$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c88b57f5-5ca3-3cd0-9ec4-bafef35b33f8.roa File: c88b57f5-5ca3-3cd0-9ec4-bafef35b33f8.roa (raw, json) Hash identifier: EWlaWH27JUOXkM8HYHcCRN8oky5yuzatDTY0fV9GJe8= Subject key identifier: A8:2B:5E:A0:5C:A4:1E:39:32:C6:BF:DD:B2:7F:12:40:9C:05:A7:86 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858473A5B99E78BF0BD75A19F2380 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c88b57f5-5ca3-3cd0-9ec4-bafef35b33f8.roa Signing time: Mon 16 Sep 2024 01:00:29 +0000 ROA not before: Mon 16 Sep 2024 01:00:29 +0000 ROA not after: Sun 15 Dec 2024 02:00:29 +0000 asID: 36183 IP address blocks: 172.224.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:3a:5b:99:e7:8b:f0:bd:75:a1:9f:23:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 16 01:00:29 2024 GMT Not After : Dec 15 02:00:29 2024 GMT Subject: CN=c09c24b4-01c9-48d6-b0c4-938bbd6192a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:78:66:27:77:b2:92:a5:59:8b:d4:cd:ba:46: cf:c0:35:0f:4f:5f:c1:da:cd:8f:58:fb:ff:cf:b7: 58:0f:a3:4e:c8:39:3e:b2:ea:ea:30:60:97:07:89: 28:0b:23:10:c3:51:bf:94:22:22:21:97:67:ff:50: ab:35:ca:4f:c5:34:08:30:99:f8:b3:0d:b4:15:c9: 03:c5:d2:0b:e6:61:85:19:33:f3:68:c6:57:ff:91: 57:36:03:ae:dd:4f:e7:09:0c:2e:f2:ee:dc:7d:ca: dc:c5:3a:36:73:e3:84:86:21:63:63:15:da:96:4e: 08:11:af:92:c4:1c:dd:64:44:05:60:9b:33:d3:df: b7:4d:90:72:9b:2b:30:85:f8:41:dd:16:6f:ef:f1: b6:b5:d3:91:3e:09:da:34:7e:b0:7a:89:fb:ed:ab: 51:37:cf:12:a5:3d:6a:53:49:d3:70:57:f3:0d:65: 30:ad:24:05:3c:98:15:22:02:e8:03:e7:2d:7b:04: e7:c0:64:c1:82:5a:dd:f6:07:d0:46:8e:ed:0c:e9: 1a:75:24:3d:a3:d4:29:25:38:91:56:a5:59:00:92: cc:b7:e8:80:70:74:47:02:5d:9a:96:a9:ca:c2:38: bd:ea:88:3a:fe:f2:f4:b6:43:37:ef:5f:7d:3a:38: 3b:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:2B:5E:A0:5C:A4:1E:39:32:C6:BF:DD:B2:7F:12:40:9C:05:A7:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c88b57f5-5ca3-3cd0-9ec4-bafef35b33f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.224.97.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:d5:eb:69:a4:7c:b4:6c:fb:41:d7:4b:15:60:fc:b4:18:18: 32:79:2e:f4:06:7a:4b:ae:c1:3c:0e:c1:21:58:2a:ab:e0:83: a8:3e:5f:b0:2b:b9:6a:44:59:3e:3e:f8:5a:dd:ae:97:b3:eb: 37:5d:f7:3c:74:50:6f:7f:db:58:e5:bd:1c:58:f1:c5:f4:fd: e7:d6:9a:74:79:94:7b:96:f3:6f:b6:b9:f7:5f:04:d5:69:44: 80:1b:a8:3e:a0:55:ea:dc:23:f8:93:07:6a:2a:61:85:eb:ec: 6b:0d:c0:0a:51:17:63:2c:76:cf:51:06:fc:00:4a:43:97:69: 9d:e0:ba:b5:d4:42:cd:83:8c:c4:ba:7a:ae:e8:0c:0f:14:7b: 26:ba:6f:f9:89:85:6e:ff:cf:b5:24:a5:79:4a:2f:7f:aa:d9: d5:c6:56:85:db:64:78:c6:f6:49:76:7f:33:79:29:68:8f:b0: 64:a4:a3:b7:5b:35:32:6a:c2:b7:fc:f3:7d:60:83:28:2c:48: 0a:e9:30:b8:e1:00:36:e7:4b:b3:39:ea:f2:10:6d:9d:a3:58: c9:0a:31:64:9b:01:68:d4:f0:ca:01:4c:86:d2:5e:54:a3:4d: 24:d2:a6:2f:2d:72:5d:09:55:71:6a:68:36:53:90:0d:0d:6c: d9:08:50:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc6W5nni/C9daGfI4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MDkxNjAxMDAyOVoXDTI0MTIxNTAyMDAyOVowLzEtMCsGA1UEAxMk YzA5YzI0YjQtMDFjOS00OGQ2LWIwYzQtOTM4YmJkNjE5MmE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhHhmJ3eykqVZi9TNukbPwDUPT1/B2s2PWPv/ z7dYD6NOyDk+surqMGCXB4koCyMQw1G/lCIiIZdn/1CrNcpPxTQIMJn4sw20FckD xdIL5mGFGTPzaMZX/5FXNgOu3U/nCQwu8u7cfcrcxTo2c+OEhiFjYxXalk4IEa+S xBzdZEQFYJsz09+3TZBymyswhfhB3RZv7/G2tdORPgnaNH6weon77atRN88SpT1q U0nTcFfzDWUwrSQFPJgVIgLoA+ctewTnwGTBglrd9gfQRo7tDOkadSQ9o9QpJTiR VqVZAJLMt+iAcHRHAl2alqnKwji96og6/vL0tkM37199Ojg75wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKgrXqBcpB45Msa/3bJ/EkCcBaeGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzg4YjU3ZjUtNWNhMy0z Y2QwLTllYzQtYmFmZWYzNWIzM2Y4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOBhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJbV62mkfLRs+0HXSxVg/LQYGDJ5LvQGekuuwTwOwSFYKqvgg6g+X7Ar uWpEWT4++Frdrpez6zdd9zx0UG9/21jlvRxY8cX0/efWmnR5lHuW82+2ufdfBNVp RIAbqD6gVercI/iTB2oqYYXr7GsNwApRF2Msds9RBvwASkOXaZ3gurXUQs2DjMS6 eq7oDA8Ueya6b/mJhW7/z7UkpXlKL3+q2dXGVoXbZHjG9kl2fzN5KWiPsGSko7db NTJqwrf8831ggygsSArpMLjhADbnS7M56vIQbZ2jWMkKMWSbAWjU8MoBTIbSXlSj TSTSpi8tcl0JVXFqaDZTkA0NbNkIUIA= -----END CERTIFICATE-----Generated at Fri Nov 22 22:27:43 2024 by rpki-client on console-fra.rpki-client.org