$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/6620a23e-bb82-37be-9f36-cb80975e96ef.roa File: 6620a23e-bb82-37be-9f36-cb80975e96ef.roa (raw, json) Hash identifier: OfgyUGJG0lGtv8pRmVSL7sIClScoEHEZksYqBALF5WI= Subject key identifier: 2F:20:A1:B0:98:1D:FC:E4:A0:2E:D4:56:F9:DB:FF:90:17:C5:03:06 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285847F3D2796281038641F1B4C200 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/6620a23e-bb82-37be-9f36-cb80975e96ef.roa Signing time: Thu 21 Nov 2024 11:25:27 +0000 ROA not before: Thu 21 Nov 2024 11:25:27 +0000 ROA not after: Wed 19 Feb 2025 11:25:27 +0000 asID: 53356 IP address blocks: 172.94.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f3:d2:79:62:81:03:86:41:f1:b4:c2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Nov 21 11:25:27 2024 GMT Not After : Feb 19 11:25:27 2025 GMT Subject: CN=0ab98aef-4ac3-4218-9f1b-ff15430b64c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:cd:05:0b:76:65:8f:ab:86:2a:50:b3:d0:d1: 64:c6:5d:ec:52:19:62:f4:ac:e4:4f:e6:1d:44:5c: d0:cd:da:03:67:04:ff:79:39:1e:4e:53:36:7f:1c: 66:23:63:e4:71:69:90:50:03:91:6b:f3:4a:b7:d5: 16:ea:58:b2:94:20:30:5e:fa:8a:ca:b7:50:01:3a: 13:b2:5f:66:2c:11:56:e1:26:9a:d6:da:2a:d1:a3: 7d:78:d5:29:1a:5a:1d:14:f1:95:9c:50:b0:82:b0: 71:29:da:5e:b8:17:93:4d:2d:dd:0b:0f:6f:86:bc: b2:1b:19:15:a9:43:db:b7:73:9f:2b:c6:ec:83:b9: 6c:dd:e2:19:c3:14:3c:35:22:4a:36:10:b8:80:54: 97:fb:22:c3:fa:77:21:0d:b1:3c:c8:7e:6a:5c:8d: fb:91:fa:66:a0:9d:eb:34:82:c6:36:ad:9d:16:1b: 04:49:e0:4e:01:24:6a:0d:ea:68:6b:95:6e:d2:05: ae:0b:fe:71:1f:87:65:78:cc:4a:c1:b4:e1:cd:90: 48:af:a9:67:71:d6:74:b2:d0:f9:30:16:51:7e:56: 6c:c3:15:e1:e1:26:f7:e3:37:87:4d:18:42:b1:ce: 22:26:11:e7:f2:f0:a4:dd:01:63:ff:1f:f0:f9:75: a1:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:20:A1:B0:98:1D:FC:E4:A0:2E:D4:56:F9:DB:FF:90:17:C5:03:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/6620a23e-bb82-37be-9f36-cb80975e96ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.83.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:f7:3c:18:e4:42:13:ce:58:00:5d:8c:7d:3e:8b:c7:a0:58: f8:89:08:eb:b9:c0:9a:46:1c:51:43:95:7b:6a:fc:00:b9:68: 86:30:3b:69:b4:62:8f:4b:7e:b2:ec:71:80:8b:f2:3b:2d:6b: 17:7b:9c:7c:99:06:e4:ba:fc:a4:ef:92:bb:ff:f0:cd:d6:1b: 2c:94:4f:0a:45:b5:c6:96:19:6c:d5:73:7d:28:40:78:d4:50: 8c:52:cc:40:d9:28:e1:fc:f3:b9:48:9f:13:74:00:09:81:ba: 6f:13:53:35:90:19:ed:13:08:6d:b3:ab:24:6f:8c:30:da:f0: e1:9c:0a:4d:4a:b4:c5:87:6b:48:04:d1:16:04:e4:4e:f4:53: ed:8f:32:e1:6d:a1:71:93:f0:8b:01:57:06:01:f8:cd:61:69: 57:2c:64:a6:b9:a9:79:fe:44:8f:54:1f:08:26:c1:41:ad:14: 21:d4:5e:dc:5d:13:89:99:59:f7:9c:21:a8:5a:6b:b1:7c:35: 79:a2:8a:d3:78:ae:94:6f:3c:c3:43:72:ed:06:cd:ac:d9:c3: da:8b:ea:de:68:c1:10:f5:58:91:c3:0e:72:ec:65:98:37:0e: 25:84:59:e5:a0:f4:92:2d:fe:e6:25:fd:15:49:90:af:7e:f3: 0e:60:d4:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfz0nligQOGQfG0wgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI0MTEyMTExMjUyN1oXDTI1MDIxOTExMjUyN1owLzEtMCsGA1UEAxMk MGFiOThhZWYtNGFjMy00MjE4LTlmMWItZmYxNTQzMGI2NGM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqc0FC3Zlj6uGKlCz0NFkxl3sUhli9KzkT+Yd RFzQzdoDZwT/eTkeTlM2fxxmI2PkcWmQUAORa/NKt9UW6liylCAwXvqKyrdQAToT sl9mLBFW4Saa1toq0aN9eNUpGlodFPGVnFCwgrBxKdpeuBeTTS3dCw9vhryyGxkV qUPbt3OfK8bsg7ls3eIZwxQ8NSJKNhC4gFSX+yLD+nchDbE8yH5qXI37kfpmoJ3r NILGNq2dFhsESeBOASRqDepoa5Vu0gWuC/5xH4dleMxKwbThzZBIr6lncdZ0stD5 MBZRflZswxXh4Sb34zeHTRhCsc4iJhHn8vCk3QFj/x/w+XWhuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC8gobCYHfzkoC7UVvnb/5AXxQMGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNjYyMGEyM2UtYmI4Mi0z N2JlLTlmMzYtY2I4MDk3NWU5NmVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF5TMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABH3PBjkQhPOWABdjH0+i8egWPiJCOu5wJpGHFFDlXtq/AC5aIYwO2m0 Yo9LfrLscYCL8jstaxd7nHyZBuS6/KTvkrv/8M3WGyyUTwpFtcaWGWzVc30oQHjU UIxSzEDZKOH887lInxN0AAmBum8TUzWQGe0TCG2zqyRvjDDa8OGcCk1KtMWHa0gE 0RYE5E70U+2PMuFtoXGT8IsBVwYB+M1haVcsZKa5qXn+RI9UHwgmwUGtFCHUXtxd E4mZWfecIahaa7F8NXmiitN4rpRvPMNDcu0GzazZw9qL6t5owRD1WJHDDnLsZZg3 DiWEWeWg9JIt/uYl/RVJkK9+8w5g1Jc= -----END CERTIFICATE-----Generated at Fri Nov 22 06:37:55 2024 by rpki-client on console-ams.rpki-client.org