$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2e689c55-8453-486f-8b88-f433fba67f55/d12a4c75-b429-30dd-b69a-b38ea72126c0.roa File: d12a4c75-b429-30dd-b69a-b38ea72126c0.roa (raw, json) Hash identifier: Q/FnE//+hVaq8C8ElNDdB/QWxVxVIWFqehP3x+EBB6s= Subject key identifier: 57:B5:ED:80:E4:D0:4D:98:64:8E:63:E1:C1:1E:33:FD:41:C3:88:C6 Certificate issuer: /CN=2e689c55-8453-486f-8b88-f433fba67f55 Certificate serial: 010D0C9F43285847A8A15294154DD8766116D280 Authority key identifier: CA:2D:8E:C3:CC:29:85:C4:8B:25:AE:E0:EB:D5:2D:89:72:73:32:2D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2e689c55-8453-486f-8b88-f433fba67f55.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2e689c55-8453-486f-8b88-f433fba67f55/d12a4c75-b429-30dd-b69a-b38ea72126c0.roa Signing time: Fri 25 Oct 2024 13:00:42 +0000 ROA not before: Fri 25 Oct 2024 13:00:42 +0000 ROA not after: Thu 23 Jan 2025 14:00:42 +0000 asID: 26216 IP address blocks: 172.96.24.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2e689c55-8453-486f-8b88-f433fba67f55/2e689c55-8453-486f-8b88-f433fba67f55.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2e689c55-8453-486f-8b88-f433fba67f55/2e689c55-8453-486f-8b88-f433fba67f55.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2e689c55-8453-486f-8b88-f433fba67f55.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:a8:a1:52:94:15:4d:d8:76:61:16:d2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e689c55-8453-486f-8b88-f433fba67f55 Validity Not Before: Oct 25 13:00:42 2024 GMT Not After : Jan 23 14:00:42 2025 GMT Subject: CN=6dcad778-dac6-4adb-90df-1ea636944bdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:7e:8d:a8:46:fd:a7:61:f3:d2:75:b0:d0:de: 78:d4:41:db:6d:e1:92:a8:e6:18:59:2a:b0:a7:57: 6c:94:96:22:e0:19:ec:3e:bc:e9:c1:3d:19:b6:d9: 7b:5a:f7:af:98:7e:bd:23:88:c7:01:e8:d7:70:2f: 78:f0:ed:15:8f:1e:ee:ed:de:3b:b8:d9:94:86:a5: d9:33:1c:16:d5:ff:b6:65:fb:4a:f7:8a:40:83:7d: be:f0:54:9b:91:90:24:35:93:0c:3a:b3:18:16:86: 73:2d:c8:cc:9a:34:e0:a7:87:69:43:ff:5c:ba:83: e7:a8:36:1e:ee:d4:c3:ae:15:ad:ed:a8:03:6a:3a: e8:d3:66:c4:d8:2f:8f:21:aa:06:24:c9:7d:f9:7a: 2f:9d:77:25:58:38:7a:50:68:f3:02:6e:0d:ba:c6: d7:6e:c7:e2:9c:5e:80:33:e6:3f:32:af:53:c8:9f: 9a:0c:96:f6:e0:a7:26:33:63:d8:7a:5a:a6:30:99: f3:31:58:66:c6:9e:ed:b5:a6:d1:af:02:30:80:ad: 56:ae:7d:1a:f8:2c:5f:9e:89:7e:b3:e2:81:8b:de: f0:62:4f:48:5f:1d:f8:a5:98:8d:a2:cd:38:d9:7a: b4:5c:0b:44:e2:79:06:91:0b:83:4e:d3:11:3c:df: 10:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:B5:ED:80:E4:D0:4D:98:64:8E:63:E1:C1:1E:33:FD:41:C3:88:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2e689c55-8453-486f-8b88-f433fba67f55/d12a4c75-b429-30dd-b69a-b38ea72126c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2e689c55-8453-486f-8b88-f433fba67f55/2e689c55-8453-486f-8b88-f433fba67f55.crl X509v3 Authority Key Identifier: keyid:CA:2D:8E:C3:CC:29:85:C4:8B:25:AE:E0:EB:D5:2D:89:72:73:32:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2e689c55-8453-486f-8b88-f433fba67f55.cer sbgp-ipAddrBlock: critical IPv4: 172.96.