$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/acf3baa7-dbc1-3afc-af90-183681c6f600.roa File: acf3baa7-dbc1-3afc-af90-183681c6f600.roa (raw, json) Hash identifier: Hhs192q3SEIJHwZeMtcD4qZLlxf2co9b5FhADcnfdm0= Subject key identifier: 4C:05:6F:AF:B8:E1:B0:1F:5A:FE:7E:A5:5A:AC:D7:21:40:F3:AD:96 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285848095D965C5A8BE80149E2BC80 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/acf3baa7-dbc1-3afc-af90-183681c6f600.roa Signing time: Fri 29 Nov 2024 04:37:44 +0000 ROA not before: Fri 29 Nov 2024 04:37:44 +0000 ROA not after: Thu 27 Feb 2025 04:37:44 +0000 asID: 9009 IP address blocks: 172.94.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Dec 2024 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:09:5d:96:5c:5a:8b:e8:01:49:e2:bc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Nov 29 04:37:44 2024 GMT Not After : Feb 27 04:37:44 2025 GMT Subject: CN=693e4cdb-103d-4bb0-a2af-edcec0e4279d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:61:66:3e:57:52:23:ae:ed:9e:35:16:f7:a5: 01:9a:51:34:ec:14:82:d4:c5:46:b5:1c:c0:f5:fd: d7:6c:58:81:e8:93:9a:f7:f7:dd:52:d5:8c:01:3a: 95:56:7b:f4:28:e4:d6:46:05:f6:8f:36:90:59:0a: 32:78:cb:51:21:ef:86:c7:71:a8:c8:ec:c4:68:d5: 54:c5:6a:9d:fe:0c:cb:91:e3:f9:63:a3:ed:35:15: 47:21:52:67:21:17:6a:10:00:4f:ad:4c:71:4c:20: 0b:0c:b9:1f:98:78:48:e9:60:fd:58:b3:87:53:da: 75:b7:5d:a5:1c:cc:5b:3c:5a:e9:d9:70:cf:d2:41: b1:58:d1:8b:aa:31:4d:d9:bb:75:9a:0c:47:6b:ac: 23:d0:e8:5d:e8:f9:4a:87:a1:13:30:33:48:68:0a: d7:5e:61:26:27:bf:31:1e:f4:9b:fb:bc:8d:d8:44: 78:da:cf:a9:b3:8c:28:70:03:2c:1d:d3:e9:41:71: 29:99:34:bc:af:52:bc:f9:08:9a:c7:e6:8c:4d:13: b8:f8:98:9f:d7:3a:45:1c:c5:b9:fb:36:25:66:38: d4:d9:10:a6:19:c1:bd:f8:05:45:b2:21:39:74:63: 6b:d9:f7:e8:4f:61:28:15:b8:fa:1b:9a:1f:67:9c: a8:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:05:6F:AF:B8:E1:B0:1F:5A:FE:7E:A5:5A:AC:D7:21:40:F3:AD:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/acf3baa7-dbc1-3afc-af90-183681c6f600.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.62.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:bc:91:3e:83:f3:f7:54:78:ae:e1:13:21:e2:15:78:7a:d4: 29:1f:60:5f:b4:b2:a0:67:d4:dc:bf:42:8f:92:58:4a:0e:9d: ee:cd:a6:a6:39:60:c5:9c:b8:ac:ec:5c:cc:6d:fe:ab:38:40: e8:b5:b4:7e:4a:57:e6:5a:5e:cd:e9:82:66:4e:34:a2:1d:d7: 4d:0a:97:a8:95:39:f1:9e:b2:45:41:8c:d5:e9:f7:4e:40:7d: b8:5e:7b:bb:33:7b:96:f8:e6:4e:22:36:e8:3a:7d:87:98:93: b6:94:3d:97:4e:e7:43:38:62:b9:72:82:88:60:05:4a:0e:64: dd:b2:c8:bc:9c:16:a1:a1:bb:6c:5e:bd:c6:70:3a:53:d6:e1: 37:d5:a8:13:08:a6:32:32:ff:c0:73:3a:0b:b6:30:e1:47:26: dd:19:f9:ce:3f:b4:58:14:19:a5:ce:55:14:80:36:90:e8:7d: 0b:c1:7c:15:f6:c9:38:4c:16:ca:f3:d8:b3:7d:08:0c:4e:ce: 5a:85:0f:2d:b4:8c:2f:ad:61:18:43:c5:db:b1:18:de:6b:7d: 2f:75:02:ac:77:96:06:80:09:39:36:d9:af:0e:ed:99:31:72: c5:ae:33:af:63:2e:d2:cd:4d:c7:f2:a8:6e:c4:b1:a8:6a:26: 92:7e:c1:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgJXZZcWovoAUnivIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI0MTEyOTA0Mzc0NFoXDTI1MDIyNzA0Mzc0NFowLzEtMCsGA1UEAxMk NjkzZTRjZGItMTAzZC00YmIwLWEyYWYtZWRjZWMwZTQyNzlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7mFmPldSI67tnjUW96UBmlE07BSC1MVGtRzA 9f3XbFiB6JOa9/fdUtWMATqVVnv0KOTWRgX2jzaQWQoyeMtRIe+Gx3GoyOzEaNVU xWqd/gzLkeP5Y6PtNRVHIVJnIRdqEABPrUxxTCALDLkfmHhI6WD9WLOHU9p1t12l HMxbPFrp2XDP0kGxWNGLqjFN2bt1mgxHa6wj0Ohd6PlKh6ETMDNIaArXXmEmJ78x HvSb+7yN2ER42s+ps4wocAMsHdPpQXEpmTS8r1K8+Qiax+aMTRO4+Jif1zpFHMW5 +zYlZjjU2RCmGcG9+AVFsiE5dGNr2ffoT2EoFbj6G5ofZ5yoIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEwFb6+44bAfWv5+pVqs1yFA862WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYWNmM2JhYTctZGJjMS0z YWZjLWFmOTAtMTgzNjgxYzZmNjAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADa8kT6D8/dUeK7hEyHiFXh61CkfYF+0sqBn1Ny/Qo+SWEoOne7NpqY5 YMWcuKzsXMxt/qs4QOi1tH5KV+ZaXs3pgmZONKId100Kl6iVOfGeskVBjNXp905A fbhee7sze5b45k4iNug6fYeYk7aUPZdO50M4YrlygohgBUoOZN2yyLycFqGhu2xe vcZwOlPW4TfVqBMIpjIy/8BzOgu2MOFHJt0Z+c4/tFgUGaXOVRSANpDofQvBfBX2 yThMFsrz2LN9CAxOzlqFDy20jC+tYRhDxduxGN5rfS91Aqx3lgaACTk22a8O7Zkx csWuM69jLtLNTcfyqG7EsahqJpJ+wXc= -----END CERTIFICATE-----Generated at Thu Dec 26 17:00:49 2024 by rpki-client on console-ams.rpki-client.org