$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4fe0e1b4-eebf-3f46-841b-7291bad1d6f0.roa File: 4fe0e1b4-eebf-3f46-841b-7291bad1d6f0.roa (raw, json) Hash identifier: pXMshGlON6MX4q26vexmYYwQqxlNxXG4jVU422gb35g= Subject key identifier: B7:0C:29:8E:F4:BA:8C:4E:08:84:DA:7D:F8:5B:DE:F7:4F:05:48:AB Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285847F3D186E8B5AEBAE3B57AFA80 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4fe0e1b4-eebf-3f46-841b-7291bad1d6f0.roa Signing time: Thu 21 Nov 2024 11:23:33 +0000 ROA not before: Thu 21 Nov 2024 11:23:33 +0000 ROA not after: Wed 19 Feb 2025 11:23:33 +0000 asID: 53356 IP address blocks: 172.94.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f3:d1:86:e8:b5:ae:ba:e3:b5:7a:fa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Nov 21 11:23:33 2024 GMT Not After : Feb 19 11:23:33 2025 GMT Subject: CN=3a1042f6-56f9-4920-92ad-c135e33458e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a2:c1:c0:f2:d2:7b:64:46:d6:e7:54:41:ed: 86:57:9d:eb:7d:41:94:26:7f:df:90:e7:fd:5a:1b: fb:0c:b4:23:98:d6:bd:8e:0e:66:a5:2e:44:90:eb: f3:31:d0:70:f4:21:2d:3f:96:f6:02:f5:8d:99:30: db:cf:d2:e4:8a:67:56:b4:95:5d:6a:63:03:77:36: 03:cc:e5:80:97:66:06:3a:ee:da:57:16:fe:d6:db: cf:23:d9:79:c1:39:a9:c4:6d:bf:88:76:91:a9:ec: 83:3d:97:e3:3f:a3:e2:c2:d2:b9:a2:f6:a7:4d:22: 02:71:65:58:88:ff:80:54:b6:72:ec:b9:d5:29:70: b3:ab:c8:f4:1d:20:a2:08:97:22:cb:68:2b:95:86: 10:ae:8b:e2:cf:50:04:af:5b:44:e2:e2:a2:ed:a0: 89:76:71:a6:c6:2b:77:5f:95:5c:8a:22:90:96:e3: df:c5:31:e3:a2:0b:c2:f5:6e:94:28:3d:d5:5f:39: d9:7a:4f:23:63:d5:a8:12:ae:e0:9f:5d:d5:60:81: fe:a0:4a:68:e3:83:90:2e:a2:83:40:e3:1a:7f:5b: f9:51:9e:d7:14:ef:57:a4:1f:44:68:1a:5e:c7:55: 4d:0e:61:74:49:35:13:cf:0d:aa:1e:30:d2:4e:17: 1f:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:0C:29:8E:F4:BA:8C:4E:08:84:DA:7D:F8:5B:DE:F7:4F:05:48:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4fe0e1b4-eebf-3f46-841b-7291bad1d6f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:2a:97:45:51:46:54:09:67:61:1d:27:7d:1f:1f:5c:e8:7c: 13:38:50:1a:8a:3e:1b:53:02:e1:2d:7d:4d:37:4d:42:e5:be: 6c:f7:f7:a2:15:ba:77:b0:3c:c2:10:cc:63:0a:76:12:c3:6c: 5a:30:b2:64:12:65:0c:7f:79:0d:41:f3:1b:ba:4f:19:38:10: 5e:7b:03:bb:c2:5a:ab:8e:80:b5:1a:c3:5f:64:4c:d7:0a:ac: 98:8d:b9:a8:39:58:11:19:30:0b:26:80:3c:3c:eb:98:8b:93: 58:78:9e:03:38:ab:dc:12:35:3c:a6:c9:08:64:46:8e:1a:8c: a6:b3:9b:b5:a5:26:50:dd:de:71:71:d2:3c:0d:ca:86:34:3f: 0b:d4:0c:30:be:6a:96:33:97:de:7c:a5:35:56:a9:46:c8:cc: 42:92:e1:87:46:4f:bb:d8:1f:39:f2:e5:48:83:09:27:12:43: c0:0d:8d:89:56:c7:b0:f5:42:fc:bd:ed:94:b6:01:c6:72:e4: b9:8a:e5:fa:7b:0c:35:88:35:76:58:fe:db:1a:44:2e:94:ae: 14:e7:e6:3f:42:50:d5:41:44:f6:b2:fb:d8:2e:56:a7:bb:66: 4f:bb:69:bc:54:8a:4f:6a:41:ba:00:0d:83:38:55:aa:5a:72: 07:5c:6d:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfz0Ybota6647V6+oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI0MTEyMTExMjMzM1oXDTI1MDIxOTExMjMzM1owLzEtMCsGA1UEAxMk M2ExMDQyZjYtNTZmOS00OTIwLTkyYWQtYzEzNWUzMzQ1OGU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6LBwPLSe2RG1udUQe2GV53rfUGUJn/fkOf9 Whv7DLQjmNa9jg5mpS5EkOvzMdBw9CEtP5b2AvWNmTDbz9LkimdWtJVdamMDdzYD zOWAl2YGOu7aVxb+1tvPI9l5wTmpxG2/iHaRqeyDPZfjP6PiwtK5ovanTSICcWVY iP+AVLZy7LnVKXCzq8j0HSCiCJciy2grlYYQroviz1AEr1tE4uKi7aCJdnGmxit3 X5VciiKQluPfxTHjogvC9W6UKD3VXznZek8jY9WoEq7gn13VYIH+oEpo44OQLqKD QOMaf1v5UZ7XFO9XpB9EaBpex1VNDmF0STUTzw2qHjDSThcf/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLcMKY70uoxOCITaffhb3vdPBUirMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNGZlMGUxYjQtZWViZi0z ZjQ2LTg0MWItNzI5MWJhZDFkNmYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEoql0VRRlQJZ2EdJ30fH1zofBM4UBqKPhtTAuEtfU03TULlvmz396IV unewPMIQzGMKdhLDbFowsmQSZQx/eQ1B8xu6Txk4EF57A7vCWquOgLUaw19kTNcK rJiNuag5WBEZMAsmgDw865iLk1h4ngM4q9wSNTymyQhkRo4ajKazm7WlJlDd3nFx 0jwNyoY0PwvUDDC+apYzl958pTVWqUbIzEKS4YdGT7vYHzny5UiDCScSQ8ANjYlW x7D1Qvy97ZS2AcZy5LmK5fp7DDWINXZY/tsaRC6UrhTn5j9CUNVBRPay+9guVqe7 Zk+7abxUik9qQboADYM4VapacgdcbRs= -----END CERTIFICATE-----Generated at Fri Nov 22 06:37:55 2024 by rpki-client on console-ams.rpki-client.org