$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5a10eb6b-0b92-391c-98c1-8d907dfc944c.roa File: 5a10eb6b-0b92-391c-98c1-8d907dfc944c.roa (raw, json) Hash identifier: SWFmmhph0rgnhC4E6iokviGTCbHKQy9Jo+yfKIBMfqA= Subject key identifier: 09:23:AC:74:57:E4:B2:28:46:F5:AE:5F:81:12:02:A5:89:7C:C5:80 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285847BB274C0676280BD21453AF00 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5a10eb6b-0b92-391c-98c1-8d907dfc944c.roa Signing time: Fri 01 Nov 2024 04:15:17 +0000 ROA not before: Fri 01 Nov 2024 04:15:17 +0000 ROA not after: Thu 30 Jan 2025 05:15:17 +0000 asID: 212238 IP address blocks: 206.123.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:bb:27:4c:06:76:28:0b:d2:14:53:af:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Nov 1 04:15:17 2024 GMT Not After : Jan 30 05:15:17 2025 GMT Subject: CN=9ff4949e-bd48-4ffe-a312-27e05371786e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:b8:97:0a:ff:24:82:ff:08:7f:0d:40:3c:bd: d2:fa:1a:4f:f3:ff:28:f3:65:12:3d:b4:18:7f:e8: e5:32:d3:28:b8:a3:4b:28:65:ce:d3:c2:f8:d0:7c: aa:3e:be:a9:f6:1c:40:f6:7a:86:aa:de:45:01:4e: 0b:b9:06:a4:3d:34:d6:69:1c:2a:e6:34:34:ff:e4: 4a:dc:68:4e:10:cb:0a:4a:d5:a6:e8:12:81:66:a7: 5c:19:0b:a6:08:15:7b:f7:c0:ad:60:0e:93:22:e4: 85:e7:de:8d:15:e2:50:57:e5:0d:87:f9:ea:a9:96: d1:8b:31:e4:da:05:04:53:8c:0a:1e:2c:69:97:55: bf:52:54:69:4c:1f:98:21:15:7f:d2:ad:ad:cd:bb: a5:77:4a:19:90:78:1c:53:b1:2b:1d:86:29:5e:3f: 00:6c:56:d7:94:25:98:3e:6f:80:a0:ef:c1:31:e0: 9d:69:b7:f0:d3:05:04:99:4d:29:cd:a5:1d:30:7d: a0:5c:0e:24:66:1d:74:0e:1d:50:54:6c:db:32:91: b8:9d:b5:79:41:1e:5f:b6:99:36:ab:18:6b:22:c7: e7:04:ac:b7:aa:52:fb:a3:a2:73:01:c9:17:00:06: 8a:be:20:3c:aa:d9:8f:ce:5c:ff:a8:27:0f:0d:32: 50:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:23:AC:74:57:E4:B2:28:46:F5:AE:5F:81:12:02:A5:89:7C:C5:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5a10eb6b-0b92-391c-98c1-8d907dfc944c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 206.123.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:a8:09:41:e8:2a:f1:50:d1:b3:da:c6:eb:29:9c:07:d8:f2: 38:f7:89:0a:8b:02:1e:56:28:ab:fa:c9:bc:70:36:11:38:cd: 5a:a7:1f:e2:06:12:ae:67:8f:e7:6e:57:52:65:b8:17:25:c9: 64:45:e5:79:63:83:28:32:fc:ba:c1:0f:1c:d6:50:07:58:a0: 7f:89:0d:b5:d8:11:88:bf:cf:79:3e:03:d6:67:ac:80:37:b3: a5:f7:31:fc:8d:03:38:7b:55:7f:aa:43:b0:02:e6:5b:5a:5c: 33:73:f1:3e:d4:20:32:00:f6:ea:b7:9b:5f:07:06:d3:76:44: fc:f7:dc:9a:27:70:4b:94:b0:84:b0:80:33:d3:b8:2e:ab:8f: 5e:24:3a:50:fd:96:8b:f4:21:85:78:6a:88:dc:c0:5e:9b:e2: 44:c6:40:d9:7b:52:f7:71:70:3e:fc:6d:e0:a7:6d:f6:2e:65: dc:d2:9a:89:ee:4a:94:7d:38:09:44:8a:bd:79:fd:4a:39:a7: 2e:8f:7e:b9:00:fa:6e:f7:97:ee:a1:08:b0:83:32:e2:32:40: 04:27:61:62:df:d9:58:94:e9:55:bf:05:80:e1:27:95:8b:b4: 7d:8e:96:00:0a:d1:f8:75:fb:6d:4d:ef:8a:56:78:be:ce:b5: a1:0b:e4:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe7J0wGdigL0hRTrwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI0MTEwMTA0MTUxN1oXDTI1MDEzMDA1MTUxN1owLzEtMCsGA1UEAxMk OWZmNDk0OWUtYmQ0OC00ZmZlLWEzMTItMjdlMDUzNzE3ODZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLiXCv8kgv8Ifw1APL3S+hpP8/8o82USPbQY f+jlMtMouKNLKGXO08L40HyqPr6p9hxA9nqGqt5FAU4LuQakPTTWaRwq5jQ0/+RK 3GhOEMsKStWm6BKBZqdcGQumCBV798CtYA6TIuSF596NFeJQV+UNh/nqqZbRizHk 2gUEU4wKHixpl1W/UlRpTB+YIRV/0q2tzbuld0oZkHgcU7ErHYYpXj8AbFbXlCWY Pm+AoO/BMeCdabfw0wUEmU0pzaUdMH2gXA4kZh10Dh1QVGzbMpG4nbV5QR5ftpk2 qxhrIsfnBKy3qlL7o6JzAckXAAaKviA8qtmPzlz/qCcPDTJQqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAkjrHRX5LIoRvWuX4ESAqWJfMWAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNWExMGViNmItMGI5Mi0z OTFjLTk4YzEtOGQ5MDdkZmM5NDRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCznuQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFaoCUHoKvFQ0bPaxuspnAfY8jj3iQqLAh5WKKv6ybxwNhE4zVqnH+IG Eq5nj+duV1JluBclyWRF5Xljgygy/LrBDxzWUAdYoH+JDbXYEYi/z3k+A9ZnrIA3 s6X3MfyNAzh7VX+qQ7AC5ltaXDNz8T7UIDIA9uq3m18HBtN2RPz33JoncEuUsISw gDPTuC6rj14kOlD9lov0IYV4aojcwF6b4kTGQNl7UvdxcD78beCnbfYuZdzSmonu SpR9OAlEir15/Uo5py6PfrkA+m73l+6hCLCDMuIyQAQnYWLf2ViU6VW/BYDhJ5WL tH2OlgAK0fh1+21N74pWeL7OtaEL5DQ= -----END CERTIFICATE-----Generated at Fri Nov 22 04:22:54 2024 by rpki-client on console-fra.rpki-client.org