$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/64918eb3-b1cd-3c50-b0de-c331fcd9b4d5.roa File: 64918eb3-b1cd-3c50-b0de-c331fcd9b4d5.roa (raw, json) Hash identifier: KiheAIoG/4YCG85S3IVqNxVUne93JBUmZFYda7O2uhk= Subject key identifier: EC:02:F7:7C:C3:8C:24:B2:2D:30:2E:51:D4:00:67:22:D1:99:9E:8F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847FC7F9D711CB57692A6BEE500 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/64918eb3-b1cd-3c50-b0de-c331fcd9b4d5.roa Signing time: Sun 24 Nov 2024 14:00:39 +0000 ROA not before: Sun 24 Nov 2024 14:00:39 +0000 ROA not after: Sat 22 Feb 2025 14:00:39 +0000 asID: 36183 IP address blocks: 172.225.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:fc:7f:9d:71:1c:b5:76:92:a6:be:e5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 24 14:00:39 2024 GMT Not After : Feb 22 14:00:39 2025 GMT Subject: CN=582f3ac8-df82-4d7b-a068-c2e7cc4853bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:71:0b:f8:57:f6:5d:c9:dc:9b:f7:2f:e2:0d: 76:1c:14:de:d6:03:b1:ba:c1:b6:f0:d9:71:97:7e: 6a:a4:ac:49:58:ed:ae:e0:83:91:f5:a7:5c:2f:b1: 1f:ac:f8:c9:5f:88:fd:de:76:37:27:92:e1:47:55: 42:a5:9a:f2:25:2b:25:20:71:44:69:5e:f5:6d:35: 27:53:03:cb:fc:7c:d1:b4:8e:43:1b:dc:7d:b4:07: 31:46:02:65:c6:8a:61:20:1d:80:6b:e6:49:82:80: 91:27:02:f7:59:89:c9:97:49:fd:53:82:f4:19:6a: fd:ff:73:f0:0c:2d:cf:27:11:37:1d:5a:b7:e9:5f: f7:25:ce:38:e4:f1:f5:2a:22:2d:c2:c6:31:a4:38: ed:8f:04:14:fd:13:a8:07:9a:bd:bf:52:ae:12:95: 2b:13:c0:81:d0:b5:43:3b:72:37:fd:97:32:57:a6: 2b:10:6c:26:4b:3f:84:fa:2d:d2:85:be:b6:f5:32: 77:fc:e1:a3:f8:91:f6:e5:7a:c4:6c:b0:24:60:35: 1b:70:c3:0f:ef:cf:9c:26:c9:1b:21:39:67:7b:20: a3:25:69:9f:ee:54:fb:a1:54:e6:cb:0f:f2:5e:7a: 49:d8:bb:3f:31:02:b1:13:ab:de:87:f5:a8:7d:56: c1:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:02:F7:7C:C3:8C:24:B2:2D:30:2E:51:D4:00:67:22:D1:99:9E:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/64918eb3-b1cd-3c50-b0de-c331fcd9b4d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:86:bb:86:e6:e2:e6:7b:16:7f:56:85:f9:bc:e8:e8:3d:39: 37:d8:bb:24:a4:8c:bc:13:88:86:19:2b:0f:d0:75:ef:40:ef: b9:06:83:1d:28:59:18:23:27:09:fe:e4:05:42:87:2b:67:81: 89:10:61:5b:4b:3e:27:05:60:ce:42:d4:1d:b6:65:ac:6f:a6: 58:c4:72:3a:c3:14:79:bc:4f:92:81:9e:15:38:e0:c7:04:76: c3:f3:2e:0f:cc:35:a7:42:cd:95:90:47:e9:3c:90:b4:4c:c8: b1:c1:c9:2f:13:ad:2f:e7:1d:da:8e:fb:f0:e0:dd:3c:4b:bb: 5d:39:c3:f1:7d:61:67:92:32:c7:1c:18:a4:58:e7:f7:5f:6a: 12:00:35:93:f6:6f:0a:16:69:fc:55:9e:ed:97:2c:d2:8e:77: 0d:7c:ea:c6:bb:04:20:d0:6c:62:73:e2:04:9f:37:c8:9a:89: df:2e:15:c8:84:0b:6c:a8:ff:70:85:fb:86:22:d3:79:14:e6: 2c:c1:6e:1f:68:14:0e:80:55:ad:f5:58:a0:58:8d:46:69:2f: 88:1c:9b:b1:2e:b2:06:24:f4:fa:bd:67:44:b2:b1:12:01:28: 88:d2:ce:4e:2c:82:bb:67:05:e2:76:3e:ff:7d:8a:63:fb:c9: 65:4d:34:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEf8f51xHLV2kqa+5QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTEyNDE0MDAzOVoXDTI1MDIyMjE0MDAzOVowLzEtMCsGA1UEAxMk NTgyZjNhYzgtZGY4Mi00ZDdiLWEwNjgtYzJlN2NjNDg1M2JjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXEL+Ff2Xcncm/cv4g12HBTe1gOxusG28Nlx l35qpKxJWO2u4IOR9adcL7EfrPjJX4j93nY3J5LhR1VCpZryJSslIHFEaV71bTUn UwPL/HzRtI5DG9x9tAcxRgJlxophIB2Aa+ZJgoCRJwL3WYnJl0n9U4L0GWr9/3Pw DC3PJxE3HVq36V/3Jc445PH1KiItwsYxpDjtjwQU/ROoB5q9v1KuEpUrE8CB0LVD O3I3/ZcyV6YrEGwmSz+E+i3Shb629TJ3/OGj+JH25XrEbLAkYDUbcMMP78+cJskb ITlneyCjJWmf7lT7oVTmyw/yXnpJ2Ls/MQKxE6veh/WofVbBHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOwC93zDjCSyLTAuUdQAZyLRmZ6PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjQ5MThlYjMtYjFjZC0z YzUwLWIwZGUtYzMzMWZjZDliNGQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOEMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHWGu4bm4uZ7Fn9Whfm86Og9OTfYuySkjLwTiIYZKw/Qde9A77kGgx0o WRgjJwn+5AVChytngYkQYVtLPicFYM5C1B22ZaxvpljEcjrDFHm8T5KBnhU44McE dsPzLg/MNadCzZWQR+k8kLRMyLHByS8TrS/nHdqO+/Dg3TxLu105w/F9YWeSMscc GKRY5/dfahIANZP2bwoWafxVnu2XLNKOdw186sa7BCDQbGJz4gSfN8iaid8uFciE C2yo/3CF+4Yi03kU5izBbh9oFA6AVa31WKBYjUZpL4gcm7EusgYk9Pq9Z0SysRIB KIjSzk4sgrtnBeJ2Pv99imP7yWVNNEM= -----END CERTIFICATE-----Generated at Tue Nov 26 05:12:49 2024 by rpki-client on console-fra.rpki-client.org