$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/5a7572ff-0c1a-36e1-a553-3bbd80d6ecd7.roa File: 5a7572ff-0c1a-36e1-a553-3bbd80d6ecd7.roa (raw, json) Hash identifier: U6gDcNcnT1zmky62Q+tc3qel8wi8tdWB4MQi3kLQ7vA= Subject key identifier: FB:9A:0F:69:A0:28:CF:BF:15:0D:E9:14:76:A5:9D:D0:8F:E6:54:5F Certificate issuer: /CN=aa31a4a0-7b77-4f56-8f89-01525b506129 Certificate serial: 010D0C9F4328584802588594A42CEEC909C7F980 Authority key identifier: 58:89:4D:59:3D:A0:9D:73:D6:96:20:6E:85:EB:9B:B1:BA:9B:66:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/5a7572ff-0c1a-36e1-a553-3bbd80d6ecd7.roa Signing time: Tue 26 Nov 2024 16:16:52 +0000 ROA not before: Tue 26 Nov 2024 16:16:52 +0000 ROA not after: Mon 24 Feb 2025 16:16:52 +0000 asID: 46687 IP address blocks: 24.233.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 29 Dec 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:02:58:85:94:a4:2c:ee:c9:09:c7:f9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa31a4a0-7b77-4f56-8f89-01525b506129 Validity Not Before: Nov 26 16:16:52 2024 GMT Not After : Feb 24 16:16:52 2025 GMT Subject: CN=62333cd7-68b5-478f-8446-33b7f826867c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d7:fb:55:ba:1d:90:51:7e:96:e0:88:5c:08: 51:d7:d1:3a:2b:07:a8:33:e1:34:0a:05:c6:93:96: 5f:28:a2:1d:27:f4:09:f3:1a:ae:c9:35:95:76:18: c4:bb:d7:09:3c:80:d3:65:45:26:13:cc:57:18:2c: f0:3b:d6:ee:4e:97:87:2e:4f:08:80:86:40:c4:30: d8:e3:a8:99:c4:31:01:c4:22:99:dd:35:39:94:35: 4f:e2:0a:4d:54:c1:21:4f:f8:b3:b1:eb:2d:dd:01: 29:27:af:bf:dd:07:fe:dc:fd:53:14:ff:26:80:ef: d1:c3:2f:65:e0:ad:72:a3:1f:e7:45:1f:8f:ff:f5: f6:56:a5:ec:a4:65:08:93:c6:a9:81:b4:35:0a:e3: d4:2c:02:ad:99:94:4a:4f:20:86:81:a2:ae:27:76: 84:d8:37:ac:57:39:93:5b:84:7c:e3:76:e9:61:a6: 0f:4f:67:fd:37:91:68:56:87:39:e6:1b:44:65:f9: d7:15:df:93:29:db:76:61:43:7a:f4:7b:45:b1:bd: 97:a6:d9:37:56:5f:ad:a7:ef:de:5b:63:8d:5f:01: 77:fb:b0:f1:1f:4b:93:09:2f:27:c1:0e:e3:b3:24: 16:07:c3:1c:30:a0:b9:e0:4d:3a:ed:68:f0:bc:65: 9b:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:9A:0F:69:A0:28:CF:BF:15:0D:E9:14:76:A5:9D:D0:8F:E6:54:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/5a7572ff-0c1a-36e1-a553-3bbd80d6ecd7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.crl X509v3 Authority Key Identifier: keyid:58:89:4D:59:3D:A0:9D:73:D6:96:20:6E:85:EB:9B:B1:BA:9B:66:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer sbgp-ipAddrBlock: critical IPv4: 24.233.