$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/59e29263-b01b-36f4-82a8-ff51f23f4d64.roa File: 59e29263-b01b-36f4-82a8-ff51f23f4d64.roa (raw, json) Hash identifier: bRPFVjAr/WWzUM+J0oISiH2bPmLXO/ItavIQZOLZfxI= Subject key identifier: 10:D2:A0:80:D4:2D:A7:B9:20:3E:8F:84:E4:BD:84:9B:07:A7:F1:37 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847213B28A0FF90FE9FB61E84A0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/59e29263-b01b-36f4-82a8-ff51f23f4d64.roa Signing time: Sat 07 Sep 2024 01:00:31 +0000 ROA not before: Sat 07 Sep 2024 01:00:31 +0000 ROA not after: Fri 06 Dec 2024 02:00:31 +0000 asID: 36183 IP address blocks: 172.225.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:21:3b:28:a0:ff:90:fe:9f:b6:1e:84:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 7 01:00:31 2024 GMT Not After : Dec 6 02:00:31 2024 GMT Subject: CN=d3cfa387-b207-415d-8ae1-e54e42e506b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:f1:ff:51:24:b3:68:5b:8f:ac:9b:86:cf:f5: c1:03:8a:74:79:a1:c1:8a:4a:c8:7a:32:d5:3c:cd: 72:dd:fe:90:30:01:81:1b:0d:c0:d2:0f:17:51:47: 34:98:ce:e5:1a:bb:37:6a:70:43:53:0e:ec:3c:d0: 01:ad:49:3e:10:92:9a:c5:c2:d3:55:eb:3c:6a:54: e5:3d:d4:b0:6b:81:9d:d8:15:9f:42:fa:57:0e:51: 9a:50:f1:40:de:b2:58:d0:9f:e3:57:56:ba:72:fd: f9:d3:05:95:51:82:be:68:58:d5:de:07:92:d1:5a: 20:4f:67:ba:17:70:16:c0:e9:14:bc:07:da:f9:69: 3d:03:35:49:c9:c1:39:5e:93:3c:fd:d8:c7:dc:ea: 51:6c:22:bd:2a:d2:36:f0:fa:08:d6:41:70:11:2f: 0a:08:6d:49:e0:4a:94:44:e6:e5:fa:3e:67:0d:a3: 33:73:fd:7b:c8:2a:0e:55:e9:cd:e3:21:74:80:78: 8d:73:92:85:33:de:f9:b2:bc:9a:c7:91:90:da:02: dd:6e:d0:6e:d0:90:e7:20:56:0f:33:9c:75:fa:12: 41:17:e2:d3:87:e5:5a:62:f2:9a:21:a4:de:30:51: 70:39:4e:46:59:b3:ed:2f:59:81:7d:68:03:88:b5: a2:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:D2:A0:80:D4:2D:A7:B9:20:3E:8F:84:E4:BD:84:9B:07:A7:F1:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/59e29263-b01b-36f4-82a8-ff51f23f4d64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.237.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:a8:54:7f:0f:0a:57:bc:55:8b:84:30:22:5c:a9:24:6f:21: 19:fb:a8:91:1d:43:60:28:78:64:61:a1:95:8b:00:33:a9:93: 34:33:20:f5:88:4d:2d:5e:b8:80:e0:62:a4:1c:d4:9c:95:37: 4a:5c:af:9b:bd:36:ec:7c:2b:d5:66:7e:90:10:80:98:70:62: ef:c7:89:38:03:41:14:1e:e3:63:a5:40:c9:57:49:79:04:d0: 54:2b:a3:2c:2d:08:64:09:39:28:c9:74:75:b9:e5:0a:dc:9e: f2:d3:fe:94:92:ad:9f:e1:4b:36:e6:31:a3:a9:3a:45:44:0b: 04:03:fe:94:f6:8b:11:d7:a4:2f:6b:5d:25:bc:38:e4:63:6e: 0b:2b:c8:6f:09:a9:2e:b1:f7:9a:a1:44:6b:19:2c:8d:8f:44: 50:66:9a:c3:40:17:a7:07:ba:23:5d:50:39:00:8c:b3:07:3b: 39:40:fb:5b:c5:62:8f:9e:bd:41:b8:44:b1:17:05:ee:a6:ba: fb:a5:25:7f:46:28:de:a1:45:60:09:27:74:08:aa:3f:5a:e2: 8c:c0:c9:cd:be:d7:6e:cf:8a:1c:be:be:b5:ed:ac:0e:b9:a4: 4b:35:35:70:05:9e:db:9e:fd:59:e5:33:0e:f3:76:4a:1e:80: 52:ce:f3:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEchOyig/5D+n7YehKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MDkwNzAxMDAzMVoXDTI0MTIwNjAyMDAzMVowLzEtMCsGA1UEAxMk ZDNjZmEzODctYjIwNy00MTVkLThhZTEtZTU0ZTQyZTUwNmIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjfH/USSzaFuPrJuGz/XBA4p0eaHBikrIejLV PM1y3f6QMAGBGw3A0g8XUUc0mM7lGrs3anBDUw7sPNABrUk+EJKaxcLTVes8alTl PdSwa4Gd2BWfQvpXDlGaUPFA3rJY0J/jV1a6cv350wWVUYK+aFjV3geS0VogT2e6 F3AWwOkUvAfa+Wk9AzVJycE5XpM8/djH3OpRbCK9KtI28PoI1kFwES8KCG1J4EqU RObl+j5nDaMzc/17yCoOVenN4yF0gHiNc5KFM975sryax5GQ2gLdbtBu0JDnIFYP M5x1+hJBF+LTh+VaYvKaIaTeMFFwOU5GWbPtL1mBfWgDiLWifQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBDSoIDULae5ID6PhOS9hJsHp/E3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTllMjkyNjMtYjAxYi0z NmY0LTgyYTgtZmY1MWYyM2Y0ZDY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOHtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABqoVH8PCle8VYuEMCJcqSRvIRn7qJEdQ2AoeGRhoZWLADOpkzQzIPWI TS1euIDgYqQc1JyVN0pcr5u9Nux8K9VmfpAQgJhwYu/HiTgDQRQe42OlQMlXSXkE 0FQroywtCGQJOSjJdHW55QrcnvLT/pSSrZ/hSzbmMaOpOkVECwQD/pT2ixHXpC9r XSW8OORjbgsryG8JqS6x95qhRGsZLI2PRFBmmsNAF6cHuiNdUDkAjLMHOzlA+1vF Yo+evUG4RLEXBe6muvulJX9GKN6hRWAJJ3QIqj9a4ozAyc2+127Pihy+vrXtrA65 pEs1NXAFntue/VnlMw7zdkoegFLO8/Q= -----END CERTIFICATE-----Generated at Fri Nov 22 22:24:13 2024 by rpki-client on console-ams.rpki-client.org