$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e67216c6-fb7f-3d32-ace4-8f1870a41110.roa File: e67216c6-fb7f-3d32-ace4-8f1870a41110.roa (raw, json) Hash identifier: /7BNbLCM3bTNowApiBBdLLwkPEY+UD5JIgC1gBd5b4o= Subject key identifier: 42:5C:83:BA:00:44:A7:3E:6A:56:5D:B8:75:E4:33:D3:8E:AB:8E:C5 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F432858472835FAE5CE7409DA011C8840 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e67216c6-fb7f-3d32-ace4-8f1870a41110.roa Signing time: Mon 09 Sep 2024 13:00:41 +0000 ROA not before: Mon 09 Sep 2024 13:00:41 +0000 ROA not after: Sun 08 Dec 2024 14:00:41 +0000 asID: 45671 IP address blocks: 172.94.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:28:35:fa:e5:ce:74:09:da:01:1c:88:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Sep 9 13:00:41 2024 GMT Not After : Dec 8 14:00:41 2024 GMT Subject: CN=a51b2a7b-f9dd-4f38-b98b-f5f074c52725 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:58:6e:49:12:cd:d3:b3:2a:92:7e:c9:80:1a: 03:d9:09:12:b6:04:0d:74:ba:fe:62:9d:96:66:a1: 04:12:5e:6b:3b:4e:db:35:37:a2:be:53:e1:c9:82: 5e:76:ed:4b:a6:f0:37:9d:51:76:66:a1:8b:ba:5e: ce:80:8d:0a:61:ee:15:70:ec:8c:c3:4e:2f:7a:e9: 61:ee:7e:2d:eb:11:62:9b:21:56:46:66:97:a8:ca: 62:d2:81:ba:48:32:da:3a:34:b5:ce:bb:75:a2:13: 1d:73:83:a7:71:1f:ac:3d:eb:f6:9d:45:d6:58:30: a6:ee:97:f9:0c:49:95:1b:ba:65:5d:ad:e3:66:09: 1e:89:22:c7:98:ff:23:9c:d7:4e:5a:3e:bf:26:54: 1e:7a:b5:23:6c:da:cd:09:62:6f:70:2b:60:96:e4: 8c:03:7c:55:8c:ae:ca:66:3d:35:d7:2f:8b:81:b0: 01:af:4d:ba:c1:89:9d:cd:38:d0:33:f3:3e:15:3f: 54:8d:b4:c9:5b:ef:5d:ef:7b:34:93:b0:0c:50:f3: 62:5d:ba:12:06:f8:46:cc:54:3e:64:39:2b:97:a8: ce:2d:11:c3:39:8e:e4:bd:63:7c:5b:60:84:86:fb: 62:69:b5:49:dd:73:3a:9b:3a:f7:32:64:64:f9:90: 39:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:5C:83:BA:00:44:A7:3E:6A:56:5D:B8:75:E4:33:D3:8E:AB:8E:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e67216c6-fb7f-3d32-ace4-8f1870a41110.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.101.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:e1:87:cc:1c:30:ce:05:15:2b:98:fa:f1:31:6b:5b:78:7f: 2a:23:05:d4:3c:cd:42:3b:0b:3e:f6:b1:ef:48:62:b3:18:09: 17:8b:f4:9b:9c:05:b2:9b:09:4e:18:b1:e1:8a:86:17:09:73: f3:bc:0c:61:4c:e1:66:8f:b5:36:a1:48:0a:5a:bd:25:5e:a2: 80:73:e1:6f:e1:a1:97:8e:06:e0:b1:83:11:9c:2c:76:61:0f: 77:e0:c1:01:4f:a2:57:9b:6e:6f:87:c4:99:8f:88:49:a9:aa: ee:01:68:18:b6:46:36:72:bf:dc:1a:80:97:c6:00:7b:20:4a: 2d:b2:9c:d8:c6:a5:9a:d5:d8:44:0e:08:8e:63:3d:11:3c:2c: 3c:7c:55:ba:e2:25:79:72:02:7c:c4:66:ef:59:2c:e3:81:cb: 03:71:e3:c2:fe:fb:86:90:fe:f9:af:08:01:51:3a:47:15:8b: ad:b6:d7:31:50:55:f8:05:4e:33:50:9b:1f:7d:58:61:1e:d1: cc:39:f3:2e:f3:f8:f6:23:b8:2f:8b:47:5b:f9:98:40:8f:58: 29:0a:05:cf:ea:8f:15:af:b8:8a:ee:63:98:e7:48:d3:35:cb: 22:cc:80:83:ef:f3:6a:bf:d2:82:ea:42:58:dd:9e:d4:60:b0: 38:b7:19:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcoNfrlznQJ2gEciEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI0MDkwOTEzMDA0MVoXDTI0MTIwODE0MDA0MVowLzEtMCsGA1UEAxMk YTUxYjJhN2ItZjlkZC00ZjM4LWI5OGItZjVmMDc0YzUyNzI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhFhuSRLN07Mqkn7JgBoD2QkStgQNdLr+Yp2W ZqEEEl5rO07bNTeivlPhyYJedu1LpvA3nVF2ZqGLul7OgI0KYe4VcOyMw04veulh 7n4t6xFimyFWRmaXqMpi0oG6SDLaOjS1zrt1ohMdc4OncR+sPev2nUXWWDCm7pf5 DEmVG7plXa3jZgkeiSLHmP8jnNdOWj6/JlQeerUjbNrNCWJvcCtgluSMA3xVjK7K Zj011y+LgbABr026wYmdzTjQM/M+FT9UjbTJW+9d73s0k7AMUPNiXboSBvhGzFQ+ ZDkrl6jOLRHDOY7kvWN8W2CEhvtiabVJ3XM6mzr3MmRk+ZA5ewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEJcg7oARKc+alZduHXkM9OOq47FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZTY3MjE2YzYtZmI3Zi0z ZDMyLWFjZTQtOGYxODcwYTQxMTEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF5lMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACzhh8wcMM4FFSuY+vExa1t4fyojBdQ8zUI7Cz72se9IYrMYCReL9Juc BbKbCU4YseGKhhcJc/O8DGFM4WaPtTahSApavSVeooBz4W/hoZeOBuCxgxGcLHZh D3fgwQFPolebbm+HxJmPiEmpqu4BaBi2RjZyv9wagJfGAHsgSi2ynNjGpZrV2EQO CI5jPRE8LDx8VbriJXlyAnzEZu9ZLOOBywNx48L++4aQ/vmvCAFROkcVi6221zFQ VfgFTjNQmx99WGEe0cw58y7z+PYjuC+LR1v5mECPWCkKBc/qjxWvuIruY5jnSNM1 yyLMgIPv82q/0oLqQljdntRgsDi3GTA= -----END CERTIFICATE-----Generated at Sun Nov 24 23:08:20 2024 by rpki-client on console-ams.rpki-client.org