$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ab522231-9c33-33ed-879b-ade7229a947e.roa File: ab522231-9c33-33ed-879b-ade7229a947e.roa (raw, json) Hash identifier: 3EpS+uyKT8+BM+mTN93SKS9AWeu/jkCNUg1s6vaHG9o= Subject key identifier: 95:68:AF:3A:70:EB:BC:88:10:5A:0D:9E:67:76:09:87:7C:C0:02:C0 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584742BB5A50F1253A8E5786AB00 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ab522231-9c33-33ed-879b-ade7229a947e.roa Signing time: Thu 19 Sep 2024 01:00:31 +0000 ROA not before: Thu 19 Sep 2024 01:00:31 +0000 ROA not after: Wed 18 Dec 2024 02:00:31 +0000 asID: 394256 IP address blocks: 206.123.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:42:bb:5a:50:f1:25:3a:8e:57:86:ab:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Sep 19 01:00:31 2024 GMT Not After : Dec 18 02:00:31 2024 GMT Subject: CN=be04cb8b-d281-4d89-815c-373588a2d497 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:77:6e:f3:83:73:e9:04:51:a4:80:1e:74:09: 92:56:1f:a7:19:8b:31:75:2b:4a:49:8c:47:b8:3f: 86:c9:d1:2f:55:c9:f7:82:f7:35:32:f8:2c:5f:ca: 81:11:83:ff:8b:25:a3:32:e2:b8:f0:7b:5d:ec:36: 96:e8:07:eb:be:e7:67:95:d5:6c:22:e5:4e:93:ff: cf:eb:18:e9:d9:d7:75:2b:0f:af:fe:17:d1:81:56: 53:56:3c:99:75:4e:a2:63:3e:db:bc:1c:b5:af:f6: 1a:94:f1:c9:73:5c:b0:0b:ea:bc:60:b0:b9:12:99: 4a:06:de:c6:2d:86:2d:ba:a0:21:e0:94:9f:13:90: 2f:25:85:d2:34:73:cf:61:4d:7e:c2:e2:a0:76:20: 2e:62:b1:29:cd:10:4d:bd:7c:91:9f:3e:49:59:11: 71:fd:c9:18:64:b4:6d:62:80:1b:fb:fe:7a:3b:52: 60:d1:9a:48:78:43:59:60:ae:b2:c4:ce:9e:bb:56: 04:62:bb:f2:90:12:6a:4d:b5:ae:c3:ad:12:56:b9: 0c:c9:76:17:18:63:37:20:31:2e:81:20:ab:98:0e: be:42:20:0d:87:3d:33:3d:40:d2:e4:3e:0c:ed:77: 39:b4:fc:05:45:b6:7b:30:b1:5b:ba:93:8e:47:fe: 93:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:68:AF:3A:70:EB:BC:88:10:5A:0D:9E:67:76:09:87:7C:C0:02:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ab522231-9c33-33ed-879b-ade7229a947e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 206.123.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:1e:ab:84:92:47:e4:76:1b:9b:4f:5a:72:ac:fa:53:1c:0f: 45:d3:c2:65:3a:c5:58:1a:dd:62:bb:ee:02:df:d8:de:14:0b: 64:74:1d:97:7b:76:3c:e8:25:c7:39:00:6e:94:0e:2d:09:52: 98:f0:37:d7:92:de:19:01:c1:be:96:75:d5:c7:9d:18:b8:d6: 65:94:46:ed:03:46:0a:7f:ae:af:80:ed:0e:55:eb:77:b7:0c: cb:0b:9b:d4:5a:3f:0c:8a:ec:9e:00:bb:05:92:79:e5:7c:2e: 13:85:c7:25:8f:86:9d:bd:90:60:04:fd:e1:15:ea:18:a2:29: 78:a4:47:81:8e:6a:4c:4e:22:e1:a1:a6:05:00:da:9f:7e:8e: 96:36:d0:c4:e4:66:47:37:4d:28:4e:28:c1:0d:55:37:ed:a3: 6a:f3:6d:51:9b:60:c0:c8:69:0d:e9:6a:5a:df:6e:28:50:da: 0e:72:12:8d:f2:f2:8e:fd:eb:b6:20:62:52:09:d7:44:04:85: 3b:1a:03:0b:c1:00:70:d7:3a:78:c6:d2:c7:fb:f6:b0:1a:0f: 30:e6:27:43:f9:2c:19:4c:f0:fd:98:84:da:2b:01:32:fb:62: 41:08:57:70:d3:e5:b9:d0:7a:bc:94:a0:fb:24:95:ef:60:49: 10:4d:58:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdCu1pQ8SU6jleGqwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI0MDkxOTAxMDAzMVoXDTI0MTIxODAyMDAzMVowLzEtMCsGA1UEAxMk YmUwNGNiOGItZDI4MS00ZDg5LTgxNWMtMzczNTg4YTJkNDk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAindu84Nz6QRRpIAedAmSVh+nGYsxdStKSYxH uD+GydEvVcn3gvc1MvgsX8qBEYP/iyWjMuK48Htd7DaW6AfrvudnldVsIuVOk//P 6xjp2dd1Kw+v/hfRgVZTVjyZdU6iYz7bvBy1r/YalPHJc1ywC+q8YLC5EplKBt7G LYYtuqAh4JSfE5AvJYXSNHPPYU1+wuKgdiAuYrEpzRBNvXyRnz5JWRFx/ckYZLRt YoAb+/56O1Jg0ZpIeENZYK6yxM6eu1YEYrvykBJqTbWuw60SVrkMyXYXGGM3IDEu gSCrmA6+QiANhz0zPUDS5D4M7Xc5tPwFRbZ7MLFbupOOR/6TQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJVorzpw67yIEFoNnmd2CYd8wALAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYWI1MjIyMzEtOWMzMy0z M2VkLTg3OWItYWRlNzIyOWE5NDdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAznuIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADUeq4SSR+R2G5tPWnKs+lMcD0XTwmU6xVga3WK77gLf2N4UC2R0HZd7 djzoJcc5AG6UDi0JUpjwN9eS3hkBwb6WddXHnRi41mWURu0DRgp/rq+A7Q5V63e3 DMsLm9RaPwyK7J4AuwWSeeV8LhOFxyWPhp29kGAE/eEV6hiiKXikR4GOakxOIuGh pgUA2p9+jpY20MTkZkc3TShOKMENVTfto2rzbVGbYMDIaQ3palrfbihQ2g5yEo3y 8o7967YgYlIJ10QEhTsaAwvBAHDXOnjG0sf79rAaDzDmJ0P5LBlM8P2YhNorATL7 YkEIV3DT5bnQeryUoPskle9gSRBNWBo= -----END CERTIFICATE-----Generated at Fri Nov 22 06:37:56 2024 by rpki-client on console-ams.rpki-client.org