$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3f82faa9-b5df-3dda-92dc-d45bef48e94a.roa File: 3f82faa9-b5df-3dda-92dc-d45bef48e94a.roa (raw, json) Hash identifier: YrRESs539MpUUbD5WbVJ4/zkxwtyKtz4T0K6IKreFgw= Subject key identifier: DD:D6:3E:EB:D7:7B:87:11:A2:6B:FD:CF:27:6C:3A:6B:3B:33:31:C9 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858473095DC3CE38FE0CD422DFB40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3f82faa9-b5df-3dda-92dc-d45bef48e94a.roa Signing time: Thu 12 Sep 2024 13:00:41 +0000 ROA not before: Thu 12 Sep 2024 13:00:41 +0000 ROA not after: Wed 11 Dec 2024 14:00:41 +0000 asID: 63949 IP address blocks: 172.235.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:30:95:dc:3c:e3:8f:e0:cd:42:2d:fb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 12 13:00:41 2024 GMT Not After : Dec 11 14:00:41 2024 GMT Subject: CN=93e7ebea-9590-4701-baea-95f4eee414f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:27:22:f7:fd:9e:f3:8f:44:e7:d8:8e:2e:da: 54:ab:ab:7a:d7:42:ce:98:39:10:22:cf:07:b5:1e: 4d:f1:5a:d6:c7:e6:c9:de:a9:8a:5b:99:74:06:a9: 5c:68:66:5d:a5:e2:7a:b0:f0:a6:6b:c9:ca:5f:80: 4e:76:db:47:03:d8:78:cb:25:69:c5:5b:2f:ae:77: 00:81:4e:8c:bf:d3:d4:57:ff:7e:77:d5:84:8b:4e: 7f:84:08:33:f6:6f:17:ba:93:00:b0:48:0a:af:05: 36:33:bf:16:77:42:6b:c8:8e:f1:e3:71:8f:e0:b4: fa:4b:44:f6:13:80:28:0b:43:45:76:64:c4:47:fb: ac:29:3d:3d:a5:73:0c:5d:a5:4d:d7:01:c4:65:8c: f3:5a:d2:a0:db:98:16:01:2b:32:09:39:cc:63:ba: 55:e4:52:0e:b4:dd:c0:9b:47:d2:20:f8:74:7d:8a: 20:e0:0c:67:6a:78:ba:c6:f2:56:b9:3f:f7:83:88: 0c:80:fb:9a:56:1a:79:fe:9b:22:88:cd:a5:85:80: 0e:da:fb:61:9a:f7:86:a5:ae:d8:8c:61:19:11:a7: 1d:5e:20:b1:51:37:75:25:4b:0b:0f:57:5f:7b:99: a2:7d:b2:90:62:47:51:b1:ec:1a:90:e8:81:73:52: b4:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:D6:3E:EB:D7:7B:87:11:A2:6B:FD:CF:27:6C:3A:6B:3B:33:31:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3f82faa9-b5df-3dda-92dc-d45bef48e94a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.235.101.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:03:89:b4:a7:e2:13:47:45:00:55:77:7d:ed:86:d4:cb:28: e9:5b:7b:0c:a2:64:f4:02:6d:88:71:a5:83:e6:96:ac:c2:52: f6:7e:d9:76:0f:19:75:5b:59:4a:51:ee:04:5d:bc:f6:7e:3f: e5:79:70:ff:78:ad:8a:75:83:28:ba:33:df:ca:39:3a:14:d8: bf:2e:00:e2:00:20:05:78:32:c8:0f:02:2b:36:dc:b9:fb:00: 1d:5f:2c:50:4a:bb:78:de:d6:dc:b8:05:eb:d8:6f:8b:32:18: 8d:20:86:e5:f6:67:52:ed:6a:0c:89:20:d7:d4:09:03:70:ec: a7:73:70:8a:0b:80:dd:f9:8e:df:dd:f8:1a:04:84:7e:a9:a2: 8a:ca:99:7d:e0:ba:cf:9b:9c:67:9a:bd:c1:cc:66:47:fd:b6: 20:8f:9d:a4:5d:73:00:44:b3:fe:17:b9:7e:2f:b2:a2:5b:cb: 64:f4:0e:70:4c:ae:9c:88:92:f9:b6:35:92:a4:db:10:a6:2e: 4c:15:93:c9:d0:08:0f:96:15:9c:3c:4c:27:99:a9:e9:cb:1d: a4:61:1d:b5:ad:d9:2b:67:28:63:0b:75:e1:ec:cb:2f:56:94: 93:72:58:6c:fa:a2:1f:23:d6:ed:ec:e3:e7:9f:6c:6e:9e:d4: f9:34:40:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcwldw844/gzUIt+0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MDkxMjEzMDA0MVoXDTI0MTIxMTE0MDA0MVowLzEtMCsGA1UEAxMk OTNlN2ViZWEtOTU5MC00NzAxLWJhZWEtOTVmNGVlZTQxNGY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgSci9/2e849E59iOLtpUq6t610LOmDkQIs8H tR5N8VrWx+bJ3qmKW5l0BqlcaGZdpeJ6sPCma8nKX4BOdttHA9h4yyVpxVsvrncA gU6Mv9PUV/9+d9WEi05/hAgz9m8XupMAsEgKrwU2M78Wd0JryI7x43GP4LT6S0T2 E4AoC0NFdmTER/usKT09pXMMXaVN1wHEZYzzWtKg25gWASsyCTnMY7pV5FIOtN3A m0fSIPh0fYog4Axnani6xvJWuT/3g4gMgPuaVhp5/psiiM2lhYAO2vthmveGpa7Y jGEZEacdXiCxUTd1JUsLD1dfe5mifbKQYkdRsewakOiBc1K0wQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN3WPuvXe4cRomv9zydsOms7MzHJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2Y4MmZhYTktYjVkZi0z ZGRhLTkyZGMtZDQ1YmVmNDhlOTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOtlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAYDibSn4hNHRQBVd33thtTLKOlbewyiZPQCbYhxpYPmlqzCUvZ+2XYP GXVbWUpR7gRdvPZ+P+V5cP94rYp1gyi6M9/KOToU2L8uAOIAIAV4MsgPAis23Ln7 AB1fLFBKu3je1ty4BevYb4syGI0ghuX2Z1LtagyJINfUCQNw7KdzcIoLgN35jt/d +BoEhH6poorKmX3gus+bnGeavcHMZkf9tiCPnaRdcwBEs/4XuX4vsqJby2T0DnBM rpyIkvm2NZKk2xCmLkwVk8nQCA+WFZw8TCeZqenLHaRhHbWt2StnKGMLdeHsyy9W lJNyWGz6oh8j1u3s4+efbG6e1Pk0QIQ= -----END CERTIFICATE-----Generated at Mon Nov 25 16:06:15 2024 by rpki-client on console-fra.rpki-client.org