$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9dc11acf-35bc-346d-b4f0-3b8229536a34.roa File: 9dc11acf-35bc-346d-b4f0-3b8229536a34.roa (raw, json) Hash identifier: PsGAS1uXOp4E1e6zkJwxmBfFxTlgQ3zoBv/7tvgjjqY= Subject key identifier: EA:ED:6E:87:F9:1D:7E:0D:71:43:FA:D2:8D:3F:25:70:F8:69:52:C2 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285848018350C1DDD95B696B4B0C90 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9dc11acf-35bc-346d-b4f0-3b8229536a34.roa Signing time: Tue 26 Nov 2024 09:07:17 +0000 ROA not before: Tue 26 Nov 2024 09:07:17 +0000 ROA not after: Mon 24 Feb 2025 09:07:17 +0000 asID: 396356 IP address blocks: 192.253.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Dec 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:01:83:50:c1:dd:d9:5b:69:6b:4b:0c:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Nov 26 09:07:17 2024 GMT Not After : Feb 24 09:07:17 2025 GMT Subject: CN=24c4b732-bd36-40f3-9087-3609302477bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:c7:e2:1e:49:da:62:9a:be:1e:bc:36:c7:b3: 2a:3b:b2:d8:9e:41:19:be:04:fd:d9:a5:a5:00:9f: c0:0f:07:06:8c:df:6d:be:2b:89:cc:65:aa:bf:a6: 88:5b:11:af:b5:9c:52:2b:b7:98:22:c9:f4:3d:2a: 12:46:eb:86:0e:bf:1f:90:3b:66:7b:b9:9f:94:0c: 2b:1d:40:3d:15:88:26:94:ff:e0:8c:c6:53:3b:e8: 83:d8:2d:12:2e:32:3f:45:dd:e1:80:ef:4f:93:77: b4:61:ff:f6:c7:07:c6:75:0e:80:30:1c:e8:a2:32: fb:d3:9b:e0:a8:bf:67:c2:31:cc:e2:34:f4:ce:c0: 37:18:7d:8f:45:ac:3d:43:92:c2:6c:9d:06:2a:be: 20:b8:6c:3c:33:02:21:54:b4:ed:f9:fd:dc:a3:a1: d0:0f:d9:5f:00:89:db:69:ec:c2:ca:5e:76:7f:ba: 16:46:33:46:4c:40:79:61:ca:59:30:d9:1b:c1:ec: b0:32:18:46:8a:2a:1b:bb:b5:1d:70:34:6b:46:cd: 89:04:d9:1d:bc:1c:10:0c:03:6b:10:89:61:08:f1: 70:f0:c7:e4:1d:f5:e3:9e:e5:f7:0a:1e:aa:ee:c3: 40:37:2f:f0:39:d1:93:50:92:6b:98:b2:a5:a6:e5: 13:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:ED:6E:87:F9:1D:7E:0D:71:43:FA:D2:8D:3F:25:70:F8:69:52:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9dc11acf-35bc-346d-b4f0-3b8229536a34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 192.253.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:c0:9d:4a:c0:35:b6:74:bc:3f:31:d8:02:d5:4a:93:b7:07: f1:76:64:c6:a5:6a:ce:bc:a4:f7:c6:42:3c:5a:4f:3c:3f:91: 52:39:8b:37:ee:e3:21:e2:ec:06:64:0a:76:b4:10:1a:6d:35: f8:c6:af:1f:af:09:73:cf:2e:c0:1c:18:32:91:d9:9a:72:4f: 2d:23:d5:02:48:13:aa:11:5f:16:24:a4:4f:54:18:55:a1:55: 5f:25:36:f2:40:94:5d:cf:5c:68:b6:08:3e:2b:25:0a:f8:78: 29:56:33:cd:a4:fd:b2:5e:ed:66:64:ab:26:94:e8:bd:a7:08: c2:e1:95:88:df:cb:a0:a7:f5:16:bd:20:f3:48:84:6a:c5:53: f1:15:fe:76:52:2b:1a:91:64:20:a6:0c:e1:a9:fd:4c:06:e9: 59:fe:cc:ff:97:25:1a:bf:dc:70:d9:7a:20:00:f0:a6:9b:b8: 1d:3e:cd:37:59:1b:18:d1:0d:94:ef:82:77:7b:87:1e:36:06: f5:05:97:fe:02:40:a0:6e:03:35:f9:97:9b:3a:9b:fb:0c:48: 63:37:8c:f1:a3:da:2c:b0:22:32:8f:1c:7d:c1:89:72:93:23: 0a:36:7d:a4:be:f5:77:c4:35:05:52:50:ab:82:5a:b0:7a:6c: ba:6c:6a:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgBg1DB3dlbaWtLDJAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI0MTEyNjA5MDcxN1oXDTI1MDIyNDA5MDcxN1owLzEtMCsGA1UEAxMk MjRjNGI3MzItYmQzNi00MGYzLTkwODctMzYwOTMwMjQ3N2JiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMfiHknaYpq+Hrw2x7MqO7LYnkEZvgT92aWl AJ/ADwcGjN9tviuJzGWqv6aIWxGvtZxSK7eYIsn0PSoSRuuGDr8fkDtme7mflAwr HUA9FYgmlP/gjMZTO+iD2C0SLjI/Rd3hgO9Pk3e0Yf/2xwfGdQ6AMBzoojL705vg qL9nwjHM4jT0zsA3GH2PRaw9Q5LCbJ0GKr4guGw8MwIhVLTt+f3co6HQD9lfAInb aezCyl52f7oWRjNGTEB5YcpZMNkbweywMhhGiiobu7UdcDRrRs2JBNkdvBwQDANr EIlhCPFw8MfkHfXjnuX3Ch6q7sNANy/wOdGTUJJrmLKlpuUTmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOrtbof5HX4NcUP60o0/JXD4aVLCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvOWRjMTFhY2YtMzViYy0z NDZkLWI0ZjAtM2I4MjI5NTM2YTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwP3+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEHAnUrANbZ0vD8x2ALVSpO3B/F2ZMalas68pPfGQjxaTzw/kVI5izfu 4yHi7AZkCna0EBptNfjGrx+vCXPPLsAcGDKR2ZpyTy0j1QJIE6oRXxYkpE9UGFWh VV8lNvJAlF3PXGi2CD4rJQr4eClWM82k/bJe7WZkqyaU6L2nCMLhlYjfy6Cn9Ra9 IPNIhGrFU/EV/nZSKxqRZCCmDOGp/UwG6Vn+zP+XJRq/3HDZeiAA8KabuB0+zTdZ GxjRDZTvgnd7hx42BvUFl/4CQKBuAzX5l5s6m/sMSGM3jPGj2iywIjKPHH3BiXKT Iwo2faS+9XfENQVSUKuCWrB6bLpsaoc= -----END CERTIFICATE-----Generated at Thu Dec 26 08:30:14 2024 by rpki-client on console-fra.rpki-client.org