$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/2d3a7e40-3bd7-35c9-a1e1-4812dfee4865.roa File: 2d3a7e40-3bd7-35c9-a1e1-4812dfee4865.roa (raw, json) Hash identifier: BteLORozK0vTAYUQzEQBaalB/V6fLAbXgbftmZ6XqUs= Subject key identifier: 25:22:79:2D:37:A2:9D:38:F1:67:4F:50:30:AC:21:98:C4:F8:38:DE Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285847DD71C40BF4D28FB04C5EF580 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/2d3a7e40-3bd7-35c9-a1e1-4812dfee4865.roa Signing time: Wed 13 Nov 2024 11:02:49 +0000 ROA not before: Wed 13 Nov 2024 11:02:49 +0000 ROA not after: Tue 11 Feb 2025 11:02:49 +0000 asID: 53356 IP address blocks: 172.111.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:dd:71:c4:0b:f4:d2:8f:b0:4c:5e:f5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Nov 13 11:02:49 2024 GMT Not After : Feb 11 11:02:49 2025 GMT Subject: CN=e5988cba-91d4-48a0-af25-ffaf0b0f0720 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f7:e1:46:95:d7:8d:83:2f:0c:66:54:53:be: 5c:bd:63:90:ab:b9:c8:85:30:ff:a1:34:d8:6e:f5: 0a:73:6d:b5:94:ab:73:57:2e:cc:eb:40:16:6a:70: 13:75:55:1b:86:a1:fc:a0:f0:fb:a5:9c:cb:c6:23: dc:49:de:1c:43:60:34:ea:78:4d:8f:d5:74:6b:c5: fe:ed:b1:e5:26:4e:fe:22:8b:9e:8e:e2:eb:44:8c: 49:6a:1d:78:b9:ed:e8:bf:6f:c7:3b:d3:e3:79:d3: 9a:13:fb:a9:55:d4:cb:e2:50:a7:3f:57:72:5e:25: 81:e6:b4:df:38:13:b0:67:80:c3:7b:2e:c5:65:0e: 47:bc:03:77:9a:98:b5:d5:5e:36:8a:1d:de:30:2f: 4f:9d:84:11:ec:3b:ec:63:24:e2:7d:c3:01:0a:38: ef:b4:81:53:46:3a:10:67:29:70:18:57:6c:5d:e5: f8:a6:4a:7e:9c:e1:aa:5b:9c:df:68:81:8e:e8:d6: c6:95:4f:fa:ac:22:a2:0b:ed:a2:82:f9:90:6d:54: 5d:a5:b7:7d:b5:f1:2b:57:f4:a0:09:f5:d1:0f:07: 1a:77:e9:59:b3:2b:7b:56:9a:9c:d5:72:cc:d7:60: 97:5d:eb:1a:dd:a6:f3:e1:3e:b2:52:ec:29:53:de: ab:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:22:79:2D:37:A2:9D:38:F1:67:4F:50:30:AC:21:98:C4:F8:38:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/2d3a7e40-3bd7-35c9-a1e1-4812dfee4865.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:cc:02:3f:78:02:cd:c7:6b:ff:65:cf:9b:e6:1c:bc:0a:85: fb:51:9a:2f:18:7c:c4:a6:19:22:92:30:6b:4e:01:22:b6:f6: ee:c2:ba:fb:5c:19:0b:0e:b2:bd:d6:73:b0:a2:0b:b6:88:bb: 27:b2:c0:8f:43:ac:3c:17:89:50:3f:49:4a:d9:34:f8:36:fe: 3d:7c:8e:ee:78:2e:de:05:45:53:23:2c:98:62:f4:f7:43:b0: 8f:44:88:a7:e1:68:5d:de:1b:49:e3:2c:a1:c3:ea:75:04:95: 69:2f:bd:07:56:1b:1a:ff:5f:b4:79:4c:6e:b0:5e:a3:32:17: e5:a8:67:d0:fa:61:a0:8e:19:da:8a:36:0e:c1:20:af:08:aa: 31:04:15:85:54:e4:26:23:dc:c5:ce:ac:a6:21:a5:39:cb:87: d2:41:35:41:9c:d1:cd:bc:bb:af:9e:20:0a:c9:93:2a:4b:04: 29:3d:4f:7b:bc:8a:86:7b:12:37:c8:f2:f0:a3:0e:da:a4:b0: 2c:df:7c:01:f2:37:9e:13:3b:c9:88:da:54:49:73:49:8e:f9: 1f:ea:af:18:4d:73:3e:1e:b6:9a:86:28:8e:3c:07:f1:a7:9c: 4c:3c:f5:e4:fd:80:07:2a:89:5b:81:f9:71:0f:f3:65:e1:bd: d2:9d:a4:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfdccQL9NKPsExe9YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI0MTExMzExMDI0OVoXDTI1MDIxMTExMDI0OVowLzEtMCsGA1UEAxMk ZTU5ODhjYmEtOTFkNC00OGEwLWFmMjUtZmZhZjBiMGYwNzIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/fhRpXXjYMvDGZUU75cvWOQq7nIhTD/oTTY bvUKc221lKtzVy7M60AWanATdVUbhqH8oPD7pZzLxiPcSd4cQ2A06nhNj9V0a8X+ 7bHlJk7+IouejuLrRIxJah14ue3ov2/HO9PjedOaE/upVdTL4lCnP1dyXiWB5rTf OBOwZ4DDey7FZQ5HvAN3mpi11V42ih3eMC9PnYQR7DvsYyTifcMBCjjvtIFTRjoQ ZylwGFdsXeX4pkp+nOGqW5zfaIGO6NbGlU/6rCKiC+2igvmQbVRdpbd9tfErV/Sg CfXRDwcad+lZsyt7Vpqc1XLM12CXXesa3abz4T6yUuwpU96r5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCUieS03op048WdPUDCsIZjE+DjeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMmQzYTdlNDAtM2JkNy0z NWM5LWExZTEtNDgxMmRmZWU0ODY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/ZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABfMAj94As3Ha/9lz5vmHLwKhftRmi8YfMSmGSKSMGtOASK29u7Cuvtc GQsOsr3Wc7CiC7aIuyeywI9DrDwXiVA/SUrZNPg2/j18ju54Lt4FRVMjLJhi9PdD sI9EiKfhaF3eG0njLKHD6nUElWkvvQdWGxr/X7R5TG6wXqMyF+WoZ9D6YaCOGdqK Ng7BIK8IqjEEFYVU5CYj3MXOrKYhpTnLh9JBNUGc0c28u6+eIArJkypLBCk9T3u8 ioZ7EjfI8vCjDtqksCzffAHyN54TO8mI2lRJc0mO+R/qrxhNcz4etpqGKI48B/Gn nEw89eT9gAcqiVuB+XEP82XhvdKdpOg= -----END CERTIFICATE-----Generated at Fri Nov 22 05:50:32 2024 by rpki-client on console-fra.rpki-client.org