$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/531069aa-fc87-328c-84eb-4940ce8d82da.roa File: 531069aa-fc87-328c-84eb-4940ce8d82da.roa (raw, json) Hash identifier: MClmdZGgvZYgwVRpDROFSi0Cgj5zfTlJ0c5Z5erVkmQ= Subject key identifier: 14:00:5E:8B:A0:36:A6:61:81:52:5A:EB:4F:A2:46:63:52:36:C9:07 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285847EB418D105E6E8DDAC931B0A0 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/531069aa-fc87-328c-84eb-4940ce8d82da.roa Signing time: Mon 18 Nov 2024 09:46:59 +0000 ROA not before: Mon 18 Nov 2024 09:46:59 +0000 ROA not after: Sun 16 Feb 2025 09:46:59 +0000 asID: 14618 IP address blocks: 172.111.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:eb:41:8d:10:5e:6e:8d:da:c9:31:b0:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Nov 18 09:46:59 2024 GMT Not After : Feb 16 09:46:59 2025 GMT Subject: CN=37701e9a-f750-4510-8983-1d803190561e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:6b:f8:a4:0c:04:02:5d:fe:75:47:f2:d1:6c: 3c:fe:28:da:16:64:23:e6:4e:d3:d2:47:01:49:d6: f7:33:e7:59:04:74:d8:e7:2f:a6:6c:b6:40:46:6a: 5c:d4:5e:38:1b:f9:d4:b0:0c:f0:18:f0:ad:b3:ea: de:a6:b2:ab:b2:d5:19:70:6a:56:f6:5d:72:e0:2f: 08:95:89:f1:e2:37:ef:0b:55:98:e8:d8:ad:86:7c: 4f:4d:a4:61:cc:8b:a9:7d:d2:f8:8b:9a:95:af:7d: dc:bc:de:b6:a1:84:04:1c:bd:51:e8:15:42:dd:30: e6:2a:c7:1b:08:ec:12:26:31:1a:11:a3:90:36:37: a8:c7:ce:db:44:66:ce:88:6d:27:5e:43:19:f3:cd: 81:55:0d:37:0a:d6:92:ad:d1:7b:34:f2:60:c1:55: c3:1b:06:93:9c:b1:04:af:c5:e3:b1:8b:af:4c:a0: 57:2c:74:1f:10:6e:ba:16:b7:db:38:55:89:e2:e1: bb:81:57:c4:ce:e1:b8:db:12:29:17:e1:99:d5:3b: 16:99:c6:53:84:fd:49:fc:13:5d:34:d3:f1:4a:70: 38:ee:8e:05:2d:6b:7d:6a:a1:ae:84:a2:51:4b:c1: bc:d0:84:f3:85:9a:73:7a:42:81:42:92:6c:a7:67: 45:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:00:5E:8B:A0:36:A6:61:81:52:5A:EB:4F:A2:46:63:52:36:C9:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/531069aa-fc87-328c-84eb-4940ce8d82da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.149.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:37:64:aa:5e:d4:05:da:dc:54:7e:ea:9d:b1:9d:3c:09:ab: 45:e5:b4:15:af:4e:3b:f2:0a:d1:4e:22:c3:4c:f9:20:f1:30: 08:5a:c8:5b:69:e7:bf:b5:1d:fd:15:3e:cf:4c:13:16:8a:6f: f0:bb:55:fd:eb:02:52:7a:da:54:3e:dc:25:88:72:f0:ec:58: f9:e5:0c:64:89:fd:92:0c:5a:52:72:ea:94:cd:2f:ab:ca:1b: a2:4d:0d:cb:fb:d2:fc:92:cb:54:68:b3:fb:ce:e1:7f:4a:50: 7c:5f:2f:2b:1d:53:48:f4:b9:ea:2d:c2:0b:44:ca:83:d8:28: 57:5d:92:0d:b4:04:88:13:31:65:1f:1b:96:e2:19:bd:7a:d6: e2:b2:24:60:81:a6:19:7a:f9:4a:f0:b5:08:f7:36:1b:4d:e5: 90:62:2f:a3:35:1d:47:a4:8d:44:1d:77:88:1c:54:39:39:4a: 50:2c:d5:b2:f2:24:ea:56:0c:e6:c8:80:08:31:6c:c3:43:6c: ed:9f:79:a9:73:03:e3:1c:62:2f:4b:08:33:d7:e2:06:11:f0: 26:13:6d:a8:bc:81:99:90:40:8e:7f:50:24:2a:2b:5c:6b:52: 27:0b:e4:43:2b:f2:4d:8d:3a:5b:55:69:bc:39:17:eb:72:3d: a3:ec:84:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfrQY0QXm6N2skxsKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI0MTExODA5NDY1OVoXDTI1MDIxNjA5NDY1OVowLzEtMCsGA1UEAxMk Mzc3MDFlOWEtZjc1MC00NTEwLTg5ODMtMWQ4MDMxOTA1NjFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2v4pAwEAl3+dUfy0Ww8/ijaFmQj5k7T0kcB Sdb3M+dZBHTY5y+mbLZARmpc1F44G/nUsAzwGPCts+reprKrstUZcGpW9l1y4C8I lYnx4jfvC1WY6NithnxPTaRhzIupfdL4i5qVr33cvN62oYQEHL1R6BVC3TDmKscb COwSJjEaEaOQNjeox87bRGbOiG0nXkMZ882BVQ03CtaSrdF7NPJgwVXDGwaTnLEE r8XjsYuvTKBXLHQfEG66FrfbOFWJ4uG7gVfEzuG42xIpF+GZ1TsWmcZThP1J/BNd NNPxSnA47o4FLWt9aqGuhKJRS8G80ITzhZpzekKBQpJsp2dF0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBQAXougNqZhgVJa60+iRmNSNskHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNTMxMDY5YWEtZmM4Ny0z MjhjLTg0ZWItNDk0MGNlOGQ4MmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIo3ZKpe1AXa3FR+6p2xnTwJq0XltBWvTjvyCtFOIsNM+SDxMAhayFtp 57+1Hf0VPs9MExaKb/C7Vf3rAlJ62lQ+3CWIcvDsWPnlDGSJ/ZIMWlJy6pTNL6vK G6JNDcv70vySy1Ros/vO4X9KUHxfLysdU0j0ueotwgtEyoPYKFddkg20BIgTMWUf G5biGb161uKyJGCBphl6+UrwtQj3NhtN5ZBiL6M1HUekjUQdd4gcVDk5SlAs1bLy JOpWDObIgAgxbMNDbO2fealzA+McYi9LCDPX4gYR8CYTbai8gZmQQI5/UCQqK1xr UicL5EMr8k2NOltVabw5F+tyPaPshOA= -----END CERTIFICATE-----Generated at Fri Nov 22 00:23:35 2024 by rpki-client on console-fra.rpki-client.org