$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/cc126209-aeb3-363b-92cb-8a40229b5b5c.roa File: cc126209-aeb3-363b-92cb-8a40229b5b5c.roa (raw, json) Hash identifier: 6Y3l2CTanSDlpk+kS3JUsUBe9zl7tSiixpxh8Adz0/Y= Subject key identifier: E2:D0:FD:C7:26:7B:64:09:6C:E6:11:13:FB:E0:35:7C:7C:88:E3:05 Certificate issuer: /CN=3c655aaf-76f4-4bab-b4f7-8fb23c3d4011 Certificate serial: 010D0C9F432858475EA6278C77ABD00F7483B500 Authority key identifier: 88:73:89:5B:D7:48:07:9E:32:C3:7E:DE:E7:B8:93:C8:98:EC:2C:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/cc126209-aeb3-363b-92cb-8a40229b5b5c.roa Signing time: Sun 29 Sep 2024 01:00:32 +0000 ROA not before: Sun 29 Sep 2024 01:00:32 +0000 ROA not after: Sat 28 Dec 2024 02:00:32 +0000 asID: 395927 IP address blocks: 172.83.96.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:5e:a6:27:8c:77:ab:d0:0f:74:83:b5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c655aaf-76f4-4bab-b4f7-8fb23c3d4011 Validity Not Before: Sep 29 01:00:32 2024 GMT Not After : Dec 28 02:00:32 2024 GMT Subject: CN=ac5b0894-0da8-4a7e-8a70-2942b732a287 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:6e:52:51:4e:12:33:95:2a:5d:ff:7e:a5:a7: cf:2f:e1:a7:51:5b:e5:3d:48:69:6b:0b:92:eb:3c: bd:9c:7a:1f:5f:1e:4f:10:35:9e:69:5a:44:02:df: 56:b1:e8:a8:58:68:a9:32:66:25:f5:f2:7c:02:62: 5b:db:d3:99:de:5e:f2:21:95:9f:2b:3f:23:65:bc: 04:e9:cf:20:02:41:88:b7:b0:49:ef:49:4a:02:70: 40:76:cf:20:d5:87:99:c4:b5:35:00:eb:b6:da:2a: b6:44:12:6c:ec:d9:8b:2f:bb:f1:d0:a3:eb:a7:e7: 0e:c8:53:96:27:87:0e:2f:64:ad:25:1e:c1:0d:45: 6b:e4:35:be:5a:9c:a2:24:7a:09:25:19:0a:88:36: 0c:ca:f6:95:ff:67:71:26:a7:7a:9a:fb:07:81:ce: 60:f1:b3:88:72:4b:02:2d:ee:a0:db:45:61:bf:16: ee:ed:83:c6:3c:b4:5e:9d:d8:6f:6d:a6:59:04:ac: a0:88:b2:63:4a:3d:72:79:f9:67:63:98:96:ca:3a: 6e:73:5d:ef:7a:d2:2d:11:e0:d2:d7:a6:22:ff:97: 10:fc:67:62:23:da:31:bb:38:5d:70:c4:a5:0e:61: 6a:30:b6:ea:6e:a6:e6:ef:fc:c4:4a:79:e5:a1:d0: 1f:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:D0:FD:C7:26:7B:64:09:6C:E6:11:13:FB:E0:35:7C:7C:88:E3:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/cc126209-aeb3-363b-92cb-8a40229b5b5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.crl X509v3 Authority Key Identifier: keyid:88:73:89:5B:D7:48:07:9E:32:C3:7E:DE:E7:B8:93:C8:98:EC:2C:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.cer sbgp-ipAddrBlock: critical IPv4: 172.83.