$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5ca571b1-4907-324c-8104-bed6cc0fdfbf.roa File: 5ca571b1-4907-324c-8104-bed6cc0fdfbf.roa (raw, json) Hash identifier: 1N2ecrNFgSmUfD1bUFhbSBHxDW8ckB0T2HrJ1aAmDbk= Subject key identifier: DA:36:04:94:6D:5E:3E:AC:C1:C5:F4:56:9B:F0:02:B5:CE:D0:D8:2F Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285847872132D675C3F4E574ACE4C0 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5ca571b1-4907-324c-8104-bed6cc0fdfbf.roa Signing time: Sun 13 Oct 2024 13:00:42 +0000 ROA not before: Sun 13 Oct 2024 13:00:42 +0000 ROA not after: Sat 11 Jan 2025 14:00:42 +0000 asID: 212238 IP address blocks: 172.94.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:87:21:32:d6:75:c3:f4:e5:74:ac:e4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 13 13:00:42 2024 GMT Not After : Jan 11 14:00:42 2025 GMT Subject: CN=a8f13d11-0b9d-423d-9f24-65ccf6653b6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:7d:73:dc:b4:d3:50:78:99:ee:31:6b:14:38: c6:9b:b6:da:c2:f0:2a:7a:9f:48:be:f2:2e:31:c3: 98:c6:2e:9b:4f:54:88:5c:85:74:55:8f:b2:61:48: 47:5b:f5:2f:72:5e:a8:0d:d1:bb:83:1a:e8:88:c2: b9:41:a6:32:13:40:98:35:94:ef:9e:7b:91:a7:08: 3d:4d:a7:3b:4f:5e:ed:c9:6d:5d:3b:1b:c6:e2:55: 3d:39:38:58:3b:48:ad:e8:24:3c:65:06:90:e0:ca: b2:aa:76:2d:c5:09:b4:07:89:95:ca:89:17:3d:d4: 72:75:91:2a:89:5c:98:09:24:32:2c:f6:0b:2b:e8: 48:26:77:9e:67:7f:df:69:3e:cf:9f:8e:ab:93:3b: 29:74:95:8f:b7:07:db:d7:b8:a2:a0:dd:23:28:12: 5e:3a:18:80:e5:5b:44:2a:b2:c0:5e:9b:37:02:1c: ab:8a:45:fe:48:ef:ed:13:24:4b:97:40:cb:8e:a3: b3:8c:96:48:b4:0d:7f:ae:fe:ff:da:cd:dc:91:48: 07:4b:4f:a5:f7:65:64:eb:4e:40:1b:64:07:e7:22: ee:c9:b7:c6:f3:4a:68:f0:82:8f:46:13:3e:4d:99: 42:3a:84:a5:69:5e:7b:07:fa:77:9c:9b:aa:12:b2: 8b:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:36:04:94:6D:5E:3E:AC:C1:C5:F4:56:9B:F0:02:B5:CE:D0:D8:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5ca571b1-4907-324c-8104-bed6cc0fdfbf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:bc:ff:70:a4:57:b9:a9:ef:81:83:07:74:c1:50:5e:b6:44: b2:4d:31:71:5b:2c:65:c1:21:84:45:71:10:2c:2c:26:5d:4d: 0c:84:cd:ad:67:be:13:f3:3b:7d:8d:0d:c1:a8:12:72:af:ad: a6:2e:e7:19:cf:c8:ce:b1:6f:dd:a6:5e:0c:98:d2:d7:70:95: eb:22:41:47:f2:df:34:b2:d8:d0:de:47:82:e7:20:e1:4b:a7: ec:16:46:b4:6c:08:74:46:db:3f:cf:10:a8:ef:e0:34:4a:ff: 5c:37:96:df:35:8e:c8:18:0f:43:a5:db:f6:66:b2:9f:95:8e: a4:55:c9:fa:01:d2:d1:7b:c5:f6:9c:ea:7d:97:8e:04:28:27: ca:4a:6f:88:dc:43:4f:e8:e9:cd:ec:9f:de:bb:63:93:49:1e: 7c:fc:ed:4f:52:1c:06:73:3e:06:6b:41:ae:15:19:38:2e:20: a7:14:8e:38:7c:29:ae:fd:5b:93:27:73:2c:9c:b2:86:3a:d2: da:aa:71:37:64:bc:1d:5f:8f:ab:ea:9e:86:1a:a8:42:bf:ba: 7a:59:97:94:af:da:f0:0c:6c:e3:23:c4:bf:8d:29:76:27:2c: 4c:67:30:78:93:93:d7:93:e1:69:af:32:c9:04:ad:54:a3:88: 16:dd:2e:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeHITLWdcP05XSs5MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI0MTAxMzEzMDA0MloXDTI1MDExMTE0MDA0MlowLzEtMCsGA1UEAxMk YThmMTNkMTEtMGI5ZC00MjNkLTlmMjQtNjVjY2Y2NjUzYjZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoH1z3LTTUHiZ7jFrFDjGm7bawvAqep9IvvIu McOYxi6bT1SIXIV0VY+yYUhHW/Uvcl6oDdG7gxroiMK5QaYyE0CYNZTvnnuRpwg9 Tac7T17tyW1dOxvG4lU9OThYO0it6CQ8ZQaQ4MqyqnYtxQm0B4mVyokXPdRydZEq iVyYCSQyLPYLK+hIJneeZ3/faT7Pn46rkzspdJWPtwfb17iioN0jKBJeOhiA5VtE KrLAXps3AhyrikX+SO/tEyRLl0DLjqOzjJZItA1/rv7/2s3ckUgHS0+l92Vk605A G2QH5yLuybfG80po8IKPRhM+TZlCOoSlaV57B/p3nJuqErKL2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNo2BJRtXj6swcX0VpvwArXO0NgvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNWNhNTcxYjEtNDkwNy0z MjRjLTgxMDQtYmVkNmNjMGZkZmJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE+8/3CkV7mp74GDB3TBUF62RLJNMXFbLGXBIYRFcRAsLCZdTQyEza1n vhPzO32NDcGoEnKvraYu5xnPyM6xb92mXgyY0tdwlesiQUfy3zSy2NDeR4LnIOFL p+wWRrRsCHRG2z/PEKjv4DRK/1w3lt81jsgYD0Ol2/Zmsp+VjqRVyfoB0tF7xfac 6n2XjgQoJ8pKb4jcQ0/o6c3sn967Y5NJHnz87U9SHAZzPgZrQa4VGTguIKcUjjh8 Ka79W5MncyycsoY60tqqcTdkvB1fj6vqnoYaqEK/unpZl5Sv2vAMbOMjxL+NKXYn LExnMHiTk9eT4WmvMskErVSjiBbdLps= -----END CERTIFICATE-----Generated at Fri Nov 22 04:37:33 2024 by rpki-client on console-ams.rpki-client.org