$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5be0417a-1ca9-3cdf-aed4-177b60ce5a8f.roa File: 5be0417a-1ca9-3cdf-aed4-177b60ce5a8f.roa (raw, json) Hash identifier: 6JEZ2KvBddEFWCzgLsFZtV4d50C+rBHnFLgEQ10JUoA= Subject key identifier: 29:61:BB:0E:A7:C4:6B:4B:DC:08:FA:ED:92:FA:D9:06:E9:FE:10:4D Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285847EE2AFB3829F583D4CBA0F030 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5be0417a-1ca9-3cdf-aed4-177b60ce5a8f.roa Signing time: Tue 19 Nov 2024 10:48:56 +0000 ROA not before: Tue 19 Nov 2024 10:48:56 +0000 ROA not after: Mon 17 Feb 2025 10:48:56 +0000 asID: 43260 IP address blocks: 172.111.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ee:2a:fb:38:29:f5:83:d4:cb:a0:f0:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Nov 19 10:48:56 2024 GMT Not After : Feb 17 10:48:56 2025 GMT Subject: CN=234fccfa-45e9-47ad-bfeb-e8b074a81ae1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:00:9e:1d:ab:b2:0b:c6:54:2f:03:c5:46:39: e8:c3:cc:72:98:50:18:33:b8:85:1e:06:80:57:bc: 74:59:1e:ec:f7:69:8a:f2:73:7e:16:87:b0:de:13: a0:71:53:d7:b7:2d:8c:2e:2f:34:e7:b4:ca:4b:7e: 6e:b0:19:32:b9:45:83:80:2a:f8:a0:30:29:90:39: 09:1b:20:ae:5e:3a:43:4f:00:48:f0:51:56:47:6c: f3:78:19:45:5c:4b:bd:d2:25:40:a3:fd:58:3a:e9: fe:df:fe:cf:c4:ae:0f:21:af:ec:2e:e9:98:2d:3e: e8:8a:cc:14:92:99:ee:b8:06:4a:65:9d:6c:dd:c4: 9d:4b:a1:78:35:62:a6:dd:60:13:0d:36:b3:76:5e: fe:ec:b7:9e:0a:72:f5:b4:79:18:6c:ef:45:80:19: f9:ec:5f:c0:49:2c:bf:58:4e:f9:2d:37:7c:be:b0: ad:12:1d:05:50:ff:98:3f:88:2b:c2:4e:ee:ec:e5: 3f:ec:26:e7:6c:5c:ee:84:09:0d:1e:95:d3:8a:20: e6:ce:04:69:46:06:c6:ac:c9:d5:b4:1d:bc:1c:d8: 5e:f5:71:5c:7e:72:33:e8:46:be:81:e5:4b:08:af: 10:85:a2:c7:e9:97:d8:58:18:d4:4a:04:94:f5:b1: d5:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:61:BB:0E:A7:C4:6B:4B:DC:08:FA:ED:92:FA:D9:06:E9:FE:10:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5be0417a-1ca9-3cdf-aed4-177b60ce5a8f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.199.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:73:f5:4d:6a:e7:43:0e:cf:5d:f1:fc:bb:27:48:dc:87:12: 27:0d:50:0b:29:74:db:b5:a3:07:31:c2:17:f9:98:7f:ad:be: 0a:84:2e:ce:7e:ab:f5:ee:46:88:ff:c9:cf:b0:d5:d4:bf:98: b3:a8:78:2e:74:97:7f:4b:cd:98:15:c9:c5:c6:cd:4b:2c:6b: c8:62:97:db:ef:7e:21:1a:7e:89:7c:85:2a:f4:11:e8:57:54: 9c:2c:b6:fb:1a:13:27:f7:61:fe:c9:00:bd:f3:77:71:f1:ec: 32:b1:39:63:49:2c:42:19:4b:70:a0:16:9e:a2:9d:04:5a:fa: 5b:92:e8:d4:65:2d:2f:36:c5:4c:24:9d:1a:40:f8:e8:b3:3b: 9c:6a:9a:c1:8a:63:07:ea:88:d5:62:4c:67:7e:21:80:9d:a0: 90:29:68:b9:6a:b5:02:81:f9:1a:8f:ba:d7:73:0d:a2:9c:d6: b6:93:cb:5b:ca:a9:2c:d1:e1:6e:93:c0:65:b3:75:f9:8f:16: c3:c6:fe:d3:a5:11:f6:91:a9:54:82:53:d9:9d:0f:ba:59:32: e3:25:76:2b:c3:f6:11:24:b2:4a:01:ce:35:84:e4:69:dd:cb: a1:b3:82:6d:7d:e8:93:14:d7:7a:73:4b:6d:1e:5f:dc:f7:0b: cc:18:d3:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfuKvs4KfWD1Mug8DAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI0MTExOTEwNDg1NloXDTI1MDIxNzEwNDg1NlowLzEtMCsGA1UEAxMk MjM0ZmNjZmEtNDVlOS00N2FkLWJmZWItZThiMDc0YTgxYWUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgwCeHauyC8ZULwPFRjnow8xymFAYM7iFHgaA V7x0WR7s92mK8nN+Foew3hOgcVPXty2MLi8057TKS35usBkyuUWDgCr4oDApkDkJ GyCuXjpDTwBI8FFWR2zzeBlFXEu90iVAo/1YOun+3/7PxK4PIa/sLumYLT7oiswU kpnuuAZKZZ1s3cSdS6F4NWKm3WATDTazdl7+7LeeCnL1tHkYbO9FgBn57F/ASSy/ WE75LTd8vrCtEh0FUP+YP4grwk7u7OU/7CbnbFzuhAkNHpXTiiDmzgRpRgbGrMnV tB28HNhe9XFcfnIz6Ea+geVLCK8QhaLH6ZfYWBjUSgSU9bHV+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFClhuw6nxGtL3Aj67ZL62Qbp/hBNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNWJlMDQxN2EtMWNhOS0z Y2RmLWFlZDQtMTc3YjYwY2U1YThmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/HMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADNz9U1q50MOz13x/LsnSNyHEicNUAspdNu1owcxwhf5mH+tvgqELs5+ q/XuRoj/yc+w1dS/mLOoeC50l39LzZgVycXGzUssa8hil9vvfiEafol8hSr0EehX VJwstvsaEyf3Yf7JAL3zd3Hx7DKxOWNJLEIZS3CgFp6inQRa+luS6NRlLS82xUwk nRpA+OizO5xqmsGKYwfqiNViTGd+IYCdoJApaLlqtQKB+RqPutdzDaKc1raTy1vK qSzR4W6TwGWzdfmPFsPG/tOlEfaRqVSCU9mdD7pZMuMldivD9hEkskoBzjWE5Gnd y6Gzgm196JMU13pzS20eX9z3C8wY000= -----END CERTIFICATE-----Generated at Fri Nov 22 00:23:35 2024 by rpki-client on console-fra.rpki-client.org