$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d95c6310-5d0b-3158-80b3-7141149fc74e.roa File: d95c6310-5d0b-3158-80b3-7141149fc74e.roa (raw, json) Hash identifier: zCAiGu0PUIqbJzEPAwHLiF6Jni5kiaSF13p4LYMkM6I= Subject key identifier: 5C:58:4E:2F:94:AD:67:FA:40:C8:66:8F:E8:BF:18:8B:71:D4:F5:C9 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584754E0EA03D19513B0D2B84D00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d95c6310-5d0b-3158-80b3-7141149fc74e.roa Signing time: Wed 25 Sep 2024 13:00:41 +0000 ROA not before: Wed 25 Sep 2024 13:00:41 +0000 ROA not after: Tue 24 Dec 2024 14:00:41 +0000 asID: 63949 IP address blocks: 172.234.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:54:e0:ea:03:d1:95:13:b0:d2:b8:4d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 25 13:00:41 2024 GMT Not After : Dec 24 14:00:41 2024 GMT Subject: CN=94426047-2ec1-4801-b69b-2a7441931f32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:c4:5a:31:d0:98:90:ea:c2:88:a5:de:54:0c: 31:75:ba:cd:bb:af:3f:67:92:88:28:b7:4f:45:f6: 48:ac:07:68:3d:a2:13:b3:d5:b0:51:4a:ca:39:ab: 62:78:01:fd:c8:9c:af:de:f6:75:23:cf:04:d8:d7: 7b:61:d7:71:65:19:4d:7d:47:52:d1:c3:25:32:33: e9:f1:4e:c4:5d:16:9d:c9:d4:d5:35:34:9f:a8:91: 63:3f:cf:a6:ce:16:9c:50:96:88:18:3e:e6:e9:42: be:78:c3:bc:d8:9d:6b:15:1e:bd:ae:59:2c:5c:2d: 51:1d:92:89:58:a8:ff:4e:33:a7:3e:38:8b:32:81: 4d:b8:44:25:c7:fd:36:17:50:ed:52:ed:d3:eb:00: 85:0d:f2:f6:2d:42:88:0e:76:cd:00:ee:81:6b:57: 94:cb:39:69:f8:0c:21:8b:73:91:7f:42:87:f4:b8: a4:5f:fa:c2:1d:39:f0:92:53:ce:b2:5a:96:ee:78: 0c:be:ae:04:83:b1:16:e2:56:96:f4:c4:2c:00:e4: 2b:81:e9:bf:ea:d8:4b:d3:62:d8:9b:05:da:b0:c7: 32:c1:58:9a:d0:7e:7e:45:c8:f2:4f:ec:be:c8:43: 68:28:ad:42:85:55:df:14:d8:7d:f5:5e:1c:8f:58: d1:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:58:4E:2F:94:AD:67:FA:40:C8:66:8F:E8:BF:18:8B:71:D4:F5:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d95c6310-5d0b-3158-80b3-7141149fc74e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.234.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:8d:31:4e:a1:5d:c8:7e:a9:8d:8f:56:eb:17:33:0b:4b:a9: 86:cf:5d:cf:f1:aa:d8:43:01:86:30:e3:52:48:1d:1c:62:a9: f7:c8:95:34:46:1b:e2:e9:53:ed:b0:59:a8:ad:15:48:5b:d7: 81:a8:48:f9:31:d7:c5:d5:cd:09:8c:ae:9c:41:9f:be:d2:32: b7:b8:c0:36:78:09:84:fc:19:08:a3:6b:71:6a:cd:a4:35:8d: 8d:59:16:1b:8d:fb:9b:81:b4:96:94:7e:b8:72:88:2a:36:38: 03:95:82:87:fb:93:c5:90:40:d5:1b:73:a3:bd:4b:12:d5:8e: c9:af:56:27:6c:7b:02:1d:63:0e:2b:38:8f:57:f3:ec:a6:93: c8:68:e8:95:ec:53:47:62:48:57:20:20:ba:70:70:ac:84:25: 37:b0:a5:7f:ae:67:f7:18:64:4f:73:aa:ff:a7:3f:ab:1e:26: 73:40:61:6a:28:24:4c:6e:71:2a:3b:ad:60:f0:82:2f:a8:2c: c7:19:0b:38:81:9b:77:1e:59:a4:cc:bb:c9:ce:99:0a:95:a0: 60:a9:9e:5d:c8:6a:9e:28:d2:13:71:a0:69:33:f0:49:22:f9: 8d:fb:c7:65:12:29:9d:0e:e4:63:1b:91:0e:8e:4c:bd:d3:f6: 72:ae:e9:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdU4OoD0ZUTsNK4TQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MDkyNTEzMDA0MVoXDTI0MTIyNDE0MDA0MVowLzEtMCsGA1UEAxMk OTQ0MjYwNDctMmVjMS00ODAxLWI2OWItMmE3NDQxOTMxZjMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkcRaMdCYkOrCiKXeVAwxdbrNu68/Z5KIKLdP RfZIrAdoPaITs9WwUUrKOatieAH9yJyv3vZ1I88E2Nd7YddxZRlNfUdS0cMlMjPp 8U7EXRadydTVNTSfqJFjP8+mzhacUJaIGD7m6UK+eMO82J1rFR69rlksXC1RHZKJ WKj/TjOnPjiLMoFNuEQlx/02F1DtUu3T6wCFDfL2LUKIDnbNAO6Ba1eUyzlp+Awh i3ORf0KH9LikX/rCHTnwklPOslqW7ngMvq4Eg7EW4laW9MQsAOQrgem/6thL02LY mwXasMcywVia0H5+RcjyT+y+yENoKK1ChVXfFNh99V4cj1jRZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFxYTi+UrWf6QMhmj+i/GItx1PXJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDk1YzYzMTAtNWQwYi0z MTU4LTgwYjMtNzE0MTE0OWZjNzRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErOogMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIyNMU6hXch+qY2PVusXMwtLqYbPXc/xqthDAYYw41JIHRxiqffIlTRG G+LpU+2wWaitFUhb14GoSPkx18XVzQmMrpxBn77SMre4wDZ4CYT8GQija3FqzaQ1 jY1ZFhuN+5uBtJaUfrhyiCo2OAOVgof7k8WQQNUbc6O9SxLVjsmvVidsewIdYw4r OI9X8+ymk8ho6JXsU0diSFcgILpwcKyEJTewpX+uZ/cYZE9zqv+nP6seJnNAYWoo JExucSo7rWDwgi+oLMcZCziBm3ceWaTMu8nOmQqVoGCpnl3Iap4o0hNxoGkz8Eki +Y37x2USKZ0O5GMbkQ6OTL3T9nKu6dA= -----END CERTIFICATE-----Generated at Fri Nov 22 04:30:41 2024 by rpki-client on console-fra.rpki-client.org