$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/7ed8d052-684f-34ed-91db-b26f2c822341.roa File: 7ed8d052-684f-34ed-91db-b26f2c822341.roa (raw, json) Hash identifier: +dJ2nQU2YT2SbVn8K1GiLo+Rg/aBoKXOAQb3cHb4KEk= Subject key identifier: A8:DD:AB:D3:84:73:00:FB:7D:A7:68:47:74:16:BE:69:31:01:7C:FB Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F432858481A3BB135253F673720E08A00 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/7ed8d052-684f-34ed-91db-b26f2c822341.roa Signing time: Thu 05 Dec 2024 05:38:11 +0000 ROA not before: Thu 05 Dec 2024 05:38:11 +0000 ROA not after: Wed 05 Mar 2025 05:38:11 +0000 asID: 9009 IP address blocks: 172.111.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Dec 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:1a:3b:b1:35:25:3f:67:37:20:e0:8a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Dec 5 05:38:11 2024 GMT Not After : Mar 5 05:38:11 2025 GMT Subject: CN=3f19f9d2-5673-426e-bc03-6a1d48d57988 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:f3:05:6d:c5:b4:bf:8c:ff:cb:a1:42:09:9e: 7d:a2:1b:69:61:f2:fa:b5:8a:fb:57:4a:86:4a:56: d1:f5:36:55:05:27:3e:d0:e3:14:40:87:66:dc:e9: fd:85:6b:ed:36:81:bd:06:2d:e1:fe:c6:ee:c3:1e: 9f:94:d1:14:fc:8a:ba:dd:60:d2:b3:e2:11:fe:53: 31:16:55:13:3a:7b:60:7e:f7:58:3a:09:8b:18:ac: ce:e7:e9:53:e2:5b:1f:7c:f8:94:d3:8f:e1:f9:bc: f6:a9:be:b1:96:de:e3:af:64:6c:28:34:b5:cd:d9: ce:83:a1:ca:3d:2b:76:b0:91:68:d7:28:36:aa:d4: a3:e6:2b:4b:8c:23:3f:22:90:57:1b:67:b8:b9:5a: 08:45:c1:f5:45:2a:aa:65:8c:4a:a6:ba:53:cc:4a: 43:ef:d5:21:47:37:bc:26:98:b9:06:ca:40:e4:6b: 35:44:23:34:c4:70:60:81:20:cd:a7:3c:0d:8d:d0: b8:31:b5:1b:d6:c4:af:58:c5:07:60:f5:5d:66:c1: f6:54:9d:bc:5c:82:9c:d9:46:a7:b3:be:52:03:53: 31:bb:a8:ee:0d:43:e8:a5:54:77:85:59:f2:6e:c8: e3:bc:8c:15:40:08:00:01:54:cc:11:21:7a:03:e7: df:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:DD:AB:D3:84:73:00:FB:7D:A7:68:47:74:16:BE:69:31:01:7C:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/7ed8d052-684f-34ed-91db-b26f2c822341.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:06:c6:6d:26:c7:49:df:ff:3e:c4:cf:3c:ab:e3:cb:70:23: 95:bd:56:f3:a0:ee:17:d2:de:98:49:4d:5b:4a:ad:55:46:c7: 90:29:1a:45:6b:10:62:27:1d:f3:24:46:ab:30:9f:3d:f9:98: 49:07:3e:45:6a:69:e8:fe:22:c2:ad:fb:cd:e3:0c:15:0a:e2: 23:d1:2e:d3:1d:2e:c4:56:23:ee:e7:72:bc:a1:a1:a0:31:08: 27:b4:b2:74:df:57:8f:dc:e5:11:ee:97:1f:d3:9f:89:75:3a: e5:43:69:85:87:ba:3f:af:2b:db:83:1d:d9:25:b9:0d:fb:d4: f3:c2:99:71:66:c9:d5:85:a3:04:2d:61:50:f6:22:81:43:54: 7c:f8:bf:ab:f8:bf:91:65:9d:8d:4c:15:6c:5e:9e:25:2b:40: 47:c2:a2:5c:74:b7:88:fc:15:a4:77:0c:37:a6:bc:de:f1:84: 23:42:df:c4:ca:18:7d:bc:f2:bc:9b:25:2c:06:6b:22:23:89: 39:43:1b:fc:45:57:1b:6d:c7:80:b5:e0:4f:d3:21:b1:b9:54: c9:2c:28:c2:62:02:25:06:01:64:13:6d:98:a9:21:2e:88:35: 8e:63:61:6a:ad:f1:f7:d2:0d:af:df:44:f7:a5:f3:ce:fc:e3: 54:2e:a0:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgaO7E1JT9nNyDgigAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI0MTIwNTA1MzgxMVoXDTI1MDMwNTA1MzgxMVowLzEtMCsGA1UEAxMk M2YxOWY5ZDItNTY3My00MjZlLWJjMDMtNmExZDQ4ZDU3OTg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfMFbcW0v4z/y6FCCZ59ohtpYfL6tYr7V0qG SlbR9TZVBSc+0OMUQIdm3On9hWvtNoG9Bi3h/sbuwx6flNEU/Iq63WDSs+IR/lMx FlUTOntgfvdYOgmLGKzO5+lT4lsffPiU04/h+bz2qb6xlt7jr2RsKDS1zdnOg6HK PSt2sJFo1yg2qtSj5itLjCM/IpBXG2e4uVoIRcH1RSqqZYxKprpTzEpD79UhRze8 Jpi5BspA5Gs1RCM0xHBggSDNpzwNjdC4MbUb1sSvWMUHYPVdZsH2VJ28XIKc2Uan s75SA1Mxu6juDUPopVR3hVnybsjjvIwVQAgAAVTMESF6A+ff4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKjdq9OEcwD7fadoR3QWvmkxAXz7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvN2VkOGQwNTItNjg0Zi0z NGVkLTkxZGItYjI2ZjJjODIyMzQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/dMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADcGxm0mx0nf/z7Ezzyr48twI5W9VvOg7hfS3phJTVtKrVVGx5ApGkVr EGInHfMkRqswnz35mEkHPkVqaej+IsKt+83jDBUK4iPRLtMdLsRWI+7ncryhoaAx CCe0snTfV4/c5RHulx/Tn4l1OuVDaYWHuj+vK9uDHdkluQ371PPCmXFmydWFowQt YVD2IoFDVHz4v6v4v5FlnY1MFWxeniUrQEfColx0t4j8FaR3DDemvN7xhCNC38TK GH288rybJSwGayIjiTlDG/xFVxttx4C14E/TIbG5VMksKMJiAiUGAWQTbZipIS6I NY5jYWqt8ffSDa/fRPel887841QuoII= -----END CERTIFICATE-----Generated at Thu Dec 26 09:00:18 2024 by rpki-client on console-ams.rpki-client.org