$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/b9ebbe9d-5384-3220-b889-14accff394c8.roa File: b9ebbe9d-5384-3220-b889-14accff394c8.roa (raw, json) Hash identifier: JD6snUZY33LrPP0TQ53RnESbLwQ27W8btCKrLfAPxlI= Subject key identifier: 34:8A:20:94:6A:01:5B:3E:44:64:EB:B2:03:24:56:63:5C:87:5C:27 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584727830986BB9786A78654E7A0 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/b9ebbe9d-5384-3220-b889-14accff394c8.roa Signing time: Mon 09 Sep 2024 07:00:30 +0000 ROA not before: Mon 09 Sep 2024 07:00:30 +0000 ROA not after: Sun 08 Dec 2024 08:00:30 +0000 asID: 212238 IP address blocks: 172.94.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:27:83:09:86:bb:97:86:a7:86:54:e7:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Sep 9 07:00:30 2024 GMT Not After : Dec 8 08:00:30 2024 GMT Subject: CN=ace9f80b-961f-420d-ae3a-74d380ea4834 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:88:2d:1d:8c:cf:c3:07:09:28:0e:d3:67:69: 55:52:f9:a7:0c:a3:20:9b:1c:dd:e9:bf:a2:3d:0c: 43:3f:06:3f:32:7e:6c:59:e6:f4:9d:1a:5e:25:21: e5:e6:4c:4f:15:41:54:b8:f0:1f:c3:6d:fc:db:04: 7b:35:37:f6:b0:a3:88:4c:3c:b1:6b:fe:fa:d6:d0: 52:9d:22:d6:fa:74:40:14:02:07:69:18:b0:44:73: 26:fb:a2:c8:ed:4d:96:3d:1f:65:d3:2a:ab:54:5e: 83:4d:bf:a5:03:fe:42:d8:b7:13:17:de:ed:5a:8d: b8:1b:c8:8e:e3:43:f3:ae:47:da:cf:56:df:43:3f: 2f:99:61:2a:35:19:a6:78:82:69:8f:a6:8b:6d:e7: ce:c5:aa:f3:31:33:e5:50:ca:dd:e3:fd:f1:1d:fe: f7:4d:75:21:03:41:7d:05:4b:74:ba:93:15:12:64: 3c:0e:cd:dc:96:55:c7:67:1b:c9:ba:e4:25:2e:e2: 82:d2:06:ae:89:bd:f4:30:84:ee:6d:98:08:1e:84: 12:54:e2:ea:c8:5d:9d:0e:7e:7c:b4:cd:56:8f:47: 88:fc:ba:09:d3:d8:d8:14:c7:8a:19:12:49:fc:7a: cb:cb:f8:18:49:9e:4a:ca:24:07:cb:bf:ca:cc:ce: 39:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:8A:20:94:6A:01:5B:3E:44:64:EB:B2:03:24:56:63:5C:87:5C:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/b9ebbe9d-5384-3220-b889-14accff394c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.37.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:f1:d6:90:94:7e:ad:88:e5:65:96:8b:cd:c2:30:41:3c:a7: f7:d1:c7:d0:74:86:6e:4e:90:7f:89:8c:77:16:2b:b0:de:e6: 64:9e:9a:58:b9:4f:9c:51:cf:0a:ca:28:27:68:fd:78:ef:d9: 25:fb:4a:2e:e0:3e:04:9f:d2:3e:6f:db:7b:a4:f7:aa:d2:1a: c5:92:63:00:56:06:f0:65:a8:7c:98:f0:c4:18:f1:66:66:06: 71:00:62:f2:5b:cb:b6:34:45:fc:d8:17:d5:ac:b0:9b:96:8a: 8e:0a:a1:48:39:4c:6f:54:9c:fc:67:9c:b5:b4:4b:76:ea:4f: 33:1b:c2:34:85:77:ea:8b:b5:aa:ee:da:cd:f5:7b:2f:ec:3e: e7:13:e6:e1:b9:31:c3:a5:86:71:0e:a5:8c:fa:82:0f:7d:98: 5a:44:5a:1c:bf:4d:8a:33:ba:13:ee:0e:06:c3:3c:53:87:a3: 94:16:1f:85:8d:f8:11:8f:b3:0b:18:c4:b2:fb:81:99:e5:5d: 72:ea:e5:b9:ba:a3:10:aa:18:09:ac:72:33:ad:b6:ee:f8:40: 9a:bc:fd:1d:52:eb:49:a4:35:c4:55:d0:67:b9:dd:45:c8:f5: b3:1e:a1:5b:ae:78:6b:9a:89:3b:50:28:2e:56:73:4a:27:13: ef:83:97:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcngwmGu5eGp4ZU56AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI0MDkwOTA3MDAzMFoXDTI0MTIwODA4MDAzMFowLzEtMCsGA1UEAxMk YWNlOWY4MGItOTYxZi00MjBkLWFlM2EtNzRkMzgwZWE0ODM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIgtHYzPwwcJKA7TZ2lVUvmnDKMgmxzd6b+i PQxDPwY/Mn5sWeb0nRpeJSHl5kxPFUFUuPAfw2382wR7NTf2sKOITDyxa/761tBS nSLW+nRAFAIHaRiwRHMm+6LI7U2WPR9l0yqrVF6DTb+lA/5C2LcTF97tWo24G8iO 40Pzrkfaz1bfQz8vmWEqNRmmeIJpj6aLbefOxarzMTPlUMrd4/3xHf73TXUhA0F9 BUt0upMVEmQ8Ds3cllXHZxvJuuQlLuKC0gauib30MITubZgIHoQSVOLqyF2dDn58 tM1Wj0eI/LoJ09jYFMeKGRJJ/HrLy/gYSZ5KyiQHy7/KzM45JwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDSKIJRqAVs+RGTrsgMkVmNch1wnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYjllYmJlOWQtNTM4NC0z MjIwLWI4ODktMTRhY2NmZjM5NGM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4lMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACbx1pCUfq2I5WWWi83CMEE8p/fRx9B0hm5OkH+JjHcWK7De5mSemli5 T5xRzwrKKCdo/Xjv2SX7Si7gPgSf0j5v23uk96rSGsWSYwBWBvBlqHyY8MQY8WZm BnEAYvJby7Y0RfzYF9WssJuWio4KoUg5TG9UnPxnnLW0S3bqTzMbwjSFd+qLtaru 2s31ey/sPucT5uG5McOlhnEOpYz6gg99mFpEWhy/TYozuhPuDgbDPFOHo5QWH4WN +BGPswsYxLL7gZnlXXLq5bm6oxCqGAmscjOttu74QJq8/R1S60mkNcRV0Ge53UXI 9bMeoVuueGuaiTtQKC5Wc0onE++Dl/g= -----END CERTIFICATE-----Generated at Fri Nov 22 04:22:55 2024 by rpki-client on console-fra.rpki-client.org