$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a6db1dd4-a9a2-3398-bac3-b9bea3c6338e.roa File: a6db1dd4-a9a2-3398-bac3-b9bea3c6338e.roa (raw, json) Hash identifier: Keg4pa8sC0/e64wlY2iJgNNb5nYwQRkDDgKAdZUydmU= Subject key identifier: 31:12:FA:1A:94:35:E3:BD:F2:87:DC:5D:5C:14:97:6B:6D:69:8B:E1 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858472F3088EAAEB69AF904997510 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a6db1dd4-a9a2-3398-bac3-b9bea3c6338e.roa Signing time: Thu 12 Sep 2024 01:00:31 +0000 ROA not before: Thu 12 Sep 2024 01:00:31 +0000 ROA not after: Wed 11 Dec 2024 02:00:31 +0000 asID: 36183 IP address blocks: 172.225.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:2f:30:88:ea:ae:b6:9a:f9:04:99:75:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 12 01:00:31 2024 GMT Not After : Dec 11 02:00:31 2024 GMT Subject: CN=10f9f417-8e83-4dc6-9c97-bffb1df42a37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:13:31:ab:ce:bb:70:4f:9b:30:90:dc:e7:61: 59:d9:9e:6f:90:04:3b:33:98:1a:af:c4:2d:fe:46: 34:57:86:8c:24:67:8b:b2:3b:60:16:f8:28:f9:01: 65:99:5b:4e:b3:a3:30:69:c9:30:99:34:5b:2b:7f: 1d:f6:bf:fc:ac:2d:5f:a0:8d:a6:7d:a2:f7:3b:3e: 93:07:c3:5d:35:c9:35:f7:6e:7f:6a:57:21:18:63: 88:bb:dd:22:0e:63:05:bb:0c:4f:71:74:4f:b8:fd: 59:b4:92:7f:f0:de:dd:1d:e9:c8:e2:d2:32:94:94: 2c:fe:88:f1:d2:21:75:97:6e:61:11:f7:4a:d4:bf: c3:9c:c7:fe:b6:28:0f:b1:3a:3e:ce:1b:4d:63:80: 3b:a2:b7:8e:4e:0b:37:2f:16:58:00:12:9c:eb:ba: 58:bf:52:40:ee:5d:e5:a1:f8:b2:4b:da:73:d2:03: 49:ed:8e:d7:3a:3a:a0:8b:a8:ff:5e:8d:e6:64:05: a6:77:1f:eb:a1:ac:17:65:b3:00:89:ff:6d:5d:9f: ff:55:f3:db:41:7c:10:11:b8:43:37:71:0d:52:78: 75:d7:6b:b2:cd:d4:09:cc:d2:88:6b:e2:54:b3:bf: 07:de:35:70:fc:67:32:03:e9:e1:b2:b2:a9:d2:2a: e2:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:12:FA:1A:94:35:E3:BD:F2:87:DC:5D:5C:14:97:6B:6D:69:8B:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a6db1dd4-a9a2-3398-bac3-b9bea3c6338e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.87.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:47:00:1f:8a:5a:aa:e9:16:9e:10:0d:60:1b:35:f8:36:d1: 1e:b0:42:6a:e6:5b:75:3c:87:48:28:d9:28:9c:a6:6d:17:09: bf:86:92:36:2f:4b:87:56:58:d5:41:6b:6e:14:3c:6a:46:c8: d8:4b:e8:0b:e2:2a:a9:72:de:59:39:f6:b8:d2:0a:a0:c8:c8: 19:b7:01:54:f8:3f:a7:4b:04:23:96:dc:a5:29:b3:6a:df:ea: f2:b0:c9:2e:8b:b2:7f:70:68:d0:3b:d5:cb:e1:15:a4:6d:88: 2d:0f:a6:10:10:d3:0d:e4:45:5d:6a:33:f4:52:af:44:eb:53: bc:10:42:04:1c:4a:ba:b5:d2:4b:cc:4c:ae:f5:d7:b2:2f:47: 04:2d:99:06:14:ac:66:27:4e:57:c8:c1:4f:16:03:e0:da:6e: c6:2d:a5:73:15:a7:77:c3:91:a9:46:9e:01:e2:58:d9:30:e9: 9a:f3:a1:1b:61:1d:64:ec:88:d6:66:f2:c0:3f:22:4d:a9:ad: 32:f9:9f:16:7b:f9:a8:3d:32:8c:9e:25:6d:cb:0e:98:26:ed: 81:9f:d5:eb:d0:1e:36:bd:22:a1:d2:3e:23:f7:0b:c1:ab:36: 05:8d:0f:d0:f4:74:11:1f:21:66:78:c4:8a:9e:4f:38:50:3b: 64:90:3d:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcvMIjqrraa+QSZdRAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MDkxMjAxMDAzMVoXDTI0MTIxMTAyMDAzMVowLzEtMCsGA1UEAxMk MTBmOWY0MTctOGU4My00ZGM2LTljOTctYmZmYjFkZjQyYTM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRMxq867cE+bMJDc52FZ2Z5vkAQ7M5gar8Qt /kY0V4aMJGeLsjtgFvgo+QFlmVtOs6MwackwmTRbK38d9r/8rC1foI2mfaL3Oz6T B8NdNck1925/alchGGOIu90iDmMFuwxPcXRPuP1ZtJJ/8N7dHenI4tIylJQs/ojx 0iF1l25hEfdK1L/DnMf+tigPsTo+zhtNY4A7oreOTgs3LxZYABKc67pYv1JA7l3l ofiyS9pz0gNJ7Y7XOjqgi6j/Xo3mZAWmdx/roawXZbMAif9tXZ//VfPbQXwQEbhD N3ENUnh112uyzdQJzNKIa+JUs78H3jVw/GcyA+nhsrKp0iriGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDES+hqUNeO98ofcXVwUl2ttaYvhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTZkYjFkZDQtYTlhMi0z Mzk4LWJhYzMtYjliZWEzYzYzMzhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOFXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADpHAB+KWqrpFp4QDWAbNfg20R6wQmrmW3U8h0go2Sicpm0XCb+GkjYv S4dWWNVBa24UPGpGyNhL6AviKqly3lk59rjSCqDIyBm3AVT4P6dLBCOW3KUps2rf 6vKwyS6Lsn9waNA71cvhFaRtiC0PphAQ0w3kRV1qM/RSr0TrU7wQQgQcSrq10kvM TK7117IvRwQtmQYUrGYnTlfIwU8WA+DabsYtpXMVp3fDkalGngHiWNkw6ZrzoRth HWTsiNZm8sA/Ik2prTL5nxZ7+ag9MoyeJW3LDpgm7YGf1evQHja9IqHSPiP3C8Gr NgWND9D0dBEfIWZ4xIqeTzhQO2SQPUo= -----END CERTIFICATE-----Generated at Fri Nov 22 22:27:30 2024 by rpki-client on console-fra.rpki-client.org