$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0da2b90f-1d2c-328a-b6c2-5fe234bf2b13.roa File: 0da2b90f-1d2c-328a-b6c2-5fe234bf2b13.roa (raw, json) Hash identifier: 1qZpUVnlAtALGiNLjgJjqho1Ap2l61gkcB31Ad2Medw= Subject key identifier: 6D:04:C1:FC:B3:08:37:7B:1C:4F:C3:9D:21:8A:16:8D:DB:16:FE:0C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858477D5B9C874E0C5BA751847980 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0da2b90f-1d2c-328a-b6c2-5fe234bf2b13.roa Signing time: Thu 10 Oct 2024 01:00:33 +0000 ROA not before: Thu 10 Oct 2024 01:00:33 +0000 ROA not after: Wed 08 Jan 2025 02:00:33 +0000 asID: 20940 IP address blocks: 172.235.112.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:7d:5b:9c:87:4e:0c:5b:a7:51:84:79:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 10 01:00:33 2024 GMT Not After : Jan 8 02:00:33 2025 GMT Subject: CN=798c3939-c041-43f8-9731-627e5760df42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:14:67:37:2e:10:fb:04:d0:47:92:f2:e3:79: 8d:b2:6c:3f:b0:e5:aa:7b:0f:29:a5:2d:02:b1:b0: 18:8e:2a:e1:b1:4a:a8:e1:6f:d0:3c:b2:dc:40:10: 4b:cc:b6:3c:9a:c5:49:3d:c3:3e:44:84:c3:7d:c3: 56:9a:94:0e:0c:6a:a7:f4:c6:d5:5a:4f:80:be:eb: 61:88:00:a9:d5:29:be:1b:88:55:f2:a7:03:c4:bb: 0f:5d:f4:23:96:c9:cd:3d:a6:fe:71:cb:c3:3b:db: 5d:aa:a4:e8:57:98:7b:56:da:a2:c3:13:b3:1d:6f: 2d:ee:79:21:0f:77:1c:63:7a:8e:b6:6e:41:80:9f: fa:ad:20:e1:6e:1b:03:f3:d9:e5:0c:bf:df:af:6f: c6:79:ed:16:04:95:31:71:b2:4f:da:73:5c:92:97: ce:2e:8b:1e:c0:bc:f8:a7:ac:a8:9b:8b:c2:1a:b8: 74:20:91:68:57:c7:c2:b0:97:01:97:02:f9:5c:4a: ec:63:68:ff:28:dc:38:17:40:30:97:60:7f:fb:06: 6b:7e:01:ca:d1:9e:66:10:f6:de:4f:2a:44:e7:de: 01:a6:14:86:fd:52:be:f9:b4:11:37:98:78:ed:e9: ca:2a:15:1f:a4:b2:f3:b7:09:35:5b:39:6d:03:2d: f8:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:04:C1:FC:B3:08:37:7B:1C:4F:C3:9D:21:8A:16:8D:DB:16:FE:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0da2b90f-1d2c-328a-b6c2-5fe234bf2b13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.235.112.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:8a:a6:04:d1:4d:87:91:1e:ab:29:29:42:c7:b8:a0:18:02: dc:d5:15:08:6b:55:13:0a:80:78:b0:07:7b:e8:54:79:f6:74: a7:22:a4:96:03:6c:05:b5:f7:de:da:35:b6:e2:c7:3d:d6:06: 69:a1:d3:89:34:a2:2a:75:07:01:ef:fe:86:00:93:02:04:15: 57:67:8d:30:f0:ac:e5:8e:b8:01:a0:42:ac:b0:3a:fd:d7:bd: 5a:2b:4e:65:51:24:7a:78:3a:45:f4:e9:c5:9f:46:81:3f:db: 25:d9:8c:ca:95:4d:be:62:3b:13:59:e2:60:f2:bd:63:6d:42: a0:19:bb:00:11:86:82:b8:f1:61:67:77:fc:40:6f:6a:92:8e: 94:2d:25:73:19:17:99:27:c4:7b:4e:89:9a:ec:75:3f:c1:ff: 0f:8b:2d:82:ed:14:c7:24:5e:45:74:ee:e4:d8:e2:ce:ef:25: 57:c6:3c:02:e7:3c:05:95:66:59:21:8b:81:17:5a:ee:68:d8: bf:f1:1e:df:86:1f:ea:13:9c:c5:dc:7a:fa:eb:be:ad:e6:05: 05:6c:39:7f:aa:85:41:5b:7c:8a:33:29:37:90:2a:41:be:79: 30:6f:f8:09:07:74:ae:64:77:8a:5a:b3:98:fb:e4:e7:82:dd: d5:30:32:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd9W5yHTgxbp1GEeYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTAxMDAxMDAzM1oXDTI1MDEwODAyMDAzM1owLzEtMCsGA1UEAxMk Nzk4YzM5MzktYzA0MS00M2Y4LTk3MzEtNjI3ZTU3NjBkZjQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBRnNy4Q+wTQR5Ly43mNsmw/sOWqew8ppS0C sbAYjirhsUqo4W/QPLLcQBBLzLY8msVJPcM+RITDfcNWmpQODGqn9MbVWk+Avuth iACp1Sm+G4hV8qcDxLsPXfQjlsnNPab+ccvDO9tdqqToV5h7VtqiwxOzHW8t7nkh D3ccY3qOtm5BgJ/6rSDhbhsD89nlDL/fr2/Gee0WBJUxcbJP2nNckpfOLosewLz4 p6yom4vCGrh0IJFoV8fCsJcBlwL5XErsY2j/KNw4F0Awl2B/+wZrfgHK0Z5mEPbe TypE594BphSG/VK++bQRN5h47enKKhUfpLLztwk1WzltAy34swIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG0EwfyzCDd7HE/DnSGKFo3bFv4MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMGRhMmI5MGYtMWQyYy0z MjhhLWI2YzItNWZlMjM0YmYyYjEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrOtwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHKKpgTRTYeRHqspKULHuKAYAtzVFQhrVRMKgHiwB3voVHn2dKcipJYD bAW1997aNbbixz3WBmmh04k0oip1BwHv/oYAkwIEFVdnjTDwrOWOuAGgQqywOv3X vVorTmVRJHp4OkX06cWfRoE/2yXZjMqVTb5iOxNZ4mDyvWNtQqAZuwARhoK48WFn d/xAb2qSjpQtJXMZF5knxHtOiZrsdT/B/w+LLYLtFMckXkV07uTY4s7vJVfGPALn PAWVZlkhi4EXWu5o2L/xHt+GH+oTnMXcevrrvq3mBQVsOX+qhUFbfIozKTeQKkG+ eTBv+AkHdK5kd4pas5j75OeC3dUwMuc= -----END CERTIFICATE-----Generated at Thu Nov 21 23:38:57 2024 by rpki-client on console-ams.rpki-client.org