$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0deef668-277b-3b70-90fd-a7e0e5890df7.roa File: 0deef668-277b-3b70-90fd-a7e0e5890df7.roa (raw, json) Hash identifier: 8JtubU/6W3TTtCFGUe3BxsNEQOQQa5YKno+fXVobTmM= Subject key identifier: 42:4E:E3:75:D7:B7:96:5A:AC:49:3A:02:BE:8C:5B:4B:96:1E:71:7A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858471BA5AF33A114033DF3BDC180 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0deef668-277b-3b70-90fd-a7e0e5890df7.roa Signing time: Thu 05 Sep 2024 01:00:30 +0000 ROA not before: Thu 05 Sep 2024 01:00:30 +0000 ROA not after: Wed 04 Dec 2024 02:00:30 +0000 asID: 36183 IP address blocks: 172.225.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:1b:a5:af:33:a1:14:03:3d:f3:bd:c1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 5 01:00:30 2024 GMT Not After : Dec 4 02:00:30 2024 GMT Subject: CN=a7f74822-1b38-4b5b-8d48-5fd89f366365 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:96:1c:fb:44:3e:23:0b:bd:88:8f:43:bc:00: 85:52:57:a6:99:72:58:59:3a:d7:18:3c:8c:74:6a: 10:ec:96:e3:f6:2a:ef:66:c2:7f:a5:f3:3f:9d:6a: d5:f5:4c:87:e4:92:8a:89:29:75:e0:ab:15:e4:d6: f9:8f:2a:f1:fc:69:3b:fc:f8:fb:51:12:f9:df:9d: 50:a5:9b:82:7e:8d:24:d7:ed:12:ed:8a:cf:81:e6: f6:06:a5:12:06:9e:48:61:e5:55:2d:26:3e:65:d1: 25:bb:80:96:0b:62:0d:fc:90:95:19:b0:b8:70:49: 2e:09:cc:0d:db:e5:21:e5:13:31:25:b7:27:f5:ea: 50:75:4f:ba:a5:0a:70:af:d8:72:7c:c8:58:dc:bb: 65:c3:7f:aa:bd:95:21:ef:77:17:f1:29:9a:f8:56: 6b:a3:bd:41:0c:c9:78:43:64:d6:d1:cc:24:6a:1c: 42:38:8e:09:bd:58:2f:c4:7c:d5:5c:3d:2a:ff:5d: d2:12:a3:b5:18:81:d2:30:0b:50:e2:31:31:1f:92: 33:26:4f:12:a0:49:f2:f0:03:21:39:92:df:58:22: 7e:f0:9a:55:23:9b:4d:9a:a1:3e:57:b9:e5:3c:f1: 72:b0:a5:e4:14:a8:b2:82:6a:2c:61:e2:3b:89:64: 8e:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:4E:E3:75:D7:B7:96:5A:AC:49:3A:02:BE:8C:5B:4B:96:1E:71:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0deef668-277b-3b70-90fd-a7e0e5890df7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.134.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:0c:19:64:16:c1:c3:f6:62:bb:51:da:9b:4d:52:e4:0b:64: fb:f5:b3:af:7b:6d:8e:6f:4a:32:02:26:7f:9a:54:7f:f9:59: 45:a3:14:38:52:03:2f:41:ee:89:f4:18:98:08:a4:e5:ce:1e: 65:bd:24:1e:91:e1:ff:34:8f:04:9f:76:4b:ae:14:40:34:f0: 14:a2:cb:8c:4d:03:f4:74:30:6a:40:59:63:64:b6:18:d0:85: f8:0f:e2:d2:aa:94:80:65:f6:1f:00:5d:4a:86:ce:bc:71:7a: bc:bd:5e:a9:3f:4e:f5:57:66:e6:5a:22:85:2d:8a:1b:6d:56: 2c:5f:28:fa:5e:bf:f5:02:b2:b6:52:e9:30:59:6b:c0:9d:fd: 3f:44:fc:37:4f:48:6d:a8:d9:ab:dd:a6:77:5d:6d:58:05:3e: 59:7b:49:dc:d3:a1:36:9e:cd:92:45:ca:91:3c:3a:e8:5a:29: 05:90:50:3c:88:93:2a:8a:1a:54:cb:27:2e:16:da:e4:80:d4: 10:d3:75:af:d7:e2:02:d6:f0:78:7b:27:d5:7e:2d:41:e3:73: 69:ca:db:0e:8c:37:50:db:24:77:57:0c:56:c2:de:7b:92:ad: 95:67:25:b5:ab:5f:2b:35:5d:3c:db:0f:c1:68:65:a5:19:3f: 76:f7:0f:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcbpa8zoRQDPfO9wYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MDkwNTAxMDAzMFoXDTI0MTIwNDAyMDAzMFowLzEtMCsGA1UEAxMk YTdmNzQ4MjItMWIzOC00YjViLThkNDgtNWZkODlmMzY2MzY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJYc+0Q+Iwu9iI9DvACFUlemmXJYWTrXGDyM dGoQ7Jbj9irvZsJ/pfM/nWrV9UyH5JKKiSl14KsV5Nb5jyrx/Gk7/Pj7URL5351Q pZuCfo0k1+0S7YrPgeb2BqUSBp5IYeVVLSY+ZdElu4CWC2IN/JCVGbC4cEkuCcwN 2+Uh5RMxJbcn9epQdU+6pQpwr9hyfMhY3Ltlw3+qvZUh73cX8Sma+FZro71BDMl4 Q2TW0cwkahxCOI4JvVgvxHzVXD0q/13SEqO1GIHSMAtQ4jExH5IzJk8SoEny8AMh OZLfWCJ+8JpVI5tNmqE+V7nlPPFysKXkFKiygmosYeI7iWSONQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEJO43XXt5ZarEk6Ar6MW0uWHnF6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMGRlZWY2NjgtMjc3Yi0z YjcwLTkwZmQtYTdlMGU1ODkwZGY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOGGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABUMGWQWwcP2YrtR2ptNUuQLZPv1s697bY5vSjICJn+aVH/5WUWjFDhS Ay9B7on0GJgIpOXOHmW9JB6R4f80jwSfdkuuFEA08BSiy4xNA/R0MGpAWWNkthjQ hfgP4tKqlIBl9h8AXUqGzrxxery9Xqk/TvVXZuZaIoUtihttVixfKPpev/UCsrZS 6TBZa8Cd/T9E/DdPSG2o2avdpnddbVgFPll7SdzToTaezZJFypE8OuhaKQWQUDyI kyqKGlTLJy4W2uSA1BDTda/X4gLW8Hh7J9V+LUHjc2nK2w6MN1DbJHdXDFbC3nuS rZVnJbWrXys1XTzbD8FoZaUZP3b3D4A= -----END CERTIFICATE-----Generated at Fri Nov 22 22:26:30 2024 by rpki-client on console-fra.rpki-client.org