$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1932ce95-7be2-30bf-8470-b98e5bd9ef5e.roa File: 1932ce95-7be2-30bf-8470-b98e5bd9ef5e.roa (raw, json) Hash identifier: wcp4uLkh5FeigbuYk2itdR+J8aay4nFyRr/zujbAur0= Subject key identifier: 83:AD:D2:EF:3A:16:59:94:07:95:D5:9C:99:79:B1:05:F0:D8:23:55 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584757AB6FE29813E40158265900 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1932ce95-7be2-30bf-8470-b98e5bd9ef5e.roa Signing time: Thu 26 Sep 2024 13:00:41 +0000 ROA not before: Thu 26 Sep 2024 13:00:41 +0000 ROA not after: Wed 25 Dec 2024 14:00:41 +0000 asID: 63949 IP address blocks: 172.235.64.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:57:ab:6f:e2:98:13:e4:01:58:26:59:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 26 13:00:41 2024 GMT Not After : Dec 25 14:00:41 2024 GMT Subject: CN=1e5bffaf-1058-43b1-b9a6-0eccfae4fa06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f1:3a:fd:fc:5f:cf:f2:2c:b0:38:6b:ca:21: bb:29:ff:a4:eb:43:cb:bb:b4:36:77:83:59:7f:18: 49:61:f2:66:b1:81:09:9c:1b:3e:6d:e3:bb:7b:16: 86:5c:c0:cc:ab:01:39:c0:ad:0b:54:ef:a7:9d:e1: d6:85:06:bc:3c:5a:d3:bb:3d:c5:da:26:22:0f:79: 9e:17:f2:29:45:5a:40:45:75:bb:96:95:93:e3:04: 79:44:9e:d1:88:7b:50:e4:6e:80:b8:2e:17:f1:81: 48:d9:40:21:80:77:7a:5d:10:10:e0:7c:55:f2:27: aa:71:61:06:ed:40:e3:e6:99:4b:d6:7f:9f:61:a6: 5f:ea:63:b9:c0:3e:de:bf:f6:6e:39:8f:27:02:06: 5e:fe:6b:09:7c:ab:18:18:ca:a5:a4:87:74:39:b3: 9e:9b:47:ad:56:15:51:6f:ff:d9:f6:50:d6:3a:ee: f4:f4:ed:dd:a1:bd:ee:97:b5:3c:ca:3e:6a:a2:35: 1e:65:d7:ec:ae:7b:93:85:aa:fd:90:96:6c:e8:35: b0:a4:82:90:dc:99:28:a5:b8:41:f8:35:01:e8:1f: 02:4c:dd:f3:30:c2:6c:41:38:05:12:25:a4:23:25: e0:37:30:49:be:62:a3:2e:3b:3c:b3:7a:02:0f:8b: ad:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:AD:D2:EF:3A:16:59:94:07:95:D5:9C:99:79:B1:05:F0:D8:23:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1932ce95-7be2-30bf-8470-b98e5bd9ef5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.235.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:6d:07:a7:a8:cc:2d:cd:9f:05:f3:08:21:40:cb:03:e2:40: 25:78:7c:f0:15:9f:e8:ca:b7:34:a2:8f:e7:ef:f9:27:3c:c3: 8d:b9:d0:68:24:d7:73:61:de:a2:1f:4f:34:f5:40:f8:db:b0: 06:6c:43:61:cb:fd:5d:d6:47:9e:6e:4f:f7:de:3a:49:4a:0a: 8a:72:6a:d9:0a:d4:8b:6a:07:e0:a6:c2:74:36:f0:4a:0c:ac: 17:92:6c:1e:1f:b2:df:f2:71:e7:53:81:a7:d0:08:95:83:95: ae:d5:c8:f4:1d:02:35:fb:59:a0:03:5b:74:fc:27:4a:2d:8d: 29:12:23:f0:79:5b:18:eb:4c:b1:68:53:54:ba:0d:33:87:fa: 6b:01:f1:b5:df:77:74:11:08:cc:d3:86:4a:85:70:fa:92:73: 5e:16:a7:07:39:d2:02:85:06:ea:e9:ad:b7:57:08:94:14:f6: 7e:32:a1:ce:bb:2b:58:d4:0d:01:85:9c:83:6e:47:e6:72:f5: cb:f0:00:52:c1:5f:b5:cb:42:60:8b:e1:cc:40:a2:8c:93:ec: ab:ce:fc:7f:32:f2:45:40:c2:a7:0f:92:df:9e:42:e4:10:ea: f2:6b:92:de:96:4c:d0:de:71:1a:44:16:04:e1:1a:a4:a8:07: 51:6c:03:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdXq2/imBPkAVgmWQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MDkyNjEzMDA0MVoXDTI0MTIyNTE0MDA0MVowLzEtMCsGA1UEAxMk MWU1YmZmYWYtMTA1OC00M2IxLWI5YTYtMGVjY2ZhZTRmYTA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvE6/fxfz/IssDhryiG7Kf+k60PLu7Q2d4NZ fxhJYfJmsYEJnBs+beO7exaGXMDMqwE5wK0LVO+nneHWhQa8PFrTuz3F2iYiD3me F/IpRVpARXW7lpWT4wR5RJ7RiHtQ5G6AuC4X8YFI2UAhgHd6XRAQ4HxV8ieqcWEG 7UDj5plL1n+fYaZf6mO5wD7ev/ZuOY8nAgZe/msJfKsYGMqlpId0ObOem0etVhVR b//Z9lDWOu709O3dob3ul7U8yj5qojUeZdfsrnuThar9kJZs6DWwpIKQ3JkopbhB +DUB6B8CTN3zMMJsQTgFEiWkIyXgNzBJvmKjLjs8s3oCD4ut7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIOt0u86FlmUB5XVnJl5sQXw2CNVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTkzMmNlOTUtN2JlMi0z MGJmLTg0NzAtYjk4ZTViZDllZjVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFrOtAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACFtB6eozC3NnwXzCCFAywPiQCV4fPAVn+jKtzSij+fv+Sc8w4250Ggk 13Nh3qIfTzT1QPjbsAZsQ2HL/V3WR55uT/feOklKCopyatkK1ItqB+CmwnQ28EoM rBeSbB4fst/ycedTgafQCJWDla7VyPQdAjX7WaADW3T8J0otjSkSI/B5WxjrTLFo U1S6DTOH+msB8bXfd3QRCMzThkqFcPqSc14Wpwc50gKFBurprbdXCJQU9n4yoc67 K1jUDQGFnINuR+Zy9cvwAFLBX7XLQmCL4cxAooyT7KvO/H8y8kVAwqcPkt+eQuQQ 6vJrkt6WTNDecRpEFgThGqSoB1FsA0Y= -----END CERTIFICATE-----Generated at Mon Nov 25 16:06:02 2024 by rpki-client on console-fra.rpki-client.org