$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/95c68bed-75a2-3733-945f-212137dddeb1.roa File: 95c68bed-75a2-3733-945f-212137dddeb1.roa (raw, json) Hash identifier: ieHp/9EiUyTeZn4jkXooSqOQSyAYP0ePARirvx8BJXg= Subject key identifier: 65:10:F3:45:BE:2A:F3:69:39:61:D1:59:91:97:56:66:89:6A:B4:BA Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F432858481A3B28AFE28823AF40DE95C0 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/95c68bed-75a2-3733-945f-212137dddeb1.roa Signing time: Thu 05 Dec 2024 05:37:06 +0000 ROA not before: Thu 05 Dec 2024 05:37:06 +0000 ROA not after: Wed 05 Mar 2025 05:37:06 +0000 asID: 9009 IP address blocks: 172.111.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Dec 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:1a:3b:28:af:e2:88:23:af:40:de:95:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Dec 5 05:37:06 2024 GMT Not After : Mar 5 05:37:06 2025 GMT Subject: CN=b09f7be5-c7a5-4a27-8e3f-9be0c3669fe3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a3:7d:ad:7a:be:c2:b8:92:a7:8a:8d:49:94: c4:a4:17:f9:c3:ac:0d:81:f7:cf:9b:92:66:c4:1c: c5:9d:72:01:be:35:40:69:c5:45:bf:7a:00:b8:f7: 10:09:83:4d:64:11:c8:b8:aa:1b:d9:79:1c:05:dc: ca:1c:bd:a1:fe:1d:42:50:3a:81:89:df:ae:6d:1b: 23:9c:cd:37:fb:90:b2:cf:66:65:91:26:2a:61:63: bb:c5:18:fe:14:0e:48:8c:46:38:65:68:ce:78:dc: bf:4b:a2:d8:58:ac:40:d7:b0:90:6c:22:7f:d9:c0: 73:79:cf:05:63:78:4e:a9:76:2e:b4:0b:25:64:80: cd:bd:ed:b1:96:cf:b6:1e:08:2f:df:3c:9e:79:d7: 17:2d:01:a8:09:bf:21:27:0f:e0:46:ce:6e:c9:e4: f0:9d:30:fd:9a:21:fc:1f:0a:0f:e5:0b:7b:f1:91: 63:3c:73:c6:74:b5:f7:81:76:a1:b4:9e:d9:e9:29: 06:83:4c:bf:d1:2e:6f:6e:ee:58:8f:55:a7:b5:94: 47:91:60:e9:71:d9:c3:b2:1e:4a:23:1d:65:93:a5: 32:87:b5:ae:99:ed:a6:12:54:a1:ce:c0:ee:f2:73: dd:f3:da:15:62:f2:cc:66:73:b0:96:d3:b5:6c:d1: 76:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:10:F3:45:BE:2A:F3:69:39:61:D1:59:91:97:56:66:89:6A:B4:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/95c68bed-75a2-3733-945f-212137dddeb1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.199.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:3a:45:01:01:53:67:7b:62:7c:5c:d4:da:4b:fb:92:f9:69: b9:68:09:64:1d:f0:64:79:c7:7e:16:2b:4c:a2:34:59:27:a5: fd:d3:c5:b6:0a:dd:d3:09:5a:e6:f4:5e:e4:bf:10:48:7b:17: 37:53:3f:58:cf:55:c1:2b:d1:29:df:cf:ac:a9:69:93:8e:8c: 7f:81:2f:aa:e7:7c:39:00:2f:da:68:1b:d7:30:3f:bd:21:91: 56:73:b6:f2:25:1e:20:0c:9f:f2:45:4e:47:0f:7e:f6:af:3e: b5:36:3f:16:80:8f:fd:32:fb:4c:4d:70:72:8d:3a:9b:ed:5e: 05:1d:87:9c:60:3c:37:8f:3d:3e:a2:71:08:79:f7:c1:b2:9a: 1e:99:6d:0e:49:1c:a0:ba:89:c4:ed:62:5d:b2:1a:7b:09:33: 73:25:20:d7:77:e6:9b:0e:12:e3:a0:a6:76:aa:22:50:37:f8: c4:85:d3:73:6c:ed:63:44:94:1b:7c:e9:76:39:3d:9b:b0:77: 4e:69:86:67:6c:b3:ab:6d:21:40:19:1a:d4:1a:d1:c0:f7:5a: 10:77:97:e2:43:5e:1b:e0:d6:32:86:6d:9b:1d:e7:3e:45:3f: bb:ca:cf:00:32:ef:eb:76:77:52:75:50:5b:02:58:e9:20:6d: cb:db:05:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgaOyiv4ogjr0DelcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI0MTIwNTA1MzcwNloXDTI1MDMwNTA1MzcwNlowLzEtMCsGA1UEAxMk YjA5ZjdiZTUtYzdhNS00YTI3LThlM2YtOWJlMGMzNjY5ZmUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsaN9rXq+wriSp4qNSZTEpBf5w6wNgffPm5Jm xBzFnXIBvjVAacVFv3oAuPcQCYNNZBHIuKob2XkcBdzKHL2h/h1CUDqBid+ubRsj nM03+5Cyz2ZlkSYqYWO7xRj+FA5IjEY4ZWjOeNy/S6LYWKxA17CQbCJ/2cBzec8F Y3hOqXYutAslZIDNve2xls+2Hggv3zyeedcXLQGoCb8hJw/gRs5uyeTwnTD9miH8 HwoP5Qt78ZFjPHPGdLX3gXahtJ7Z6SkGg0y/0S5vbu5Yj1WntZRHkWDpcdnDsh5K Ix1lk6Uyh7Wume2mElShzsDu8nPd89oVYvLMZnOwltO1bNF2oQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGUQ80W+KvNpOWHRWZGXVmaJarS6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvOTVjNjhiZWQtNzVhMi0z NzMzLTk0NWYtMjEyMTM3ZGRkZWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/HMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFg6RQEBU2d7Ynxc1NpL+5L5abloCWQd8GR5x34WK0yiNFknpf3TxbYK 3dMJWub0XuS/EEh7FzdTP1jPVcEr0Snfz6ypaZOOjH+BL6rnfDkAL9poG9cwP70h kVZztvIlHiAMn/JFTkcPfvavPrU2PxaAj/0y+0xNcHKNOpvtXgUdh5xgPDePPT6i cQh598Gymh6ZbQ5JHKC6icTtYl2yGnsJM3MlINd35psOEuOgpnaqIlA3+MSF03Ns 7WNElBt86XY5PZuwd05phmdss6ttIUAZGtQa0cD3WhB3l+JDXhvg1jKGbZsd5z5F P7vKzwAy7+t2d1J1UFsCWOkgbcvbBVo= -----END CERTIFICATE-----Generated at Thu Dec 26 09:00:18 2024 by rpki-client on console-ams.rpki-client.org