$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f35b5acc-08b7-3f7b-b8cc-9a3d438293b3.roa File: f35b5acc-08b7-3f7b-b8cc-9a3d438293b3.roa (raw, json) Hash identifier: Ue0rvueGnJ2FL86ZZg++9sr73hoUFpxtU6bEjjJCRIw= Subject key identifier: ED:60:33:E4:FD:ED:2C:96:F9:07:4C:19:55:3C:9D:AE:C7:33:B8:10 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847FC7F9D5D9ADCDAABD7470AC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f35b5acc-08b7-3f7b-b8cc-9a3d438293b3.roa Signing time: Sun 24 Nov 2024 14:00:39 +0000 ROA not before: Sun 24 Nov 2024 14:00:39 +0000 ROA not after: Sat 22 Feb 2025 14:00:39 +0000 asID: 36183 IP address blocks: 172.225.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:fc:7f:9d:5d:9a:dc:da:ab:d7:47:0a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 24 14:00:39 2024 GMT Not After : Feb 22 14:00:39 2025 GMT Subject: CN=2cf4284c-52d3-4ce1-884a-3cb35c2a077a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:2a:42:75:1a:53:43:09:fa:4d:9f:63:aa:c8: 75:80:80:2c:43:6b:8a:04:d1:b1:af:ac:2a:1e:83: 8f:2e:5d:a1:81:92:8b:b8:e9:b8:88:0d:8d:f5:0a: 80:18:e0:1b:20:e4:f5:0d:05:cd:a2:6c:22:bc:f4: 96:a3:d0:9b:46:6e:9b:bb:ce:2e:5e:a2:9c:34:45: c2:8e:5c:6e:d7:da:37:ea:ce:ce:49:d6:c5:2e:3a: 49:a0:76:68:b7:45:e0:cc:56:f7:7c:3a:53:7c:85: 34:7c:d4:f6:68:27:62:9f:d8:99:3a:ee:11:8b:22: f8:43:74:48:f7:cb:cb:19:fc:31:ac:c3:7b:46:f7: 0b:0a:c4:c8:20:05:9a:0b:e0:a6:3a:e4:7b:66:f6: 04:88:ea:e4:dc:fb:d8:48:25:9a:2b:68:80:6e:0d: 59:f2:b0:32:75:51:9e:32:a2:93:52:64:f6:13:d6: ad:0e:d3:ca:83:fb:14:53:4f:34:46:3b:e9:43:a9: a3:b1:b4:67:15:1c:73:db:76:74:e0:73:b4:e7:0d: e6:98:f9:68:2e:15:09:0c:7a:dd:54:e9:1e:e6:62: 31:f4:b4:5c:e1:e4:aa:5d:e5:86:63:bc:b8:fb:8e: ac:a9:53:a6:52:03:0d:5f:8f:38:ab:05:49:40:da: b2:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:60:33:E4:FD:ED:2C:96:F9:07:4C:19:55:3C:9D:AE:C7:33:B8:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f35b5acc-08b7-3f7b-b8cc-9a3d438293b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.119.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:57:f5:31:a7:1c:f5:3b:9f:04:23:e6:34:0e:40:fa:fd:e3: e3:d8:57:5a:19:56:94:46:7d:b4:20:2d:0c:6c:02:a9:e6:74: a7:cf:ed:83:e2:f6:91:48:a9:19:cc:6d:8f:6b:22:ec:e3:32: 55:b3:8e:cb:fa:bd:b8:ad:46:74:d4:f1:49:05:c0:4e:ee:5e: 4f:4a:d9:5f:c7:4a:52:17:12:2f:a4:9b:5a:56:c0:8e:bf:22: b3:8e:67:6f:2b:3b:be:1c:9b:77:d6:de:1a:55:c6:f3:7c:4f: 4f:2f:f1:79:33:bc:95:de:1a:29:be:dc:a0:b7:4d:10:6f:7c: 04:40:ed:88:24:e3:f3:8a:f5:b0:61:f8:71:cd:eb:38:98:87: a9:25:fb:ad:8d:00:cc:de:be:f9:7e:25:c6:8f:35:ac:22:f6: 1b:7e:d7:dd:2d:f2:f6:9d:f2:29:d0:d1:81:1e:91:69:e3:f1: fc:e5:e8:9a:59:39:72:2e:7f:9d:3e:59:74:08:b3:fe:80:a5: 73:19:07:00:59:d2:2f:89:fc:68:2f:ea:10:b2:8e:c6:7a:3b: 06:d9:be:b8:cc:22:e1:35:3c:99:7d:80:8f:89:0a:0d:a2:0e: 10:8b:6a:83:e0:c2:75:66:1e:5b:0c:d0:83:e8:cf:a9:04:e6: 9b:aa:8a:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEf8f51dmtzaq9dHCsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTEyNDE0MDAzOVoXDTI1MDIyMjE0MDAzOVowLzEtMCsGA1UEAxMk MmNmNDI4NGMtNTJkMy00Y2UxLTg4NGEtM2NiMzVjMmEwNzdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSpCdRpTQwn6TZ9jqsh1gIAsQ2uKBNGxr6wq HoOPLl2hgZKLuOm4iA2N9QqAGOAbIOT1DQXNomwivPSWo9CbRm6bu84uXqKcNEXC jlxu19o36s7OSdbFLjpJoHZot0XgzFb3fDpTfIU0fNT2aCdin9iZOu4RiyL4Q3RI 98vLGfwxrMN7RvcLCsTIIAWaC+CmOuR7ZvYEiOrk3PvYSCWaK2iAbg1Z8rAydVGe MqKTUmT2E9atDtPKg/sUU080RjvpQ6mjsbRnFRxz23Z04HO05w3mmPloLhUJDHrd VOke5mIx9LRc4eSqXeWGY7y4+46sqVOmUgMNX484qwVJQNqyDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO1gM+T97SyW+QdMGVU8na7HM7gQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjM1YjVhY2MtMDhiNy0z ZjdiLWI4Y2MtOWEzZDQzODI5M2IzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOF3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADlX9TGnHPU7nwQj5jQOQPr94+PYV1oZVpRGfbQgLQxsAqnmdKfP7YPi 9pFIqRnMbY9rIuzjMlWzjsv6vbitRnTU8UkFwE7uXk9K2V/HSlIXEi+km1pWwI6/ IrOOZ28rO74cm3fW3hpVxvN8T08v8XkzvJXeGim+3KC3TRBvfARA7Ygk4/OK9bBh +HHN6ziYh6kl+62NAMzevvl+JcaPNawi9ht+190t8vad8inQ0YEekWnj8fzl6JpZ OXIuf50+WXQIs/6ApXMZBwBZ0i+J/Ggv6hCyjsZ6OwbZvrjMIuE1PJl9gI+JCg2i DhCLaoPgwnVmHlsM0IPoz6kE5puqisg= -----END CERTIFICATE-----Generated at Tue Nov 26 05:31:26 2024 by rpki-client on console-ams.rpki-client.org