$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/db21b773-fa1a-3c86-9b9d-fa3b0477771a.roa File: db21b773-fa1a-3c86-9b9d-fa3b0477771a.roa (raw, json) Hash identifier: WTfX2qD9A8ujTETPl9zh6GzN0wulUR3mWwHTIUw2ECA= Subject key identifier: AF:6C:7C:D3:DB:E2:64:27:1A:D7:BE:E3:CA:F6:62:73:2A:3D:39:58 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F432858480978A4D5C480D0A5A633DB80 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/db21b773-fa1a-3c86-9b9d-fa3b0477771a.roa Signing time: Fri 29 Nov 2024 05:32:15 +0000 ROA not before: Fri 29 Nov 2024 05:32:15 +0000 ROA not after: Thu 27 Feb 2025 05:32:15 +0000 asID: 9009 IP address blocks: 172.94.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Dec 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:09:78:a4:d5:c4:80:d0:a5:a6:33:db:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Nov 29 05:32:15 2024 GMT Not After : Feb 27 05:32:15 2025 GMT Subject: CN=1225f09b-7e27-468b-acf6-4787cda4604d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:c3:c8:43:a3:5f:a8:d2:c1:f0:7a:ee:4d:fe: 99:fe:47:9c:8c:a3:31:30:8b:3c:e8:47:41:c8:17: 18:67:e0:a9:80:f2:d7:e2:bc:95:1d:de:dc:48:a9: 96:ab:ed:1c:89:2c:c0:07:63:4d:70:2c:5b:b6:e0: e7:b0:b4:5d:37:76:a3:ac:12:df:4f:7d:f6:4a:21: 52:64:44:6c:b9:65:ee:0c:db:52:c3:92:f3:06:a2: 0a:e4:6a:80:2c:c6:a5:b0:ad:7c:88:c0:c1:d0:3b: d7:11:8d:e8:56:57:20:78:1b:bb:7b:fa:17:d4:0f: d5:5c:b1:fb:1f:da:e3:23:57:0b:07:29:05:78:f8: cf:51:e6:d3:26:82:af:82:65:58:d6:43:6d:7f:ec: 20:ab:87:50:5b:da:30:78:44:41:90:67:be:e2:32: ce:59:73:3c:8c:fd:05:c9:88:bf:50:5a:2e:1e:9d: f1:86:95:3c:94:80:b0:2e:fa:50:4f:ca:af:fd:d7: 0f:98:ce:14:f2:50:cb:fb:9f:2d:37:51:ab:ce:29: 33:48:51:ff:25:ce:48:40:58:32:b5:d2:d1:a8:d3: 10:62:f7:b8:a6:11:7e:b1:6c:3e:49:d7:b9:a2:34: 3e:06:aa:94:bb:d3:d3:9f:af:10:32:50:c5:4a:5b: e2:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:6C:7C:D3:DB:E2:64:27:1A:D7:BE:E3:CA:F6:62:73:2A:3D:39:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/db21b773-fa1a-3c86-9b9d-fa3b0477771a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:3d:a4:74:d4:cf:41:57:d7:32:dc:b9:0e:50:4f:11:dd:aa: f9:3f:87:46:dd:65:28:5e:5b:dd:c4:a8:e2:dc:54:4b:2d:a2: d6:46:e4:56:0c:2a:95:2a:bd:4f:2e:ab:76:ad:6d:45:06:93: f0:46:05:0a:0a:95:f8:f7:47:8f:58:0d:b6:3d:61:13:10:92: 97:b0:83:1c:2c:18:47:38:0a:21:f2:e3:b4:38:6a:22:75:0b: e2:b8:3c:17:7b:7e:6c:2e:5e:d0:9b:b8:79:c0:ce:e4:d8:64: 3b:ee:e8:5a:7e:de:45:96:e4:10:42:b4:cd:f7:b7:8e:46:66: ba:18:16:79:5f:15:6b:16:d6:22:f6:fd:34:82:ad:e6:c2:a0: c2:97:ea:60:97:a4:3d:cb:6f:65:87:e5:de:f2:74:5d:0b:8a: 47:00:9f:2f:59:d8:04:d4:1a:fc:3a:3c:3d:07:5c:52:57:4d: f2:aa:47:cf:2e:fe:34:11:88:30:72:b6:eb:34:5c:48:e6:e3: fa:42:a1:3b:c6:a0:a0:e6:88:e8:aa:7e:d2:cf:f8:c5:91:47: f0:3b:ab:e0:3c:19:73:d1:d4:4b:71:9d:12:48:57:9e:54:f4: ef:2c:9f:c5:5a:9a:60:16:37:57:04:ee:e8:36:bb:9f:40:78: 79:3b:c4:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgJeKTVxIDQpaYz24AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI0MTEyOTA1MzIxNVoXDTI1MDIyNzA1MzIxNVowLzEtMCsGA1UEAxMk MTIyNWYwOWItN2UyNy00NjhiLWFjZjYtNDc4N2NkYTQ2MDRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA48PIQ6NfqNLB8HruTf6Z/kecjKMxMIs86EdB yBcYZ+CpgPLX4ryVHd7cSKmWq+0ciSzAB2NNcCxbtuDnsLRdN3ajrBLfT332SiFS ZERsuWXuDNtSw5LzBqIK5GqALMalsK18iMDB0DvXEY3oVlcgeBu7e/oX1A/VXLH7 H9rjI1cLBykFePjPUebTJoKvgmVY1kNtf+wgq4dQW9oweERBkGe+4jLOWXM8jP0F yYi/UFouHp3xhpU8lICwLvpQT8qv/dcPmM4U8lDL+58tN1GrzikzSFH/Jc5IQFgy tdLRqNMQYve4phF+sWw+Sde5ojQ+BqqUu9PTn68QMlDFSlvi/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK9sfNPb4mQnGte+48r2YnMqPTlYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZGIyMWI3NzMtZmExYS0z Yzg2LTliOWQtZmEzYjA0Nzc3NzFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF5YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE09pHTUz0FX1zLcuQ5QTxHdqvk/h0bdZSheW93EqOLcVEstotZG5FYM KpUqvU8uq3atbUUGk/BGBQoKlfj3R49YDbY9YRMQkpewgxwsGEc4CiHy47Q4aiJ1 C+K4PBd7fmwuXtCbuHnAzuTYZDvu6Fp+3kWW5BBCtM33t45GZroYFnlfFWsW1iL2 /TSCrebCoMKX6mCXpD3Lb2WH5d7ydF0LikcAny9Z2ATUGvw6PD0HXFJXTfKqR88u /jQRiDBytus0XEjm4/pCoTvGoKDmiOiqftLP+MWRR/A7q+A8GXPR1EtxnRJIV55U 9O8sn8VammAWN1cE7ug2u59AeHk7xAY= -----END CERTIFICATE-----Generated at Thu Dec 26 09:00:18 2024 by rpki-client on console-ams.rpki-client.org