$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/781749cb-1550-37ad-a6eb-0a431f92d96a.roa File: 781749cb-1550-37ad-a6eb-0a431f92d96a.roa (raw, json) Hash identifier: ElL1kY1sX+bOPROf0XXK73pxmo/DdmNmg3FhnvYQZ2c= Subject key identifier: 24:EA:B1:9C:73:6B:40:1E:D6:95:33:C0:AA:CB:24:94:A5:7B:E8:8E Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285847F3CFDE7D025E6487BDAF2F80 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/781749cb-1550-37ad-a6eb-0a431f92d96a.roa Signing time: Thu 21 Nov 2024 11:20:13 +0000 ROA not before: Thu 21 Nov 2024 11:20:13 +0000 ROA not after: Wed 19 Feb 2025 11:20:13 +0000 asID: 53356 IP address blocks: 172.94.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f3:cf:de:7d:02:5e:64:87:bd:af:2f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Nov 21 11:20:13 2024 GMT Not After : Feb 19 11:20:13 2025 GMT Subject: CN=13474604-a60a-4427-ad21-c366d4860ba7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:8b:f7:31:e2:24:cd:ff:77:d8:d6:d4:df:ba: 99:33:8a:e1:06:a1:49:fa:87:92:3b:08:b1:97:44: 92:a1:8f:4e:00:43:16:da:f5:56:90:a8:e8:3a:fb: dd:28:8c:21:e5:34:50:a9:76:63:90:29:d5:99:d2: 87:5e:be:14:35:f0:ae:e2:6a:03:8c:21:70:53:b0: 8a:68:ca:79:62:df:35:1b:c9:83:fb:af:14:7e:94: 8d:63:ed:d4:c4:e9:a3:4c:de:0e:c7:c7:8e:86:b1: 2f:4d:e4:25:d4:38:83:00:a0:6c:e4:07:02:4d:c1: a2:41:24:d9:47:7b:8f:8e:5a:91:dd:13:41:48:bd: 4f:2b:fe:40:3d:0c:1c:7c:88:3e:64:63:b2:c4:f8: 21:6d:df:eb:2d:a2:13:54:f5:08:c9:10:8b:85:7b: 8e:26:d6:ce:4b:3d:b6:48:b1:ba:43:2d:53:9d:c6: 32:1f:99:cf:b5:49:83:ee:db:62:71:39:af:03:a0: 87:94:86:fa:9f:0f:e9:eb:c7:71:43:a0:89:3a:9c: ac:b2:9e:9a:c3:a0:33:ec:a0:9c:48:26:06:f3:ed: d1:5c:d9:2c:12:c6:c2:b8:62:6d:5c:2f:a1:59:fb: e4:59:e7:85:73:cf:89:cd:91:13:f9:79:2f:84:7e: 20:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:EA:B1:9C:73:6B:40:1E:D6:95:33:C0:AA:CB:24:94:A5:7B:E8:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/781749cb-1550-37ad-a6eb-0a431f92d96a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.73.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:71:1e:6e:d4:34:4e:06:cb:fb:ca:57:54:3f:80:e8:ec:e5: 3e:ae:6b:cd:0e:b1:59:59:b0:c0:75:0d:c3:8a:eb:24:e6:1a: 5a:59:c5:59:93:1b:59:d6:63:89:b4:ab:71:25:84:24:c9:ae: 5c:a6:93:09:29:56:ae:fe:81:eb:8a:43:6a:42:45:71:b7:9a: 6e:93:82:3a:bf:ec:fd:75:99:e8:85:ad:90:3c:13:e1:f0:b6: 7b:4b:a4:4f:1d:19:d9:90:6c:5e:92:d9:2d:3d:c5:62:3b:54: 13:81:50:ca:52:62:48:2a:f8:ec:7a:55:47:88:3f:0e:84:90: c7:fc:91:17:80:46:0a:21:76:24:d2:b9:a0:ab:bd:29:76:f2: 34:e7:dd:5e:3a:ab:cd:d3:59:6d:51:a4:1f:3c:e6:51:63:ec: 93:97:e3:14:76:34:39:99:72:2c:0d:60:6d:bd:75:1c:41:63: a3:7b:fe:00:09:2e:f1:00:36:9d:4a:83:f1:12:97:70:c9:ee: 2a:c8:6f:81:64:0d:6a:2f:5d:58:13:de:4b:79:b0:eb:1a:1f: c8:8b:1a:89:7a:6a:44:c6:0a:78:cc:68:9a:6b:b8:1a:15:7a: e6:b2:32:c9:24:0d:12:35:39:05:2e:88:21:e2:3f:63:20:67: c3:dd:a1:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfzz959Al5kh72vL4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI0MTEyMTExMjAxM1oXDTI1MDIxOTExMjAxM1owLzEtMCsGA1UEAxMk MTM0NzQ2MDQtYTYwYS00NDI3LWFkMjEtYzM2NmQ0ODYwYmE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIv3MeIkzf932NbU37qZM4rhBqFJ+oeSOwix l0SSoY9OAEMW2vVWkKjoOvvdKIwh5TRQqXZjkCnVmdKHXr4UNfCu4moDjCFwU7CK aMp5Yt81G8mD+68UfpSNY+3UxOmjTN4Ox8eOhrEvTeQl1DiDAKBs5AcCTcGiQSTZ R3uPjlqR3RNBSL1PK/5APQwcfIg+ZGOyxPghbd/rLaITVPUIyRCLhXuOJtbOSz22 SLG6Qy1TncYyH5nPtUmD7tticTmvA6CHlIb6nw/p68dxQ6CJOpyssp6aw6Az7KCc SCYG8+3RXNksEsbCuGJtXC+hWfvkWeeFc8+JzZET+XkvhH4gdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCTqsZxza0Ae1pUzwKrLJJSle+iOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNzgxNzQ5Y2ItMTU1MC0z N2FkLWE2ZWItMGE0MzFmOTJkOTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF5JMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHZxHm7UNE4Gy/vKV1Q/gOjs5T6ua80OsVlZsMB1DcOK6yTmGlpZxVmT G1nWY4m0q3ElhCTJrlymkwkpVq7+geuKQ2pCRXG3mm6Tgjq/7P11meiFrZA8E+Hw tntLpE8dGdmQbF6S2S09xWI7VBOBUMpSYkgq+Ox6VUeIPw6EkMf8kReARgohdiTS uaCrvSl28jTn3V46q83TWW1RpB885lFj7JOX4xR2NDmZciwNYG29dRxBY6N7/gAJ LvEANp1Kg/ESl3DJ7irIb4FkDWovXVgT3kt5sOsaH8iLGol6akTGCnjMaJpruBoV euayMskkDRI1OQUuiCHiP2MgZ8PdoYc= -----END CERTIFICATE-----Generated at Fri Nov 22 06:37:55 2024 by rpki-client on console-ams.rpki-client.org