$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a4d97fd8-8b61-3d27-80ed-b2e89e48def5.roa File: a4d97fd8-8b61-3d27-80ed-b2e89e48def5.roa (raw, json) Hash identifier: gHSBBWgRHgpv7wv4TDUL7nQtvTq1qK+ZAK9hCMCfv4Y= Subject key identifier: D6:B4:65:8A:D9:C5:2D:0D:2C:C9:18:9B:19:61:5C:97:52:0C:45:50 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584740A0964293C56409FF2BB900 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a4d97fd8-8b61-3d27-80ed-b2e89e48def5.roa Signing time: Wed 18 Sep 2024 06:55:15 +0000 ROA not before: Wed 18 Sep 2024 06:55:15 +0000 ROA not after: Tue 17 Dec 2024 07:55:15 +0000 asID: 9009 IP address blocks: 172.94.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:40:a0:96:42:93:c5:64:09:ff:2b:b9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Sep 18 06:55:15 2024 GMT Not After : Dec 17 07:55:15 2024 GMT Subject: CN=4aa4fa7b-43e9-4480-9af9-d629c72672ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:7d:98:0a:ba:47:f0:1e:0d:2d:a5:ef:e5:23: b2:d6:f3:06:84:59:64:7b:93:94:3a:9f:88:65:3e: 1b:82:01:8c:cf:97:d9:a0:63:5f:9d:0f:54:e3:39: e8:72:35:20:8b:b3:6c:da:d3:61:69:f3:89:b2:d7: d9:d8:55:5c:3d:fa:cf:d9:5b:f1:fd:57:f1:d5:4b: 33:96:b9:9e:9b:d8:36:b8:70:ad:60:80:7e:77:96: 87:db:ea:2b:74:7d:d5:44:ff:cb:b6:4a:92:49:c7: 72:4e:fb:3e:9b:da:ea:c4:be:cd:47:ce:3c:4f:50: 94:a2:81:37:56:63:37:ba:9a:25:87:a6:9d:d1:93: 40:f8:43:92:06:d4:35:65:77:a7:b7:dd:83:35:e2: 8b:f8:71:8a:08:6b:61:43:53:76:23:86:d4:c9:9a: 71:64:e6:96:98:cc:3e:68:97:de:ea:c7:d2:58:02: 52:29:6c:2f:35:34:19:f1:8a:27:73:bf:17:e7:e2: 47:1c:87:c7:65:4c:24:ae:e3:b9:3b:08:ce:6e:20: e5:ac:26:81:92:59:e6:b1:92:b0:e0:7a:fd:2f:98: 64:5b:bf:f7:e5:87:d9:04:ca:03:f7:14:61:f2:74: 34:6a:a9:ea:fb:fc:9a:6b:01:f8:6d:39:6c:46:92: d7:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:B4:65:8A:D9:C5:2D:0D:2C:C9:18:9B:19:61:5C:97:52:0C:45:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a4d97fd8-8b61-3d27-80ed-b2e89e48def5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:e2:f3:4e:74:80:24:90:f4:0b:b3:61:c6:4e:e7:c9:54:b3: 8d:1a:10:d7:17:ac:e3:ca:c9:52:94:80:49:6b:59:ee:ef:9c: 1b:38:b0:f4:f5:3a:33:09:33:18:e2:f1:07:9d:39:94:99:4b: fa:f6:ae:5f:99:1f:ea:19:49:14:d6:12:3b:f3:95:12:b5:e7: 28:c6:57:37:ea:e5:d3:90:ca:fd:56:22:dd:4d:f1:01:bc:c0: 6d:36:5b:dc:f0:41:d5:8d:9a:cf:1f:92:76:c3:0c:f6:24:10: 41:32:69:ca:e7:fe:a9:51:bb:a9:3f:54:4c:0f:b0:6e:89:a1: c3:a7:54:65:ff:85:c9:13:3e:6b:ba:e4:8e:e6:41:72:81:bf: a5:38:2a:7f:1b:e1:09:89:2e:1c:44:87:5b:b9:f0:06:56:50: 44:5b:16:2a:9f:b1:d7:31:62:41:f8:1e:15:ab:b2:89:27:84: 5c:42:51:12:11:62:ae:86:93:42:94:a5:52:c8:bf:fc:0e:dc: c2:5b:22:16:f3:e8:a6:b8:17:dc:06:d6:83:ef:e8:e1:32:69: 3e:5f:0b:fe:15:7b:10:61:40:10:61:32:d4:72:91:53:69:c3: 72:7a:14:31:71:84:5b:9c:b6:75:7c:17:98:da:bc:15:de:68: bd:75:b0:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdAoJZCk8VkCf8ruQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI0MDkxODA2NTUxNVoXDTI0MTIxNzA3NTUxNVowLzEtMCsGA1UEAxMk NGFhNGZhN2ItNDNlOS00NDgwLTlhZjktZDYyOWM3MjY3MmVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi32YCrpH8B4NLaXv5SOy1vMGhFlke5OUOp+I ZT4bggGMz5fZoGNfnQ9U4znocjUgi7Ns2tNhafOJstfZ2FVcPfrP2Vvx/Vfx1Usz lrmem9g2uHCtYIB+d5aH2+ordH3VRP/LtkqSScdyTvs+m9rqxL7NR848T1CUooE3 VmM3upolh6ad0ZNA+EOSBtQ1ZXent92DNeKL+HGKCGthQ1N2I4bUyZpxZOaWmMw+ aJfe6sfSWAJSKWwvNTQZ8Yonc78X5+JHHIfHZUwkruO5OwjObiDlrCaBklnmsZKw 4Hr9L5hkW7/35YfZBMoD9xRh8nQ0aqnq+/yaawH4bTlsRpLXAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNa0ZYrZxS0NLMkYmxlhXJdSDEVQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYTRkOTdmZDgtOGI2MS0z ZDI3LTgwZWQtYjJlODllNDhkZWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAni8050gCSQ9AuzYcZO58lUs40aENcXrOPKyVKUgElrWe7vnBs4sPT1 OjMJMxji8QedOZSZS/r2rl+ZH+oZSRTWEjvzlRK15yjGVzfq5dOQyv1WIt1N8QG8 wG02W9zwQdWNms8fknbDDPYkEEEyacrn/qlRu6k/VEwPsG6JocOnVGX/hckTPmu6 5I7mQXKBv6U4Kn8b4QmJLhxEh1u58AZWUERbFiqfsdcxYkH4HhWrsoknhFxCURIR Yq6Gk0KUpVLIv/wO3MJbIhbz6Ka4F9wG1oPv6OEyaT5fC/4VexBhQBBhMtRykVNp w3J6FDFxhFuctnV8F5javBXeaL11sOI= -----END CERTIFICATE-----Generated at Fri Nov 22 00:23:35 2024 by rpki-client on console-fra.rpki-client.org