$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/5c4f117d-45b9-3f38-be81-53b231ffe933.roa File: 5c4f117d-45b9-3f38-be81-53b231ffe933.roa (raw, json) Hash identifier: jOaoFx8MkZ/GOPdrsv1z26n//4ucuG0s53AfMXEq6RA= Subject key identifier: 55:3E:B0:70:EB:47:F4:F3:6F:B8:89:0C:39:1A:25:C8:CA:81:5D:95 Certificate issuer: /CN=aa31a4a0-7b77-4f56-8f89-01525b506129 Certificate serial: 010D0C9F432858480259409C1540137CC3476D80 Authority key identifier: 58:89:4D:59:3D:A0:9D:73:D6:96:20:6E:85:EB:9B:B1:BA:9B:66:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/5c4f117d-45b9-3f38-be81-53b231ffe933.roa Signing time: Tue 26 Nov 2024 16:18:20 +0000 ROA not before: Tue 26 Nov 2024 16:18:20 +0000 ROA not after: Mon 24 Feb 2025 16:18:20 +0000 asID: 46687 IP address blocks: 170.253.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 29 Dec 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:02:59:40:9c:15:40:13:7c:c3:47:6d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa31a4a0-7b77-4f56-8f89-01525b506129 Validity Not Before: Nov 26 16:18:20 2024 GMT Not After : Feb 24 16:18:20 2025 GMT Subject: CN=34b6ea58-c958-48ef-ba9b-79028f3e0d8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b0:2d:e6:7c:1f:0f:f9:98:9a:b0:f6:b1:10: 90:17:69:b3:79:cb:c0:6b:97:5d:36:d4:6b:f0:84: b5:2f:45:17:a5:88:05:a6:29:20:b8:f2:27:5d:4a: 3a:af:7e:9a:3a:ef:66:82:43:b0:f9:fd:67:98:c5: f8:0d:b1:b9:8e:6d:b8:3f:96:31:aa:bd:4d:f8:08: 63:58:3b:d0:da:40:7b:8b:c0:2f:6c:9c:d8:4d:bc: 2b:de:76:1c:f6:c4:fb:ef:f6:62:12:d1:09:bf:e9: 0b:f9:b7:a5:c6:e3:26:54:29:91:cb:e6:cf:fb:7b: 6a:9e:15:46:e4:71:81:e4:18:58:78:17:6f:f4:e2: d8:31:ba:f4:97:d3:c2:fa:e7:1a:c1:95:c8:4e:97: 45:3b:8d:77:56:9e:31:29:bd:aa:5a:d4:6d:82:74: ed:22:b2:87:20:cc:a3:2a:75:7d:14:c2:56:c9:09: 4c:c2:44:5e:65:2f:0c:ba:2b:ed:b3:59:ac:fc:04: ca:90:a9:9d:f1:24:a5:31:03:8d:05:d8:bc:75:62: 86:11:63:d2:7c:fb:57:ba:8e:6c:ec:3a:b0:6d:4d: f3:dd:71:b3:6d:f1:13:b6:b6:0b:5c:88:c0:4f:47: 50:0e:be:6d:fc:8c:ea:39:41:4d:9d:15:e4:1c:7c: ee:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:3E:B0:70:EB:47:F4:F3:6F:B8:89:0C:39:1A:25:C8:CA:81:5D:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/5c4f117d-45b9-3f38-be81-53b231ffe933.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.crl X509v3 Authority Key Identifier: keyid:58:89:4D:59:3D:A0:9D:73:D6:96:20:6E:85:EB:9B:B1:BA:9B:66:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer sbgp-ipAddrBlock: critical IPv4: 170.253.