$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/33a0ff32-babe-3bdf-8441-bb1e81b0a949.roa File: 33a0ff32-babe-3bdf-8441-bb1e81b0a949.roa (raw, json) Hash identifier: mz0RecekuiyVIhb/tAkssXJ/JSWZnhNXH+4LZI5B3Rg= Subject key identifier: 8A:3B:EA:84:24:EC:8C:8B:B6:5E:DC:5A:3F:87:15:02:D2:85:F3:57 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F432858476B363E0FC1807FC8B1C43700 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/33a0ff32-babe-3bdf-8441-bb1e81b0a949.roa Signing time: Thu 03 Oct 2024 13:00:41 +0000 ROA not before: Thu 03 Oct 2024 13:00:41 +0000 ROA not after: Wed 01 Jan 2025 14:00:41 +0000 asID: 9009 IP address blocks: 172.111.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:6b:36:3e:0f:c1:80:7f:c8:b1:c4:37:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 3 13:00:41 2024 GMT Not After : Jan 1 14:00:41 2025 GMT Subject: CN=1118dc50-7381-4b22-a573-0f033bae804b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:4e:0e:a0:5b:84:c0:27:f9:da:bb:c7:84:e8: 02:c4:0f:e5:1c:c9:2d:84:f1:39:fc:0e:6e:98:b2: d3:d1:e6:a2:3e:bc:1c:b3:d1:eb:63:38:d5:cf:36: d2:47:7f:3c:8b:89:e5:e1:78:81:be:63:5d:46:f3: ae:83:c7:bf:5e:9e:6b:12:d6:bf:b8:f4:85:f7:ed: 71:d0:23:9a:ad:d0:aa:65:fa:53:9c:24:79:a3:16: 2f:9c:0f:94:83:eb:2e:5a:c2:8a:7d:9c:9f:9b:de: 58:86:db:d3:13:79:c8:43:51:e3:50:6d:76:e9:25: 87:02:7d:96:a0:0a:7f:e4:3b:44:a3:8a:e2:97:bf: 09:fe:d6:85:22:16:b4:2c:6f:95:df:b0:12:70:b7: d5:bd:19:e4:93:ca:60:d6:ab:b4:b8:6b:ed:4c:81: b1:37:1c:d8:02:3b:65:d0:63:d0:26:5b:c0:c8:6c: 9c:ac:01:6d:3e:08:bd:d1:3d:2e:df:6f:12:9c:4f: f4:7f:94:da:1c:ce:5b:7e:43:d7:77:4d:47:a2:8b: a5:e4:96:bf:5d:6e:15:c7:bb:22:a7:f2:13:80:2d: 3f:d2:7b:3d:88:e1:a9:fa:fc:ca:d0:9c:61:45:5c: a9:ce:9c:96:5d:89:2b:bf:e0:48:4a:5b:c8:66:f1: 19:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:3B:EA:84:24:EC:8C:8B:B6:5E:DC:5A:3F:87:15:02:D2:85:F3:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/33a0ff32-babe-3bdf-8441-bb1e81b0a949.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:34:ed:f7:c4:c7:ea:58:fb:97:26:14:64:cf:b3:b4:6c:1a: b0:71:aa:6e:db:8b:4d:65:fa:60:61:97:30:04:e5:27:2f:cc: 5d:68:5a:29:28:a3:0c:67:f9:a8:5e:5d:18:7a:0a:11:21:fd: a0:40:36:71:3a:ed:58:10:01:06:f7:9e:1b:88:ab:3b:93:27: 22:b0:41:92:24:88:81:ca:f2:16:2f:f5:9c:b1:0d:09:5e:05: fb:d2:fe:da:c0:c4:91:b7:36:5d:b3:5a:bf:2f:a4:76:f6:74: 2b:a3:05:36:10:02:7c:21:54:a4:26:47:68:e3:ce:b6:f8:77: 2b:47:e6:98:5e:f6:c7:35:37:38:e1:24:17:70:15:3a:8d:3c: ec:57:1e:1f:29:96:7b:a9:47:f5:ba:a7:82:e9:0b:be:da:66: 36:c9:63:85:a3:1c:6d:78:5d:6a:62:e2:44:b4:04:cb:25:dd: ad:2e:6e:47:27:2a:bf:36:0c:48:7a:84:5d:b4:4d:55:95:d1: 43:0c:8a:0c:68:58:a7:cc:1b:91:b7:ec:64:8e:63:89:d4:ce: 99:20:f7:97:ec:b0:45:2b:15:e0:61:96:03:a6:f4:d8:88:a4: 8e:79:67:ea:73:ba:50:23:bb:56:cb:36:03:55:7d:14:57:78: a4:eb:bc:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdrNj4PwYB/yLHENwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI0MTAwMzEzMDA0MVoXDTI1MDEwMTE0MDA0MVowLzEtMCsGA1UEAxMk MTExOGRjNTAtNzM4MS00YjIyLWE1NzMtMGYwMzNiYWU4MDRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgU4OoFuEwCf52rvHhOgCxA/lHMkthPE5/A5u mLLT0eaiPrwcs9HrYzjVzzbSR388i4nl4XiBvmNdRvOug8e/Xp5rEta/uPSF9+1x 0COardCqZfpTnCR5oxYvnA+Ug+suWsKKfZyfm95YhtvTE3nIQ1HjUG126SWHAn2W oAp/5DtEo4ril78J/taFIha0LG+V37AScLfVvRnkk8pg1qu0uGvtTIGxNxzYAjtl 0GPQJlvAyGycrAFtPgi90T0u328SnE/0f5TaHM5bfkPXd01Hooul5Ja/XW4Vx7si p/ITgC0/0ns9iOGp+vzK0JxhRVypzpyWXYkrv+BISlvIZvEZHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIo76oQk7IyLtl7cWj+HFQLShfNXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMzNhMGZmMzItYmFiZS0z YmRmLTg0NDEtYmIxZTgxYjBhOTQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC807ffEx+pY+5cmFGTPs7RsGrBxqm7bi01l+mBhlzAE5ScvzF1oWiko owxn+aheXRh6ChEh/aBANnE67VgQAQb3nhuIqzuTJyKwQZIkiIHK8hYv9ZyxDQle BfvS/trAxJG3Nl2zWr8vpHb2dCujBTYQAnwhVKQmR2jjzrb4dytH5phe9sc1Nzjh JBdwFTqNPOxXHh8plnupR/W6p4LpC77aZjbJY4WjHG14XWpi4kS0BMsl3a0ubkcn Kr82DEh6hF20TVWV0UMMigxoWKfMG5G37GSOY4nUzpkg95fssEUrFeBhlgOm9NiI pI55Z+pzulAju1bLNgNVfRRXeKTrvJI= -----END CERTIFICATE-----Generated at Thu Nov 21 23:36:40 2024 by rpki-client on console-ams.rpki-client.org