$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/63a7a92d-f0ca-3950-a0c1-625e869e39b3.roa File: 63a7a92d-f0ca-3950-a0c1-625e869e39b3.roa (raw, json) Hash identifier: 4yTmtkAQb8X3onaG/2j7K0G+DmT/Sza7XALTmVlYZlU= Subject key identifier: BA:1A:0A:7F:B1:52:50:C2:5D:56:A3:8B:E3:4C:84:6E:36:2F:D3:8C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847362B6804A879F40D22B0E300 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/63a7a92d-f0ca-3950-a0c1-625e869e39b3.roa Signing time: Sat 14 Sep 2024 13:00:41 +0000 ROA not before: Sat 14 Sep 2024 13:00:41 +0000 ROA not after: Fri 13 Dec 2024 14:00:41 +0000 asID: 36183 IP address blocks: 172.224.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:36:2b:68:04:a8:79:f4:0d:22:b0:e3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 14 13:00:41 2024 GMT Not After : Dec 13 14:00:41 2024 GMT Subject: CN=8d24b102-0453-485f-98e6-0cf993fa5781 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:8f:72:6d:1d:4c:c5:45:c3:32:53:71:04:6d: c3:19:b8:09:d4:c1:a2:cb:0c:8d:34:79:d6:74:2e: 92:ad:7e:55:20:4a:73:93:59:24:55:69:10:68:37: d9:40:19:2a:60:57:a2:fa:2a:d7:9a:0b:0c:ec:64: 21:d3:d6:02:b3:33:52:7c:2d:4f:a6:1b:23:20:50: e0:0b:b6:3e:5f:4d:7d:2d:13:60:46:96:1b:76:35: b7:98:d0:37:e6:57:c1:21:b3:20:98:60:57:56:ca: 81:14:0b:47:9f:ca:de:33:49:88:44:89:30:99:06: 40:77:bd:bf:8c:71:a1:52:e5:fd:35:e3:58:50:35: c2:0a:88:52:b5:f4:4c:c6:57:e1:a6:52:18:14:66: 5f:e7:3d:b1:b3:5d:92:3f:2d:61:13:00:31:48:d2: 55:54:d4:e5:31:08:75:a4:5b:5b:bb:5e:dd:89:ee: d8:5c:6c:d8:79:c1:f9:bb:6b:29:f0:4c:81:90:a2: 62:eb:05:31:a4:38:72:5c:25:1e:77:c8:2e:bb:02: 76:02:b9:0d:2a:39:b8:15:52:6a:a4:c0:25:bd:f8: 36:26:32:f9:e6:a8:e8:48:25:9c:3b:19:27:da:e4: da:87:46:cf:bd:60:7d:c3:37:0a:ed:fc:e1:54:3f: 5d:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:1A:0A:7F:B1:52:50:C2:5D:56:A3:8B:E3:4C:84:6E:36:2F:D3:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/63a7a92d-f0ca-3950-a0c1-625e869e39b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.224.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:01:23:63:09:03:ed:39:e8:fa:52:0e:6a:63:da:51:d5:3e: 0d:c3:4f:1f:03:43:db:ca:03:e2:b2:d8:fd:1c:06:89:91:ac: 9f:dd:0a:55:2c:33:78:ae:30:44:0a:3b:f1:71:d1:61:9a:01: 74:27:ea:8b:a0:e0:42:bf:fa:04:ad:6c:2c:ab:44:e6:9a:7b: 63:00:c8:97:c1:91:fa:80:e5:1c:3c:52:e9:c4:ab:65:18:be: 5b:25:0d:a7:cd:fb:71:a8:c5:32:e1:49:8d:0f:76:57:be:a0: f7:88:a1:0a:07:29:6d:ab:5a:21:93:ee:3c:f0:98:b1:93:96: 6a:5b:b8:68:1c:ec:c4:a3:ad:e4:73:3c:13:31:04:83:31:cd: 3c:0e:cb:96:56:43:ba:cf:34:38:91:09:2c:a6:ab:7c:06:21: 8c:aa:54:db:66:85:1a:bf:d0:09:17:fe:ae:b9:3b:d2:ac:aa: 26:36:9d:90:8b:f4:07:3a:fb:f1:28:19:18:fc:e4:a2:be:f3: 0f:7a:c6:8a:a8:7b:aa:c2:9a:de:7c:5a:38:7b:f6:80:bb:47: b1:98:0f:5f:10:0a:90:bf:2f:ba:ff:ca:15:65:20:77:4b:ef: d6:99:42:6c:1e:30:d7:da:8b:c8:87:97:f3:f5:18:1b:b6:0a: ca:e7:cc:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc2K2gEqHn0DSKw4wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MDkxNDEzMDA0MVoXDTI0MTIxMzE0MDA0MVowLzEtMCsGA1UEAxMk OGQyNGIxMDItMDQ1My00ODVmLTk4ZTYtMGNmOTkzZmE1NzgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgI9ybR1MxUXDMlNxBG3DGbgJ1MGiywyNNHnW dC6SrX5VIEpzk1kkVWkQaDfZQBkqYFei+irXmgsM7GQh09YCszNSfC1PphsjIFDg C7Y+X019LRNgRpYbdjW3mNA35lfBIbMgmGBXVsqBFAtHn8reM0mIRIkwmQZAd72/ jHGhUuX9NeNYUDXCCohStfRMxlfhplIYFGZf5z2xs12SPy1hEwAxSNJVVNTlMQh1 pFtbu17die7YXGzYecH5u2sp8EyBkKJi6wUxpDhyXCUed8guuwJ2ArkNKjm4FVJq pMAlvfg2JjL55qjoSCWcOxkn2uTah0bPvWB9wzcK7fzhVD9d0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLoaCn+xUlDCXVaji+NMhG42L9OMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjNhN2E5MmQtZjBjYS0z OTUwLWEwYzEtNjI1ZTg2OWUzOWIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOCrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACYBI2MJA+056PpSDmpj2lHVPg3DTx8DQ9vKA+Ky2P0cBomRrJ/dClUs M3iuMEQKO/Fx0WGaAXQn6oug4EK/+gStbCyrROaae2MAyJfBkfqA5Rw8UunEq2UY vlslDafN+3GoxTLhSY0Pdle+oPeIoQoHKW2rWiGT7jzwmLGTlmpbuGgc7MSjreRz PBMxBIMxzTwOy5ZWQ7rPNDiRCSymq3wGIYyqVNtmhRq/0AkX/q65O9KsqiY2nZCL 9Ac6+/EoGRj85KK+8w96xoqoe6rCmt58Wjh79oC7R7GYD18QCpC/L7r/yhVlIHdL 79aZQmweMNfai8iHl/P1GBu2CsrnzDc= -----END CERTIFICATE-----Generated at Tue Nov 26 05:30:34 2024 by rpki-client on console-ams.rpki-client.org