$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d3472d91-6027-3989-8e71-4dc7c885f1fa.roa File: d3472d91-6027-3989-8e71-4dc7c885f1fa.roa (raw, json) Hash identifier: f4idyq/P1IR1ITc7TcGeopv5pcNxKnUKM7olpCuVP50= Subject key identifier: 7B:AC:87:70:D9:96:13:8A:EA:1F:AE:85:42:9D:9B:55:0C:01:53:50 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584809C6E30BF5EF5AA305F43280 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d3472d91-6027-3989-8e71-4dc7c885f1fa.roa Signing time: Fri 29 Nov 2024 08:09:54 +0000 ROA not before: Fri 29 Nov 2024 08:09:54 +0000 ROA not after: Thu 27 Feb 2025 08:09:54 +0000 asID: 9009 IP address blocks: 172.94.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Dec 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:09:c6:e3:0b:f5:ef:5a:a3:05:f4:32:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Nov 29 08:09:54 2024 GMT Not After : Feb 27 08:09:54 2025 GMT Subject: CN=21bbcd35-79fa-4a0f-8da5-6ce7167ecefc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:99:ba:06:b4:00:e3:6b:02:34:c0:0e:73:03: eb:e8:f5:be:ef:e9:c1:85:13:ef:24:06:5c:e2:c7: b6:dd:ad:6f:96:5f:ab:66:84:7f:ab:c1:a5:40:a1: af:69:c9:53:64:74:45:93:fc:77:01:db:31:35:be: 51:1a:17:88:85:11:c4:67:fb:4f:51:34:dc:a6:0d: 8e:32:b3:ee:00:f0:d0:ef:cb:1f:3f:7b:3c:7f:5b: e6:16:d8:f0:ee:b5:b4:3a:af:24:4c:97:d7:02:c4: 6f:46:c3:d8:34:88:fb:9a:f3:54:5d:19:7f:dc:60: c8:ed:2c:bd:40:2d:1e:33:3f:13:81:ae:c1:a3:ba: 93:c7:4a:b1:c4:f2:b1:9c:e0:0a:cc:0b:9f:01:ef: 61:ae:59:8d:2a:01:0e:ab:2f:3c:d9:6e:0f:15:e1: ac:5d:ec:32:ef:c9:b2:7a:24:47:d3:7e:8d:06:ff: 73:d5:1b:dd:d9:10:54:fc:e7:4e:ea:07:36:62:b6: 56:f4:f9:3a:b4:a4:a0:0a:33:be:62:9e:3e:54:60: 9e:b9:3a:ea:e5:e4:42:34:d5:0f:d0:17:66:f6:89: 2f:e0:4d:eb:4b:d8:cf:ff:3b:b8:cd:a0:35:3b:fe: 4c:9c:d2:a6:9d:94:fb:1b:e8:5c:9e:78:80:a3:b9: 5b:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:AC:87:70:D9:96:13:8A:EA:1F:AE:85:42:9D:9B:55:0C:01:53:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d3472d91-6027-3989-8e71-4dc7c885f1fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.41.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:8a:b2:e0:07:35:24:c0:3a:aa:8b:86:96:90:01:a8:15:62: da:f4:13:09:56:d8:4b:17:64:f9:66:97:e9:6a:ca:a7:4b:90: de:0d:f6:b2:60:f9:64:8d:49:20:55:58:ff:55:72:7d:7e:aa: 9b:4c:e6:e4:87:a4:fc:b1:ba:30:f7:2f:e9:a7:f5:86:1a:8a: 69:45:4e:d3:bc:7e:6c:27:20:d2:6b:8a:ba:eb:09:60:3c:ac: 03:f2:4b:8e:8c:05:54:d7:95:38:6f:4b:9c:a6:50:83:f0:9c: 23:30:97:a4:98:c6:f6:eb:fe:39:c0:9b:20:a1:ad:fc:a3:f1: 31:a4:81:99:c3:8d:a8:3c:89:7c:04:e2:2a:ba:05:0c:6a:80: 0e:5d:43:f8:b2:1c:f1:27:55:a2:de:17:30:fb:2f:58:b1:d6: 0d:55:ff:3a:64:df:2a:f8:fd:57:ff:87:9f:2c:4a:b9:04:ad: 17:70:9e:25:75:0b:dc:cf:20:99:5b:c5:8e:08:44:3a:00:d9: af:54:dc:48:47:74:7c:a1:4d:fa:19:33:63:d7:9d:5b:b0:13: 22:8b:02:25:77:14:5e:57:c9:b7:09:62:4d:af:79:8d:96:f5: a3:b8:a4:cb:78:7a:83:cc:3e:1e:6a:c3:f9:c9:28:bb:50:0e: eb:44:ae:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgJxuML9e9aowX0MoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI0MTEyOTA4MDk1NFoXDTI1MDIyNzA4MDk1NFowLzEtMCsGA1UEAxMk MjFiYmNkMzUtNzlmYS00YTBmLThkYTUtNmNlNzE2N2VjZWZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA15m6BrQA42sCNMAOcwPr6PW+7+nBhRPvJAZc 4se23a1vll+rZoR/q8GlQKGvaclTZHRFk/x3AdsxNb5RGheIhRHEZ/tPUTTcpg2O MrPuAPDQ78sfP3s8f1vmFtjw7rW0Oq8kTJfXAsRvRsPYNIj7mvNUXRl/3GDI7Sy9 QC0eMz8Tga7Bo7qTx0qxxPKxnOAKzAufAe9hrlmNKgEOqy882W4PFeGsXewy78my eiRH036NBv9z1Rvd2RBU/OdO6gc2YrZW9Pk6tKSgCjO+Yp4+VGCeuTrq5eRCNNUP 0Bdm9okv4E3rS9jP/zu4zaA1O/5MnNKmnZT7G+hcnniAo7lb8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHush3DZlhOK6h+uhUKdm1UMAVNQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZDM0NzJkOTEtNjAyNy0z OTg5LThlNzEtNGRjN2M4ODVmMWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4pMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACyKsuAHNSTAOqqLhpaQAagVYtr0EwlW2EsXZPlml+lqyqdLkN4N9rJg +WSNSSBVWP9Vcn1+qptM5uSHpPyxujD3L+mn9YYaimlFTtO8fmwnINJrirrrCWA8 rAPyS46MBVTXlThvS5ymUIPwnCMwl6SYxvbr/jnAmyChrfyj8TGkgZnDjag8iXwE 4iq6BQxqgA5dQ/iyHPEnVaLeFzD7L1ix1g1V/zpk3yr4/Vf/h58sSrkErRdwniV1 C9zPIJlbxY4IRDoA2a9U3EhHdHyhTfoZM2PXnVuwEyKLAiV3FF5XybcJYk2veY2W 9aO4pMt4eoPMPh5qw/nJKLtQDutErqs= -----END CERTIFICATE-----Generated at Thu Dec 26 08:30:14 2024 by rpki-client on console-fra.rpki-client.org