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d6:3e:d1:94:f6:80:12:92:56:91:ee:50:f8:18:37:78:21:73: 62:6f:83:c6:fb:5c:e7:f1:fc:4c:8f:09:d2:70:0e:86:ff:2b: b9:fc:10:35:91:ad:03:95:ff:ab:f6:d8:56:51:46:79:dd:e3: 5a:a3:c3:54:59:e8:b2:45:b5:12:01:85:08:89:b8:ac:fb:02: 0e:f8:20:68:38:ab:52:82:6a:8e:c1:09:10:36:0c:07:a3:3d: 35:64:88:e6:3c:0d:c9:0d:cc:80:44:dc:b0:02:8c:b4:5d:c6: 45:16:b0:15:fc:e3:31:69:df:61:c2:04:cd:f7:48:57:fd:20: a9:8b:ef:8f:f5:cc:49:2c:29:67:41:ee:cc:03:41:ea:79:6a: f6:a8:61:e8:4d:3b:3f:6c:12:d9:15:71:f4:cc:90:2d:74:97: e0:20:2e:2c:62:ae:4f:4a:c7:c4:ed:86:a5:fd:76:03:ed:67: 5e:34:3a:7b:fa:33:fc:e8:64:ec:36:f5:ec:84:8a:99:3d:0b: 52:f5:11:f5:cd:0b:57:14:e9:af:57:2e:a7:7d:84:e7:cb:09: ea:61:9a:e6:2a:2c:5c:bd:c0:eb:8b:42:f9:db:9b:14:bf:ab: 26:36:bf:43:2c:39:cd:64:05:bf:f9:42:2d:08:a6:96:15:f7: 7e:31:5d:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgCWUCcFUATfMNHbYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEzMWE0YTAtN2I3Ny00ZjU2LThmODktMDE1MjViNTA2 MTI5MB4XDTI0MTEyNjE2MTgyMFoXDTI1MDIyNDE2MTgyMFowLzEtMCsGA1UEAxMk MzRiNmVhNTgtYzk1OC00OGVmLWJhOWItNzkwMjhmM2UwZDhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7At5nwfD/mYmrD2sRCQF2mzecvAa5ddNtRr 8IS1L0UXpYgFpikguPInXUo6r36aOu9mgkOw+f1nmMX4DbG5jm24P5Yxqr1N+Ahj WDvQ2kB7i8AvbJzYTbwr3nYc9sT77/ZiEtEJv+kL+belxuMmVCmRy+bP+3tqnhVG 5HGB5BhYeBdv9OLYMbr0l9PC+ucawZXITpdFO413Vp4xKb2qWtRtgnTtIrKHIMyj KnV9FMJWyQlMwkReZS8Muivts1ms/ATKkKmd8SSlMQONBdi8dWKGEWPSfPtXuo5s 7DqwbU3z3XGzbfETtrYLXIjAT0dQDr5t/IzqOUFNnRXkHHzutQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFU+sHDrR/Tzb7iJDDkaJcjKgV2VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYTMx YTRhMC03Yjc3LTRmNTYtOGY4OS0wMTUyNWI1MDYxMjkvNWM0ZjExN2QtNDViOS0z ZjM4LWJlODEtNTNiMjMxZmZlOTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWEzMWE0YTAtN2I3Ny00ZjU2LThm ODktMDE1MjViNTA2MTI5L2FhMzFhNGEwLTdiNzctNGY1Ni04Zjg5LTAxNTI1YjUw NjEyOS5jcmwwHwYDVR0jBBgwFoAUWIlNWT2gnXPWliBuheubsbqbZj0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYTMxYTRhMC03Yjc3LTRmNTYtOGY4OS0wMTUy NWI1MDYxMjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHqv2AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANY+0ZT2gBKSVpHuUPgYN3ghc2Jvg8b7XOfx/EyPCdJwDob/K7n8EDWR rQOV/6v22FZRRnnd41qjw1RZ6LJFtRIBhQiJuKz7Ag74IGg4q1KCao7BCRA2DAej PTVkiOY8DckNzIBE3LACjLRdxkUWsBX84zFp32HCBM33SFf9IKmL74/1zEksKWdB 7swDQep5avaoYehNOz9sEtkVcfTMkC10l+AgLixirk9Kx8TthqX9dgPtZ140Onv6 M/zoZOw29eyEipk9C1L1EfXNC1cU6a9XLqd9hOfLCephmuYqLFy9wOuLQvnbmxS/ qyY2v0MsOc1kBb/5Qi0IppYV934xXXk= -----END CERTIFICATE-----Generated at Sat Dec 28 02:49:17 2024 by rpki-client on console-ams.rpki-client.org