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:df:95:51:6b:56:1a:d3:81:6f:a9:da:9d:82:1f:f5:d5:2a: fa:af:e3:fe:49:04:b3:20:67:c4:4e:53:71:72:42:a0:96:de: 2a:31:8e:33:48:25:96:9d:f1:09:ed:a7:39:82:19:c2:83:69: 00:89:de:9c:e4:83:38:57:13:34:52:66:f9:ee:b9:0b:05:de: 94:cf:0c:45:0c:f0:9a:a1:14:04:99:e4:ae:0e:b4:67:b1:e8: dc:67:f1:0c:ad:92:42:c6:53:25:a2:9c:39:9b:6f:b7:91:0b: 46:c2:e7:5d:66:2e:bc:f0:f2:de:ad:c8:5c:6f:c9:d2:97:f2: 88:86:85:e6:9e:96:31:f8:d6:f2:20:17:98:5d:d1:49:22:14: 34:3a:e8:78:da:84:6c:20:3d:d2:b2:2d:d0:82:2d:bb:3d:e6: b1:2b:29:93:d6:4a:fd:90:e5:cd:74:8d:ef:17:fc:a9:01:0f: 27:d6:2b:6f:75:c3:5e:93:44:d6:86:ce:f3:95:12:92:8c:9b: de:35:42:48:63:65:e2:f2:c8:f6:1f:06:67:1f:4d:c4:3d:e4: 1d:4e:2a:a9:fc:8e:52:94:35:83:8e:55:85:a0:c4:4a:ec:ff: a0:45:71:9a:6d:0f:53:8d:1e:f3:ef:60:c0:04:1a:f8:8f:43: 86:87:56:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgCWIWUpCzuyQnH+YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEzMWE0YTAtN2I3Ny00ZjU2LThmODktMDE1MjViNTA2 MTI5MB4XDTI0MTEyNjE2MTY1MloXDTI1MDIyNDE2MTY1MlowLzEtMCsGA1UEAxMk NjIzMzNjZDctNjhiNS00NzhmLTg0NDYtMzNiN2Y4MjY4NjdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNf7VbodkFF+luCIXAhR19E6KweoM+E0CgXG k5ZfKKIdJ/QJ8xquyTWVdhjEu9cJPIDTZUUmE8xXGCzwO9buTpeHLk8IgIZAxDDY 46iZxDEBxCKZ3TU5lDVP4gpNVMEhT/izsest3QEpJ6+/3Qf+3P1TFP8mgO/Rwy9l 4K1yox/nRR+P//X2VqXspGUIk8apgbQ1CuPULAKtmZRKTyCGgaKuJ3aE2DesVzmT W4R843bpYaYPT2f9N5FoVoc55htEZfnXFd+TKdt2YUN69HtFsb2Xptk3Vl+tp+/e W2ONXwF3+7DxH0uTCS8nwQ7jsyQWB8McMKC54E067WjwvGWbxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPuaD2mgKM+/FQ3pFHalndCP5lRfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYTMx YTRhMC03Yjc3LTRmNTYtOGY4OS0wMTUyNWI1MDYxMjkvNWE3NTcyZmYtMGMxYS0z NmUxLWE1NTMtM2JiZDgwZDZlY2Q3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWEzMWE0YTAtN2I3Ny00ZjU2LThm ODktMDE1MjViNTA2MTI5L2FhMzFhNGEwLTdiNzctNGY1Ni04Zjg5LTAxNTI1YjUw NjEyOS5jcmwwHwYDVR0jBBgwFoAUWIlNWT2gnXPWliBuheubsbqbZj0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYTMxYTRhMC03Yjc3LTRmNTYtOGY4OS0wMTUy NWI1MDYxMjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFGOngMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAELflVFrVhrTgW+p2p2CH/XVKvqv4/5JBLMgZ8ROU3FyQqCW3ioxjjNI JZad8QntpzmCGcKDaQCJ3pzkgzhXEzRSZvnuuQsF3pTPDEUM8JqhFASZ5K4OtGex 6Nxn8QytkkLGUyWinDmbb7eRC0bC511mLrzw8t6tyFxvydKX8oiGheaeljH41vIg F5hd0UkiFDQ66HjahGwgPdKyLdCCLbs95rErKZPWSv2Q5c10je8X/KkBDyfWK291 w16TRNaGzvOVEpKMm941QkhjZeLyyPYfBmcfTcQ95B1OKqn8jlKUNYOOVYWgxErs /6BFcZptD1ONHvPvYMAEGviPQ4aHVlo= -----END CERTIFICATE-----Generated at Fri Dec 27 23:45:12 2024 by rpki-client on console-fra.rpki-client.org