$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/48e306b5-ba01-34d3-9ccd-de90ee34e24e.roa File: 48e306b5-ba01-34d3-9ccd-de90ee34e24e.roa (raw, json) Hash identifier: TkY8yMmRT2OtZyWOhAGGOtZL/itU8ZDSqYFY7bea/FU= Subject key identifier: AD:69:AD:6D:7F:4F:4D:29:E4:CB:B5:92:27:EB:4E:56:4D:8D:47:75 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847362B689CFD927B673D9B7300 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/48e306b5-ba01-34d3-9ccd-de90ee34e24e.roa Signing time: Sat 14 Sep 2024 13:00:41 +0000 ROA not before: Sat 14 Sep 2024 13:00:41 +0000 ROA not after: Fri 13 Dec 2024 14:00:41 +0000 asID: 36183 IP address blocks: 172.224.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:36:2b:68:9c:fd:92:7b:67:3d:9b:73:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 14 13:00:41 2024 GMT Not After : Dec 13 14:00:41 2024 GMT Subject: CN=35134345-d6b8-403d-9fb0-b10e9e1e6351 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:29:a5:a3:db:e1:87:c9:c7:43:17:5b:95:0e: 96:22:7b:30:99:dd:e9:cd:8a:e1:83:44:b4:30:3d: 28:b8:2d:63:16:09:d1:2a:f6:ea:fa:ad:52:db:30: 37:ac:9a:fd:31:72:a8:1b:0b:2e:79:73:97:8b:cb: a3:66:03:d6:05:c5:45:09:5a:41:45:38:b4:6d:b1: eb:79:fb:e0:c3:67:0a:0e:78:5f:b1:d5:2f:3d:b7: 94:e1:bf:53:cc:39:7d:5f:60:d8:56:44:53:11:de: 59:8a:4e:60:35:50:cd:37:97:14:f3:48:92:d9:86: 20:99:07:34:d0:cc:90:44:1d:5d:e8:e1:78:71:d3: 0d:f4:fd:a9:47:b2:96:8e:f4:e6:df:0b:fe:e1:99: b4:c3:04:c8:06:61:3f:84:30:9f:d1:8d:ef:8b:65: e1:34:96:c9:b3:8a:51:73:fc:1c:19:00:2f:8b:93: da:fd:3f:76:d9:55:de:26:28:96:e1:bb:04:11:eb: 23:02:39:ef:45:e9:de:0a:4e:33:fc:19:55:0f:65: b1:ea:77:5d:dd:ae:48:eb:a8:d6:8a:5f:8f:c9:51: 48:d4:0d:fc:55:b5:e3:f0:fc:20:99:bd:4b:08:65: fa:c5:50:52:fb:66:86:5b:28:3e:49:c1:51:be:f5: 6f:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:69:AD:6D:7F:4F:4D:29:E4:CB:B5:92:27:EB:4E:56:4D:8D:47:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/48e306b5-ba01-34d3-9ccd-de90ee34e24e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.224.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:66:c0:ed:ce:d2:72:b2:98:d6:39:69:dd:e3:2c:8b:82:87: 17:cc:d5:92:42:97:41:26:2e:34:3d:bf:be:42:cf:6e:b6:9b: ef:e3:cb:bb:41:b5:ec:f2:b5:ba:79:9f:26:e5:96:ea:f8:b2: 52:77:fa:c4:20:f6:79:3a:2e:b3:61:1b:c9:63:ae:cb:ee:aa: 25:30:fd:95:40:9e:d1:05:41:12:12:3d:b1:4b:60:d9:86:4e: 91:c1:de:dc:c6:80:45:6e:ff:60:38:03:4d:a8:0a:94:e5:bf: 13:87:c9:5b:24:10:dc:e2:7f:72:ca:53:80:4f:0c:44:56:83: 5d:33:aa:87:d4:a0:16:fd:b2:93:fb:79:b4:e4:cd:be:9b:8e: 86:96:3c:c5:7b:55:fc:f1:0c:de:3d:70:71:ac:6f:d2:60:05: c1:a3:50:66:fd:01:18:62:ff:69:21:ec:83:6f:ea:f7:de:f8: a5:22:e2:de:9d:62:b6:42:cb:7b:b4:da:cb:e5:2c:3f:4e:e1: f7:36:6c:af:37:7c:e8:ef:cc:58:f5:8b:0c:35:eb:d6:28:29: 78:19:0c:a6:18:65:4c:52:d7:95:6b:49:96:19:41:d9:13:86: 7f:3f:82:7b:86:80:24:7a:58:4b:7a:d8:ca:fc:53:45:a6:e1: ef:f3:4a:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc2K2ic/ZJ7Zz2bcwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MDkxNDEzMDA0MVoXDTI0MTIxMzE0MDA0MVowLzEtMCsGA1UEAxMk MzUxMzQzNDUtZDZiOC00MDNkLTlmYjAtYjEwZTllMWU2MzUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlymlo9vhh8nHQxdblQ6WInswmd3pzYrhg0S0 MD0ouC1jFgnRKvbq+q1S2zA3rJr9MXKoGwsueXOXi8ujZgPWBcVFCVpBRTi0bbHr efvgw2cKDnhfsdUvPbeU4b9TzDl9X2DYVkRTEd5Zik5gNVDNN5cU80iS2YYgmQc0 0MyQRB1d6OF4cdMN9P2pR7KWjvTm3wv+4Zm0wwTIBmE/hDCf0Y3vi2XhNJbJs4pR c/wcGQAvi5Pa/T922VXeJiiW4bsEEesjAjnvReneCk4z/BlVD2Wx6ndd3a5I66jW il+PyVFI1A38VbXj8Pwgmb1LCGX6xVBS+2aGWyg+ScFRvvVvSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK1prW1/T00p5Mu1kifrTlZNjUd1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDhlMzA2YjUtYmEwMS0z NGQzLTljY2QtZGU5MGVlMzRlMjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOAVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIxmwO3O0nKymNY5ad3jLIuChxfM1ZJCl0EmLjQ9v75Cz262m+/jy7tB tezytbp5nybllur4slJ3+sQg9nk6LrNhG8ljrsvuqiUw/ZVAntEFQRISPbFLYNmG TpHB3tzGgEVu/2A4A02oCpTlvxOHyVskENzif3LKU4BPDERWg10zqofUoBb9spP7 ebTkzb6bjoaWPMV7VfzxDN49cHGsb9JgBcGjUGb9ARhi/2kh7INv6vfe+KUi4t6d YrZCy3u02svlLD9O4fc2bK83fOjvzFj1iww169YoKXgZDKYYZUxS15VrSZYZQdkT hn8/gnuGgCR6WEt62Mr8U0Wm4e/zSo0= -----END CERTIFICATE-----Generated at Fri Nov 22 22:24:06 2024 by rpki-client on console-ams.rpki-client.org