$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a71e0638-78b5-3914-8d96-9db194d3fc38.roa File: a71e0638-78b5-3914-8d96-9db194d3fc38.roa (raw, json) Hash identifier: ds/VYEq+QROilCKwXEuHdYMbL0dhGZEvzxCju9MEKs4= Subject key identifier: 4F:DE:DA:F2:38:96:33:09:A5:FA:18:FF:02:5E:63:6F:F5:42:7D:AE Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285846A4FFAFFD0E05578DFAC97500 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a71e0638-78b5-3914-8d96-9db194d3fc38.roa Signing time: Wed 24 Jul 2024 13:00:35 +0000 ROA not before: Wed 24 Jul 2024 13:00:35 +0000 ROA not after: Tue 22 Oct 2024 13:00:35 +0000 asID: 9009 IP address blocks: 172.111.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 22 Sep 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:46:a4:ff:af:fd:0e:05:57:8d:fa:c9:75:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jul 24 13:00:35 2024 GMT Not After : Oct 22 13:00:35 2024 GMT Subject: CN=059b0002-d0fc-418a-9538-3331d262483c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:2d:9e:40:09:10:40:dc:e8:bb:aa:da:4c:14: 3b:0b:75:c0:ee:d9:82:d8:97:4f:28:13:e6:99:e5: a2:37:b9:f8:a4:fd:2a:3e:49:b2:9e:78:b8:89:27: 01:fc:d0:a5:00:10:ad:f5:3c:2b:e7:0d:35:30:6e: 86:de:39:e3:7b:85:61:5d:48:84:5e:59:d0:ba:39: c3:9a:1f:2c:ad:b9:85:ff:5b:30:01:02:e9:38:58: 21:93:79:8f:02:2c:86:f1:2f:9e:ff:c0:d7:3b:23: 27:e7:3c:1c:34:5b:c2:ef:91:be:55:c6:b3:60:df: b2:eb:b7:4c:e6:d9:04:6c:9d:72:f1:e0:fb:14:0c: be:58:0e:a4:4e:11:06:f6:cf:bb:d3:09:1d:59:c6: 29:48:f0:47:56:18:d5:16:ef:3d:4b:3b:7a:61:d4: b4:28:c5:7a:94:df:84:05:92:e9:73:ab:af:d2:75: 41:37:32:4b:5b:29:56:6e:45:71:33:2b:6e:ed:e1: 5e:ab:83:9a:d4:a2:f6:22:41:0e:e9:31:6a:80:98: 4e:90:19:bb:2f:5c:29:de:73:89:06:46:41:fc:69: 5a:5e:b6:2d:43:dc:c3:7e:c0:d1:5f:41:80:07:f9: ac:ae:cc:e8:2c:84:28:9e:e8:48:f3:4f:d9:cd:d5: f9:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:DE:DA:F2:38:96:33:09:A5:FA:18:FF:02:5E:63:6F:F5:42:7D:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a71e0638-78b5-3914-8d96-9db194d3fc38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:20:51:a7:06:1a:6e:99:4a:fa:c4:8a:cd:36:13:61:31:54: 2d:a9:3c:35:d3:52:04:2f:dd:22:42:1c:ff:45:76:2e:be:73: c8:aa:87:80:6f:b1:74:ba:be:6b:db:c5:ae:32:72:d1:16:9d: 45:68:01:53:f5:d0:f1:4b:8f:06:b8:62:27:53:d3:3e:39:21: 1e:c3:8e:a8:8d:7e:bf:bf:bf:8b:bf:3a:f2:76:d7:10:87:e1: 48:2d:16:57:41:79:86:e8:ef:8f:0a:70:87:af:67:3e:d9:89: ac:b0:58:a0:75:cf:af:0e:78:66:be:16:77:fb:3e:2d:bc:41: ac:6c:41:fb:e6:3e:d4:50:22:72:06:c5:7d:ba:2b:d8:51:09: bc:7b:09:07:65:53:5d:33:98:18:78:1a:90:64:14:82:fb:eb: d5:7f:0d:bc:8e:df:14:32:f3:e5:87:44:b2:ba:40:ca:e4:4b: b0:69:54:4d:e5:63:52:0d:13:83:c4:3e:83:e6:3c:a6:e7:17: ae:7b:1a:56:11:1e:c1:18:34:5c:ec:ed:9f:f8:37:29:7a:0e: 89:a9:4d:9b:03:9e:c1:62:ac:c1:5e:53:06:e3:91:c4:ec:12: 51:65:6a:7b:ad:d3:54:1c:e9:52:2b:85:ee:e1:5f:b4:c1:7f: fa:57:d3:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEak/6/9DgVXjfrJdQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI0MDcyNDEzMDAzNVoXDTI0MTAyMjEzMDAzNVowLzEtMCsGA1UEAxMk MDU5YjAwMDItZDBmYy00MThhLTk1MzgtMzMzMWQyNjI0ODNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAii2eQAkQQNzou6raTBQ7C3XA7tmC2JdPKBPm meWiN7n4pP0qPkmynni4iScB/NClABCt9Twr5w01MG6G3jnje4VhXUiEXlnQujnD mh8srbmF/1swAQLpOFghk3mPAiyG8S+e/8DXOyMn5zwcNFvC75G+VcazYN+y67dM 5tkEbJ1y8eD7FAy+WA6kThEG9s+70wkdWcYpSPBHVhjVFu89Szt6YdS0KMV6lN+E BZLpc6uv0nVBNzJLWylWbkVxMytu7eFeq4Oa1KL2IkEO6TFqgJhOkBm7L1wp3nOJ BkZB/GlaXrYtQ9zDfsDRX0GAB/msrszoLIQonuhI80/ZzdX5DwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE/e2vI4ljMJpfoY/wJeY2/1Qn2uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYTcxZTA2MzgtNzhiNS0z OTE0LThkOTYtOWRiMTk0ZDNmYzM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/xMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE8gUacGGm6ZSvrEis02E2ExVC2pPDXTUgQv3SJCHP9Fdi6+c8iqh4Bv sXS6vmvbxa4yctEWnUVoAVP10PFLjwa4YidT0z45IR7DjqiNfr+/v4u/OvJ21xCH 4UgtFldBeYbo748KcIevZz7ZiaywWKB1z68OeGa+Fnf7Pi28QaxsQfvmPtRQInIG xX26K9hRCbx7CQdlU10zmBh4GpBkFIL769V/DbyO3xQy8+WHRLK6QMrkS7BpVE3l Y1INE4PEPoPmPKbnF657GlYRHsEYNFzs7Z/4Nyl6DompTZsDnsFirMFeUwbjkcTs ElFlanut01Qc6VIrhe7hX7TBf/pX03M= -----END CERTIFICATE-----Generated at Sat Sep 21 00:26:56 2024 by rpki-client on console-fra.rpki-client.org