$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/39c57105-2f6d-3871-b65f-c5cca5ed24a6.roa File: 39c57105-2f6d-3871-b65f-c5cca5ed24a6.roa (raw, json) Hash identifier: Pob4ipEOwEQHt/NwtHxokti+LrXBCc851E4KUEsGegI= Subject key identifier: CF:80:A5:F0:3E:0B:47:0E:8A:D1:D6:68:5C:4B:18:78:92:79:A8:11 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F432858477230F089F5EE9EAE0B8147D0 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/39c57105-2f6d-3871-b65f-c5cca5ed24a6.roa Signing time: Sun 06 Oct 2024 01:00:31 +0000 ROA not before: Sun 06 Oct 2024 01:00:31 +0000 ROA not after: Sat 04 Jan 2025 02:00:31 +0000 asID: 212238 IP address blocks: 172.111.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:72:30:f0:89:f5:ee:9e:ae:0b:81:47:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 6 01:00:31 2024 GMT Not After : Jan 4 02:00:31 2025 GMT Subject: CN=db3bec77-2429-4f4c-ac9b-bfa073cdb5e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a3:e5:98:ec:5f:fd:c3:39:5c:cd:79:1a:bc: c0:a6:e5:cc:a1:e6:e7:ce:53:c1:81:49:59:bd:16: d7:80:9c:c7:44:98:11:ce:dd:3e:2b:33:4a:40:5c: 54:63:16:e2:8d:35:04:2e:2b:bb:c6:82:72:49:4f: 87:9c:51:43:2c:0b:82:c5:e4:09:c1:7e:ab:a4:da: 40:10:5d:44:f7:64:24:96:d9:6c:65:0b:02:e9:1a: d8:23:ce:6f:4d:47:f5:8a:a7:60:eb:58:fb:8a:2d: 6d:e3:ee:c9:f4:d6:fa:85:4f:27:7f:f4:08:0c:c2: 75:02:51:bb:18:00:4b:63:b3:da:05:3d:57:5f:76: 00:9d:ea:4f:e2:5a:aa:73:54:d5:3b:80:f4:eb:19: dc:5a:17:7a:81:db:10:1e:af:0c:a7:d8:75:f1:28: 67:a4:ec:24:79:12:65:af:01:9e:ca:7a:0d:20:71: bf:8a:73:43:77:36:ac:28:d9:22:a4:66:07:7a:85: e3:9f:43:14:84:0e:31:7a:4c:d6:eb:2c:f9:a3:ce: dc:bb:88:88:2a:3f:94:5b:78:8a:6e:69:0d:92:79: 37:36:d6:ab:a9:66:5b:0f:cc:0b:ff:aa:ef:c4:5c: 8f:b6:5d:95:01:1e:c1:fc:7e:75:bd:47:90:e7:57: 5a:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:80:A5:F0:3E:0B:47:0E:8A:D1:D6:68:5C:4B:18:78:92:79:A8:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/39c57105-2f6d-3871-b65f-c5cca5ed24a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.246.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:28:e0:32:9e:63:af:cd:56:f7:18:52:fb:97:78:c8:72:32: c6:28:10:98:cc:39:75:29:5f:cb:89:e3:b0:24:51:e8:fd:14: 75:b9:da:9d:b8:ed:4c:15:fe:9e:df:25:cc:c6:53:f3:c8:e0: b1:92:25:68:a6:26:e6:02:b3:6a:f4:92:59:51:8e:62:0c:b0: 98:88:25:ce:c7:b1:ae:4b:f9:c0:fc:f0:f4:87:20:ef:94:84: 77:63:29:6f:8d:a8:b2:c7:54:c9:1b:e4:b2:37:f4:3d:c5:b0: 14:4a:5d:f3:e0:fa:3b:46:09:29:de:dc:4c:cf:ed:8a:ce:fb: 80:9c:60:71:1d:71:6e:db:b3:62:d4:93:fa:fb:21:7d:54:ed: 70:d7:36:f3:b7:f8:d7:c4:16:c5:1f:20:53:5b:d4:31:50:38: 70:23:b5:7a:82:dc:cc:20:61:a0:b9:fd:4d:1c:31:9a:7e:f5: 98:d9:e6:68:3f:d9:03:c6:8b:bb:b7:ba:6c:7d:48:fa:40:8b: 8c:9c:1b:0a:f5:4e:00:a1:47:83:0c:76:3c:24:f4:43:52:78: d0:a3:18:39:d9:a9:6f:13:68:65:6a:58:54:fa:50:47:00:88: 5d:45:2f:d4:42:61:24:14:0a:fc:0c:31:17:c3:d5:50:0c:5d: ba:f5:f1:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdyMPCJ9e6erguBR9AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI0MTAwNjAxMDAzMVoXDTI1MDEwNDAyMDAzMVowLzEtMCsGA1UEAxMk ZGIzYmVjNzctMjQyOS00ZjRjLWFjOWItYmZhMDczY2RiNWUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6PlmOxf/cM5XM15GrzApuXMoebnzlPBgUlZ vRbXgJzHRJgRzt0+KzNKQFxUYxbijTUELiu7xoJySU+HnFFDLAuCxeQJwX6rpNpA EF1E92QkltlsZQsC6RrYI85vTUf1iqdg61j7ii1t4+7J9Nb6hU8nf/QIDMJ1AlG7 GABLY7PaBT1XX3YAnepP4lqqc1TVO4D06xncWhd6gdsQHq8Mp9h18ShnpOwkeRJl rwGeynoNIHG/inNDdzasKNkipGYHeoXjn0MUhA4xekzW6yz5o87cu4iIKj+UW3iK bmkNknk3NtarqWZbD8wL/6rvxFyPtl2VAR7B/H51vUeQ51dafwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM+ApfA+C0cOitHWaFxLGHiSeagRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMzljNTcxMDUtMmY2ZC0z ODcxLWI2NWYtYzVjY2E1ZWQyNGE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACAo4DKeY6/NVvcYUvuXeMhyMsYoEJjMOXUpX8uJ47AkUej9FHW52p24 7UwV/p7fJczGU/PI4LGSJWimJuYCs2r0kllRjmIMsJiIJc7Hsa5L+cD88PSHIO+U hHdjKW+NqLLHVMkb5LI39D3FsBRKXfPg+jtGCSne3EzP7YrO+4CcYHEdcW7bs2LU k/r7IX1U7XDXNvO3+NfEFsUfIFNb1DFQOHAjtXqC3MwgYaC5/U0cMZp+9ZjZ5mg/ 2QPGi7u3umx9SPpAi4ycGwr1TgChR4MMdjwk9ENSeNCjGDnZqW8TaGVqWFT6UEcA iF1FL9RCYSQUCvwMMRfD1VAMXbr18cA= -----END CERTIFICATE-----Generated at Mon Nov 25 03:13:37 2024 by rpki-client on console-ams.rpki-client.org