$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/8bded033-c145-3aad-bef9-ec1a1c913937.roa File: 8bded033-c145-3aad-bef9-ec1a1c913937.roa (raw, json) Hash identifier: lxm81+7JZYtgLFzZj+fXcFvGrjktrMgT/jkrfGg6jx4= Subject key identifier: DE:4E:2F:BA:EB:40:5E:AB:77:3F:A6:1F:B8:86:70:EB:12:D9:F0:69 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584787212E381EB7F9AE15F8C7A0 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/8bded033-c145-3aad-bef9-ec1a1c913937.roa Signing time: Sun 13 Oct 2024 13:00:42 +0000 ROA not before: Sun 13 Oct 2024 13:00:42 +0000 ROA not after: Sat 11 Jan 2025 14:00:42 +0000 asID: 9009 IP address blocks: 172.94.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:87:21:2e:38:1e:b7:f9:ae:15:f8:c7:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 13 13:00:42 2024 GMT Not After : Jan 11 14:00:42 2025 GMT Subject: CN=aa5d59d0-ea53-4f96-8864-2d16cc1539ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:a4:36:1b:f3:dc:27:28:49:92:06:48:14:f7: 5b:99:d0:d9:c8:fe:c1:82:5e:96:37:5d:4c:68:a7: d3:35:a4:1f:3f:96:09:60:55:03:68:6f:7c:3e:28: 5f:93:ec:39:e0:5c:33:8e:cc:9b:e2:b1:e6:fa:24: 24:e3:f1:88:46:9c:46:8f:2a:44:76:4d:ff:e7:81: 9c:50:f4:0e:16:34:9e:bc:e6:2b:e4:cf:d4:44:f7: d4:48:2b:59:88:03:d3:07:11:44:33:5c:89:8f:d3: 5f:bc:1a:0a:ef:1d:8d:eb:10:8d:ce:99:5e:41:6a: 04:90:1a:67:14:26:e4:9d:c4:a1:7f:d9:06:5b:50: 48:50:f4:7c:a5:35:15:10:3f:d4:05:4d:74:70:1d: d3:4a:f3:de:e3:0e:78:6e:f6:bd:96:8a:a9:c8:d3: e3:c4:33:8b:46:c2:ef:a7:f0:a9:f0:5c:1b:19:45: cc:0e:5e:26:da:28:8d:ac:05:75:4a:87:26:7a:9d: 05:16:75:4d:21:d8:2f:b1:30:36:79:a0:b4:6f:71: e8:8d:36:eb:6f:44:9f:e8:c9:73:35:15:ab:91:f7: 1b:ea:7f:cf:13:77:3b:9c:74:ee:62:3b:fd:3c:60: 02:ce:30:e7:bc:4d:c1:16:0b:a8:b6:c2:22:21:c5: f6:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:4E:2F:BA:EB:40:5E:AB:77:3F:A6:1F:B8:86:70:EB:12:D9:F0:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/8bded033-c145-3aad-bef9-ec1a1c913937.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:4d:21:09:e3:04:49:b8:9f:e2:d4:fa:66:69:dd:e2:27:26: eb:71:85:6b:32:cc:a4:9d:42:b3:41:0b:df:29:6d:cb:69:b7: 6d:de:4a:db:97:29:fd:1b:aa:a6:32:a2:41:6f:63:bc:05:30: 29:fd:37:cb:f9:83:6c:96:9f:46:7f:68:a5:28:e4:ca:c2:d8: f0:fb:3c:70:38:60:04:7d:01:bb:1c:89:2c:35:c5:38:6b:66: 54:02:f1:47:32:d4:ae:b2:84:2c:c4:dc:a3:9f:be:9e:2d:1a: 56:0a:23:b5:f5:dd:c2:96:9f:bd:63:bc:8b:ee:7c:d7:4a:bb: 0d:04:c6:f9:a0:2f:e0:02:db:7c:03:dd:5c:1f:e0:c6:52:9e: 91:89:1b:41:1f:32:a9:93:c7:fe:2f:54:79:3d:a9:b4:14:b2: 99:04:64:da:7e:98:dc:12:29:7f:20:96:82:11:24:d6:20:24: 4c:1d:6d:11:77:4b:0d:06:64:8c:c4:36:45:25:77:94:ad:c3: b0:0d:da:4e:39:7a:21:4c:7f:ab:ec:26:9f:aa:2c:3b:e8:f1: e8:73:8b:c1:59:27:89:ed:81:a2:5b:50:15:12:c1:19:06:77: 44:80:5b:aa:8b:2e:8e:d5:15:1e:2f:00:04:de:6d:e7:02:62: a5:42:1f:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeHIS44Hrf5rhX4x6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI0MTAxMzEzMDA0MloXDTI1MDExMTE0MDA0MlowLzEtMCsGA1UEAxMk YWE1ZDU5ZDAtZWE1My00Zjk2LTg4NjQtMmQxNmNjMTUzOWFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1aQ2G/PcJyhJkgZIFPdbmdDZyP7Bgl6WN11M aKfTNaQfP5YJYFUDaG98Pihfk+w54Fwzjsyb4rHm+iQk4/GIRpxGjypEdk3/54Gc UPQOFjSevOYr5M/URPfUSCtZiAPTBxFEM1yJj9NfvBoK7x2N6xCNzpleQWoEkBpn FCbkncShf9kGW1BIUPR8pTUVED/UBU10cB3TSvPe4w54bva9loqpyNPjxDOLRsLv p/Cp8FwbGUXMDl4m2iiNrAV1Socmep0FFnVNIdgvsTA2eaC0b3HojTbrb0Sf6Mlz NRWrkfcb6n/PE3c7nHTuYjv9PGACzjDnvE3BFguotsIiIcX2EwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN5OL7rrQF6rdz+mH7iGcOsS2fBpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvOGJkZWQwMzMtYzE0NS0z YWFkLWJlZjktZWMxYTFjOTEzOTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4JMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABZNIQnjBEm4n+LU+mZp3eInJutxhWsyzKSdQrNBC98pbctpt23eStuX Kf0bqqYyokFvY7wFMCn9N8v5g2yWn0Z/aKUo5MrC2PD7PHA4YAR9AbsciSw1xThr ZlQC8Ucy1K6yhCzE3KOfvp4tGlYKI7X13cKWn71jvIvufNdKuw0ExvmgL+AC23wD 3Vwf4MZSnpGJG0EfMqmTx/4vVHk9qbQUspkEZNp+mNwSKX8gloIRJNYgJEwdbRF3 Sw0GZIzENkUld5Stw7AN2k45eiFMf6vsJp+qLDvo8ehzi8FZJ4ntgaJbUBUSwRkG d0SAW6qLLo7VFR4vAATebecCYqVCHy0= -----END CERTIFICATE-----Generated at Fri Nov 22 00:23:35 2024 by rpki-client on console-fra.rpki-client.org