$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/04ec2b42-8e4e-3906-b856-c409b7151e2a.roa File: 04ec2b42-8e4e-3906-b856-c409b7151e2a.roa (raw, json) Hash identifier: 0qZlooP0Rt3LNqIAjtOtMqej2QYVz8ING40OWheiLII= Subject key identifier: 18:BD:B0:5F:7D:98:C4:8E:07:BE:EF:E7:5D:AB:18:4E:29:CB:9E:68 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F432858479F40C5B30303509AF2147C80 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/04ec2b42-8e4e-3906-b856-c409b7151e2a.roa Signing time: Tue 22 Oct 2024 04:23:59 +0000 ROA not before: Tue 22 Oct 2024 04:23:59 +0000 ROA not after: Mon 20 Jan 2025 05:23:59 +0000 asID: 63025 IP address blocks: 172.111.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:9f:40:c5:b3:03:03:50:9a:f2:14:7c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 22 04:23:59 2024 GMT Not After : Jan 20 05:23:59 2025 GMT Subject: CN=3be28f18-6285-4f31-8db4-7361c267990e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:d7:e3:65:07:f4:e6:d9:b9:18:a6:5e:a2:f0: df:b4:ce:7f:2e:6b:cd:f1:63:27:a7:2c:37:c4:4b: 33:6a:d8:a0:03:ac:a2:56:65:4a:30:c0:37:d3:62: d4:ab:8f:50:6b:66:43:d9:6e:f0:82:8b:33:19:4e: 21:36:ad:2b:6b:28:61:19:61:17:1a:6c:05:a9:82: 36:54:f2:e5:8b:19:78:41:a6:fe:fc:66:b2:78:bf: 3e:28:1b:43:ce:14:8a:34:3e:69:ea:08:eb:1b:f5: 4f:4c:2d:30:6d:5d:9e:1a:c5:70:d7:ae:0e:4c:ea: ca:29:37:b2:bc:ac:a1:30:f9:7e:63:5f:3c:8b:54: dd:57:f6:24:17:1f:7f:2b:f5:c9:71:b8:60:8d:cb: e1:ec:cc:10:f1:7e:31:3e:7e:1f:38:71:62:6a:a1: 95:57:aa:bc:9f:e8:3e:de:28:e5:a4:f8:f7:d6:fc: e2:a3:23:17:f3:2b:a3:fa:ff:65:7f:34:c7:8b:a7: a6:08:7c:e3:c1:20:db:bb:d4:4a:ea:1c:02:47:2a: f2:bc:db:4e:d4:13:08:ae:c3:57:83:ee:1a:4e:08: 75:21:54:ee:b5:c2:0d:a2:1e:c4:c9:8c:24:dc:9e: f4:4a:32:46:d2:ae:4b:75:51:e7:07:72:39:98:69: 5c:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:BD:B0:5F:7D:98:C4:8E:07:BE:EF:E7:5D:AB:18:4E:29:CB:9E:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/04ec2b42-8e4e-3906-b856-c409b7151e2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:24:31:8d:88:05:f6:98:79:40:ce:af:b2:bd:47:e2:60:39: 1d:df:d4:3f:61:4a:13:66:31:10:37:47:78:78:7e:07:b5:24: 26:fb:cf:b3:e4:74:ac:07:bc:b6:b0:ea:93:e5:d3:00:30:74: 16:3e:af:93:6d:a4:92:65:e0:d4:d7:3d:e0:cf:72:e4:14:d3: 71:96:eb:6a:80:90:34:f2:5f:e1:c0:63:c2:b6:4e:69:bc:9c: 49:af:d4:00:20:af:44:38:df:04:e9:8f:cc:2f:bd:ff:b9:8e: 9f:e5:1b:51:1a:01:5c:09:f4:e9:8f:6f:cf:52:69:d3:69:58: bb:7d:08:c0:d3:c1:3a:3e:41:21:fe:d6:b2:4a:05:5e:2f:90: ed:62:26:48:34:0e:d8:d4:be:e5:ef:83:61:25:e1:f6:84:0f: 70:13:4a:b2:14:f6:1e:77:b1:8b:a4:0c:9f:da:99:88:39:5c: 17:9e:3d:20:6c:cd:eb:3e:5e:7a:5c:ba:d3:72:64:46:76:e0: 57:60:db:dc:f7:03:d7:9e:a5:fd:12:6c:08:20:04:5f:f3:f8: 7c:da:be:5a:1c:7d:1b:89:ea:ce:5c:da:4f:75:5b:64:e4:2d: 95:62:99:e3:31:f5:cb:64:31:a3:e4:be:35:75:6d:ad:35:c8: 22:0d:05:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEefQMWzAwNQmvIUfIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI0MTAyMjA0MjM1OVoXDTI1MDEyMDA1MjM1OVowLzEtMCsGA1UEAxMk M2JlMjhmMTgtNjI4NS00ZjMxLThkYjQtNzM2MWMyNjc5OTBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA09fjZQf05tm5GKZeovDftM5/LmvN8WMnpyw3 xEszatigA6yiVmVKMMA302LUq49Qa2ZD2W7wgoszGU4hNq0rayhhGWEXGmwFqYI2 VPLlixl4Qab+/GayeL8+KBtDzhSKND5p6gjrG/VPTC0wbV2eGsVw164OTOrKKTey vKyhMPl+Y188i1TdV/YkFx9/K/XJcbhgjcvh7MwQ8X4xPn4fOHFiaqGVV6q8n+g+ 3ijlpPj31vzioyMX8yuj+v9lfzTHi6emCHzjwSDbu9RK6hwCRyryvNtO1BMIrsNX g+4aTgh1IVTutcINoh7EyYwk3J70SjJG0q5LdVHnB3I5mGlcfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBi9sF99mMSOB77v512rGE4py55oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMDRlYzJiNDItOGU0ZS0z OTA2LWI4NTYtYzQwOWI3MTUxZTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACckMY2IBfaYeUDOr7K9R+JgOR3f1D9hShNmMRA3R3h4fge1JCb7z7Pk dKwHvLaw6pPl0wAwdBY+r5NtpJJl4NTXPeDPcuQU03GW62qAkDTyX+HAY8K2Tmm8 nEmv1AAgr0Q43wTpj8wvvf+5jp/lG1EaAVwJ9OmPb89SadNpWLt9CMDTwTo+QSH+ 1rJKBV4vkO1iJkg0DtjUvuXvg2El4faED3ATSrIU9h53sYukDJ/amYg5XBeePSBs zes+XnpcutNyZEZ24Fdg29z3A9eepf0SbAggBF/z+HzavlocfRuJ6s5c2k91W2Tk LZVimeMx9ctkMaPkvjV1ba01yCINBXk= -----END CERTIFICATE-----Generated at Fri Nov 22 05:50:32 2024 by rpki-client on console-fra.rpki-client.org