$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/455e05c3-1c6e-3797-a5b8-7cec6b18b717.roa File: 455e05c3-1c6e-3797-a5b8-7cec6b18b717.roa (raw, json) Hash identifier: iDU05PfAG+P/0ZVTfj+Ed9ze3PL1W5E2n4yOPeH4jMc= Subject key identifier: 33:68:6D:80:2D:DB:1D:66:DC:8F:5C:AA:00:AD:39:61:6C:42:4D:32 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584797E141C2ED3702D374A1DB80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/455e05c3-1c6e-3797-a5b8-7cec6b18b717.roa Signing time: Sat 19 Oct 2024 13:00:42 +0000 ROA not before: Sat 19 Oct 2024 13:00:42 +0000 ROA not after: Fri 17 Jan 2025 14:00:42 +0000 asID: 63949 IP address blocks: 172.233.160.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:97:e1:41:c2:ed:37:02:d3:74:a1:db:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 19 13:00:42 2024 GMT Not After : Jan 17 14:00:42 2025 GMT Subject: CN=bef27389-4b0f-4649-921c-aadc0bdcf772 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:3d:ad:e5:a0:8d:72:ea:76:c7:fc:c7:9d:3c: 12:9f:a8:f0:15:74:5d:fc:b4:d9:65:c5:4a:57:3c: c0:22:7f:3d:98:5d:78:d6:70:b1:b8:fb:fe:4d:3a: d8:22:19:4b:9e:f2:cf:71:6b:c3:59:f9:f7:36:3c: 7e:94:d3:8d:89:1b:75:39:62:7b:c0:11:32:9e:ef: a4:05:3c:ca:9c:e7:e3:71:02:18:27:c4:30:b0:d3: ff:7c:7b:f3:7c:fb:dc:3c:15:6a:46:3b:10:46:db: 8b:b4:ca:c3:c5:c6:0e:ff:11:a7:56:1f:ae:90:a7: 9b:89:3b:99:4c:4e:68:ea:69:54:da:37:b1:72:24: 2c:aa:62:2c:ef:52:47:3d:48:c5:6f:fe:58:92:2b: a0:6e:81:06:c2:34:8d:f3:c2:fe:ff:bf:31:36:59: ae:75:c8:b9:b8:14:d3:5f:4c:bb:82:b4:7a:e9:06: 7a:0f:33:a4:f8:1b:37:db:54:15:5a:3d:85:ab:98: fb:d0:02:ca:a7:cc:25:3b:f1:6b:d6:4f:40:13:51: 84:dd:66:ff:f9:35:00:f0:6e:e5:1c:3f:00:12:21: cd:42:f9:64:c9:40:bb:29:35:63:8e:01:20:bc:a7: fd:6b:19:91:99:21:a8:7a:96:6f:a0:a8:c2:21:9e: 17:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:68:6D:80:2D:DB:1D:66:DC:8F:5C:AA:00:AD:39:61:6C:42:4D:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/455e05c3-1c6e-3797-a5b8-7cec6b18b717.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.233.160.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:5a:9d:31:4b:d3:f0:f4:95:ff:78:a4:12:68:77:75:68:32: 78:07:5e:f7:46:f9:3e:3e:b2:9b:90:14:9c:f5:7c:42:60:0a: e8:66:07:84:20:34:72:e9:fd:57:b1:9d:07:c1:9b:6f:be:73: 39:f7:30:f2:22:6c:31:36:15:03:7c:44:cf:a6:0a:06:63:78: 49:f4:e3:ed:15:43:6e:15:01:82:16:e6:2d:a7:e1:55:f4:7e: b4:53:8d:9e:0a:0e:e4:8b:f1:d0:bd:c1:f4:2f:b2:9a:1d:a7: 29:4c:02:d6:2f:46:55:d4:38:2d:41:bd:f7:b9:a8:e6:b0:dc: 3e:85:63:69:c6:32:52:a3:db:9b:3f:0e:49:9c:f8:b2:11:89: 83:d1:18:ad:84:62:70:de:5c:65:5c:a3:2c:a0:38:78:52:21: eb:d5:82:48:40:6c:90:4a:ec:c8:7d:d1:10:27:f0:58:be:4e: 56:ab:ec:9b:c1:72:c2:6f:18:3f:89:a9:e8:74:83:67:28:bd: 72:24:bc:3c:c6:99:ca:a7:1b:ee:b1:e9:24:bf:f1:ef:59:3d: cf:1b:f7:0d:95:98:b4:de:cc:26:83:21:ae:ef:b8:0e:09:e8: 30:e5:91:15:b9:29:a7:15:e4:8f:03:79:8a:6c:ff:da:07:e9: ee:ea:cb:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeX4UHC7TcC03Sh24AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTAxOTEzMDA0MloXDTI1MDExNzE0MDA0MlowLzEtMCsGA1UEAxMk YmVmMjczODktNGIwZi00NjQ5LTkyMWMtYWFkYzBiZGNmNzcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqT2t5aCNcup2x/zHnTwSn6jwFXRd/LTZZcVK VzzAIn89mF141nCxuPv+TTrYIhlLnvLPcWvDWfn3Njx+lNONiRt1OWJ7wBEynu+k BTzKnOfjcQIYJ8QwsNP/fHvzfPvcPBVqRjsQRtuLtMrDxcYO/xGnVh+ukKebiTuZ TE5o6mlU2jexciQsqmIs71JHPUjFb/5YkiugboEGwjSN88L+/78xNlmudci5uBTT X0y7grR66QZ6DzOk+Bs321QVWj2Fq5j70ALKp8wlO/Fr1k9AE1GE3Wb/+TUA8G7l HD8AEiHNQvlkyUC7KTVjjgEgvKf9axmRmSGoepZvoKjCIZ4XrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDNobYAt2x1m3I9cqgCtOWFsQk0yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDU1ZTA1YzMtMWM2ZS0z Nzk3LWE1YjgtN2NlYzZiMThiNzE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFrOmgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADBanTFL0/D0lf94pBJod3VoMngHXvdG+T4+spuQFJz1fEJgCuhmB4Qg NHLp/VexnQfBm2++czn3MPIibDE2FQN8RM+mCgZjeEn04+0VQ24VAYIW5i2n4VX0 frRTjZ4KDuSL8dC9wfQvspodpylMAtYvRlXUOC1Bvfe5qOaw3D6FY2nGMlKj25s/ Dkmc+LIRiYPRGK2EYnDeXGVcoyygOHhSIevVgkhAbJBK7Mh90RAn8Fi+Tlar7JvB csJvGD+Jqeh0g2covXIkvDzGmcqnG+6x6SS/8e9ZPc8b9w2VmLTezCaDIa7vuA4J 6DDlkRW5KacV5I8DeYps/9oH6e7qy8w= -----END CERTIFICATE-----Generated at Fri Nov 22 04:46:52 2024 by rpki-client on console-ams.rpki-client.org