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:6a:31:3a:69:ac:e0:a9:24:b0:a5:d4:ac:a1:8b:a4:b5:0a: 38:ab:b6:f5:c8:79:e8:50:54:ba:36:80:9f:09:fe:3d:d2:03: 3e:c0:a7:f0:34:b5:78:72:01:5b:43:cb:ef:97:18:7d:5a:fb: f8:a7:d2:03:73:0f:7d:61:b2:ef:1f:53:e4:a7:6d:ec:6c:d4: d9:53:5c:fb:bc:f0:cb:b0:f5:44:31:8b:24:7b:77:74:02:c2: 69:99:f5:04:07:7a:fe:7f:44:17:3c:ee:67:b5:4a:80:d8:19: 6f:89:bb:72:f6:67:e4:a4:4a:f3:be:ad:37:c3:ad:aa:46:01: 64:d4:38:fe:57:09:1d:5c:54:05:ab:93:37:54:95:e1:55:56: 21:c0:0f:43:e5:1d:d9:d4:a4:12:9a:84:66:4a:7f:19:dc:a9: ec:dd:85:56:95:04:11:e8:2b:2b:c4:d0:e1:b3:30:5b:8b:a6: 2f:37:b4:97:96:ba:8b:66:fc:76:52:de:b7:41:51:45:be:20: 18:b0:1b:1c:73:e0:1d:22:f3:b1:2d:71:58:56:5c:54:4a:b2: 8d:4a:23:32:a7:81:ff:4a:e0:03:e7:34:7b:5c:a4:14:c6:3b: 7d:e5:c5:63:17:6c:76:f9:40:f0:47:76:aa:de:9c:c7:36:e4: fa:30:04:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdepieMd6vQD3SDtQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M2NTVhYWYtNzZmNC00YmFiLWI0ZjctOGZiMjNjM2Q0 MDExMB4XDTI0MDkyOTAxMDAzMloXDTI0MTIyODAyMDAzMlowLzEtMCsGA1UEAxMk YWM1YjA4OTQtMGRhOC00YTdlLThhNzAtMjk0MmI3MzJhMjg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoG5SUU4SM5UqXf9+pafPL+GnUVvlPUhpawuS 6zy9nHofXx5PEDWeaVpEAt9WseioWGipMmYl9fJ8AmJb29OZ3l7yIZWfKz8jZbwE 6c8gAkGIt7BJ70lKAnBAds8g1YeZxLU1AOu22iq2RBJs7NmLL7vx0KPrp+cOyFOW J4cOL2StJR7BDUVr5DW+WpyiJHoJJRkKiDYMyvaV/2dxJqd6mvsHgc5g8bOIcksC Le6g20Vhvxbu7YPGPLRendhvbaZZBKygiLJjSj1yeflnY5iWyjpuc13vetItEeDS 16Yi/5cQ/GdiI9oxuzhdcMSlDmFqMLbqbqbm7/zESnnlodAfEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOLQ/ccme2QJbOYRE/vgNXx8iOMFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zYzY1 NWFhZi03NmY0LTRiYWItYjRmNy04ZmIyM2MzZDQwMTEvY2MxMjYyMDktYWViMy0z NjNiLTkyY2ItOGE0MDIyOWI1YjVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvM2M2NTVhYWYtNzZmNC00YmFiLWI0 ZjctOGZiMjNjM2Q0MDExLzNjNjU1YWFmLTc2ZjQtNGJhYi1iNGY3LThmYjIzYzNk NDAxMS5jcmwwHwYDVR0jBBgwFoAUiHOJW9dIB54yw37e57iTyJjsLBIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zYzY1NWFhZi03NmY0LTRiYWItYjRmNy04ZmIy M2MzZDQwMTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrFNgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH5qMTpprOCpJLCl1Kyhi6S1CjirtvXIeehQVLo2gJ8J/j3SAz7Ap/A0 tXhyAVtDy++XGH1a+/in0gNzD31hsu8fU+Snbexs1NlTXPu88Muw9UQxiyR7d3QC wmmZ9QQHev5/RBc87me1SoDYGW+Ju3L2Z+SkSvO+rTfDrapGAWTUOP5XCR1cVAWr kzdUleFVViHAD0PlHdnUpBKahGZKfxncqezdhVaVBBHoKyvE0OGzMFuLpi83tJeW uotm/HZS3rdBUUW+IBiwGxxz4B0i87EtcVhWXFRKso1KIzKngf9K4APnNHtcpBTG O33lxWMXbHb5QPBHdqrenMc25PowBDM= -----END CERTIFICATE-----Generated at Fri Nov 22 05:50:38 2024 by rpki-client on console-fra.rpki-client.org