$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ec6ed21a-d141-3e7e-a3e8-36ccce30af89.roa File: ec6ed21a-d141-3e7e-a3e8-36ccce30af89.roa (raw, json) Hash identifier: YBU2k7f+28LYgdP3dg4Q2e0GNfcSu+lBj0IWlxDIWMk= Subject key identifier: 25:27:D0:D0:6F:A7:2F:E9:2E:62:EB:AE:4B:E3:CF:E7:05:61:24:64 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858471E706B76DD4273A1873B6100 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ec6ed21a-d141-3e7e-a3e8-36ccce30af89.roa Signing time: Fri 06 Sep 2024 01:00:31 +0000 ROA not before: Fri 06 Sep 2024 01:00:31 +0000 ROA not after: Thu 05 Dec 2024 02:00:31 +0000 asID: 36183 IP address blocks: 172.225.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:1e:70:6b:76:dd:42:73:a1:87:3b:61:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 6 01:00:31 2024 GMT Not After : Dec 5 02:00:31 2024 GMT Subject: CN=d395484c-ff60-4f64-b818-7a058153e6dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c2:bc:09:c8:cd:24:1d:7c:08:53:5a:66:37: 46:9d:0a:14:c4:0d:19:71:cc:d7:7a:a5:0f:65:d8: 51:cc:f3:45:d2:2a:ad:8d:c2:5d:c8:54:34:37:cf: 07:3f:6a:2f:64:a3:35:92:fe:98:85:3e:0b:33:c3: cd:58:8f:7d:92:72:33:cf:42:19:fa:10:7e:52:9c: 2c:bf:a0:81:90:14:4c:80:6f:4b:9e:ea:28:9e:8d: 84:93:36:d1:a3:f2:42:a9:19:fe:17:04:45:0d:29: 6d:5f:d8:21:e3:c8:36:15:0c:17:6c:2c:a2:25:e1: c2:36:d0:16:7a:12:7f:31:5e:30:7d:cc:6e:e6:8a: 67:5a:cc:4d:78:52:23:72:a0:f0:16:41:b6:93:fa: 54:32:87:09:67:58:0e:7f:fd:e2:e5:be:af:d1:6b: 96:15:b1:bf:dc:7b:60:a8:d0:ff:38:62:ff:29:98: 05:8b:b5:07:f6:cb:5d:10:59:08:53:ba:b9:e9:04: 9d:bb:0f:2b:c4:61:dd:26:2c:2d:5b:b4:60:9f:32: 99:fb:19:b0:6c:ef:bf:20:0d:46:0a:53:c2:f7:56: 0c:80:36:e1:a7:b3:02:19:e6:1a:98:1f:40:4e:f8: fb:d7:40:83:d1:fb:06:47:10:64:1d:5d:c5:77:db: ff:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:27:D0:D0:6F:A7:2F:E9:2E:62:EB:AE:4B:E3:CF:E7:05:61:24:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ec6ed21a-d141-3e7e-a3e8-36ccce30af89.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:80:97:66:b8:3a:ea:90:78:0c:da:ae:6a:5c:2d:b0:d3:8e: 2b:e0:db:86:df:a8:46:db:9e:78:ab:64:5c:ff:44:f0:b3:10: 2e:26:8c:c3:f1:20:2b:0f:e2:98:73:fe:b7:a0:91:85:42:93: 52:ee:27:09:96:0c:be:62:d5:31:10:36:da:f0:b0:fe:1e:cb: 5f:1d:eb:26:3c:92:a8:08:96:61:ab:98:b6:76:41:62:2e:2c: 57:81:b2:dd:22:f4:d8:d0:f6:d7:7d:fd:fd:3f:a7:cc:69:03: fe:ca:0b:be:93:a3:ef:b7:dd:5b:5e:32:6c:da:fd:70:1e:17: b8:af:d3:27:e5:b2:f1:8e:87:64:cf:62:70:fc:d4:12:30:70: 20:bc:26:d3:1e:cc:87:a0:0d:f9:20:ea:e9:2f:68:47:5a:30: a2:51:7b:d0:89:4a:5e:93:4e:85:9a:30:5a:f7:f8:29:bb:c1: 49:20:08:d4:18:93:97:51:41:36:12:41:a7:dc:5e:d6:9f:9c: 7e:24:29:02:54:a7:bf:3a:af:67:c0:f0:be:46:2a:fa:fc:50: 46:20:fe:98:ac:8f:46:6c:3a:24:33:07:53:4a:8b:d8:ad:a4: 60:99:6e:6f:67:22:aa:98:ea:92:2e:59:5c:4c:53:cc:65:32: 2d:27:34:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcecGt23UJzoYc7YQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MDkwNjAxMDAzMVoXDTI0MTIwNTAyMDAzMVowLzEtMCsGA1UEAxMk ZDM5NTQ4NGMtZmY2MC00ZjY0LWI4MTgtN2EwNTgxNTNlNmRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxsK8CcjNJB18CFNaZjdGnQoUxA0ZcczXeqUP ZdhRzPNF0iqtjcJdyFQ0N88HP2ovZKM1kv6YhT4LM8PNWI99knIzz0IZ+hB+Upws v6CBkBRMgG9Lnuoono2EkzbRo/JCqRn+FwRFDSltX9gh48g2FQwXbCyiJeHCNtAW ehJ/MV4wfcxu5opnWsxNeFIjcqDwFkG2k/pUMocJZ1gOf/3i5b6v0WuWFbG/3Htg qND/OGL/KZgFi7UH9stdEFkIU7q56QSduw8rxGHdJiwtW7RgnzKZ+xmwbO+/IA1G ClPC91YMgDbhp7MCGeYamB9ATvj710CD0fsGRxBkHV3Fd9v/qwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCUn0NBvpy/pLmLrrkvjz+cFYSRkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZWM2ZWQyMWEtZDE0MS0z ZTdlLWEzZTgtMzZjY2NlMzBhZjg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOHMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADOAl2a4OuqQeAzarmpcLbDTjivg24bfqEbbnnirZFz/RPCzEC4mjMPx ICsP4phz/regkYVCk1LuJwmWDL5i1TEQNtrwsP4ey18d6yY8kqgIlmGrmLZ2QWIu LFeBst0i9NjQ9td9/f0/p8xpA/7KC76To++33VteMmza/XAeF7iv0yflsvGOh2TP YnD81BIwcCC8JtMezIegDfkg6ukvaEdaMKJRe9CJSl6TToWaMFr3+Cm7wUkgCNQY k5dRQTYSQafcXtafnH4kKQJUp786r2fA8L5GKvr8UEYg/pisj0ZsOiQzB1NKi9it pGCZbm9nIqqY6pIuWVxMU8xlMi0nNBI= -----END CERTIFICATE-----Generated at Fri Nov 22 22:27:57 2024 by rpki-client on console-fra.rpki-client.org