$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a68f8ddb-7db1-3734-bfd0-1cf7a8089c79.roa File: a68f8ddb-7db1-3734-bfd0-1cf7a8089c79.roa (raw, json) Hash identifier: 9/PrpNM3Onn8nX4lH0RZlYYHUYV1fMSniQobz8tyB4c= Subject key identifier: 5A:A8:80:83:47:8F:DA:30:B1:62:36:3B:5D:03:C2:19:42:4C:13:0E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847D999EF896CC21B5AACF45080 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a68f8ddb-7db1-3734-bfd0-1cf7a8089c79.roa Signing time: Tue 12 Nov 2024 02:00:27 +0000 ROA not before: Tue 12 Nov 2024 02:00:27 +0000 ROA not after: Mon 10 Feb 2025 02:00:27 +0000 asID: 63949 IP address blocks: 172.232.96.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:d9:99:ef:89:6c:c2:1b:5a:ac:f4:50:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 12 02:00:27 2024 GMT Not After : Feb 10 02:00:27 2025 GMT Subject: CN=36834082-6678-4ac5-a09f-0c10f0839a7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:5a:39:b5:59:29:dc:97:8f:1f:ec:84:85:e8: d7:74:84:4c:2e:6a:3c:70:a5:97:14:d3:3e:8c:b2: 95:13:f3:b9:22:fd:50:fe:b8:3f:cb:b5:35:d1:17: 11:47:da:e4:d4:b4:53:9b:b2:19:e2:3f:7d:fa:c9: 21:54:55:61:32:0c:ba:78:c4:41:5f:e7:ea:d3:71: ca:20:d6:c0:3c:7a:87:07:23:60:52:9c:17:48:16: 29:9f:bb:3b:85:f9:35:36:c8:4b:f9:e0:3b:29:82: 17:9d:cb:f4:cd:32:ff:73:ce:9b:09:73:7f:e8:00: e1:15:91:62:fc:57:80:55:f3:be:a8:b9:fe:a4:9b: 05:f2:08:f6:ad:24:e8:df:2d:cf:9b:18:3c:76:f5: b2:81:e3:ac:ac:58:7e:ad:52:72:c4:db:1f:2e:10: 0a:9f:09:fe:7f:1a:3e:95:22:4b:ba:f6:2a:ef:5d: e0:b3:c9:d0:80:20:b6:5a:73:19:b7:64:5f:a5:6c: 22:75:48:9c:3d:19:1d:ec:76:b9:8c:ac:95:84:da: 16:f2:b2:05:96:3d:9a:22:18:e5:a9:66:2b:83:70: d1:60:02:59:37:cf:35:f0:6e:cc:1a:f7:c7:be:9a: 93:b2:1c:09:f1:73:b0:82:f5:dc:6d:87:01:bf:c6: 38:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:A8:80:83:47:8F:DA:30:B1:62:36:3B:5D:03:C2:19:42:4C:13:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a68f8ddb-7db1-3734-bfd0-1cf7a8089c79.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.232.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:6f:1d:ba:1c:53:50:6a:66:7b:de:b2:e0:88:56:df:b1:a0: 9d:4e:a1:e7:fd:bb:77:c7:4a:aa:25:5e:2e:bb:1b:87:14:3b: 06:f0:67:f4:c0:3d:84:07:31:df:aa:9c:05:d3:69:39:4b:23: 2e:83:60:11:bc:2c:69:10:ac:29:1e:1a:b4:57:16:32:e4:a6: 65:00:cd:a7:ae:ae:f7:41:42:a0:df:71:25:49:1c:c6:e1:6f: a1:d1:88:17:84:c9:89:c3:ef:66:f4:c5:0e:12:01:e6:53:a9: 9c:5d:79:6c:c4:aa:83:3e:87:51:83:ac:8b:9a:1f:96:a6:b3: 50:f4:a3:55:73:22:59:05:07:2a:e0:85:4c:ee:a8:35:10:c1: 06:23:bc:f0:d2:5c:89:d4:90:dd:49:f3:1c:5b:02:63:c0:fb: fc:35:a9:5a:b3:b8:c9:8d:ce:3a:c2:37:23:e4:b1:14:25:b6: 6e:80:f1:78:89:52:a6:a1:34:0e:fa:af:ea:6f:a3:50:dc:9a: 9f:aa:bc:16:85:38:7e:40:ca:04:cc:ef:8c:86:fc:d3:17:fa: 4f:b4:90:2c:dd:ce:2a:c6:b6:dd:bd:42:6c:65:48:a1:bd:5b: 95:7f:06:20:9d:7e:0d:49:a2:90:46:fe:08:8a:a1:4a:dc:73: 04:11:0d:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfZme+JbMIbWqz0UIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTExMjAyMDAyN1oXDTI1MDIxMDAyMDAyN1owLzEtMCsGA1UEAxMk MzY4MzQwODItNjY3OC00YWM1LWEwOWYtMGMxMGYwODM5YTdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAklo5tVkp3JePH+yEhejXdIRMLmo8cKWXFNM+ jLKVE/O5Iv1Q/rg/y7U10RcRR9rk1LRTm7IZ4j99+skhVFVhMgy6eMRBX+fq03HK INbAPHqHByNgUpwXSBYpn7s7hfk1NshL+eA7KYIXncv0zTL/c86bCXN/6ADhFZFi /FeAVfO+qLn+pJsF8gj2rSTo3y3Pmxg8dvWygeOsrFh+rVJyxNsfLhAKnwn+fxo+ lSJLuvYq713gs8nQgCC2WnMZt2RfpWwidUicPRkd7Ha5jKyVhNoW8rIFlj2aIhjl qWYrg3DRYAJZN8818G7MGvfHvpqTshwJ8XOwgvXcbYcBv8Y4HwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFqogINHj9owsWI2O10DwhlCTBMOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTY4ZjhkZGItN2RiMS0z NzM0LWJmZDAtMWNmN2E4MDg5Yzc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFrOhgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI9vHbocU1BqZnvesuCIVt+xoJ1Ooef9u3fHSqolXi67G4cUOwbwZ/TA PYQHMd+qnAXTaTlLIy6DYBG8LGkQrCkeGrRXFjLkpmUAzaeurvdBQqDfcSVJHMbh b6HRiBeEyYnD72b0xQ4SAeZTqZxdeWzEqoM+h1GDrIuaH5ams1D0o1VzIlkFByrg hUzuqDUQwQYjvPDSXInUkN1J8xxbAmPA+/w1qVqzuMmNzjrCNyPksRQltm6A8XiJ UqahNA76r+pvo1Dcmp+qvBaFOH5AygTM74yG/NMX+k+0kCzdzirGtt29QmxlSKG9 W5V/BiCdfg1JopBG/giKoUrccwQRDUo= -----END CERTIFICATE-----Generated at Mon Nov 25 16:06:49 2024 by rpki-client on console-fra.rpki-client.org