$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/901d7078-5ae0-31f8-a837-37437b50a24f.roa File: 901d7078-5ae0-31f8-a837-37437b50a24f.roa (raw, json) Hash identifier: AXfPY3tmrZeIYK4jYjEpnkh0QTSa5dNICHDwyaU7BT4= Subject key identifier: C2:70:D7:CA:6A:61:E2:1B:C1:15:75:31:90:A4:BB:4C:34:5A:0B:C8 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285847F2BA2A40BB6A83D656671300 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/901d7078-5ae0-31f8-a837-37437b50a24f.roa Signing time: Thu 21 Nov 2024 02:00:38 +0000 ROA not before: Thu 21 Nov 2024 02:00:38 +0000 ROA not after: Wed 19 Feb 2025 02:00:38 +0000 asID: 3223 IP address blocks: 172.111.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f2:ba:2a:40:bb:6a:83:d6:56:67:13:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Nov 21 02:00:38 2024 GMT Not After : Feb 19 02:00:38 2025 GMT Subject: CN=58d4ea9a-0554-422f-8175-fd4aea698ed0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:3a:d5:f6:88:41:97:db:e8:f2:67:a4:c6:65: 89:7d:80:ef:95:31:f5:72:a0:68:6e:82:51:4d:7f: d3:71:c7:bc:0e:4a:a8:1d:a9:71:7c:9c:cc:7f:b6: 5b:b1:0d:a6:5f:99:6f:61:5d:08:b0:54:a6:ac:e5: 2b:f6:d6:c5:94:14:11:0e:0e:d3:07:ce:e4:73:37: bb:3c:4e:9b:6b:b9:71:f5:63:d4:16:c2:44:e3:1e: 84:84:a5:92:d3:fd:4c:b2:21:2d:35:f1:3a:60:b4: a6:71:f7:3d:5f:ed:5d:73:36:e1:a9:ab:81:f0:93: cd:bd:ad:9c:67:ee:a9:4f:d1:4f:91:63:3a:0b:37: 7b:5b:3f:71:27:af:f0:90:a0:88:3f:7d:d0:d5:18: 43:8d:d2:2a:33:d0:48:67:65:8f:1e:ea:d4:da:7f: e1:6a:0e:73:0d:40:e7:25:99:4d:b6:66:29:5d:4f: 44:31:9c:be:f2:b4:b8:96:dd:62:4f:1a:88:49:ee: e7:d4:0b:68:50:1b:6f:ae:a2:85:ba:15:ec:d6:fa: a7:35:9c:df:76:9a:60:97:94:67:0c:1c:0e:b6:4c: 41:eb:a5:94:2f:da:8f:b0:62:13:03:94:8a:f8:74: 09:8f:07:8e:22:08:1d:ac:56:43:9d:1f:f3:d3:c6: a5:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:70:D7:CA:6A:61:E2:1B:C1:15:75:31:90:A4:BB:4C:34:5A:0B:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/901d7078-5ae0-31f8-a837-37437b50a24f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:f3:2f:da:d9:98:bc:a4:f9:78:a8:dd:18:6d:71:06:5c:16: 4e:58:ea:c2:db:37:9b:68:e2:1e:c7:a9:b8:b2:fe:3c:9b:bd: 4d:56:d8:60:31:65:51:61:83:40:e4:b6:ff:d7:77:4d:2e:9a: 1a:47:d2:3a:59:c8:13:41:21:6b:b5:ca:ec:5b:ca:9c:b6:93: fb:86:03:a3:a6:1e:70:26:ba:07:72:55:e7:de:79:dd:5a:12: 61:4b:74:f9:26:12:43:38:38:d5:af:a8:89:82:7e:cb:13:3e: b2:09:31:ab:88:4c:6a:f7:6d:8c:04:7b:25:67:a4:86:14:95: f5:5b:43:f4:cf:a2:d2:d7:60:4b:26:ed:83:b6:19:48:02:99: 13:c8:b8:8a:38:7d:cf:ed:f9:aa:22:2b:f9:e7:a8:08:08:d2: c9:74:47:c2:33:ef:ba:12:03:f9:58:6e:02:06:6f:5b:79:be: 5f:35:02:e7:28:1b:56:ed:f3:51:12:ab:65:30:2c:88:12:a8: 28:9f:68:46:19:0a:16:d6:46:8b:a7:20:56:4d:86:f9:61:41: a8:23:09:88:d0:06:70:d1:99:62:4d:82:c6:04:4e:a6:fa:36: 81:e5:37:57:60:22:9b:50:0a:0b:23:09:19:1d:07:60:ee:14: 46:87:a8:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfyuipAu2qD1lZnEwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI0MTEyMTAyMDAzOFoXDTI1MDIxOTAyMDAzOFowLzEtMCsGA1UEAxMk NThkNGVhOWEtMDU1NC00MjJmLTgxNzUtZmQ0YWVhNjk4ZWQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAizrV9ohBl9vo8mekxmWJfYDvlTH1cqBoboJR TX/Tcce8DkqoHalxfJzMf7ZbsQ2mX5lvYV0IsFSmrOUr9tbFlBQRDg7TB87kcze7 PE6ba7lx9WPUFsJE4x6EhKWS0/1MsiEtNfE6YLSmcfc9X+1dczbhqauB8JPNva2c Z+6pT9FPkWM6Czd7Wz9xJ6/wkKCIP33Q1RhDjdIqM9BIZ2WPHurU2n/hag5zDUDn JZlNtmYpXU9EMZy+8rS4lt1iTxqISe7n1AtoUBtvrqKFuhXs1vqnNZzfdppgl5Rn DBwOtkxB66WUL9qPsGITA5SK+HQJjweOIggdrFZDnR/z08alDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMJw18pqYeIbwRV1MZCku0w0WgvIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvOTAxZDcwNzgtNWFlMC0z MWY4LWE4MzctMzc0MzdiNTBhMjRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+DMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABLzL9rZmLyk+Xio3RhtcQZcFk5Y6sLbN5to4h7Hqbiy/jybvU1W2GAx ZVFhg0Dktv/Xd00umhpH0jpZyBNBIWu1yuxbypy2k/uGA6OmHnAmugdyVefeed1a EmFLdPkmEkM4ONWvqImCfssTPrIJMauITGr3bYwEeyVnpIYUlfVbQ/TPotLXYEsm 7YO2GUgCmRPIuIo4fc/t+aoiK/nnqAgI0sl0R8Iz77oSA/lYbgIGb1t5vl81Auco G1bt81ESq2UwLIgSqCifaEYZChbWRounIFZNhvlhQagjCYjQBnDRmWJNgsYETqb6 NoHlN1dgIptQCgsjCRkdB2DuFEaHqN0= -----END CERTIFICATE-----Generated at Fri Nov 22 04:37:33 2024 by rpki-client on console-ams.rpki-client.org