$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59/3a5025bf-ee37-315a-a197-68996a369c6a.roa File: 3a5025bf-ee37-315a-a197-68996a369c6a.roa (raw, json) Hash identifier: Z7JxUhngYb+oSnbZvxhyZtGw5O2sEYvMRjIPXpHi8Hc= Subject key identifier: 66:44:77:7B:E5:49:6F:4A:29:AD:57:9F:6F:B4:1C:C7:0D:A1:BF:BD Certificate issuer: /CN=24b82191-9eab-4780-afd2-8d7640123b59 Certificate serial: 010D0C9F43285847D999F94BF23456E7F7342E6E Authority key identifier: AF:7B:56:6B:03:E4:B9:A5:9A:F5:A6:82:3B:9E:58:80:60:B5:12:3A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59/3a5025bf-ee37-315a-a197-68996a369c6a.roa Signing time: Tue 12 Nov 2024 02:00:27 +0000 ROA not before: Tue 12 Nov 2024 02:00:27 +0000 ROA not after: Mon 10 Feb 2025 02:00:27 +0000 asID: 54714 IP address blocks: 172.83.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59/24b82191-9eab-4780-afd2-8d7640123b59.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59/24b82191-9eab-4780-afd2-8d7640123b59.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:d9:99:f9:4b:f2:34:56:e7:f7:34:2e:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24b82191-9eab-4780-afd2-8d7640123b59 Validity Not Before: Nov 12 02:00:27 2024 GMT Not After : Feb 10 02:00:27 2025 GMT Subject: CN=788f4136-4fd1-4199-b391-d0813fad9bb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:aa:85:86:fc:f8:ad:cf:8e:a1:fb:26:a4:eb: 3c:56:5b:6f:b4:d6:dd:20:0d:a7:63:d7:5d:e0:fb: 29:e1:6a:31:a2:92:bf:78:c7:df:cd:9a:44:1f:d7: bd:1e:09:49:90:bc:24:2d:a6:df:74:6b:51:7f:91: 3b:1c:eb:06:28:c2:82:63:78:ad:af:30:78:d7:a2: 1a:e1:ec:70:46:85:58:f1:78:ea:0c:ce:e5:b9:c9: b3:b5:4c:0b:0b:17:31:1a:8d:90:44:e1:d1:b6:ac: a7:cc:40:b9:90:f7:39:e2:84:a4:ce:f9:0b:4f:dd: ef:2e:4d:7b:ae:a9:4b:26:84:ce:f6:5b:e6:0a:12: 7f:6d:81:a7:7a:fc:97:17:c4:0a:99:ec:03:74:1c: 61:96:dc:25:2b:9f:3f:1b:f5:67:30:a5:ae:24:2d: 4e:0b:b0:74:95:2d:fe:5e:93:1c:85:c4:9d:d0:e6: 7f:8d:61:54:12:30:26:c1:4a:7a:ee:a6:ae:87:ad: a1:80:53:36:f5:46:2b:4a:65:93:ba:64:61:33:9c: 51:ba:a4:01:bf:d1:1b:d6:b1:61:24:5f:76:91:8a: b0:75:e3:db:70:f7:22:e3:d1:18:66:6d:19:7e:87: 59:3c:76:2a:65:66:91:90:80:76:41:fb:db:ba:f7: b0:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:44:77:7B:E5:49:6F:4A:29:AD:57:9F:6F:B4:1C:C7:0D:A1:BF:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59/3a5025bf-ee37-315a-a197-68996a369c6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59/24b82191-9eab-4780-afd2-8d7640123b59.crl X509v3 Authority Key Identifier: keyid:AF:7B:56:6B:03:E4:B9:A5:9A:F5:A6:82:3B:9E:58:80:60:B5:12:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59.cer sbgp-ipAddrBlock: critical IPv4: 172.83.