$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/753b1cef-8f73-33af-bcd5-dc3f7c93b4c9.roa File: 753b1cef-8f73-33af-bcd5-dc3f7c93b4c9.roa (raw, json) Hash identifier: k2wZLMkkDSBqp/rqnd+6rLrLpfhPzqVaYfKUk/ICktk= Subject key identifier: A2:A1:22:EA:2F:1F:C6:E1:07:FB:D6:7C:43:DF:DE:D7:30:BE:A4:94 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F432858473D25F9BAF518C23C77A81F80 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/753b1cef-8f73-33af-bcd5-dc3f7c93b4c9.roa Signing time: Tue 17 Sep 2024 01:00:31 +0000 ROA not before: Tue 17 Sep 2024 01:00:31 +0000 ROA not after: Mon 16 Dec 2024 02:00:31 +0000 asID: 9009 IP address blocks: 172.111.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:3d:25:f9:ba:f5:18:c2:3c:77:a8:1f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Sep 17 01:00:31 2024 GMT Not After : Dec 16 02:00:31 2024 GMT Subject: CN=3e8450df-b3b7-4764-b825-043163bf649f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:f7:90:91:7f:82:ff:3b:de:bf:67:34:20:36: 0f:76:84:24:f9:ea:ba:05:54:0a:96:78:77:fb:58: 79:39:7d:41:47:ff:e5:b7:93:8e:fc:2b:91:ec:7b: 2a:89:09:56:ef:0b:b4:ee:6c:fe:00:56:78:cd:db: 69:bb:cc:9a:db:33:10:27:fc:b7:ff:77:90:a1:ad: dd:8b:25:66:b7:9f:42:53:38:73:5b:34:1e:3f:de: 07:a8:b9:93:d0:bd:62:5f:79:c9:ff:28:d3:c4:67: 65:6a:15:54:61:a3:3f:f8:e9:23:f4:9d:64:29:d4: f1:25:98:e7:f3:37:9a:92:f5:d0:f3:40:18:82:c3: e6:6c:50:41:15:26:65:8d:4d:9a:84:a5:07:3d:6a: 9f:78:83:ed:50:69:0c:c5:ae:6b:dc:1c:59:45:7a: b8:44:ea:4a:f3:d8:02:e1:ad:22:f5:a9:3c:87:af: a9:3a:b5:81:11:70:07:bb:75:b3:cd:ef:88:14:fd: be:49:d9:fa:19:43:8c:0c:e6:33:0f:18:db:3b:ac: a2:82:0d:55:3d:b3:08:79:7d:ad:da:5e:69:de:81: 0a:f0:76:9e:37:9d:de:c5:5f:6a:f4:79:06:6a:ef: 6d:f5:f6:f9:e0:10:81:d7:e9:3f:70:78:e7:f1:1b: db:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:A1:22:EA:2F:1F:C6:E1:07:FB:D6:7C:43:DF:DE:D7:30:BE:A4:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/753b1cef-8f73-33af-bcd5-dc3f7c93b4c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:70:3e:c6:d1:98:e8:e4:d8:ca:3d:d5:b2:25:e5:96:92:73: 57:ad:97:61:57:eb:6a:f4:e9:3d:e5:0d:05:2f:c5:c2:02:ca: 4a:70:30:5b:dd:71:ca:0c:7a:27:65:72:52:52:d9:ea:74:f9: 8e:87:66:1d:3f:0f:1a:bb:55:9a:55:44:70:fc:ac:d0:93:eb: 26:bf:84:17:7d:37:67:29:a4:da:cc:81:8d:05:e6:b6:0b:23: 72:9b:b0:fe:97:17:05:e1:ac:31:9a:07:22:3c:1e:5a:34:84: 4e:3a:0a:b2:da:d8:2e:59:b1:e8:07:c6:12:9f:73:94:a2:0a: 67:19:ea:b5:30:1a:77:09:a2:b3:48:fb:d7:7f:68:f2:71:d4: 18:31:74:70:c7:79:76:2f:db:ea:df:eb:88:f4:d2:fd:bd:0c: 0b:bd:98:e9:05:d9:50:64:ee:82:39:ca:1d:a1:9e:03:ae:b9: 40:62:48:48:4e:ed:cf:75:2a:3c:44:48:eb:ee:53:f3:60:6d: 8a:05:33:44:22:d5:8d:ea:16:85:bc:66:4d:84:3f:31:78:05: e1:8c:b4:d6:69:92:07:00:89:77:f0:f1:ef:f3:a8:49:84:af: db:ae:29:a5:cd:69:81:d8:4b:3e:df:42:a7:54:4e:64:05:50: 80:cb:16:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc9Jfm69RjCPHeoH4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI0MDkxNzAxMDAzMVoXDTI0MTIxNjAyMDAzMVowLzEtMCsGA1UEAxMk M2U4NDUwZGYtYjNiNy00NzY0LWI4MjUtMDQzMTYzYmY2NDlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhveQkX+C/zvev2c0IDYPdoQk+eq6BVQKlnh3 +1h5OX1BR//lt5OO/CuR7HsqiQlW7wu07mz+AFZ4zdtpu8ya2zMQJ/y3/3eQoa3d iyVmt59CUzhzWzQeP94HqLmT0L1iX3nJ/yjTxGdlahVUYaM/+Okj9J1kKdTxJZjn 8zeakvXQ80AYgsPmbFBBFSZljU2ahKUHPWqfeIPtUGkMxa5r3BxZRXq4ROpK89gC 4a0i9ak8h6+pOrWBEXAHu3Wzze+IFP2+Sdn6GUOMDOYzDxjbO6yigg1VPbMIeX2t 2l5p3oEK8HaeN53exV9q9HkGau9t9fb54BCB1+k/cHjn8RvbNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKKhIuovH8bhB/vWfEPf3tcwvqSUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNzUzYjFjZWYtOGY3My0z M2FmLWJjZDUtZGMzZjdjOTNiNGM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/uMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIFwPsbRmOjk2Mo91bIl5ZaSc1etl2FX62r06T3lDQUvxcICykpwMFvd ccoMeidlclJS2ep0+Y6HZh0/Dxq7VZpVRHD8rNCT6ya/hBd9N2cppNrMgY0F5rYL I3KbsP6XFwXhrDGaByI8Hlo0hE46CrLa2C5ZsegHxhKfc5SiCmcZ6rUwGncJorNI +9d/aPJx1BgxdHDHeXYv2+rf64j00v29DAu9mOkF2VBk7oI5yh2hngOuuUBiSEhO 7c91KjxESOvuU/NgbYoFM0Qi1Y3qFoW8Zk2EPzF4BeGMtNZpkgcAiXfw8e/zqEmE r9uuKaXNaYHYSz7fQqdUTmQFUIDLFtA= -----END CERTIFICATE-----Generated at Fri Nov 22 00:23:35 2024 by rpki-client on console-fra.rpki-client.org