$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/2dd78db9-6d0c-3114-a64a-769cedc85549.roa File: 2dd78db9-6d0c-3114-a64a-769cedc85549.roa (raw, json) Hash identifier: Hy+MJr5CFFkR8l+69LRkvlkSvbVCqn6UmkN+kVfi0sY= Subject key identifier: 1B:01:FB:B4:F2:7A:1F:7D:EE:51:1D:0D:90:5F:9F:23:49:12:43:1D Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F432858473A5B8D57CC43A1C6D7047700 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/2dd78db9-6d0c-3114-a64a-769cedc85549.roa Signing time: Mon 16 Sep 2024 01:00:29 +0000 ROA not before: Mon 16 Sep 2024 01:00:29 +0000 ROA not after: Sun 15 Dec 2024 02:00:29 +0000 asID: 9009 IP address blocks: 172.111.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:3a:5b:8d:57:cc:43:a1:c6:d7:04:77:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Sep 16 01:00:29 2024 GMT Not After : Dec 15 02:00:29 2024 GMT Subject: CN=7dbe6c26-b85a-4dbc-8b7e-89c606df4d6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:56:61:9e:17:99:6a:45:b7:6f:00:d1:a9:95: 2c:4b:03:d0:35:d3:fa:7f:40:38:a8:d8:ed:af:f0: 0d:25:91:81:3a:2a:c1:b3:44:27:ae:7b:8b:09:3c: 0e:fe:cf:02:07:99:b2:ce:6e:fc:8d:da:9a:1e:4f: a8:07:22:cf:d5:67:0e:73:a0:cb:1b:07:82:52:12: 76:9d:a2:2e:9f:ed:93:0c:81:2a:5b:f8:c4:c6:be: 1b:63:78:8c:71:e0:f6:54:91:37:43:cc:b7:06:82: ce:b3:45:e3:fa:b0:0a:c5:02:cb:be:99:50:12:d2: 55:32:0a:da:82:a5:6c:58:ce:70:6b:4f:99:db:fc: ed:54:30:e3:1d:12:6a:af:32:4b:b1:6f:3c:ac:0b: ab:42:80:02:67:14:8c:2c:09:cb:91:32:89:ba:3d: 2f:fe:a6:9e:3a:44:9a:95:d6:a5:e3:11:11:f2:68: b1:ab:59:d4:f9:86:ae:89:3e:d6:96:ed:cd:7d:dc: 68:c2:26:fd:b3:d9:27:c0:49:fc:c8:f0:63:eb:e3: 0b:34:e0:23:df:9a:93:b8:b5:59:81:54:00:af:56: b0:36:bd:51:d8:54:3e:ec:0e:65:9b:f9:33:65:5c: 8c:fc:c0:ff:de:10:33:fe:b3:cf:61:bd:f3:5d:fc: b8:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:01:FB:B4:F2:7A:1F:7D:EE:51:1D:0D:90:5F:9F:23:49:12:43:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/2dd78db9-6d0c-3114-a64a-769cedc85549.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.163.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:09:62:77:59:28:8c:08:2d:ca:2b:d9:bf:91:5a:9c:24:64: 82:15:29:7e:cf:02:95:93:f8:bd:32:34:13:35:f5:3b:f1:45: bb:c9:ae:46:01:25:52:c2:8f:14:54:c7:e0:dc:d4:37:a0:94: 21:6f:a4:cf:d7:80:f5:f1:4d:52:f0:c4:11:29:39:c7:f4:a0: 61:63:74:81:a0:fc:e4:a1:6d:af:01:1c:9a:f1:25:87:1b:d7: d5:eb:c4:81:0d:3f:11:36:b6:68:47:1e:1f:6f:94:90:4f:6e: 63:a9:70:10:d2:04:fa:26:de:ad:e6:ab:6d:76:86:4e:ea:34: c0:74:95:f0:cf:c7:ed:90:e2:69:60:7a:d2:13:22:7f:fa:fa: 32:55:95:ca:b3:c8:66:e3:be:e3:92:f0:32:be:be:21:ed:90: 13:ef:e4:7f:51:5c:77:f3:c4:b9:13:ac:a8:e8:47:c5:97:d3: 71:a7:5f:4a:5f:07:3f:e5:82:f7:45:d4:a2:0f:a6:af:4b:3c: c4:1c:92:26:8e:fc:fa:6a:20:58:61:de:1f:ee:88:87:84:02: 00:06:e6:e0:be:1e:94:c1:d7:19:03:aa:91:a9:47:60:5a:28: 65:e1:93:58:29:f6:a4:22:be:04:b9:28:58:1d:96:9c:93:dd: d3:de:a6:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc6W41XzEOhxtcEdwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI0MDkxNjAxMDAyOVoXDTI0MTIxNTAyMDAyOVowLzEtMCsGA1UEAxMk N2RiZTZjMjYtYjg1YS00ZGJjLThiN2UtODljNjA2ZGY0ZDZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1ZhnheZakW3bwDRqZUsSwPQNdP6f0A4qNjt r/ANJZGBOirBs0QnrnuLCTwO/s8CB5myzm78jdqaHk+oByLP1WcOc6DLGweCUhJ2 naIun+2TDIEqW/jExr4bY3iMceD2VJE3Q8y3BoLOs0Xj+rAKxQLLvplQEtJVMgra gqVsWM5wa0+Z2/ztVDDjHRJqrzJLsW88rAurQoACZxSMLAnLkTKJuj0v/qaeOkSa ldal4xER8mixq1nU+YauiT7Wlu3Nfdxowib9s9knwEn8yPBj6+MLNOAj35qTuLVZ gVQAr1awNr1R2FQ+7A5lm/kzZVyM/MD/3hAz/rPPYb3zXfy43QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBsB+7Tyeh997lEdDZBfnyNJEkMdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMmRkNzhkYjktNmQwYy0z MTE0LWE2NGEtNzY5Y2VkYzg1NTQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+jMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF8JYndZKIwILcor2b+RWpwkZIIVKX7PApWT+L0yNBM19TvxRbvJrkYB JVLCjxRUx+Dc1DeglCFvpM/XgPXxTVLwxBEpOcf0oGFjdIGg/OShba8BHJrxJYcb 19XrxIENPxE2tmhHHh9vlJBPbmOpcBDSBPom3q3mq212hk7qNMB0lfDPx+2Q4mlg etITIn/6+jJVlcqzyGbjvuOS8DK+viHtkBPv5H9RXHfzxLkTrKjoR8WX03GnX0pf Bz/lgvdF1KIPpq9LPMQckiaO/PpqIFhh3h/uiIeEAgAG5uC+HpTB1xkDqpGpR2Ba KGXhk1gp9qQivgS5KFgdlpyT3dPepkw= -----END CERTIFICATE-----Generated at Thu Nov 21 23:36:40 2024 by rpki-client on console-ams.rpki-client.org