$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/831e684b-3865-3f29-a227-911e4062b52f.roa File: 831e684b-3865-3f29-a227-911e4062b52f.roa (raw, json) Hash identifier: oGHX7L8exrWlzFpLIVvC9yAElbGKfqiOi1bkUcvZBko= Subject key identifier: 29:D8:B5:0F:5A:37:FA:61:72:41:24:48:31:9C:32:AD:7F:4B:68:E7 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285847600B7F25A582D98CB80E5FBC Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/831e684b-3865-3f29-a227-911e4062b52f.roa Signing time: Sun 29 Sep 2024 13:00:41 +0000 ROA not before: Sun 29 Sep 2024 13:00:41 +0000 ROA not after: Sat 28 Dec 2024 14:00:41 +0000 asID: 9009 IP address blocks: 172.111.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:60:0b:7f:25:a5:82:d9:8c:b8:0e:5f:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Sep 29 13:00:41 2024 GMT Not After : Dec 28 14:00:41 2024 GMT Subject: CN=24c9c344-3a28-4911-abd4-3f71b6c1b7b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:7b:af:3f:90:42:82:d1:fc:4a:34:e4:98:d5: 33:59:a4:d4:18:94:f2:8c:66:1d:ad:70:cf:41:d5: ec:f6:9c:21:d4:97:1a:cb:9a:42:6c:63:5d:0c:14: 77:d3:fe:9a:71:c9:19:09:44:99:93:ee:a5:ab:94: 1c:34:00:c3:7c:ba:f7:51:d2:2e:47:38:5c:53:be: d1:4f:ea:7e:77:08:e1:25:92:cf:74:ff:11:f6:5f: 4c:40:7d:33:e9:a8:be:28:f7:bc:ce:cb:57:ad:2e: 80:9e:a4:52:46:0f:f9:03:e3:49:ed:be:52:4d:07: d9:01:71:10:20:45:2a:bf:79:42:c5:01:14:8f:fc: da:28:00:1f:64:d0:a9:9e:e2:0f:9a:c5:b5:c2:25: 9d:7a:fc:0d:cb:a3:34:83:f7:b5:5f:f8:63:19:45: ab:4b:1f:c7:7d:ff:52:02:8f:ca:5f:4c:a0:66:60: 70:a6:38:66:09:97:8e:92:d6:19:0b:b0:f4:d1:f2: 51:a2:e7:e0:38:6a:6e:5c:c9:4b:33:9e:ae:b8:cd: 1a:73:65:c8:56:ad:b1:f1:f9:8c:9d:b6:a6:d4:88: 4f:19:a3:94:ad:81:59:0f:e0:f3:45:cc:5f:35:3d: da:bc:b0:8b:e4:89:16:97:0c:20:dc:4a:6a:4d:4c: ca:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:D8:B5:0F:5A:37:FA:61:72:41:24:48:31:9C:32:AD:7F:4B:68:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/831e684b-3865-3f29-a227-911e4062b52f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:3c:01:53:88:df:f5:d7:ae:80:f5:a7:8d:c3:20:27:6a:da: 34:0c:9f:1c:15:39:fc:fd:ce:63:2b:f3:63:5a:cd:e5:da:78: 50:4f:1f:9b:ed:f1:8e:b1:b8:2a:e1:a0:1e:ec:39:17:79:0e: 64:c3:b9:ef:56:67:bb:c6:8d:8f:3e:bd:a2:34:2e:7a:b4:cb: 30:70:46:e3:6b:97:8d:07:13:b7:5e:04:df:2f:33:c6:8c:29: c9:39:c6:94:3b:a6:6a:d3:30:c6:05:e3:ab:23:c3:e0:f7:c3: 57:0a:a2:9f:4f:c2:c1:b2:00:8b:42:6e:ed:b5:03:94:9c:63: 83:a0:b9:9a:29:bd:98:91:5d:35:0b:f3:b9:fb:9d:cd:4d:b2: 15:02:66:7b:f9:9b:71:15:e6:de:b9:c4:08:a4:f6:6d:40:1e: 21:41:00:ee:55:a6:39:1e:42:5a:c4:f2:c5:a4:8d:3d:f9:25: d4:f4:ef:60:4b:11:83:ec:c7:47:42:d4:33:3d:a5:34:31:c9: b4:c8:a5:74:a2:de:e9:30:ba:e8:b7:31:c2:af:bb:fc:78:87: 09:c9:d2:db:01:95:a5:e1:b3:20:9c:c4:a3:8d:13:72:cb:40: 36:19:13:78:80:56:33:e8:dd:96:b6:57:96:f1:79:44:39:14: ca:dc:e2:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdgC38lpYLZjLgOX7wwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI0MDkyOTEzMDA0MVoXDTI0MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk MjRjOWMzNDQtM2EyOC00OTExLWFiZDQtM2Y3MWI2YzFiN2I5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonuvP5BCgtH8SjTkmNUzWaTUGJTyjGYdrXDP QdXs9pwh1Jcay5pCbGNdDBR30/6acckZCUSZk+6lq5QcNADDfLr3UdIuRzhcU77R T+p+dwjhJZLPdP8R9l9MQH0z6ai+KPe8zstXrS6AnqRSRg/5A+NJ7b5STQfZAXEQ IEUqv3lCxQEUj/zaKAAfZNCpnuIPmsW1wiWdevwNy6M0g/e1X/hjGUWrSx/Hff9S Ao/KX0ygZmBwpjhmCZeOktYZC7D00fJRoufgOGpuXMlLM56uuM0ac2XIVq2x8fmM nbam1IhPGaOUrYFZD+DzRcxfNT3avLCL5IkWlwwg3EpqTUzKhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCnYtQ9aN/phckEkSDGcMq1/S2jnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvODMxZTY4NGItMzg2NS0z ZjI5LWEyMjctOTExZTQwNjJiNTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG88AVOI3/XXroD1p43DICdq2jQMnxwVOfz9zmMr82NazeXaeFBPH5vt 8Y6xuCrhoB7sORd5DmTDue9WZ7vGjY8+vaI0Lnq0yzBwRuNrl40HE7deBN8vM8aM Kck5xpQ7pmrTMMYF46sjw+D3w1cKop9PwsGyAItCbu21A5ScY4OguZopvZiRXTUL 87n7nc1NshUCZnv5m3EV5t65xAik9m1AHiFBAO5VpjkeQlrE8sWkjT35JdT072BL EYPsx0dC1DM9pTQxybTIpXSi3ukwuui3McKvu/x4hwnJ0tsBlaXhsyCcxKONE3LL QDYZE3iAVjPo3Za2V5bxeUQ5FMrc4ig= -----END CERTIFICATE-----Generated at Fri Nov 22 00:23:35 2024 by rpki-client on console-fra.rpki-client.org