$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/08e32952-ffb7-3d9a-b4fd-75e58b99758b.roa File: 08e32952-ffb7-3d9a-b4fd-75e58b99758b.roa (raw, json) Hash identifier: jfYWxRSjMW4i+sIOf+B1pvaFTZhn2GdfLWNEyLo+4E0= Subject key identifier: 98:F2:A1:2D:86:5F:47:68:5C:46:A5:10:95:A1:64:49:DE:2C:2C:7B Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285847EB3F26ED4BB1574B06E70308 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/08e32952-ffb7-3d9a-b4fd-75e58b99758b.roa Signing time: Mon 18 Nov 2024 09:42:09 +0000 ROA not before: Mon 18 Nov 2024 09:42:09 +0000 ROA not after: Sun 16 Feb 2025 09:42:09 +0000 asID: 16509 IP address blocks: 172.111.190.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:eb:3f:26:ed:4b:b1:57:4b:06:e7:03:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Nov 18 09:42:09 2024 GMT Not After : Feb 16 09:42:09 2025 GMT Subject: CN=6fe3ef07-9eec-40e8-a28e-2de31577ac05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:9e:bf:a9:5c:23:2f:6b:41:03:c5:e0:63:59: 85:3a:5b:a1:cc:73:94:6a:f9:3f:33:a3:b4:a3:9c: f3:2e:89:97:a1:29:ae:f0:c7:ac:1d:d3:80:03:60: 79:eb:fe:3e:d4:ea:d7:e3:94:52:e1:6f:80:cf:3b: 09:4d:61:9b:2a:2a:4a:a7:8b:82:94:7b:03:a3:40: ce:62:b5:25:a6:25:8a:10:f3:bf:cd:dd:25:94:96: 58:be:af:1f:ea:be:ff:59:79:23:61:ca:a5:7e:1f: 90:de:a8:41:27:67:32:0a:86:c8:24:ea:53:af:c8: ed:49:24:24:dc:31:5d:e3:b4:e8:19:a1:fa:8e:9f: ac:30:c2:6c:ea:c6:46:14:8c:6a:d0:62:20:85:d3: ab:46:61:3b:9e:99:4a:ee:70:1d:1a:e0:7f:a5:14: fc:7c:71:88:87:5d:18:72:9c:3d:16:50:d0:61:8a: 36:71:02:64:89:5a:80:2b:3c:5f:7b:19:10:97:37: ab:da:3f:7a:e9:34:d6:e1:1a:0b:da:91:a0:c6:86: d0:c6:b9:b8:56:93:ad:3a:39:75:2f:07:ff:ad:24: b7:eb:87:af:ec:c7:04:9a:51:a5:5b:75:0f:13:fe: 86:38:5f:ce:31:d2:70:6d:66:30:0a:11:ed:53:95: e9:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:F2:A1:2D:86:5F:47:68:5C:46:A5:10:95:A1:64:49:DE:2C:2C:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/08e32952-ffb7-3d9a-b4fd-75e58b99758b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.190.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:89:90:11:93:35:31:41:7f:70:60:b9:0d:5d:38:99:5f:af: 23:f2:4a:74:18:e3:48:f6:7d:c8:f1:ae:5e:69:2f:d7:a5:59: 86:2d:68:4b:cf:f8:b6:29:ee:85:19:33:f7:20:0f:ab:31:36: 7f:17:65:d9:44:53:da:bf:0f:90:85:1c:d0:b6:59:c5:6e:0a: 47:1e:d7:25:da:4c:a5:ce:16:25:49:a9:9d:2f:e1:7e:38:28: 67:9c:94:4b:7a:c9:a0:dd:b1:8e:4c:01:8d:f0:33:bd:0c:fb: 4c:ce:25:35:5d:b6:3a:b4:f7:e3:56:19:a4:a3:a7:b1:92:b6: 8a:e7:34:50:b2:dd:31:4f:f0:a9:9e:aa:a9:37:20:8c:7f:21: cd:a4:ad:06:6c:aa:53:3a:68:54:79:28:e9:ee:1d:28:7a:e2: c9:11:ff:f2:28:bc:80:0a:25:98:90:7b:e6:92:cc:c5:46:b9: 6f:41:d3:8e:3b:36:1b:da:66:7c:6f:ce:56:f0:a9:e9:8f:ac: b1:57:6a:5c:ab:15:3b:3d:a3:bf:0b:ca:87:55:80:75:c4:1b: 03:aa:97:60:2a:eb:dd:14:fa:3d:aa:ee:06:12:51:36:ec:5f: e2:45:1b:fd:b3:d5:30:cc:86:27:90:d8:6c:a8:1b:9f:a5:73: e7:de:a5:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfrPybtS7FXSwbnAwgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI0MTExODA5NDIwOVoXDTI1MDIxNjA5NDIwOVowLzEtMCsGA1UEAxMk NmZlM2VmMDctOWVlYy00MGU4LWEyOGUtMmRlMzE1NzdhYzA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJ6/qVwjL2tBA8XgY1mFOluhzHOUavk/M6O0 o5zzLomXoSmu8MesHdOAA2B56/4+1OrX45RS4W+AzzsJTWGbKipKp4uClHsDo0DO YrUlpiWKEPO/zd0llJZYvq8f6r7/WXkjYcqlfh+Q3qhBJ2cyCobIJOpTr8jtSSQk 3DFd47ToGaH6jp+sMMJs6sZGFIxq0GIghdOrRmE7nplK7nAdGuB/pRT8fHGIh10Y cpw9FlDQYYo2cQJkiVqAKzxfexkQlzer2j966TTW4RoL2pGgxobQxrm4VpOtOjl1 Lwf/rSS364ev7McEmlGlW3UPE/6GOF/OMdJwbWYwChHtU5XpEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJjyoS2GX0doXEalEJWhZEneLCx7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMDhlMzI5NTItZmZiNy0z ZDlhLWI0ZmQtNzVlNThiOTk3NThiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrG++MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGiJkBGTNTFBf3BguQ1dOJlfryPySnQY40j2fcjxrl5pL9elWYYtaEvP +LYp7oUZM/cgD6sxNn8XZdlEU9q/D5CFHNC2WcVuCkce1yXaTKXOFiVJqZ0v4X44 KGeclEt6yaDdsY5MAY3wM70M+0zOJTVdtjq09+NWGaSjp7GStornNFCy3TFP8Kme qqk3IIx/Ic2krQZsqlM6aFR5KOnuHSh64skR//IovIAKJZiQe+aSzMVGuW9B0447 NhvaZnxvzlbwqemPrLFXalyrFTs9o78LyodVgHXEGwOql2Aq690U+j2q7gYSUTbs X+JFG/2z1TDMhieQ2GyoG5+lc+fepZM= -----END CERTIFICATE-----Generated at Fri Nov 22 00:23:35 2024 by rpki-client on console-fra.rpki-client.org