$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/89c763ab-13dd-3b24-8c22-2a785ba3be64.roa File: 89c763ab-13dd-3b24-8c22-2a785ba3be64.roa (raw, json) Hash identifier: EC2acfrE+m/c769rfIrluo5gQawENPMgyPAPjnyUNYE= Subject key identifier: 92:B3:A7:28:8D:87:7E:27:70:02:14:55:48:1F:84:D4:AA:5C:E3:89 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F432858472835FB29084991D9A853EC40 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/89c763ab-13dd-3b24-8c22-2a785ba3be64.roa Signing time: Mon 09 Sep 2024 13:00:41 +0000 ROA not before: Mon 09 Sep 2024 13:00:41 +0000 ROA not after: Sun 08 Dec 2024 14:00:41 +0000 asID: 9009 IP address blocks: 172.111.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:28:35:fb:29:08:49:91:d9:a8:53:ec:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Sep 9 13:00:41 2024 GMT Not After : Dec 8 14:00:41 2024 GMT Subject: CN=d31287f5-7589-4e9a-a008-318b8df63ecd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:67:e2:d7:34:68:dd:96:e9:1b:c5:34:e2:e2: c2:ae:ef:6c:9f:ed:71:9a:23:8d:48:59:89:b2:10: a1:6f:01:ae:6a:62:7b:53:4f:b4:40:14:32:54:a1: 0b:3a:c0:99:72:63:9b:da:f6:f5:45:6f:10:a6:d4: e0:cc:64:81:4d:78:88:5a:5e:c6:7e:fa:4c:bb:68: 4b:13:89:76:80:9a:65:57:5a:2a:12:c9:c2:fa:5c: b0:03:3c:7a:4c:ff:b7:9e:30:d6:6f:33:d4:ec:d8: 3e:f2:4b:11:be:ed:14:59:22:30:96:f3:d8:5c:2c: d2:1c:86:51:c6:25:f3:f4:0c:99:18:15:20:8b:29: dd:db:e2:c5:12:2b:e4:ea:a7:7f:1d:0e:19:5c:da: d7:12:3b:c7:73:b7:ae:d8:c7:23:1f:cb:7d:17:0d: 0b:85:3b:84:93:b1:be:1c:53:65:eb:7c:73:c3:88: 1e:db:cb:d6:48:85:46:7b:3a:1f:cf:57:b1:5d:86: ab:38:b1:bf:2c:13:73:29:69:3f:21:37:93:cf:21: ae:40:8b:fe:34:88:0d:60:12:d4:b0:96:60:0c:6c: 5d:28:13:2d:90:1b:0d:8f:cf:c1:df:ad:36:07:64: 33:9e:fe:0a:be:f8:78:a2:79:de:e3:ac:97:97:d6: c7:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:B3:A7:28:8D:87:7E:27:70:02:14:55:48:1F:84:D4:AA:5C:E3:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/89c763ab-13dd-3b24-8c22-2a785ba3be64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.185.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:f2:9f:ee:28:0a:fd:b3:6d:33:1f:12:74:ee:be:6f:b9:da: bd:8c:df:0a:52:4d:e4:10:b7:82:3d:a9:40:8f:1f:5b:74:20: 2e:f9:04:e6:07:67:0b:00:e3:61:30:44:12:76:f0:55:d7:f4: e9:25:65:44:52:4e:57:a0:33:a8:dc:50:72:0c:11:16:a9:23: ee:06:56:8a:cb:c5:6d:36:f7:17:90:1c:8c:43:eb:c4:bd:b9: 34:f7:3c:be:93:20:68:51:33:2b:69:94:32:8d:d4:34:91:f2: 1d:af:34:fb:53:b1:01:2e:8d:b1:9e:e2:d4:04:6e:67:ab:03: 29:8c:55:8d:ef:9a:b0:3d:66:61:03:78:ea:45:f3:f2:0f:57: ec:89:09:77:fe:fa:05:5a:b9:c4:b7:eb:02:6e:c2:bd:47:74: 70:9b:08:27:e5:1e:f1:be:9a:0c:6d:7e:80:29:fb:67:0b:6e: 9c:53:8e:c8:6e:73:18:e0:e9:cb:67:95:b9:61:89:2e:21:ca: 22:13:6e:f3:76:b7:64:28:94:1c:90:ae:e5:60:38:56:1a:02: 16:de:1c:04:10:f3:b0:fa:92:95:e6:c6:fb:15:1d:c1:04:87: 7b:9b:c0:83:b8:bf:91:52:26:21:87:81:91:e4:53:ad:14:cf: 43:23:db:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcoNfspCEmR2ahT7EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI0MDkwOTEzMDA0MVoXDTI0MTIwODE0MDA0MVowLzEtMCsGA1UEAxMk ZDMxMjg3ZjUtNzU4OS00ZTlhLWEwMDgtMzE4YjhkZjYzZWNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgmfi1zRo3ZbpG8U04uLCru9sn+1xmiONSFmJ shChbwGuamJ7U0+0QBQyVKELOsCZcmOb2vb1RW8QptTgzGSBTXiIWl7GfvpMu2hL E4l2gJplV1oqEsnC+lywAzx6TP+3njDWbzPU7Ng+8ksRvu0UWSIwlvPYXCzSHIZR xiXz9AyZGBUgiynd2+LFEivk6qd/HQ4ZXNrXEjvHc7eu2McjH8t9Fw0LhTuEk7G+ HFNl63xzw4ge28vWSIVGezofz1exXYarOLG/LBNzKWk/ITeTzyGuQIv+NIgNYBLU sJZgDGxdKBMtkBsNj8/B3602B2Qznv4Kvvh4onne46yXl9bHRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJKzpyiNh34ncAIUVUgfhNSqXOOJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvODljNzYzYWItMTNkZC0z YjI0LThjMjItMmE3ODViYTNiZTY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA/yn+4oCv2zbTMfEnTuvm+52r2M3wpSTeQQt4I9qUCPH1t0IC75BOYH ZwsA42EwRBJ28FXX9OklZURSTlegM6jcUHIMERapI+4GVorLxW029xeQHIxD68S9 uTT3PL6TIGhRMytplDKN1DSR8h2vNPtTsQEujbGe4tQEbmerAymMVY3vmrA9ZmED eOpF8/IPV+yJCXf++gVaucS36wJuwr1HdHCbCCflHvG+mgxtfoAp+2cLbpxTjshu cxjg6ctnlblhiS4hyiITbvN2t2QolByQruVgOFYaAhbeHAQQ87D6kpXmxvsVHcEE h3ubwIO4v5FSJiGHgZHkU60Uz0Mj294= -----END CERTIFICATE-----Generated at Thu Nov 21 23:36:41 2024 by rpki-client on console-ams.rpki-client.org