$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aee3f320-18d4-3b39-b1e4-d0e6f367bc1b.roa File: aee3f320-18d4-3b39-b1e4-d0e6f367bc1b.roa (raw, json) Hash identifier: Q478kSBV7dwyCAzVAgRaT8NSEseD2FZwWQuYXefwXJw= Subject key identifier: 17:C0:8F:F5:F2:F5:A8:A1:6B:79:A8:76:C4:E8:86:FF:B6:0F:EA:20 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847362B6950F601757E0B852780 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aee3f320-18d4-3b39-b1e4-d0e6f367bc1b.roa Signing time: Sat 14 Sep 2024 13:00:41 +0000 ROA not before: Sat 14 Sep 2024 13:00:41 +0000 ROA not after: Fri 13 Dec 2024 14:00:41 +0000 asID: 36183 IP address blocks: 172.224.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:36:2b:69:50:f6:01:75:7e:0b:85:27:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 14 13:00:41 2024 GMT Not After : Dec 13 14:00:41 2024 GMT Subject: CN=8f46a41c-29bf-43be-86f8-c9ee2a7d7287 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:95:1a:cb:55:f1:54:db:21:88:28:19:ec:7a: 60:97:69:9f:42:38:bd:1a:61:74:5e:0a:fd:be:8d: 26:e4:3f:6e:48:8f:a9:bc:4e:d0:e9:26:77:4b:3e: 13:1e:fa:88:ff:30:71:aa:40:cb:76:0e:1f:33:e0: 82:92:d7:f8:43:72:67:1c:57:39:1a:6a:1f:d3:bc: 2d:eb:4d:43:62:98:7a:67:85:1c:dd:47:da:e5:aa: 1d:c5:c5:64:05:ae:db:aa:d1:b2:7c:64:d0:8b:bf: 41:98:f6:a4:67:a2:60:d6:c7:c9:a8:d4:50:80:b4: 5c:0e:ac:18:4d:e7:b0:c5:43:0d:6b:90:16:0c:f5: d2:2e:78:ed:5c:00:84:d6:97:31:c1:36:09:d9:12: e0:ac:b7:c9:ad:77:9c:aa:27:1c:49:22:9c:20:74: 8d:34:69:27:4c:e4:3c:82:7f:96:af:52:8b:7a:cf: c4:73:5f:84:a9:5b:32:ce:33:45:69:c1:02:d3:4a: 3c:a1:72:14:03:66:5f:23:a6:ec:c7:af:57:25:38: e8:7d:27:5d:cc:66:fc:e0:0f:84:33:b6:e5:9f:7f: 31:b0:82:17:f3:2b:a4:4c:b1:48:48:d1:bc:19:f2: 19:d5:cc:10:75:21:a5:dd:22:ba:f1:37:4d:5d:d6: a9:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:C0:8F:F5:F2:F5:A8:A1:6B:79:A8:76:C4:E8:86:FF:B6:0F:EA:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aee3f320-18d4-3b39-b1e4-d0e6f367bc1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.224.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:24:74:08:66:86:3a:bf:c7:1d:b1:47:e0:82:9b:b4:51:d5: bd:6a:c4:aa:cd:6a:1f:b3:00:a0:f7:3c:cc:23:25:e6:a5:b5: 9a:39:d7:91:d6:9a:38:d6:b2:d9:43:20:c9:f7:ed:ce:cc:33: b5:44:e8:5f:f8:b4:00:14:98:89:2a:ce:93:b7:07:dc:e9:66: ba:14:cb:0d:8e:60:03:f3:ea:d7:63:12:ba:f8:ba:f3:e3:f9: 7a:15:1c:b0:ac:eb:9c:bf:db:1c:7d:39:0a:f9:31:f0:6b:04: 4d:6e:67:bc:79:ba:8c:f7:b8:d1:35:4e:67:8c:fb:62:fa:d7: 6d:3c:fa:2f:81:e5:e0:75:79:57:11:12:1a:9a:a7:bf:b3:8c: ab:7b:6d:df:ec:b4:4a:b7:00:8c:51:0d:c3:8e:91:58:e3:dd: da:bd:5a:95:81:29:cf:e2:e0:e4:81:e3:9e:60:ab:cd:ee:cd: 8d:d9:ee:58:0f:80:62:cf:aa:06:2b:12:66:bc:ca:f1:21:18: 82:c5:76:a8:4d:6b:1c:1f:6c:b6:79:33:d0:08:36:aa:20:e5: e4:c2:c0:3f:4c:b3:c6:4c:ff:45:24:d0:f7:11:56:83:78:4c: da:54:71:31:36:8b:4e:31:a8:7f:c1:0b:c9:a1:eb:3a:db:66: 96:2f:bf:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc2K2lQ9gF1fguFJ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MDkxNDEzMDA0MVoXDTI0MTIxMzE0MDA0MVowLzEtMCsGA1UEAxMk OGY0NmE0MWMtMjliZi00M2JlLTg2ZjgtYzllZTJhN2Q3Mjg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZUay1XxVNshiCgZ7Hpgl2mfQji9GmF0Xgr9 vo0m5D9uSI+pvE7Q6SZ3Sz4THvqI/zBxqkDLdg4fM+CCktf4Q3JnHFc5Gmof07wt 601DYph6Z4Uc3Ufa5aodxcVkBa7bqtGyfGTQi79BmPakZ6Jg1sfJqNRQgLRcDqwY TeewxUMNa5AWDPXSLnjtXACE1pcxwTYJ2RLgrLfJrXecqiccSSKcIHSNNGknTOQ8 gn+Wr1KLes/Ec1+EqVsyzjNFacEC00o8oXIUA2ZfI6bsx69XJTjofSddzGb84A+E M7bln38xsIIX8yukTLFISNG8GfIZ1cwQdSGl3SK68TdNXdapawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBfAj/Xy9aiha3modsTohv+2D+ogMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYWVlM2YzMjAtMThkNC0z YjM5LWIxZTQtZDBlNmYzNjdiYzFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOAEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIMkdAhmhjq/xx2xR+CCm7RR1b1qxKrNah+zAKD3PMwjJealtZo515HW mjjWstlDIMn37c7MM7VE6F/4tAAUmIkqzpO3B9zpZroUyw2OYAPz6tdjErr4uvPj +XoVHLCs65y/2xx9OQr5MfBrBE1uZ7x5uoz3uNE1TmeM+2L61208+i+B5eB1eVcR Ehqap7+zjKt7bd/stEq3AIxRDcOOkVjj3dq9WpWBKc/i4OSB455gq83uzY3Z7lgP gGLPqgYrEma8yvEhGILFdqhNaxwfbLZ5M9AINqog5eTCwD9Ms8ZM/0Uk0PcRVoN4 TNpUcTE2i04xqH/BC8mh6zrbZpYvv8E= -----END CERTIFICATE-----Generated at Fri Nov 22 22:25:02 2024 by rpki-client on console-ams.rpki-client.org