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:5e:1b:44:1b:da:70:23:9d:dd:4a:22:ab:c3:98:9c:d9:94: a2:4e:fc:89:f6:54:b0:f8:0b:94:aa:8c:ed:f9:cd:48:fd:f2: 6c:d2:64:11:95:e5:23:e5:80:35:cc:e0:4c:43:96:a9:b8:cf: 17:62:3a:79:71:89:3c:73:ba:03:e9:33:7f:e5:89:f1:01:ef: 84:20:4e:8d:14:56:d1:82:1d:c0:68:fa:58:e7:75:8c:de:6a: 84:22:9b:81:74:57:35:20:d7:a0:65:45:13:43:95:c3:30:93: 42:29:28:78:4d:39:b7:9a:ed:9e:2e:22:0d:53:b5:15:f5:48: c0:5b:26:d6:5d:89:74:c0:2a:a8:b1:ea:3f:2b:4f:32:19:70: 52:4e:ef:f5:f8:26:98:ea:8b:34:5e:86:fa:cc:98:e4:03:48: 99:45:6a:58:07:36:0b:93:40:71:05:d1:84:97:d3:b9:93:1c: 53:2b:fc:06:3a:39:3a:0f:0b:94:22:0c:ff:3e:b0:e5:c4:6d: a2:60:aa:f1:db:38:9f:fa:a8:fb:89:2d:bd:9c:5a:3c:01:38: 5f:02:ee:0c:98:e8:14:5b:24:95:47:b4:da:9f:31:41:10:be: 13:36:64:c4:e4:c7:85:6c:a5:c6:f7:0d:82:1a:b6:d2:6b:55: 5f:78:e5:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeooVKUFU3YdmEW0oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmU2ODljNTUtODQ1My00ODZmLThiODgtZjQzM2ZiYTY3 ZjU1MB4XDTI0MTAyNTEzMDA0MloXDTI1MDEyMzE0MDA0MlowLzEtMCsGA1UEAxMk NmRjYWQ3NzgtZGFjNi00YWRiLTkwZGYtMWVhNjM2OTQ0YmRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqX6NqEb9p2Hz0nWw0N541EHbbeGSqOYYWSqw p1dslJYi4BnsPrzpwT0Zttl7WvevmH69I4jHAejXcC948O0Vjx7u7d47uNmUhqXZ MxwW1f+2ZftK94pAg32+8FSbkZAkNZMMOrMYFoZzLcjMmjTgp4dpQ/9cuoPnqDYe 7tTDrhWt7agDajro02bE2C+PIaoGJMl9+XovnXclWDh6UGjzAm4NusbXbsfinF6A M+Y/Mq9TyJ+aDJb24KcmM2PYelqmMJnzMVhmxp7ttabRrwIwgK1Wrn0a+Cxfnol+ s+KBi97wYk9IXx34pZiNos042Xq0XAtE4nkGkQuDTtMRPN8Q6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFe17YDk0E2YZI5j4cEeM/1Bw4jGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yZTY4 OWM1NS04NDUzLTQ4NmYtOGI4OC1mNDMzZmJhNjdmNTUvZDEyYTRjNzUtYjQyOS0z MGRkLWI2OWEtYjM4ZWE3MjEyNmMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMmU2ODljNTUtODQ1My00ODZmLThi ODgtZjQzM2ZiYTY3ZjU1LzJlNjg5YzU1LTg0NTMtNDg2Zi04Yjg4LWY0MzNmYmE2 N2Y1NS5jcmwwHwYDVR0jBBgwFoAUyi2Ow8wphcSLJa7g69UtiXJzMi0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yZTY4OWM1NS04NDUzLTQ4NmYtOGI4OC1mNDMz ZmJhNjdmNTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrGAYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH9eG0Qb2nAjnd1KIqvDmJzZlKJO/In2VLD4C5SqjO35zUj98mzSZBGV 5SPlgDXM4ExDlqm4zxdiOnlxiTxzugPpM3/lifEB74QgTo0UVtGCHcBo+ljndYze aoQim4F0VzUg16BlRRNDlcMwk0IpKHhNObea7Z4uIg1TtRX1SMBbJtZdiXTAKqix 6j8rTzIZcFJO7/X4JpjqizRehvrMmOQDSJlFalgHNguTQHEF0YSX07mTHFMr/AY6 OToPC5QiDP8+sOXEbaJgqvHbOJ/6qPuJLb2cWjwBOF8C7gyY6BRbJJVHtNqfMUEQ vhM2ZMTkx4Vspcb3DYIattJrVV945Q4= -----END CERTIFICATE-----Generated at Sat Nov 23 20:22:48 2024 by rpki-client on console-ams.rpki-client.org