$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ab3b8436-421d-3788-b2c5-acaae9b96fc1.roa File: ab3b8436-421d-3788-b2c5-acaae9b96fc1.roa (raw, json) Hash identifier: pPZEaQ7jL9QUsprLktZ0RE10bcGr/hbvdYcdZRj+H7o= Subject key identifier: 60:EE:E0:E7:8A:D3:B5:85:84:D4:94:5B:7D:C1:E9:CF:2B:6F:E4:36 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285847F3CF592FB788E4E3EE46E040 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ab3b8436-421d-3788-b2c5-acaae9b96fc1.roa Signing time: Thu 21 Nov 2024 11:19:10 +0000 ROA not before: Thu 21 Nov 2024 11:19:10 +0000 ROA not after: Wed 19 Feb 2025 11:19:10 +0000 asID: 53356 IP address blocks: 172.94.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f3:cf:59:2f:b7:88:e4:e3:ee:46:e0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Nov 21 11:19:10 2024 GMT Not After : Feb 19 11:19:10 2025 GMT Subject: CN=dcb26d22-8d10-4ca4-ae5b-6026587a811c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:00:ef:3e:c0:aa:88:a0:6f:4b:65:2f:41:a5: d2:70:b8:7c:ba:77:dc:7c:97:b3:a7:ac:cc:94:31: 8f:56:19:47:d7:e1:44:6b:c0:68:f7:ac:1c:5a:ec: 7b:d8:ae:eb:c8:25:e4:31:73:32:fc:3b:c6:a3:89: 73:b7:95:9d:91:63:ed:75:7c:fa:23:c2:bc:26:3e: 45:c9:c5:38:4d:ab:c4:e1:84:92:52:71:47:9e:a3: 99:94:07:f2:1a:af:49:dc:47:fa:d3:00:7a:76:16: 4c:4f:86:68:32:fc:35:da:15:47:7c:48:5a:99:1c: 39:43:6b:5b:2b:71:02:bd:48:42:ef:8b:7f:9c:75: 41:07:1a:c3:17:ac:91:39:9c:48:bc:13:40:63:28: 2b:e5:d4:9e:7e:43:95:35:b4:db:53:8f:db:27:8c: f9:f2:5d:06:64:0a:09:25:12:cd:db:19:0c:2a:63: 58:66:47:06:6d:cd:92:a2:77:e8:07:ec:11:c8:f3: be:cb:aa:a6:e0:9f:0f:c0:25:6a:76:0c:91:b9:20: 46:84:b1:71:14:87:c5:71:48:22:89:36:ba:c2:48: 60:8a:89:a3:2a:1a:3f:db:b6:ef:45:a1:7e:60:db: 74:31:c4:07:67:7e:a7:ec:3a:0c:df:7b:98:b8:4a: 5f:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:EE:E0:E7:8A:D3:B5:85:84:D4:94:5B:7D:C1:E9:CF:2B:6F:E4:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ab3b8436-421d-3788-b2c5-acaae9b96fc1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:5f:b1:65:31:3f:3e:fe:21:79:a1:79:e3:58:fc:0e:3b:42: 17:be:22:49:aa:75:cb:3e:0e:8f:24:3c:c9:6d:61:99:04:70: 4a:58:d6:a1:c4:71:d8:f0:12:c0:a7:06:72:f1:b7:e5:ee:82: a7:4c:cf:4d:58:fb:95:c4:de:50:b2:68:c3:57:1c:a9:0d:38: 66:c1:70:72:9d:8e:d8:e8:c4:e8:87:1a:20:97:57:59:d8:57: 3c:bb:fe:34:35:5e:7f:ad:49:a3:47:e6:aa:bb:c5:fd:b5:e7: 94:33:83:b5:86:35:98:f6:03:fc:5b:38:fc:95:3e:57:0a:85: 83:e6:c2:f7:de:07:f2:fb:8f:a0:d7:2c:58:48:fa:d8:82:ed: 85:3d:75:f5:b4:67:71:75:dc:5c:98:9f:8a:c4:a2:6f:e9:a6: e8:e7:98:e8:37:a1:f9:8f:f5:db:04:68:ac:85:24:f4:3f:36: ac:8c:4a:3c:69:19:f8:f9:46:44:b3:89:05:81:74:36:f0:38: 1a:47:61:ac:c8:d1:da:dc:10:12:1e:17:41:82:fa:b4:38:9d: 94:aa:60:9e:9a:e4:fa:ce:06:26:64:1a:ca:95:f4:f9:e5:91: bc:7e:45:7e:a5:59:39:d6:a2:7d:03:52:3e:9d:8a:0e:50:3c: ff:71:28:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfzz1kvt4jk4+5G4EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI0MTEyMTExMTkxMFoXDTI1MDIxOTExMTkxMFowLzEtMCsGA1UEAxMk ZGNiMjZkMjItOGQxMC00Y2E0LWFlNWItNjAyNjU4N2E4MTFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgADvPsCqiKBvS2UvQaXScLh8unfcfJezp6zM lDGPVhlH1+FEa8Bo96wcWux72K7ryCXkMXMy/DvGo4lzt5WdkWPtdXz6I8K8Jj5F ycU4TavE4YSSUnFHnqOZlAfyGq9J3Ef60wB6dhZMT4ZoMvw12hVHfEhamRw5Q2tb K3ECvUhC74t/nHVBBxrDF6yROZxIvBNAYygr5dSefkOVNbTbU4/bJ4z58l0GZAoJ JRLN2xkMKmNYZkcGbc2SonfoB+wRyPO+y6qm4J8PwCVqdgyRuSBGhLFxFIfFcUgi iTa6wkhgiomjKho/27bvRaF+YNt0McQHZ36n7DoM33uYuEpfbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGDu4OeK07WFhNSUW33B6c8rb+Q2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYWIzYjg0MzYtNDIxZC0z Nzg4LWIyYzUtYWNhYWU5Yjk2ZmMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF5HMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADRfsWUxPz7+IXmheeNY/A47Qhe+Ikmqdcs+Do8kPMltYZkEcEpY1qHE cdjwEsCnBnLxt+XugqdMz01Y+5XE3lCyaMNXHKkNOGbBcHKdjtjoxOiHGiCXV1nY Vzy7/jQ1Xn+tSaNH5qq7xf2155Qzg7WGNZj2A/xbOPyVPlcKhYPmwvfeB/L7j6DX LFhI+tiC7YU9dfW0Z3F13FyYn4rEom/ppujnmOg3ofmP9dsEaKyFJPQ/NqyMSjxp Gfj5RkSziQWBdDbwOBpHYazI0drcEBIeF0GC+rQ4nZSqYJ6a5PrOBiZkGsqV9Pnl kbx+RX6lWTnWon0DUj6dig5QPP9xKN8= -----END CERTIFICATE-----Generated at Fri Nov 22 05:50:33 2024 by rpki-client on console-fra.rpki-client.org