$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074/1de7e21b-7af3-3e84-89ee-3bc73d0de617.roa File: 1de7e21b-7af3-3e84-89ee-3bc73d0de617.roa (raw, json) Hash identifier: gW4Vdb9v9zTtPoo6SJhEuCCn1IsMy3VnRlCE36d9E3Q= Subject key identifier: 0B:97:81:84:0F:CC:D5:D5:56:4C:1F:20:CE:09:46:AD:0E:6D:DE:66 Certificate issuer: /CN=e4c32cde-7693-4d10-ae1e-8b8e9d363074 Certificate serial: 010D0C9F43285847A5D6AB5CD19A73892EBCDC80 Authority key identifier: 92:31:4C:58:BF:CF:79:3E:57:04:26:01:33:A0:29:6B:2B:85:7E:7A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074/1de7e21b-7af3-3e84-89ee-3bc73d0de617.roa Signing time: Thu 24 Oct 2024 13:00:42 +0000 ROA not before: Thu 24 Oct 2024 13:00:42 +0000 ROA not after: Wed 22 Jan 2025 14:00:42 +0000 asID: 14618 IP address blocks: 172.86.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074/e4c32cde-7693-4d10-ae1e-8b8e9d363074.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074/e4c32cde-7693-4d10-ae1e-8b8e9d363074.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:a5:d6:ab:5c:d1:9a:73:89:2e:bc:dc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4c32cde-7693-4d10-ae1e-8b8e9d363074 Validity Not Before: Oct 24 13:00:42 2024 GMT Not After : Jan 22 14:00:42 2025 GMT Subject: CN=aff4abf4-e470-4cbe-b8a0-1e271c819de8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:c2:d3:72:19:13:c7:7d:cd:59:51:de:47:23: 37:80:3d:8f:d9:e6:a0:68:a0:bb:0d:fd:19:7a:68: 93:4c:18:0f:e0:5b:90:57:9c:4a:14:20:e0:27:fa: af:4b:25:b4:3d:93:6a:f3:67:da:d6:d6:d8:a4:80: 1c:12:6b:b0:78:1d:1d:4c:bd:3a:8b:e1:b0:03:c3: 0a:db:00:7b:bb:8c:84:df:af:f8:06:8a:83:88:f9: 41:27:27:01:eb:0a:77:05:4b:1d:a3:c6:ac:0f:88: 3e:d9:ec:3d:1f:31:88:2a:29:2c:c5:02:6b:a7:71: 1f:c0:76:58:48:dd:ba:6c:dc:53:60:c5:4c:f8:48: bf:93:17:2a:8b:ab:d2:89:bf:08:f2:62:e4:bb:41: 3b:10:08:55:68:fd:3e:2e:51:de:b1:b9:ff:b6:ed: 61:95:e6:c9:db:75:62:f4:a8:a3:e4:06:19:6f:6c: b2:8c:b1:51:e8:c5:9e:11:4d:b4:fb:10:c0:58:8d: 34:36:bf:11:60:1b:17:47:36:ed:d4:7b:6b:69:df: 03:6c:fe:65:12:3c:e9:90:b3:14:2f:af:7a:99:62: 6b:8a:34:79:f2:3e:e8:cd:7c:89:13:47:b3:a4:d8: 4a:f9:cb:db:cd:3d:5a:db:1d:db:d2:17:e5:27:0c: 25:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:97:81:84:0F:CC:D5:D5:56:4C:1F:20:CE:09:46:AD:0E:6D:DE:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074/1de7e21b-7af3-3e84-89ee-3bc73d0de617.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074/e4c32cde-7693-4d10-ae1e-8b8e9d363074.crl X509v3 Authority Key Identifier: keyid:92:31:4C:58:BF:CF:79:3E:57:04:26:01:33:A0:29:6B:2B:85:7E:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074.cer sbgp-ipAddrBlock: critical IPv4: 172.86.