$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/91539a9a-9578-35fe-bac3-9397f6a439d5.roa File: 91539a9a-9578-35fe-bac3-9397f6a439d5.roa (raw, json) Hash identifier: DVCui4Ec4hs7vCbvieTKznIZBrzut4oTSHHW/FFaUMw= Subject key identifier: 99:86:59:55:3E:07:60:0E:03:58:52:1D:0C:4C:50:49:B9:B1:55:22 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285847C1DF49238F6D67F2591BA180 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/91539a9a-9578-35fe-bac3-9397f6a439d5.roa Signing time: Sun 03 Nov 2024 14:00:49 +0000 ROA not before: Sun 03 Nov 2024 14:00:49 +0000 ROA not after: Sat 01 Feb 2025 14:00:49 +0000 asID: 7040 IP address blocks: 172.94.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:c1:df:49:23:8f:6d:67:f2:59:1b:a1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Nov 3 14:00:49 2024 GMT Not After : Feb 1 14:00:49 2025 GMT Subject: CN=5c8e076b-7d52-45d1-b602-cb77093c5697 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a7:85:76:45:67:4b:fe:98:b2:4c:ed:5e:d7: 3c:a2:1a:87:67:57:19:76:39:04:f6:3f:06:06:da: 22:4f:af:15:18:a2:2d:42:e6:5a:20:13:72:86:68: b2:4e:34:39:c7:9e:09:fb:72:b7:cb:36:bb:a7:25: a6:4c:28:ac:de:6c:92:b8:83:e3:fb:fe:54:93:d2: 43:58:d1:4a:0e:25:c6:c7:8a:98:62:32:a1:fd:3e: f0:ba:01:e1:1b:c5:b5:ba:ff:eb:cf:b4:62:a4:e8: 1b:76:d2:be:5b:63:34:ee:cc:b1:25:96:60:f0:90: be:df:cc:6b:fb:eb:1c:ea:71:62:66:3c:2a:4d:37: 43:24:e8:c3:20:32:cd:6f:a0:0a:90:c2:0a:3d:a7: c0:ea:dc:18:64:ee:73:78:4d:96:db:c0:79:bc:67: f4:59:e8:83:d3:e0:f4:38:1c:8f:65:a9:d8:18:af: 63:68:3d:b0:42:b5:e1:cf:79:8b:c2:be:c3:0a:96: 9d:68:24:84:73:b4:00:36:bc:5b:90:19:b9:86:99: 98:b9:88:90:91:8e:e0:a6:2f:37:fa:57:74:8a:8f: 49:27:ff:af:92:b8:31:5b:93:46:19:80:ed:26:4a: 09:4b:8b:ac:a7:ea:bb:04:b9:ed:b8:7f:85:0c:73: 18:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:86:59:55:3E:07:60:0E:03:58:52:1D:0C:4C:50:49:B9:B1:55:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/91539a9a-9578-35fe-bac3-9397f6a439d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:0a:e3:dd:4f:47:96:a6:aa:a7:d8:12:6d:f2:1c:2f:1a:7a: fe:5a:30:75:74:21:18:4f:53:0a:dc:71:be:22:dd:75:ad:6e: f2:4c:7c:4e:ed:ae:b1:94:a2:5f:27:af:5d:11:d5:8e:1c:57: b6:eb:bd:2f:5e:39:c5:9c:10:38:fe:e6:5e:c3:c8:d3:f8:1a: c5:71:5f:9b:ad:ed:02:b9:4e:5e:1a:d5:08:11:4a:76:74:c9: 0d:49:e0:5f:53:46:c2:30:5e:45:ab:ae:e9:f6:fe:2c:7c:4d: 9a:01:2a:1b:d4:1b:ce:fd:dd:ce:78:b6:29:1c:7b:b9:31:40: 0b:a0:1a:2e:43:dd:95:7d:7b:e9:c7:e9:90:5c:c1:72:b6:34: 40:69:ac:a9:fc:82:db:b2:be:71:71:d8:a8:fc:98:4a:ad:6e: 1f:7b:89:67:26:1b:c3:14:9f:ef:3b:ef:a8:0f:03:25:92:bc: bb:65:1b:d3:1b:b2:e4:51:b1:7f:72:d7:eb:a9:d4:52:68:57: f2:8d:33:4f:bb:53:ec:b4:16:7e:a8:de:5e:44:96:61:d2:7b: 53:84:d2:3b:7d:46:1a:a2:05:6c:ba:b4:d5:e5:26:c0:88:1d: f9:2a:cc:92:29:1c:3a:56:12:06:4f:28:9a:3b:89:cc:a9:6c: b0:a6:23:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfB30kjj21n8lkboYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI0MTEwMzE0MDA0OVoXDTI1MDIwMTE0MDA0OVowLzEtMCsGA1UEAxMk NWM4ZTA3NmItN2Q1Mi00NWQxLWI2MDItY2I3NzA5M2M1Njk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqeFdkVnS/6YskztXtc8ohqHZ1cZdjkE9j8G BtoiT68VGKItQuZaIBNyhmiyTjQ5x54J+3K3yza7pyWmTCis3mySuIPj+/5Uk9JD WNFKDiXGx4qYYjKh/T7wugHhG8W1uv/rz7RipOgbdtK+W2M07syxJZZg8JC+38xr ++sc6nFiZjwqTTdDJOjDIDLNb6AKkMIKPafA6twYZO5zeE2W28B5vGf0WeiD0+D0 OByPZanYGK9jaD2wQrXhz3mLwr7DCpadaCSEc7QANrxbkBm5hpmYuYiQkY7gpi83 +ld0io9JJ/+vkrgxW5NGGYDtJkoJS4usp+q7BLntuH+FDHMYuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJmGWVU+B2AOA1hSHQxMUEm5sVUiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvOTE1MzlhOWEtOTU3OC0z NWZlLWJhYzMtOTM5N2Y2YTQzOWQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF5/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG0K491PR5amqqfYEm3yHC8aev5aMHV0IRhPUwrccb4i3XWtbvJMfE7t rrGUol8nr10R1Y4cV7brvS9eOcWcEDj+5l7DyNP4GsVxX5ut7QK5Tl4a1QgRSnZ0 yQ1J4F9TRsIwXkWrrun2/ix8TZoBKhvUG8793c54tikce7kxQAugGi5D3ZV9e+nH 6ZBcwXK2NEBprKn8gtuyvnFx2Kj8mEqtbh97iWcmG8MUn+8776gPAyWSvLtlG9Mb suRRsX9y1+up1FJoV/KNM0+7U+y0Fn6o3l5ElmHSe1OE0jt9RhqiBWy6tNXlJsCI HfkqzJIpHDpWEgZPKJo7icypbLCmIyE= -----END CERTIFICATE-----Generated at Fri Nov 22 05:50:33 2024 by rpki-client on console-fra.rpki-client.org