$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c3416f74-8a3c-3836-8474-6a67b95b355b.roa File: c3416f74-8a3c-3836-8474-6a67b95b355b.roa (raw, json) Hash identifier: WkscG1gxNiwCCIkjdHrdaBd8gjVldJX/hXfI1VCYdiI= Subject key identifier: F6:F4:53:67:95:75:0F:12:AF:95:0E:0D:C3:B7:2F:AA:54:06:46:86 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847B3CC1403C98740CA9DE36A40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c3416f74-8a3c-3836-8474-6a67b95b355b.roa Signing time: Tue 29 Oct 2024 13:00:40 +0000 ROA not before: Tue 29 Oct 2024 13:00:40 +0000 ROA not after: Mon 27 Jan 2025 14:00:40 +0000 asID: 63949 IP address blocks: 172.234.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b3:cc:14:03:c9:87:40:ca:9d:e3:6a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 29 13:00:40 2024 GMT Not After : Jan 27 14:00:40 2025 GMT Subject: CN=16cab80c-3d34-44e8-856d-0caf68e74192 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:21:81:37:2d:ac:8d:1b:57:31:d9:ec:8d:f3: 77:ec:75:cc:3b:26:b8:2d:8d:88:78:44:f7:31:d8: a2:04:1f:33:df:d1:6f:78:4c:78:21:1f:a9:44:6f: f0:c4:d0:8e:73:65:4c:b6:c7:52:57:f1:6f:b9:ad: a6:04:dc:00:11:0a:4f:4e:b8:1a:c1:c6:9b:ad:bc: 22:aa:1d:3c:4f:29:71:d0:76:86:91:96:72:4b:af: 82:48:2e:ba:6c:61:d0:79:48:87:44:df:ff:24:c0: a6:89:2b:50:d2:9b:67:71:f2:82:f2:22:da:33:97: c0:5e:30:5f:82:14:10:43:c8:15:71:b3:02:1a:0a: 91:ee:00:05:a7:08:f9:55:56:dd:b2:b8:16:e6:2f: 45:85:d1:9a:22:9d:61:9b:f2:b4:c4:9e:27:7c:1c: 9b:4c:76:05:a6:24:4e:c7:dd:ed:60:0a:93:28:05: 1e:20:9c:9e:e5:a4:69:7d:73:39:33:86:6b:1d:4b: 5c:0c:d9:cf:f2:61:bb:50:f9:06:52:aa:aa:1a:8b: 14:4b:7d:93:76:70:d8:f7:12:13:b6:e1:da:93:73: 17:aa:85:ff:b9:ed:f7:2c:f3:06:21:3d:cb:a1:a9: f9:30:08:17:ad:32:33:65:8c:16:7d:39:7b:e0:d9: 37:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:F4:53:67:95:75:0F:12:AF:95:0E:0D:C3:B7:2F:AA:54:06:46:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c3416f74-8a3c-3836-8474-6a67b95b355b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.234.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:41:3d:1a:81:08:d5:c9:5c:f6:9c:b8:55:eb:87:9b:3f:90: 30:89:89:e3:e6:a5:b0:d6:4a:bf:d1:30:4b:f0:42:8c:f7:e2: 13:f3:2c:95:c2:7e:91:d0:cd:1c:6e:e9:73:a0:00:7d:2e:5b: 3e:1b:a6:6b:89:94:29:16:38:db:67:0a:7e:5f:fe:79:93:6f: 17:bd:07:c0:dd:60:db:d8:34:90:77:4a:ec:cd:68:ec:63:2e: 72:b9:25:41:a2:af:73:dc:c2:ff:56:26:0a:0d:e2:54:a3:7c: c5:d1:6a:fa:00:2e:4b:58:76:16:93:24:07:73:07:69:fb:c7: 01:f0:fb:73:29:e5:95:e4:28:85:18:bb:e1:4f:39:67:6d:2d: 64:45:78:96:52:de:f7:2a:46:10:49:5e:f5:18:b8:f9:cf:2e: 71:f9:fd:c9:0e:cd:5b:17:b7:a3:5b:09:22:6d:99:a4:89:e6: 34:c2:18:0a:8f:5d:8d:ef:2e:0d:b2:e0:a8:27:dd:c8:bc:3e: f4:f8:9f:d0:e6:cd:15:a3:b7:e1:2e:d2:29:64:85:05:d7:a6: 46:5f:d7:e3:96:eb:57:5e:a9:c5:b9:94:ed:17:eb:6d:63:e2: 06:00:3d:73:fe:51:87:f5:bd:ed:48:29:38:30:ad:e5:d3:b7: a7:7c:31:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEezzBQDyYdAyp3jakAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTAyOTEzMDA0MFoXDTI1MDEyNzE0MDA0MFowLzEtMCsGA1UEAxMk MTZjYWI4MGMtM2QzNC00NGU4LTg1NmQtMGNhZjY4ZTc0MTkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iGBNy2sjRtXMdnsjfN37HXMOya4LY2IeET3 MdiiBB8z39FveEx4IR+pRG/wxNCOc2VMtsdSV/Fvua2mBNwAEQpPTrgawcabrbwi qh08Tylx0HaGkZZyS6+CSC66bGHQeUiHRN//JMCmiStQ0ptncfKC8iLaM5fAXjBf ghQQQ8gVcbMCGgqR7gAFpwj5VVbdsrgW5i9FhdGaIp1hm/K0xJ4nfBybTHYFpiRO x93tYAqTKAUeIJye5aRpfXM5M4ZrHUtcDNnP8mG7UPkGUqqqGosUS32TdnDY9xIT tuHak3MXqoX/ue33LPMGIT3Loan5MAgXrTIzZYwWfTl74Nk3WQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPb0U2eVdQ8Sr5UODcO3L6pUBkaGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzM0MTZmNzQtOGEzYy0z ODM2LTg0NzQtNmE2N2I5NWIzNTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFrOqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFxBPRqBCNXJXPacuFXrh5s/kDCJiePmpbDWSr/RMEvwQoz34hPzLJXC fpHQzRxu6XOgAH0uWz4bpmuJlCkWONtnCn5f/nmTbxe9B8DdYNvYNJB3SuzNaOxj LnK5JUGir3Pcwv9WJgoN4lSjfMXRavoALktYdhaTJAdzB2n7xwHw+3Mp5ZXkKIUY u+FPOWdtLWRFeJZS3vcqRhBJXvUYuPnPLnH5/ckOzVsXt6NbCSJtmaSJ5jTCGAqP XY3vLg2y4Kgn3ci8PvT4n9DmzRWjt+Eu0ilkhQXXpkZf1+OW61deqcW5lO0X621j 4gYAPXP+UYf1ve1IKTgwreXTt6d8MaU= -----END CERTIFICATE-----Generated at Mon Nov 25 16:06:57 2024 by rpki-client on console-fra.rpki-client.org