$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/460d702a-d766-376a-92e0-cae17f6f210d.roa File: 460d702a-d766-376a-92e0-cae17f6f210d.roa (raw, json) Hash identifier: ZKyGCswc9lgC608INu7j1POLmxtkEJRSh+PvYe3HULs= Subject key identifier: 32:FE:F3:F2:6F:D5:D7:30:36:2F:AA:96:55:1F:44:8D:A9:98:D8:23 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F432858481A3C0B92C59E2854D2BF3740 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/460d702a-d766-376a-92e0-cae17f6f210d.roa Signing time: Thu 05 Dec 2024 05:38:53 +0000 ROA not before: Thu 05 Dec 2024 05:38:53 +0000 ROA not after: Wed 05 Mar 2025 05:38:53 +0000 asID: 9009 IP address blocks: 172.111.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Dec 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:1a:3c:0b:92:c5:9e:28:54:d2:bf:37:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Dec 5 05:38:53 2024 GMT Not After : Mar 5 05:38:53 2025 GMT Subject: CN=e91f2493-75a4-4721-961a-8fb492d01e48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:2b:04:37:ee:40:6d:93:e6:f3:05:0a:ec:cc: 6e:9f:36:b7:e3:e8:24:22:b2:20:e7:3a:de:c4:e1: 07:6c:4f:57:45:42:c3:db:1b:73:a2:f7:d0:b1:e3: 85:bb:d9:28:22:05:f6:d6:0a:93:81:9a:03:93:93: b7:72:10:18:a5:36:97:64:25:7b:12:3a:54:2a:db: 27:e1:16:73:9c:88:cd:be:03:28:2c:98:85:d9:aa: 51:98:96:e9:64:18:a7:d0:85:27:b1:9f:fe:41:4f: 1c:27:5d:63:21:d4:c0:b7:03:2a:b5:57:77:ee:84: a8:2a:c7:5a:42:50:27:08:80:88:5d:fd:ed:b5:59: f4:11:80:0f:ac:62:a3:12:dd:da:94:57:eb:18:72: a8:79:68:9e:0d:44:77:a8:f8:31:81:b7:54:db:16: d7:c0:cd:0f:72:c1:1e:06:82:11:e1:4d:c9:1b:f0: a6:47:0b:2f:f1:f1:a3:bd:30:b6:14:e3:c7:47:6e: 7d:27:fe:18:48:15:b1:29:f5:b0:76:f3:9b:a4:18: 1e:cf:89:07:1b:dd:7b:6e:77:5d:3c:8e:ac:7e:c2: 01:cf:02:5a:4c:33:2e:ab:06:08:17:2c:62:3d:18: ac:46:cf:e5:e2:b9:a9:49:b3:95:17:7c:db:f1:55: 2d:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:FE:F3:F2:6F:D5:D7:30:36:2F:AA:96:55:1F:44:8D:A9:98:D8:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/460d702a-d766-376a-92e0-cae17f6f210d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:b4:43:5c:66:b5:4a:2f:fa:7e:f9:8c:f8:29:47:5e:83:62: 57:35:a6:21:75:c0:a0:71:9c:7e:fc:25:f5:0a:a2:4a:b1:1a: e8:da:e3:b6:3d:38:3a:f1:8a:b4:75:0d:29:ee:15:8b:c7:b6: 28:c0:6f:18:67:7d:0e:37:f4:c0:fe:5c:67:ad:0f:01:22:ff: b2:26:12:85:19:22:79:e1:80:68:7a:60:3a:23:7d:a9:76:b9: 77:0e:03:06:91:52:5b:9e:53:ef:68:99:46:43:07:38:49:cf: 21:1c:59:0d:47:23:b3:0e:c2:95:d5:cf:67:89:2c:a3:6d:bd: 51:d1:66:32:86:f9:6f:77:9a:61:b3:9a:3b:38:66:ff:ba:e3: 3d:10:c0:f1:c2:53:45:8b:ce:09:ae:4c:ec:7b:00:72:0f:ec: bf:20:39:35:2a:b3:42:67:4c:83:37:ce:13:2b:d8:85:1d:cd: 4f:b4:b5:33:52:ec:39:d8:ce:7a:1d:62:eb:02:19:a9:91:a5: f7:e4:0f:1e:32:74:11:d1:57:82:64:6a:74:30:74:55:e6:c4: 93:45:58:4d:eb:22:01:c5:d6:74:6d:23:e2:dc:6a:13:51:45: de:c9:e7:c2:5a:d8:1f:78:46:ec:0f:d5:68:fe:ba:6e:b7:a9: 46:6c:ec:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgaPAuSxZ4oVNK/N0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI0MTIwNTA1Mzg1M1oXDTI1MDMwNTA1Mzg1M1owLzEtMCsGA1UEAxMk ZTkxZjI0OTMtNzVhNC00NzIxLTk2MWEtOGZiNDkyZDAxZTQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSsEN+5AbZPm8wUK7Mxunza34+gkIrIg5zre xOEHbE9XRULD2xtzovfQseOFu9koIgX21gqTgZoDk5O3chAYpTaXZCV7EjpUKtsn 4RZznIjNvgMoLJiF2apRmJbpZBin0IUnsZ/+QU8cJ11jIdTAtwMqtVd37oSoKsda QlAnCICIXf3ttVn0EYAPrGKjEt3alFfrGHKoeWieDUR3qPgxgbdU2xbXwM0PcsEe BoIR4U3JG/CmRwsv8fGjvTC2FOPHR259J/4YSBWxKfWwdvObpBgez4kHG917bndd PI6sfsIBzwJaTDMuqwYIFyxiPRisRs/l4rmpSbOVF3zb8VUtKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDL+8/Jv1dcwNi+qllUfRI2pmNgjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNDYwZDcwMmEtZDc2Ni0z NzZhLTkyZTAtY2FlMTdmNmYyMTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/fMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADG0Q1xmtUov+n75jPgpR16DYlc1piF1wKBxnH78JfUKokqxGuja47Y9 ODrxirR1DSnuFYvHtijAbxhnfQ439MD+XGetDwEi/7ImEoUZInnhgGh6YDojfal2 uXcOAwaRUlueU+9omUZDBzhJzyEcWQ1HI7MOwpXVz2eJLKNtvVHRZjKG+W93mmGz mjs4Zv+64z0QwPHCU0WLzgmuTOx7AHIP7L8gOTUqs0JnTIM3zhMr2IUdzU+0tTNS 7DnYznodYusCGamRpffkDx4ydBHRV4JkanQwdFXmxJNFWE3rIgHF1nRtI+LcahNR Rd7J58Ja2B94RuwP1Wj+um63qUZs7Lw= -----END CERTIFICATE-----Generated at Thu Dec 26 09:00:18 2024 by rpki-client on console-ams.rpki-client.org