$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/05ecd9f5-0c60-389e-a961-68db6277a2e8.roa File: 05ecd9f5-0c60-389e-a961-68db6277a2e8.roa (raw, json) Hash identifier: lSRjSeB1N/dCBVWaz7kz492K2cXUdTChUALSYz5kDgw= Subject key identifier: 9B:2E:25:E6:8B:2D:89:EC:C5:56:D8:61:0E:F2:CE:6D:90:DD:D7:1D Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285847DD709390DD02B54CBD106E80 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/05ecd9f5-0c60-389e-a961-68db6277a2e8.roa Signing time: Wed 13 Nov 2024 11:00:25 +0000 ROA not before: Wed 13 Nov 2024 11:00:25 +0000 ROA not after: Tue 11 Feb 2025 11:00:25 +0000 asID: 53356 IP address blocks: 172.111.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:dd:70:93:90:dd:02:b5:4c:bd:10:6e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Nov 13 11:00:25 2024 GMT Not After : Feb 11 11:00:25 2025 GMT Subject: CN=6c708976-0d4f-4f6f-b8f9-bd4ca0e1d854 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:18:ad:08:4c:3c:73:72:7a:cf:16:a8:8a:00: e0:68:c2:38:87:ec:7f:fa:e0:c1:80:62:74:33:a1: 2e:51:d5:a2:4c:ec:42:0d:93:7a:1a:14:9a:91:3e: 50:9f:5f:cd:21:3d:ba:cf:4d:e8:0a:8f:ab:4d:b4: f8:0a:ff:59:fa:b5:37:99:d4:6d:07:3f:01:f0:18: 16:1b:0e:ee:76:ff:6a:5f:4e:fd:13:1a:80:20:7a: bc:41:51:fb:a8:9c:94:d2:4f:b0:58:28:93:cc:98: 1e:df:1a:a8:d7:d2:e7:3e:a7:d4:f3:b3:dc:df:a5: f2:1c:99:64:1c:9d:b9:ab:5a:50:d1:23:4b:ee:dc: a6:eb:2d:be:bd:1a:9c:05:50:b4:31:21:a0:48:18: 63:58:d9:0d:6e:d1:87:76:ff:6b:ca:04:69:c3:48: 19:3a:91:a7:d0:db:8d:2a:28:87:c2:24:cd:47:22: 27:94:2d:d8:51:52:a4:ab:33:ab:a3:ab:5d:40:c3: 28:8c:19:e4:9f:18:23:ce:34:6c:41:bc:22:25:76: 82:01:61:53:bc:8b:12:df:66:db:9b:3b:bc:14:e3: 01:74:ea:c8:f1:3a:19:32:b5:c4:54:ef:a9:b1:53: 73:db:92:63:39:ac:af:fe:fa:b4:52:00:4f:4c:b7: 6f:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:2E:25:E6:8B:2D:89:EC:C5:56:D8:61:0E:F2:CE:6D:90:DD:D7:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/05ecd9f5-0c60-389e-a961-68db6277a2e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:72:8a:7f:02:e0:35:42:f3:9e:61:58:00:52:07:4c:f0:ab: 84:80:c8:98:3b:4c:0b:2f:c8:30:74:4e:cd:78:b6:3d:ea:88: d9:20:b8:4c:2c:a0:d5:69:59:1e:8c:16:07:5a:0f:38:ea:50: 1d:0a:07:f2:a9:cf:73:87:80:6d:e7:21:34:4f:e0:6d:5f:d5: ad:5c:97:d8:3f:c4:bb:67:e5:de:49:d3:c7:77:09:2b:32:16: 1a:2a:8f:00:31:bd:3b:98:0e:35:1a:ce:db:76:a3:8f:e7:55: ed:fb:51:9f:40:85:0d:43:34:9b:7a:87:ea:6f:54:70:7b:2d: 08:b2:de:1b:51:de:d3:6a:03:33:44:a7:af:b0:63:3d:6e:7f: 00:51:68:be:0a:d6:29:d9:b6:8e:19:32:67:5a:c0:0c:59:a2: 07:11:e2:b0:f8:7b:ce:67:8d:a3:2c:12:08:7a:c6:59:e8:95: 78:06:a9:e7:47:c7:9e:68:8e:ab:84:93:a9:e6:c1:f6:e1:54: 7d:df:74:4e:e5:7c:92:cd:b4:02:2e:75:c5:3a:22:3a:52:04: 7e:8e:b8:0b:61:6b:6b:b8:1e:ab:b1:67:90:4b:4d:43:53:4e: d5:63:e9:82:e0:72:8d:29:e0:8b:e9:41:0c:04:60:82:8d:97: 27:69:f7:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfdcJOQ3QK1TL0QboAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI0MTExMzExMDAyNVoXDTI1MDIxMTExMDAyNVowLzEtMCsGA1UEAxMk NmM3MDg5NzYtMGQ0Zi00ZjZmLWI4ZjktYmQ0Y2EwZTFkODU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxitCEw8c3J6zxaoigDgaMI4h+x/+uDBgGJ0 M6EuUdWiTOxCDZN6GhSakT5Qn1/NIT26z03oCo+rTbT4Cv9Z+rU3mdRtBz8B8BgW Gw7udv9qX079ExqAIHq8QVH7qJyU0k+wWCiTzJge3xqo19LnPqfU87Pc36XyHJlk HJ25q1pQ0SNL7tym6y2+vRqcBVC0MSGgSBhjWNkNbtGHdv9rygRpw0gZOpGn0NuN KiiHwiTNRyInlC3YUVKkqzOro6tdQMMojBnknxgjzjRsQbwiJXaCAWFTvIsS32bb mzu8FOMBdOrI8ToZMrXEVO+psVNz25JjOayv/vq0UgBPTLdvmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJsuJeaLLYnsxVbYYQ7yzm2Q3dcdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMDVlY2Q5ZjUtMGM2MC0z ODllLWE5NjEtNjhkYjYyNzdhMmU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/RMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIdyin8C4DVC855hWABSB0zwq4SAyJg7TAsvyDB0Ts14tj3qiNkguEws oNVpWR6MFgdaDzjqUB0KB/Kpz3OHgG3nITRP4G1f1a1cl9g/xLtn5d5J08d3CSsy FhoqjwAxvTuYDjUaztt2o4/nVe37UZ9AhQ1DNJt6h+pvVHB7LQiy3htR3tNqAzNE p6+wYz1ufwBRaL4K1inZto4ZMmdawAxZogcR4rD4e85njaMsEgh6xlnolXgGqedH x55ojquEk6nmwfbhVH3fdE7lfJLNtAIudcU6IjpSBH6OuAtha2u4HquxZ5BLTUNT TtVj6YLgco0p4IvpQQwEYIKNlydp94Y= -----END CERTIFICATE-----Generated at Fri Nov 22 05:50:32 2024 by rpki-client on console-fra.rpki-client.org