$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3990d5c8-bb27-33dc-9243-49a9bd1f8170.roa File: 3990d5c8-bb27-33dc-9243-49a9bd1f8170.roa (raw, json) Hash identifier: wsp4MzdqntIl6B3ANdZ25gzm2+FqKy9+XIUome+mMgw= Subject key identifier: F5:1A:A7:6D:57:5C:93:A6:95:5C:8A:7D:52:E3:8E:36:1F:29:54:DB Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847362B6900B2153B50CA4B5DA0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3990d5c8-bb27-33dc-9243-49a9bd1f8170.roa Signing time: Sat 14 Sep 2024 13:00:41 +0000 ROA not before: Sat 14 Sep 2024 13:00:41 +0000 ROA not after: Fri 13 Dec 2024 14:00:41 +0000 asID: 36183 IP address blocks: 172.224.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:36:2b:69:00:b2:15:3b:50:ca:4b:5d:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 14 13:00:41 2024 GMT Not After : Dec 13 14:00:41 2024 GMT Subject: CN=0cb085d1-f080-4306-962c-0e5b07c5b322 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:83:4e:69:89:0e:d8:31:9a:f9:92:50:03:8d: 95:da:95:e4:0b:58:90:80:17:cc:ee:e0:6f:a9:12: 9a:a9:21:7c:3a:15:36:3f:b2:27:f4:2c:a6:cd:b5: 0a:af:61:cc:31:07:8f:d7:14:8a:aa:da:81:4f:04: c1:45:bb:d7:39:6a:fc:bc:e8:d3:d5:05:75:b5:a3: d6:c0:49:23:7b:11:9d:5c:73:69:b3:86:f3:df:d9: f3:af:0e:6a:6c:11:60:9f:58:bc:ae:f0:ef:7d:23: 6b:d9:4a:2d:aa:89:26:a1:c1:4d:ba:a6:b6:70:aa: 5c:cf:4b:2e:fa:db:e6:22:21:b6:bf:2c:41:62:88: 5f:d3:53:98:1b:a8:db:3f:da:bf:eb:75:ce:b7:06: 5c:e4:b7:18:fb:51:f8:a9:55:5c:a0:e9:06:41:60: ec:a2:70:92:29:46:8f:05:ba:c9:00:94:01:88:10: 20:51:3d:c2:e2:d1:3e:4e:2f:cc:12:50:f8:6d:9a: 9c:ed:e8:e7:e6:6b:e3:7c:07:6c:0a:cd:f8:d4:95: 0f:06:66:eb:51:7b:0b:46:84:7c:b4:60:78:db:04: 9a:57:3d:a8:b4:06:1a:57:c2:9c:54:a7:e0:b8:ea: 63:67:82:4d:7e:08:d3:6e:f5:db:d7:67:75:1c:63: 4e:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:1A:A7:6D:57:5C:93:A6:95:5C:8A:7D:52:E3:8E:36:1F:29:54:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3990d5c8-bb27-33dc-9243-49a9bd1f8170.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.224.31.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:0b:5a:d1:e3:3e:cd:2f:6b:9c:39:d2:7b:11:dc:5b:06:bd: 38:96:e5:ab:99:f1:03:e9:71:25:c9:5b:8f:53:23:cd:c5:85: 08:ba:06:9f:e4:7a:0b:71:3d:05:6d:50:dd:45:7d:dd:d3:d5: d8:26:a2:b1:6b:97:a0:22:54:98:bc:ef:06:d0:c0:24:5a:b3: fe:f9:3c:2a:08:d0:f9:7e:50:ea:d1:17:79:6c:5c:a4:83:32: 77:87:b0:e9:8d:5f:56:55:3a:0f:68:83:7d:08:4f:28:fa:f8: 57:18:27:63:16:aa:07:ac:ee:b4:31:ca:6d:6c:5e:55:8e:e4: ee:90:9d:0b:c8:55:48:0a:89:b5:76:47:4c:80:60:b9:ae:73: cd:48:ee:42:30:70:13:87:e4:ca:05:13:e7:b1:9b:f9:90:cb: c1:53:24:15:20:52:43:27:6b:a5:7e:a0:0a:12:af:80:83:d8: 56:4a:d1:40:b0:39:e9:4e:ee:40:e6:ae:10:81:7e:0b:f8:54: 56:ef:4b:4a:3e:b0:a6:02:40:ac:04:aa:a5:65:0f:2b:97:7a: 38:fc:2a:66:73:f8:3a:0b:d9:1a:31:41:97:7e:8d:73:84:a3: a3:10:e9:1c:a1:af:3c:5c:40:59:8c:58:8c:f9:d4:64:ed:85: 23:4d:97:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc2K2kAshU7UMpLXaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MDkxNDEzMDA0MVoXDTI0MTIxMzE0MDA0MVowLzEtMCsGA1UEAxMk MGNiMDg1ZDEtZjA4MC00MzA2LTk2MmMtMGU1YjA3YzViMzIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmINOaYkO2DGa+ZJQA42V2pXkC1iQgBfM7uBv qRKaqSF8OhU2P7In9CymzbUKr2HMMQeP1xSKqtqBTwTBRbvXOWr8vOjT1QV1taPW wEkjexGdXHNps4bz39nzrw5qbBFgn1i8rvDvfSNr2UotqokmocFNuqa2cKpcz0su +tvmIiG2vyxBYohf01OYG6jbP9q/63XOtwZc5LcY+1H4qVVcoOkGQWDsonCSKUaP BbrJAJQBiBAgUT3C4tE+Ti/MElD4bZqc7ejn5mvjfAdsCs341JUPBmbrUXsLRoR8 tGB42wSaVz2otAYaV8KcVKfguOpjZ4JNfgjTbvXb12d1HGNOcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPUap21XXJOmlVyKfVLjjjYfKVTbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzk5MGQ1YzgtYmIyNy0z M2RjLTkyNDMtNDlhOWJkMWY4MTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOAfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGgLWtHjPs0va5w50nsR3FsGvTiW5auZ8QPpcSXJW49TI83FhQi6Bp/k egtxPQVtUN1Ffd3T1dgmorFrl6AiVJi87wbQwCRas/75PCoI0Pl+UOrRF3lsXKSD MneHsOmNX1ZVOg9og30ITyj6+FcYJ2MWqges7rQxym1sXlWO5O6QnQvIVUgKibV2 R0yAYLmuc81I7kIwcBOH5MoFE+exm/mQy8FTJBUgUkMna6V+oAoSr4CD2FZK0UCw OelO7kDmrhCBfgv4VFbvS0o+sKYCQKwEqqVlDyuXejj8KmZz+DoL2RoxQZd+jXOE o6MQ6RyhrzxcQFmMWIz51GTthSNNl7s= -----END CERTIFICATE-----Generated at Fri Nov 22 22:26:46 2024 by rpki-client on console-fra.rpki-client.org