$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/739f0ac6-9dd4-32b9-b4a7-f375ea71a75a.roa File: 739f0ac6-9dd4-32b9-b4a7-f375ea71a75a.roa (raw, json) Hash identifier: DAs/fjnWpK8N9XCu6p3ghj9/pyP9SlISl2E03ZcJaRk= Subject key identifier: A7:E2:1F:B8:58:A7:5A:34:D0:3F:8D:D2:FF:F6:B2:40:A7:80:A2:D2 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285847845664D3E76C6F9D172B9A80 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/739f0ac6-9dd4-32b9-b4a7-f375ea71a75a.roa Signing time: Sat 12 Oct 2024 13:00:42 +0000 ROA not before: Sat 12 Oct 2024 13:00:42 +0000 ROA not after: Fri 10 Jan 2025 14:00:42 +0000 asID: 137409 IP address blocks: 172.94.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:84:56:64:d3:e7:6c:6f:9d:17:2b:9a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 12 13:00:42 2024 GMT Not After : Jan 10 14:00:42 2025 GMT Subject: CN=003fed65-95b4-4f59-bffd-791702221e08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:24:3e:90:79:77:24:b6:19:74:2c:f8:a1:e8: d2:5f:cf:9c:50:d5:fd:5b:31:3c:1e:9c:09:15:3e: 37:49:43:0c:c6:05:b4:2b:f8:c8:3e:bc:cc:4c:cd: 32:90:99:4c:63:38:f2:c9:ac:22:e2:da:ba:41:4c: f8:4b:b0:0f:4b:eb:91:bd:e0:2b:2b:c9:15:b7:6c: 3c:c3:e1:b5:2d:ce:8e:1e:df:73:d0:a7:82:e1:8b: 4d:0f:3d:64:b3:17:dd:c9:b7:3c:4e:34:37:d7:e6: f7:f2:4c:ed:cd:91:f3:93:07:49:ba:d4:95:e7:27: 6e:c1:56:e3:74:f7:4a:c9:6d:35:de:19:22:bb:98: 99:26:7f:eb:fd:58:36:a3:49:f6:97:05:f6:fe:d5: 0c:76:f7:88:d2:64:32:87:c7:da:e3:b9:6d:4d:53: fa:ba:71:59:41:27:b2:93:bd:8b:51:d5:66:36:ce: dc:57:87:5c:61:10:a9:c8:2b:97:ec:a0:c6:dd:6d: d9:ac:86:eb:fc:64:a3:b0:5b:6b:01:28:81:f7:95: 83:bf:4a:34:fa:99:6e:50:fc:71:0d:a4:64:57:45: c3:47:12:27:4d:17:9a:62:ec:54:36:6e:d4:d6:8d: c5:ad:c8:53:84:e1:2d:13:f3:7e:1a:70:09:88:81: 4b:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:E2:1F:B8:58:A7:5A:34:D0:3F:8D:D2:FF:F6:B2:40:A7:80:A2:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/739f0ac6-9dd4-32b9-b4a7-f375ea71a75a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.100.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:dd:09:c7:e3:d9:d2:f3:cc:9a:41:39:d8:bf:80:1f:cd:01: 04:69:e0:52:d6:bd:d1:f1:b0:b8:89:f9:fe:f8:1d:90:57:7f: 2f:e7:74:0e:66:89:a0:b8:f0:fe:d7:fa:18:71:b8:29:3d:05: 3a:a0:6e:00:46:c6:3d:d4:d4:9e:95:56:b0:51:8f:41:04:f5: 87:1f:a1:39:a8:10:ce:d4:81:ab:95:ce:df:12:55:c7:25:d8: fc:9f:09:d4:67:2c:a9:28:b5:79:ac:cf:88:ed:7e:6e:79:83: 9e:6a:6e:af:36:c2:b7:54:c9:b9:50:40:ce:7e:19:bf:c0:39: 79:89:d5:61:89:f9:dc:a1:eb:d1:8c:ef:58:ba:bf:fc:d8:b7: 8f:03:1c:75:32:b3:c3:b1:a5:ea:b2:21:4e:5d:49:53:64:5f: e5:5d:68:ef:6c:e1:bf:a3:1f:1e:9f:3b:59:8b:e7:78:eb:ce: 36:4c:2d:d7:99:da:48:83:bb:c4:42:81:3a:1a:93:ee:41:b2: 11:32:87:09:de:3e:5a:a4:82:0b:3a:cf:51:9f:c3:6a:f7:1c: 48:7a:b5:1a:8f:40:8e:2e:ea:a5:15:a2:b8:24:b6:d2:93:ec: 13:01:48:24:6e:31:23:ca:c0:0c:e8:2f:cb:8c:8b:2e:d9:91: 29:8c:bc:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeEVmTT52xvnRcrmoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI0MTAxMjEzMDA0MloXDTI1MDExMDE0MDA0MlowLzEtMCsGA1UEAxMk MDAzZmVkNjUtOTViNC00ZjU5LWJmZmQtNzkxNzAyMjIxZTA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCQ+kHl3JLYZdCz4oejSX8+cUNX9WzE8HpwJ FT43SUMMxgW0K/jIPrzMTM0ykJlMYzjyyawi4tq6QUz4S7APS+uRveArK8kVt2w8 w+G1Lc6OHt9z0KeC4YtNDz1ksxfdybc8TjQ31+b38kztzZHzkwdJutSV5yduwVbj dPdKyW013hkiu5iZJn/r/Vg2o0n2lwX2/tUMdveI0mQyh8fa47ltTVP6unFZQSey k72LUdVmNs7cV4dcYRCpyCuX7KDG3W3ZrIbr/GSjsFtrASiB95WDv0o0+pluUPxx DaRkV0XDRxInTReaYuxUNm7U1o3FrchThOEtE/N+GnAJiIFLFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKfiH7hYp1o00D+N0v/2skCngKLSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNzM5ZjBhYzYtOWRkNC0z MmI5LWI0YTctZjM3NWVhNzFhNzVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF5kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACLdCcfj2dLzzJpBOdi/gB/NAQRp4FLWvdHxsLiJ+f74HZBXfy/ndA5m iaC48P7X+hhxuCk9BTqgbgBGxj3U1J6VVrBRj0EE9YcfoTmoEM7UgauVzt8SVccl 2PyfCdRnLKkotXmsz4jtfm55g55qbq82wrdUyblQQM5+Gb/AOXmJ1WGJ+dyh69GM 71i6v/zYt48DHHUys8OxpeqyIU5dSVNkX+VdaO9s4b+jHx6fO1mL53jrzjZMLdeZ 2kiDu8RCgToak+5BshEyhwnePlqkggs6z1Gfw2r3HEh6tRqPQI4u6qUVorgkttKT 7BMBSCRuMSPKwAzoL8uMiy7ZkSmMvAg= -----END CERTIFICATE-----Generated at Fri Nov 22 06:37:55 2024 by rpki-client on console-ams.rpki-client.org