$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/baa6a648-7ab8-39bf-8357-a787b0346893.roa File: baa6a648-7ab8-39bf-8357-a787b0346893.roa (raw, json) Hash identifier: 4iv+OvkJVD3WyDf+uNWek8S1GjWmfYsJ5kZ40OITvwE= Subject key identifier: 83:69:B2:B1:D3:7B:9D:EE:BB:F0:2F:E0:77:C6:DB:B1:8A:12:FF:92 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F432858478CB68DEDAA28D68A8EC1CC30 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/baa6a648-7ab8-39bf-8357-a787b0346893.roa Signing time: Tue 15 Oct 2024 13:00:47 +0000 ROA not before: Tue 15 Oct 2024 13:00:47 +0000 ROA not after: Mon 13 Jan 2025 14:00:47 +0000 asID: 3223 IP address blocks: 172.94.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:8c:b6:8d:ed:aa:28:d6:8a:8e:c1:cc:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 15 13:00:47 2024 GMT Not After : Jan 13 14:00:47 2025 GMT Subject: CN=cd7e33af-1c2d-4009-af94-d0489357cc1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:d7:14:2e:3c:30:73:e5:5a:d8:1d:0d:43:86: 01:94:f5:09:08:00:d3:b6:5e:74:27:bd:4b:ab:12: 0c:17:27:64:a2:7a:8c:e4:c9:d0:5c:1f:19:fd:c0: d4:4c:40:97:e1:2d:22:94:39:00:61:a5:fb:29:a4: a1:a4:b9:c6:86:b5:e5:81:e8:63:2d:d6:25:11:b3: 4f:e6:3e:80:22:26:98:89:cc:28:3d:7c:82:be:84: 44:df:b3:ee:92:32:e9:b0:39:f4:4e:42:ac:a3:b5: 08:59:48:57:bc:a0:bc:3b:71:ff:93:b2:3f:f8:21: 12:7d:af:a7:d1:d1:6e:df:51:3b:ac:d5:99:ec:09: 30:14:3a:6a:2e:17:53:60:70:8d:e2:22:98:f4:9a: 94:f4:cd:da:39:ac:50:0d:1d:c3:d5:44:f5:6d:d2: 38:5f:79:ba:bd:28:82:66:9c:dc:18:0f:0f:88:cb: 8e:b4:c8:de:55:90:c5:5f:dc:54:96:3a:4f:c3:09: 81:00:ae:57:f1:93:d8:de:28:7d:68:3a:58:5c:c3: 07:ca:9c:c4:32:eb:1e:2a:b1:62:d5:a8:46:77:9a: 74:9e:a8:ab:f7:19:be:82:e9:0d:fa:c3:86:81:42: 4c:1f:ee:76:fa:f6:00:e8:c5:1d:79:1a:4c:80:cc: 12:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:69:B2:B1:D3:7B:9D:EE:BB:F0:2F:E0:77:C6:DB:B1:8A:12:FF:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/baa6a648-7ab8-39bf-8357-a787b0346893.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:0d:57:29:aa:9e:79:33:74:43:9a:ff:08:c6:12:01:6a:07: ea:e9:e4:f5:0b:c8:e2:0f:e4:99:62:d4:32:6e:66:d5:be:27: 2a:73:b2:9f:c4:77:e0:a8:d3:1a:e1:26:46:48:ee:bd:c2:25: 64:75:ce:f7:b5:ff:db:8b:74:0a:68:82:32:2f:83:61:53:81: 4a:db:3b:0e:4c:93:a6:6b:0c:e0:ae:c0:3f:1c:db:93:a3:03: 04:09:28:6d:88:c0:b0:af:3c:28:5f:db:28:11:74:b8:0b:61: dd:2b:7c:1f:57:95:e2:88:85:9c:1a:d6:f8:21:98:65:92:b4: 72:61:26:8e:96:e7:3e:de:e6:3f:5e:e7:ed:69:5f:15:5f:dd: b9:93:69:d9:52:96:b5:33:9a:61:e7:af:38:03:bb:c6:36:9b: 5f:80:bc:19:11:5d:3a:49:8b:c7:b1:d5:0b:66:7b:63:6c:c4: 9d:c9:c6:a3:17:3c:11:b7:fb:a5:4d:03:df:f0:45:cf:62:88: 7f:76:78:bf:fa:c9:a9:54:75:8c:28:de:ca:ba:bf:f1:3e:15: 79:1c:cb:72:27:14:34:99:09:78:cd:b5:99:17:77:a7:3e:7b: 90:7e:22:b9:a0:a3:31:05:78:8c:50:da:ba:63:9b:74:b1:0a: 32:8c:7e:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeMto3tqijWio7BzDAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI0MTAxNTEzMDA0N1oXDTI1MDExMzE0MDA0N1owLzEtMCsGA1UEAxMk Y2Q3ZTMzYWYtMWMyZC00MDA5LWFmOTQtZDA0ODkzNTdjYzFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtcULjwwc+Va2B0NQ4YBlPUJCADTtl50J71L qxIMFydkonqM5MnQXB8Z/cDUTECX4S0ilDkAYaX7KaShpLnGhrXlgehjLdYlEbNP 5j6AIiaYicwoPXyCvoRE37PukjLpsDn0TkKso7UIWUhXvKC8O3H/k7I/+CESfa+n 0dFu31E7rNWZ7AkwFDpqLhdTYHCN4iKY9JqU9M3aOaxQDR3D1UT1bdI4X3m6vSiC ZpzcGA8PiMuOtMjeVZDFX9xUljpPwwmBAK5X8ZPY3ih9aDpYXMMHypzEMuseKrFi 1ahGd5p0nqir9xm+gukN+sOGgUJMH+52+vYA6MUdeRpMgMwSxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFINpsrHTe53uu/Av4HfG27GKEv+SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYmFhNmE2NDgtN2FiOC0z OWJmLTgzNTctYTc4N2IwMzQ2ODkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4RMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH4NVymqnnkzdEOa/wjGEgFqB+rp5PULyOIP5Jli1DJuZtW+Jypzsp/E d+Co0xrhJkZI7r3CJWR1zve1/9uLdApogjIvg2FTgUrbOw5Mk6ZrDOCuwD8c25Oj AwQJKG2IwLCvPChf2ygRdLgLYd0rfB9XleKIhZwa1vghmGWStHJhJo6W5z7e5j9e 5+1pXxVf3bmTadlSlrUzmmHnrzgDu8Y2m1+AvBkRXTpJi8ex1Qtme2NsxJ3JxqMX PBG3+6VNA9/wRc9iiH92eL/6yalUdYwo3sq6v/E+FXkcy3InFDSZCXjNtZkXd6c+ e5B+IrmgozEFeIxQ2rpjm3SxCjKMfjk= -----END CERTIFICATE-----Generated at Mon Nov 25 06:06:14 2024 by rpki-client on console-fra.rpki-client.org