$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/fa90a921-50f8-3528-a5ca-49096b1e475d.roa File: fa90a921-50f8-3528-a5ca-49096b1e475d.roa (raw, json) Hash identifier: 9BwaboXmJyp/WaFlJ+9obMQM3bUsQjX8oVmlWONjA0Q= Subject key identifier: EB:C0:C5:72:FD:20:D6:33:96:A5:53:DD:43:29:1C:B1:79:20:7C:6E Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F432858480979C5EE7FBA2AE730BDB400 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/fa90a921-50f8-3528-a5ca-49096b1e475d.roa Signing time: Fri 29 Nov 2024 05:34:31 +0000 ROA not before: Fri 29 Nov 2024 05:34:31 +0000 ROA not after: Thu 27 Feb 2025 05:34:31 +0000 asID: 9009 IP address blocks: 206.123.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Dec 2024 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:09:79:c5:ee:7f:ba:2a:e7:30:bd:b4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Nov 29 05:34:31 2024 GMT Not After : Feb 27 05:34:31 2025 GMT Subject: CN=e631ec06-6cba-4e14-ab64-920298b8f4a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:7d:d4:19:af:c3:10:79:6a:c9:a8:81:9b:1f: a1:bf:66:a3:f3:2e:49:12:b9:e4:c3:7a:cb:ca:38: 75:de:4e:9a:60:75:64:e0:76:99:1e:93:ff:50:bb: 05:2e:b9:da:ce:8c:d9:63:8e:16:ac:ca:84:69:4e: 3a:a7:b9:3a:c9:a4:4e:68:45:26:90:24:f9:da:7d: ca:b7:20:ef:85:92:51:28:d8:bf:72:52:a1:ee:f6: 76:6f:67:79:11:27:94:43:67:56:47:0e:44:08:a9: 58:74:ee:c6:33:72:a8:de:a3:42:30:ad:5a:1f:3e: 14:bb:25:8b:90:c0:25:41:dc:af:01:bc:ce:c8:c2: d5:ca:cc:a3:8c:1a:8a:7e:86:f2:29:84:55:7b:ca: d0:7c:8f:7f:45:45:38:aa:75:ee:b5:5a:8f:47:9e: b1:c1:f8:fa:7b:2d:e2:2e:32:a5:72:fc:1f:50:9c: 7d:40:82:c8:53:fa:64:8f:4e:32:dc:8f:98:c1:2f: b8:c7:d1:a6:23:3e:b1:bd:fa:3d:72:c1:d0:e8:90: 02:ec:8f:3f:0b:5e:be:af:dd:3f:0a:f4:8e:2c:28: 29:07:d3:51:39:a0:40:59:02:37:e0:ae:35:58:ab: 23:ee:88:5b:ae:42:94:7c:f7:67:95:13:fa:67:65: 1d:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:C0:C5:72:FD:20:D6:33:96:A5:53:DD:43:29:1C:B1:79:20:7C:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/fa90a921-50f8-3528-a5ca-49096b1e475d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 206.123.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:80:cb:99:fc:30:bc:4b:90:2c:c6:0b:d1:f2:94:48:d3:39: 01:30:74:bb:ba:2e:fb:b9:af:45:29:02:3a:ce:46:b1:fb:8c: 90:eb:75:e7:5d:2d:ea:a6:a7:7a:71:f7:79:dd:ce:2e:4f:da: 3e:c2:7a:0f:00:66:0b:b3:b4:bb:a4:80:d9:bd:77:51:47:ec: c6:96:60:10:2c:44:96:5e:13:b1:1c:d7:62:0a:6a:af:0a:f8: f7:86:a4:34:ef:27:27:c3:0c:a1:52:c9:1f:cb:85:12:33:cf: 39:1c:02:4a:36:b5:76:21:9c:07:79:53:03:8a:6c:87:e4:34: d2:e7:1e:bf:2e:62:02:7c:16:01:6e:db:0b:0c:9e:30:e0:d4: 8a:36:e5:d5:05:c9:7a:2e:9f:14:59:3d:d4:5e:49:51:c1:4d: b1:19:8a:1a:5e:05:12:3d:bf:45:2d:9e:26:b6:cb:3a:c2:63: 7a:18:e0:3d:4f:84:fb:14:e9:79:8a:c3:74:51:b6:2c:50:58: b2:b2:98:d8:be:17:0c:0b:10:df:b1:f8:6d:c8:a9:91:39:2f: 47:f3:fe:af:ba:67:05:f2:6b:1f:e0:07:9f:ac:84:d2:d1:b0: 0a:c3:3d:f4:00:50:ef:43:3d:b0:9a:50:2e:77:40:1e:81:87: f9:17:57:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgJecXuf7oq5zC9tAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI0MTEyOTA1MzQzMVoXDTI1MDIyNzA1MzQzMVowLzEtMCsGA1UEAxMk ZTYzMWVjMDYtNmNiYS00ZTE0LWFiNjQtOTIwMjk4YjhmNGE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAin3UGa/DEHlqyaiBmx+hv2aj8y5JErnkw3rL yjh13k6aYHVk4HaZHpP/ULsFLrnazozZY44WrMqEaU46p7k6yaROaEUmkCT52n3K tyDvhZJRKNi/clKh7vZ2b2d5ESeUQ2dWRw5ECKlYdO7GM3Ko3qNCMK1aHz4UuyWL kMAlQdyvAbzOyMLVysyjjBqKfobyKYRVe8rQfI9/RUU4qnXutVqPR56xwfj6ey3i LjKlcvwfUJx9QILIU/pkj04y3I+YwS+4x9GmIz6xvfo9csHQ6JAC7I8/C16+r90/ CvSOLCgpB9NROaBAWQI34K41WKsj7ohbrkKUfPdnlRP6Z2Ud0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOvAxXL9INYzlqVT3UMpHLF5IHxuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZmE5MGE5MjEtNTBmOC0z NTI4LWE1Y2EtNDkwOTZiMWU0NzVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAznuaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAeAy5n8MLxLkCzGC9HylEjTOQEwdLu6Lvu5r0UpAjrORrH7jJDrdedd Leqmp3px93ndzi5P2j7Ceg8AZguztLukgNm9d1FH7MaWYBAsRJZeE7Ec12IKaq8K +PeGpDTvJyfDDKFSyR/LhRIzzzkcAko2tXYhnAd5UwOKbIfkNNLnHr8uYgJ8FgFu 2wsMnjDg1Io25dUFyXounxRZPdReSVHBTbEZihpeBRI9v0Utnia2yzrCY3oY4D1P hPsU6XmKw3RRtixQWLKymNi+FwwLEN+x+G3IqZE5L0fz/q+6ZwXyax/gB5+shNLR sArDPfQAUO9DPbCaUC53QB6Bh/kXV/c= -----END CERTIFICATE-----Generated at Thu Dec 26 17:00:50 2024 by rpki-client on console-ams.rpki-client.org