$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4ff77275-cd8b-34d5-a0d2-6469a112947f.roa File: 4ff77275-cd8b-34d5-a0d2-6469a112947f.roa (raw, json) Hash identifier: lOMf+vtFuZdltnw5TaDo+5wQyG7T8UcTKatwql8pAqs= Subject key identifier: 3B:E3:C8:AC:92:07:AA:48:66:1C:D9:AB:00:D1:7F:2D:5A:57:CB:DD Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285847EB41387D66232731792C1560 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4ff77275-cd8b-34d5-a0d2-6469a112947f.roa Signing time: Mon 18 Nov 2024 09:46:19 +0000 ROA not before: Mon 18 Nov 2024 09:46:19 +0000 ROA not after: Sun 16 Feb 2025 09:46:19 +0000 asID: 16509 IP address blocks: 172.111.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:eb:41:38:7d:66:23:27:31:79:2c:15:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Nov 18 09:46:19 2024 GMT Not After : Feb 16 09:46:19 2025 GMT Subject: CN=c190cd93-fe4e-4dd0-8265-1e767879b49c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:0e:50:a5:f6:e2:ba:11:bd:89:3f:7d:e5:ee: d1:09:14:2c:39:27:c1:0e:eb:b4:c4:c6:7f:d5:17: d3:3b:47:c3:ca:17:9a:ec:3d:05:c5:01:36:db:5d: 0b:85:80:4f:a3:ce:c9:f0:fb:57:1b:c1:5d:73:79: dc:64:cf:c7:72:2b:2c:70:c9:60:59:5f:88:8b:f3: 28:98:a5:36:a2:21:e4:2c:7b:c9:0c:7c:d0:6e:2b: 27:dd:e1:97:81:a5:cb:20:4c:90:2e:fd:9e:96:f0: ca:81:c9:41:bd:21:8e:4e:23:a9:cf:fa:51:72:d1: 05:24:92:cf:6d:ef:43:c4:88:01:00:8b:7c:b6:67: 65:0c:d9:01:1d:70:2c:a3:25:09:99:a4:bd:7d:c3: ab:39:e2:eb:61:e4:75:81:29:c3:2d:77:79:f1:7b: 82:a8:8b:31:27:24:f6:bc:5d:aa:31:97:39:bb:36: b0:21:bf:80:64:3c:b6:b8:e4:c7:e2:3c:df:ca:65: 8c:59:26:5a:be:bd:c6:9e:ce:8a:55:b8:6d:55:34: 3f:eb:06:fe:08:89:00:46:90:44:05:04:3a:e8:8b: a4:ad:55:8f:c5:aa:50:5b:3b:0d:11:c0:71:9c:b4: b0:a8:4b:88:5e:98:57:e7:29:c6:56:64:d8:e1:1c: af:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:E3:C8:AC:92:07:AA:48:66:1C:D9:AB:00:D1:7F:2D:5A:57:CB:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4ff77275-cd8b-34d5-a0d2-6469a112947f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.149.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:b4:73:8a:c9:75:76:95:e6:c0:ef:d1:1a:20:1b:60:59:a3: 0f:77:d3:76:5f:d1:24:9d:66:7e:4f:76:fc:ef:69:80:90:4e: cf:f7:c0:9f:d2:76:cd:8e:c5:f6:4f:4c:78:1c:71:81:09:32: bd:c2:3a:d8:15:55:4f:4a:d5:2b:51:f0:c4:61:23:fe:54:d9: 68:f2:e5:d7:6e:49:83:1f:44:dd:fb:1f:15:59:3e:68:0d:6e: 71:49:15:75:40:61:a0:dc:57:a1:3c:fc:d1:37:9e:64:bd:e2: fa:e1:9d:e5:7e:af:05:8b:1b:58:ba:d4:b7:bd:36:89:63:68: 28:5e:98:f1:6c:32:9b:6c:0b:24:e0:84:66:4b:fe:d5:33:b5: d1:d3:66:10:62:14:70:2b:94:67:50:80:17:5e:b5:7c:02:38: 95:21:9e:25:b6:89:df:6a:2f:23:43:ab:29:27:70:f4:9b:54: a4:1b:12:c2:b1:5f:ab:9e:8a:00:75:d9:8e:fc:31:6e:b2:75: 6e:f0:71:c8:28:5f:29:8d:98:59:ae:5f:93:05:1f:ca:73:31: 72:4e:21:21:a9:e0:be:03:f8:89:a8:0c:e7:f3:0b:61:b3:d7: 90:c1:56:06:75:f7:22:d7:26:65:c4:ea:f5:69:9f:f5:5d:b4: c3:da:8c:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfrQTh9ZiMnMXksFWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI0MTExODA5NDYxOVoXDTI1MDIxNjA5NDYxOVowLzEtMCsGA1UEAxMk YzE5MGNkOTMtZmU0ZS00ZGQwLTgyNjUtMWU3Njc4NzliNDljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyA5QpfbiuhG9iT995e7RCRQsOSfBDuu0xMZ/ 1RfTO0fDyhea7D0FxQE2210LhYBPo87J8PtXG8Fdc3ncZM/HcisscMlgWV+Ii/Mo mKU2oiHkLHvJDHzQbisn3eGXgaXLIEyQLv2elvDKgclBvSGOTiOpz/pRctEFJJLP be9DxIgBAIt8tmdlDNkBHXAsoyUJmaS9fcOrOeLrYeR1gSnDLXd58XuCqIsxJyT2 vF2qMZc5uzawIb+AZDy2uOTH4jzfymWMWSZavr3Gns6KVbhtVTQ/6wb+CIkARpBE BQQ66IukrVWPxapQWzsNEcBxnLSwqEuIXphX5ynGVmTY4RyvQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDvjyKySB6pIZhzZqwDRfy1aV8vdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNGZmNzcyNzUtY2Q4Yi0z NGQ1LWEwZDItNjQ2OWExMTI5NDdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE60c4rJdXaV5sDv0RogG2BZow9303Zf0SSdZn5PdvzvaYCQTs/3wJ/S ds2OxfZPTHgccYEJMr3COtgVVU9K1StR8MRhI/5U2Wjy5dduSYMfRN37HxVZPmgN bnFJFXVAYaDcV6E8/NE3nmS94vrhneV+rwWLG1i61Le9NoljaChemPFsMptsCyTg hGZL/tUztdHTZhBiFHArlGdQgBdetXwCOJUhniW2id9qLyNDqykncPSbVKQbEsKx X6ueigB12Y78MW6ydW7wccgoXymNmFmuX5MFH8pzMXJOISGp4L4D+ImoDOfzC2Gz 15DBVgZ19yLXJmXE6vVpn/VdtMPajNE= -----END CERTIFICATE-----Generated at Sun Nov 24 23:58:59 2024 by rpki-client on console-fra.rpki-client.org