WwzXGnyhLeve/QWYvu53pRq/0bTrIW8OBYcjmSQ8Y Nomim+bvKgNnA5saDyCT86EcpuMlh4nCN8+5hxKpGYVXbwMiT63V2l9oU9sTDjBp ldwiRN5CFFRqNp9Ylymp0HSOOKJ9NS0= -----END CERTIFICATE-----Generated at Fri Nov 22 00:23:35 2024 by rpki-client on console-fra.rpki-client.org