$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/0b9309e3-07db-3044-81aa-b836a369a052.roa File: 0b9309e3-07db-3044-81aa-b836a369a052.roa (raw, json) Hash identifier: yOvNe34oYzMqztLhoGXOLUeSJ9muSqUU62ZGchlFXeg= Subject key identifier: 4E:05:FC:2A:51:8E:9D:44:A2:79:DE:78:18:1E:A3:B7:B1:79:ED:AF Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F432858477230F24D8CCE7BB6EB3352C0 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/0b9309e3-07db-3044-81aa-b836a369a052.roa Signing time: Sun 06 Oct 2024 01:00:31 +0000 ROA not before: Sun 06 Oct 2024 01:00:31 +0000 ROA not after: Sat 04 Jan 2025 02:00:31 +0000 asID: 212238 IP address blocks: 172.111.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:72:30:f2:4d:8c:ce:7b:b6:eb:33:52:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 6 01:00:31 2024 GMT Not After : Jan 4 02:00:31 2025 GMT Subject: CN=2aa38012-50b9-40be-9b9a-f222190e2191 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ac:51:40:c4:9b:76:1e:20:fc:0b:08:7e:ba: f2:1c:44:f0:0c:8d:75:b2:97:29:32:60:fb:13:30: 2e:a0:d6:65:64:be:0b:5c:17:26:22:cc:ad:66:93: 1e:74:a5:c3:c4:8d:0d:44:f9:66:64:57:a8:73:d5: c8:27:e7:38:41:ad:12:71:9e:65:d8:82:d9:d0:0d: d9:8c:65:38:56:fd:dd:12:e4:bf:45:05:e9:a4:e8: 67:97:70:40:0a:c4:74:92:5a:bf:92:13:9f:e3:c8: 2e:49:55:24:6b:d9:50:97:aa:b2:66:b9:f7:3b:cb: 68:83:19:66:ce:75:58:fd:4e:b6:46:2c:09:13:08: 9f:c5:f1:43:66:73:e9:dd:7b:cb:ff:2e:3b:9c:16: b4:08:9a:9c:3a:0d:5c:99:81:32:67:0b:68:50:5e: cc:48:96:d3:43:fa:79:43:39:88:3e:89:8f:76:d1: 58:f9:8d:f1:2a:56:60:ca:ab:83:1e:5d:dc:a3:b4: 00:42:c7:00:93:56:05:4a:32:f0:1e:7f:28:4b:e2: 18:34:c2:76:6a:42:84:cd:fe:9e:8b:eb:9b:95:c0: b7:71:ce:f5:0a:5f:cf:c0:9d:1a:55:5c:71:b3:25: 8d:3b:4c:db:65:f3:11:d7:0c:ac:1d:79:48:16:70: 25:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:05:FC:2A:51:8E:9D:44:A2:79:DE:78:18:1E:A3:B7:B1:79:ED:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/0b9309e3-07db-3044-81aa-b836a369a052.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:82:96:16:13:6c:f1:fd:41:1a:8a:99:19:d2:5d:6c:6a:41: 3c:7f:e5:54:cf:c5:d6:52:72:d2:25:c6:d2:51:52:7c:07:96: 5a:e2:ee:85:7c:c6:1a:07:72:d0:a0:f2:a5:69:00:cd:88:4c: d3:7a:64:e8:d3:3f:f9:72:0e:ab:ba:c0:fe:99:5c:d7:49:7c: 31:4e:5f:3f:c7:48:0a:0c:f8:3f:01:ab:e5:86:54:d8:ca:fd: af:58:80:a9:10:9c:a4:11:7b:f6:e0:42:27:f3:98:c5:3c:ac: f7:0b:b7:54:7c:7d:76:8f:16:42:f3:1b:6f:1b:a3:de:c4:38: dc:1a:1c:1f:d0:1e:62:1d:45:41:d2:e3:12:6e:f4:9d:04:9b: da:9a:99:60:39:c6:8c:d8:ec:41:2b:eb:69:45:5d:f4:11:f1: cf:18:e3:32:01:b6:72:58:28:34:26:fa:9c:e7:5e:b1:bb:df: 3b:d9:93:ed:21:8d:b8:d4:33:29:16:04:6d:64:b6:ff:94:81: 9d:54:90:8c:74:27:96:33:ac:b0:98:39:b1:17:8d:bc:4e:0f: 2c:db:a9:eb:78:72:fe:c8:f5:c0:04:3b:2d:17:95:0b:80:2e: bc:39:5b:3b:b7:e2:d1:e6:ed:64:0b:0c:33:dc:94:d6:75:86: ec:bc:16:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdyMPJNjM57tuszUsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI0MTAwNjAxMDAzMVoXDTI1MDEwNDAyMDAzMVowLzEtMCsGA1UEAxMk MmFhMzgwMTItNTBiOS00MGJlLTliOWEtZjIyMjE5MGUyMTkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzaxRQMSbdh4g/AsIfrryHETwDI11spcpMmD7 EzAuoNZlZL4LXBcmIsytZpMedKXDxI0NRPlmZFeoc9XIJ+c4Qa0ScZ5l2ILZ0A3Z jGU4Vv3dEuS/RQXppOhnl3BACsR0klq/khOf48guSVUka9lQl6qyZrn3O8togxlm znVY/U62RiwJEwifxfFDZnPp3XvL/y47nBa0CJqcOg1cmYEyZwtoUF7MSJbTQ/p5 QzmIPomPdtFY+Y3xKlZgyquDHl3co7QAQscAk1YFSjLwHn8oS+IYNMJ2akKEzf6e i+ublcC3cc71Cl/PwJ0aVVxxsyWNO0zbZfMR1wysHXlIFnAlKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE4F/CpRjp1EonneeBgeo7exee2vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMGI5MzA5ZTMtMDdkYi0z MDQ0LTgxYWEtYjgzNmEzNjlhMDUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACGClhYTbPH9QRqKmRnSXWxqQTx/5VTPxdZSctIlxtJRUnwHllri7oV8 xhoHctCg8qVpAM2ITNN6ZOjTP/lyDqu6wP6ZXNdJfDFOXz/HSAoM+D8Bq+WGVNjK /a9YgKkQnKQRe/bgQifzmMU8rPcLt1R8fXaPFkLzG28bo97EONwaHB/QHmIdRUHS 4xJu9J0Em9qamWA5xozY7EEr62lFXfQR8c8Y4zIBtnJYKDQm+pznXrG73zvZk+0h jbjUMykWBG1ktv+UgZ1UkIx0J5YzrLCYObEXjbxODyzbqet4cv7I9cAEOy0XlQuA Lrw5Wzu34tHm7WQLDDPclNZ1huy8FsY= -----END CERTIFICATE-----Generated at Fri Nov 22 04:37:31 2024 by rpki-client on console-ams.rpki-client.org