$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1693deb8-1531-33fd-925a-247e8cd7c80d.roa File: 1693deb8-1531-33fd-925a-247e8cd7c80d.roa (raw, json) Hash identifier: 5BdHnphzvEJbCp6kGPwbDcmaOYcz20Y1Pwiz40/AtN4= Subject key identifier: 67:EE:0A:61:89:E8:A1:E2:58:0B:3E:B7:9D:94:2E:C1:3B:F3:55:33 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F432858477230F155CAD0F1741280C610 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1693deb8-1531-33fd-925a-247e8cd7c80d.roa Signing time: Sun 06 Oct 2024 01:00:31 +0000 ROA not before: Sun 06 Oct 2024 01:00:31 +0000 ROA not after: Sat 04 Jan 2025 02:00:31 +0000 asID: 212238 IP address blocks: 172.111.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:72:30:f1:55:ca:d0:f1:74:12:80:c6:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 6 01:00:31 2024 GMT Not After : Jan 4 02:00:31 2025 GMT Subject: CN=5747f411-0f2d-44aa-801f-448b2f464cd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:90:6c:79:ff:c0:63:25:ab:9d:2d:15:df:58: 23:c3:e9:71:ad:a1:0c:ac:81:58:e2:3b:56:20:c7: df:4f:a0:27:10:6a:1e:b6:91:2c:ba:2d:2a:f4:b5: 31:9c:42:f0:06:7d:34:39:ac:64:03:ab:5f:a2:a9: 54:0a:61:00:e1:22:16:d9:ff:ab:75:06:6f:00:84: 66:eb:a3:7b:cc:6e:67:23:59:cc:43:ac:1e:c3:11: b2:5a:0e:92:6f:26:c0:0f:09:e0:b2:de:87:2d:3e: 84:70:77:2a:73:78:12:e0:b8:44:51:2e:08:54:88: aa:73:cd:ad:4f:74:98:3f:fb:ee:3d:ac:9c:44:6b: a9:e7:35:b1:af:75:36:09:a0:1b:39:f4:d8:f2:66: dd:25:31:3e:a4:b3:41:05:ac:a5:7d:11:99:53:d1: ad:a6:08:19:aa:2d:0f:41:f2:e5:b2:fc:e4:10:69: ed:48:f4:4c:62:ef:75:17:1c:cb:54:b9:18:e1:90: 4d:e7:9c:56:36:fd:a8:a4:ab:46:16:23:26:dd:b2: 78:99:aa:b0:3e:ab:86:60:2b:eb:de:d9:67:c0:d2: 52:a1:4d:d3:04:7d:4f:60:77:d9:cb:ef:2f:9e:ad: 51:39:87:73:bd:4f:fc:72:84:b1:6f:d8:b3:63:6a: c1:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:EE:0A:61:89:E8:A1:E2:58:0B:3E:B7:9D:94:2E:C1:3B:F3:55:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1693deb8-1531-33fd-925a-247e8cd7c80d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:27:53:91:f7:da:b8:1b:8d:c9:3c:55:a6:9a:f7:12:71:bd: 3d:07:ad:01:0c:7c:b6:28:7b:fb:27:a3:1d:c5:40:da:1a:14: ae:8a:1a:a8:f7:70:6c:7e:de:eb:d6:92:5c:0a:1c:3b:e9:6f: cb:08:d9:48:4e:0e:a1:40:ce:e1:69:de:64:22:02:70:85:54: fa:0d:a4:86:e6:2c:7f:34:69:e8:3f:1a:2b:40:ad:71:5e:18: fa:7c:be:e5:dd:29:b7:26:16:25:98:f5:b7:b6:e4:9c:cd:1e: 46:9e:74:34:19:f3:35:f7:2d:38:5e:3d:96:d4:ab:36:7f:f2: d1:43:74:94:10:6f:4f:14:74:ff:95:c9:2a:7e:44:86:6c:e6: 79:88:7c:c5:51:f4:c8:ae:29:ae:de:25:2f:b9:6a:a3:52:5e: 8e:f2:2c:a0:cf:6b:2f:c4:5a:8f:46:29:e7:91:4e:3c:a7:4a: 19:22:7a:89:cd:5a:0a:ea:34:10:d1:dc:8d:7c:56:ed:e5:fd: 61:d4:16:9a:8a:bd:0b:9f:71:45:af:11:5e:32:17:b8:03:65: 14:a0:9f:c6:2b:50:f0:0f:05:7f:cd:1e:fb:3f:5c:97:87:31: ca:32:31:58:c1:72:3f:6a:0d:d8:c3:59:41:a4:63:ad:c8:67: 78:ea:ce:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdyMPFVytDxdBKAxhAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI0MTAwNjAxMDAzMVoXDTI1MDEwNDAyMDAzMVowLzEtMCsGA1UEAxMk NTc0N2Y0MTEtMGYyZC00NGFhLTgwMWYtNDQ4YjJmNDY0Y2QzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZBsef/AYyWrnS0V31gjw+lxraEMrIFY4jtW IMffT6AnEGoetpEsui0q9LUxnELwBn00OaxkA6tfoqlUCmEA4SIW2f+rdQZvAIRm 66N7zG5nI1nMQ6wewxGyWg6SbybADwngst6HLT6EcHcqc3gS4LhEUS4IVIiqc82t T3SYP/vuPaycRGup5zWxr3U2CaAbOfTY8mbdJTE+pLNBBaylfRGZU9GtpggZqi0P QfLlsvzkEGntSPRMYu91FxzLVLkY4ZBN55xWNv2opKtGFiMm3bJ4maqwPquGYCvr 3tlnwNJSoU3TBH1PYHfZy+8vnq1ROYdzvU/8coSxb9izY2rBCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGfuCmGJ6KHiWAs+t52ULsE781UzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMTY5M2RlYjgtMTUzMS0z M2ZkLTkyNWEtMjQ3ZThjZDdjODBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+FMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAEnU5H32rgbjck8Vaaa9xJxvT0HrQEMfLYoe/snox3FQNoaFK6KGqj3 cGx+3uvWklwKHDvpb8sI2UhODqFAzuFp3mQiAnCFVPoNpIbmLH80aeg/GitArXFe GPp8vuXdKbcmFiWY9be25JzNHkaedDQZ8zX3LThePZbUqzZ/8tFDdJQQb08UdP+V ySp+RIZs5nmIfMVR9MiuKa7eJS+5aqNSXo7yLKDPay/EWo9GKeeRTjynShkieonN WgrqNBDR3I18Vu3l/WHUFpqKvQufcUWvEV4yF7gDZRSgn8YrUPAPBX/NHvs/XJeH McoyMVjBcj9qDdjDWUGkY63IZ3jqzg4= -----END CERTIFICATE-----Generated at Fri Nov 22 04:37:32 2024 by rpki-client on console-ams.rpki-client.org