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:1c:0a:3f:02:21:9a:3f:92:8e:01:17:a7:69:33:7c:b3:c4: 33:72:4e:20:ec:2b:13:07:99:f4:f2:5a:72:52:25:45:8d:e1: 95:6b:0c:b1:8f:ba:77:db:79:c7:75:fa:f7:dd:78:e9:f0:09: 1b:51:29:8f:a1:f7:c2:55:e2:7f:a8:66:ac:66:84:df:47:e5: a9:56:c8:71:d5:8e:00:08:cf:7e:66:61:d2:49:a7:b4:5f:7a: 3f:3d:18:19:1e:cd:a4:a2:e1:f2:d1:0b:9a:1c:a3:53:9f:5c: 8a:89:0b:39:63:5b:a6:52:0b:93:1e:7a:97:89:f8:33:c6:2b: ae:99:0d:a3:fa:25:9a:b6:14:ac:ed:d1:fb:8a:83:32:c9:90: d3:09:c5:b2:bf:bd:9a:85:96:64:e5:93:5d:51:e2:0c:82:d7: 40:43:08:4b:16:53:9c:03:21:13:12:34:bf:93:be:2b:60:7a: 13:67:0b:86:52:98:d1:db:b8:51:2c:e1:e6:ea:2b:79:ed:77: a8:9f:94:ec:2c:9c:5f:42:39:05:93:a8:57:51:a7:01:e8:e1: 3e:fa:10:4b:ba:87:0e:3d:3a:48:c5:2c:8a:bb:f8:d9:13:cd: 14:86:fa:9f:e2:0a:fb:3e:a1:26:15:f5:70:e9:65:be:34:9c: 7d:54:bc:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEel1qtc0ZpziS683IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTRjMzJjZGUtNzY5My00ZDEwLWFlMWUtOGI4ZTlkMzYz MDc0MB4XDTI0MTAyNDEzMDA0MloXDTI1MDEyMjE0MDA0MlowLzEtMCsGA1UEAxMk YWZmNGFiZjQtZTQ3MC00Y2JlLWI4YTAtMWUyNzFjODE5ZGU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8LTchkTx33NWVHeRyM3gD2P2eagaKC7Df0Z emiTTBgP4FuQV5xKFCDgJ/qvSyW0PZNq82fa1tbYpIAcEmuweB0dTL06i+GwA8MK 2wB7u4yE36/4BoqDiPlBJycB6wp3BUsdo8asD4g+2ew9HzGIKiksxQJrp3EfwHZY SN26bNxTYMVM+Ei/kxcqi6vSib8I8mLku0E7EAhVaP0+LlHesbn/tu1hlebJ23Vi 9Kij5AYZb2yyjLFR6MWeEU20+xDAWI00Nr8RYBsXRzbt1Htrad8DbP5lEjzpkLMU L696mWJrijR58j7ozXyJE0ezpNhK+cvbzT1a2x3b0hflJwwlaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAuXgYQPzNXVVkwfIM4JRq0Obd5mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lNGMz MmNkZS03NjkzLTRkMTAtYWUxZS04YjhlOWQzNjMwNzQvMWRlN2UyMWItN2FmMy0z ZTg0LTg5ZWUtM2JjNzNkMGRlNjE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTRjMzJjZGUtNzY5My00ZDEwLWFl MWUtOGI4ZTlkMzYzMDc0L2U0YzMyY2RlLTc2OTMtNGQxMC1hZTFlLThiOGU5ZDM2 MzA3NC5jcmwwHwYDVR0jBBgwFoAUkjFMWL/PeT5XBCYBM6ApayuFfnowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lNGMzMmNkZS03NjkzLTRkMTAtYWUxZS04Yjhl OWQzNjMwNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArFbhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKAcCj8CIZo/ko4BF6dpM3yzxDNyTiDsKxMHmfTyWnJSJUWN4ZVrDLGP unfbecd1+vfdeOnwCRtRKY+h98JV4n+oZqxmhN9H5alWyHHVjgAIz35mYdJJp7Rf ej89GBkezaSi4fLRC5oco1OfXIqJCzljW6ZSC5MeepeJ+DPGK66ZDaP6JZq2FKzt 0fuKgzLJkNMJxbK/vZqFlmTlk11R4gyC10BDCEsWU5wDIRMSNL+TvitgehNnC4ZS mNHbuFEs4ebqK3ntd6iflOwsnF9COQWTqFdRpwHo4T76EEu6hw49OkjFLIq7+NkT zRSG+p/iCvs+oSYV9XDpZb40nH1UvLQ= -----END CERTIFICATE-----Generated at Thu Nov 21 23:42:55 2024 by rpki-client on console-ams.rpki-client.org