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:bc:7f:9d:45:5f:a5:b3:ee:13:3e:92:89:92:4e:1b:af:18: be:b6:39:58:e7:91:6b:c7:27:87:31:a2:94:5c:6e:36:d4:77: f1:8d:b3:b1:37:ed:e2:31:32:0b:08:08:23:e2:9c:b4:d3:54: 7a:e0:09:a8:f5:47:68:5d:89:07:d1:bf:1e:c9:11:08:ac:be: 70:01:fd:60:57:b0:fd:6c:2c:13:20:d5:ec:67:c1:82:0c:18: ff:f6:e0:24:ff:31:97:21:3a:87:41:be:6e:cd:09:85:1b:17: 39:8e:d0:d7:67:a7:38:13:e1:1e:86:48:cb:e3:a6:68:7d:43: e7:d4:52:fc:67:21:ae:92:6d:11:74:17:9d:1b:7b:22:7b:81: 11:d6:7f:a3:e5:bb:8c:78:7b:52:de:c9:5a:ff:a9:e4:d9:80: 7d:7b:bf:4d:d3:23:73:ce:9d:a3:ac:97:4c:5b:90:db:ef:de: 4c:78:88:99:33:da:a1:08:8e:e8:6c:7d:95:58:34:28:15:0f: 12:9d:9c:1d:bb:dc:66:47:a7:8a:9b:8a:92:2a:b1:14:1d:a2: 8c:cc:e4:ad:8d:9f:51:79:d8:5c:5c:5a:0b:6c:b6:1d:39:f1: 04:bd:7c:0a:39:66:91:89:67:2f:f1:72:b0:da:d6:b8:e2:15: 1c:a0:79:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfZmflL8jRW5/c0Lm4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRiODIxOTEtOWVhYi00NzgwLWFmZDItOGQ3NjQwMTIz YjU5MB4XDTI0MTExMjAyMDAyN1oXDTI1MDIxMDAyMDAyN1owLzEtMCsGA1UEAxMk Nzg4ZjQxMzYtNGZkMS00MTk5LWIzOTEtZDA4MTNmYWQ5YmIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyqqFhvz4rc+OofsmpOs8VltvtNbdIA2nY9dd 4Psp4WoxopK/eMffzZpEH9e9HglJkLwkLabfdGtRf5E7HOsGKMKCY3itrzB416Ia 4exwRoVY8XjqDM7lucmztUwLCxcxGo2QROHRtqynzEC5kPc54oSkzvkLT93vLk17 rqlLJoTO9lvmChJ/bYGnevyXF8QKmewDdBxhltwlK58/G/VnMKWuJC1OC7B0lS3+ XpMchcSd0OZ/jWFUEjAmwUp67qauh62hgFM29UYrSmWTumRhM5xRuqQBv9Eb1rFh JF92kYqwdePbcPci49EYZm0ZfodZPHYqZWaRkIB2QfvbuvewGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGZEd3vlSW9KKa1Xn2+0HMcNob+9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8yNGI4 MjE5MS05ZWFiLTQ3ODAtYWZkMi04ZDc2NDAxMjNiNTkvM2E1MDI1YmYtZWUzNy0z MTVhLWExOTctNjg5OTZhMzY5YzZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMjRiODIxOTEtOWVhYi00NzgwLWFm ZDItOGQ3NjQwMTIzYjU5LzI0YjgyMTkxLTllYWItNDc4MC1hZmQyLThkNzY0MDEy M2I1OS5jcmwwHwYDVR0jBBgwFoAUr3tWawPkuaWa9aaCO55YgGC1EjowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8yNGI4MjE5MS05ZWFiLTQ3ODAtYWZkMi04ZDc2 NDAxMjNiNTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArFN+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEC8f51FX6Wz7hM+komSThuvGL62OVjnkWvHJ4cxopRcbjbUd/GNs7E3 7eIxMgsICCPinLTTVHrgCaj1R2hdiQfRvx7JEQisvnAB/WBXsP1sLBMg1exnwYIM GP/24CT/MZchOodBvm7NCYUbFzmO0NdnpzgT4R6GSMvjpmh9Q+fUUvxnIa6SbRF0 F50beyJ7gRHWf6Plu4x4e1LeyVr/qeTZgH17v03TI3POnaOsl0xbkNvv3kx4iJkz 2qEIjuhsfZVYNCgVDxKdnB273GZHp4qbipIqsRQdoozM5K2Nn1F52FxcWgtsth05 8QS9fAo5ZpGJZy/xcrDa1rjiFRygefs= -----END CERTIFICATE-----Generated at Thu Nov 21 21:45:10 2024 by rpki-client on console-ams.rpki-client.org