$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/bfd6b9c2-627b-39bd-b12e-6833db031375.roa File: bfd6b9c2-627b-39bd-b12e-6833db031375.roa (raw, json) Hash identifier: U4o2ZWsVn1Bm3kTlBSrTve8sj9RlxdpyadlP7BTjUBk= Subject key identifier: BA:65:3E:4C:5B:CC:95:92:F8:30:9C:69:8D:DE:CA:5E:DE:E2:FC:55 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F432858477EC11197E2A2ACCB6491EF00 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/bfd6b9c2-627b-39bd-b12e-6833db031375.roa Signing time: Thu 10 Oct 2024 13:00:41 +0000 ROA not before: Thu 10 Oct 2024 13:00:41 +0000 ROA not after: Wed 08 Jan 2025 14:00:41 +0000 asID: 203020 IP address blocks: 172.94.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:7e:c1:11:97:e2:a2:ac:cb:64:91:ef:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 10 13:00:41 2024 GMT Not After : Jan 8 14:00:41 2025 GMT Subject: CN=3ea7a20a-9b20-4a2e-ad0d-97f16b713db6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d5:98:8c:b7:4f:ca:19:7c:57:9c:71:88:96: 9f:ee:27:c6:eb:65:33:4d:fa:68:38:59:e1:5e:69: 5e:58:c3:1b:4a:4b:86:ef:6b:8c:23:8a:7e:e2:c7: 37:07:ee:a1:5b:03:c7:28:0a:2b:d7:e6:58:7b:da: 9c:9b:c0:dc:fa:9a:e4:6c:38:37:ac:7e:be:58:67: 47:0b:15:3f:41:07:84:64:74:e6:0d:45:2d:c4:24: 51:5a:51:fb:46:1a:55:bb:e5:54:f2:37:fa:2b:98: 37:80:fa:30:88:92:36:52:4c:10:ec:fd:87:c1:1f: d4:a9:ba:09:b5:63:4d:b4:1f:84:31:ca:78:61:57: f3:05:24:21:e1:a9:3f:db:85:d8:be:35:aa:ad:f4: 31:d3:5b:53:fb:d1:5a:24:a3:2e:9c:30:df:7b:ec: 48:d0:84:7a:4c:69:b1:fa:1b:9a:a4:03:82:14:bd: 18:8b:85:35:32:3e:e6:c8:f0:9d:51:13:10:39:f7: ed:1d:df:c8:cc:5a:a3:dc:b5:f1:ab:b1:9d:f6:78: 5e:e8:42:74:bb:fa:29:f2:d9:37:c1:5e:02:36:9c: aa:d1:48:8b:c7:c7:68:11:66:88:50:d9:15:30:95: d3:ed:01:7f:7a:87:be:7b:cc:28:50:07:81:a6:5c: cd:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:65:3E:4C:5B:CC:95:92:F8:30:9C:69:8D:DE:CA:5E:DE:E2:FC:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/bfd6b9c2-627b-39bd-b12e-6833db031375.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.57.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:b5:c1:f6:7e:53:de:61:b9:bd:f2:ff:37:38:85:71:65:5a: 31:a6:8e:e5:0c:e2:f1:ec:e8:95:8a:48:8f:11:b6:ee:53:cd: 27:7c:0e:22:61:86:e0:1a:d5:fc:07:72:6f:de:33:11:a3:7a: b4:34:e8:5b:4d:55:03:06:03:82:4e:16:85:e4:d6:5b:e2:43: 58:33:a1:2f:2a:12:4d:cc:c8:4d:2c:c3:88:02:ef:2f:52:6b: 9a:31:2a:f6:61:db:75:ec:9d:b3:5e:5c:86:62:ce:ee:6d:bf: c6:ec:be:78:91:d6:84:1a:93:1b:7e:ba:9a:30:cd:7a:6e:ea: 6b:55:7c:40:e4:e6:10:28:07:32:65:55:40:f4:43:4b:3f:67: ab:37:08:2b:b0:ce:49:58:cb:91:6f:3c:23:7f:68:94:14:af: 00:12:91:c3:4e:c3:7c:33:9b:dc:5f:b2:5d:59:02:21:28:04: b7:6f:90:de:63:0e:64:2f:ad:32:3a:e2:e5:69:52:5d:34:dd: 6f:7f:7b:6f:c5:ce:b2:6d:75:2e:d7:f8:6c:6a:d9:60:94:3d: 7a:80:e5:f3:7c:dd:c5:4a:d9:19:80:c1:08:24:b6:c9:2e:49: ee:7e:a9:0b:13:4e:4f:f1:0c:65:de:73:2a:61:5b:2a:6d:56: 48:aa:9b:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd+wRGX4qKsy2SR7wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI0MTAxMDEzMDA0MVoXDTI1MDEwODE0MDA0MVowLzEtMCsGA1UEAxMk M2VhN2EyMGEtOWIyMC00YTJlLWFkMGQtOTdmMTZiNzEzZGI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdWYjLdPyhl8V5xxiJaf7ifG62UzTfpoOFnh XmleWMMbSkuG72uMI4p+4sc3B+6hWwPHKAor1+ZYe9qcm8Dc+prkbDg3rH6+WGdH CxU/QQeEZHTmDUUtxCRRWlH7RhpVu+VU8jf6K5g3gPowiJI2UkwQ7P2HwR/UqboJ tWNNtB+EMcp4YVfzBSQh4ak/24XYvjWqrfQx01tT+9FaJKMunDDfe+xI0IR6TGmx +huapAOCFL0Yi4U1Mj7myPCdURMQOfftHd/IzFqj3LXxq7Gd9nhe6EJ0u/op8tk3 wV4CNpyq0UiLx8doEWaIUNkVMJXT7QF/eoe+e8woUAeBplzNDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLplPkxbzJWS+DCcaY3eyl7e4vxVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYmZkNmI5YzItNjI3Yi0z OWJkLWIxMmUtNjgzM2RiMDMxMzc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF45MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAO1wfZ+U95hub3y/zc4hXFlWjGmjuUM4vHs6JWKSI8Rtu5TzSd8DiJh huAa1fwHcm/eMxGjerQ06FtNVQMGA4JOFoXk1lviQ1gzoS8qEk3MyE0sw4gC7y9S a5oxKvZh23XsnbNeXIZizu5tv8bsvniR1oQakxt+upowzXpu6mtVfEDk5hAoBzJl VUD0Q0s/Z6s3CCuwzklYy5FvPCN/aJQUrwASkcNOw3wzm9xfsl1ZAiEoBLdvkN5j DmQvrTI64uVpUl003W9/e2/FzrJtdS7X+Gxq2WCUPXqA5fN83cVK2RmAwQgktsku Se5+qQsTTk/xDGXecyphWyptVkiqmx0= -----END CERTIFICATE-----Generated at Fri Nov 22 05:50:33 2024 by rpki-client on console-fra.rpki-client.org