$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/98c89c7a-b014-3805-924d-4831141ca4b6.roa File: 98c89c7a-b014-3805-924d-4831141ca4b6.roa (raw, json) Hash identifier: um/hqsl4ESuIad0KCofPgvWLN6RJMYlTH9Xj60SogAM= Subject key identifier: 5A:B8:93:DA:D4:AE:BF:FD:4F:F4:79:D9:7B:AA:A8:FB:99:35:12:F0 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285847845664E76D538752DA4EC800 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/98c89c7a-b014-3805-924d-4831141ca4b6.roa Signing time: Sat 12 Oct 2024 13:00:42 +0000 ROA not before: Sat 12 Oct 2024 13:00:42 +0000 ROA not after: Fri 10 Jan 2025 14:00:42 +0000 asID: 137409 IP address blocks: 172.111.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:84:56:64:e7:6d:53:87:52:da:4e:c8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 12 13:00:42 2024 GMT Not After : Jan 10 14:00:42 2025 GMT Subject: CN=3447e3ad-a49e-4a35-b561-e3c8845e7dce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:3a:04:9d:87:9b:ea:7c:5c:c1:eb:84:42:7f: 54:6b:d1:29:1f:d4:ea:6e:d5:59:0a:97:d8:e0:e9: 4e:79:3d:66:1b:a6:9c:79:f6:db:3a:bb:56:ec:e7: 57:0a:9e:ed:9a:6b:46:2f:8b:68:9a:ad:04:90:c0: 49:19:73:7a:5e:e8:df:e9:fa:0d:22:b2:f0:91:fc: 72:43:4c:3b:e6:81:c7:0e:7b:6e:a4:ab:79:a1:cb: 09:4b:6c:35:f9:95:7a:03:56:dd:3b:cd:a4:c5:d1: bd:fd:bc:8f:62:14:e8:33:54:9b:19:d8:93:4b:e6: 5c:56:f2:cb:4f:ef:63:20:70:59:a5:f6:e7:04:d3: cc:fa:8e:a9:e5:03:bd:1a:7f:18:15:02:e8:7c:c7: 92:66:3f:d6:26:f8:14:0b:3f:f9:aa:70:80:f3:9a: dc:1f:a2:63:74:3e:91:b0:81:32:ed:e9:cf:4b:ff: 4a:68:68:a9:d0:d1:0f:10:6b:b0:69:31:64:cb:e1: 8c:bf:86:ce:6b:ae:29:0f:05:00:aa:e4:d5:5c:0a: 60:d4:31:94:30:0b:9d:60:81:dc:37:80:1d:eb:bd: 96:3b:9f:93:4a:0a:13:62:3b:73:85:77:e9:26:4b: 41:a8:19:75:e6:c0:be:6f:fa:18:b6:b7:86:39:02: a4:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:B8:93:DA:D4:AE:BF:FD:4F:F4:79:D9:7B:AA:A8:FB:99:35:12:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/98c89c7a-b014-3805-924d-4831141ca4b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:af:f0:a8:2e:9d:a3:4d:7e:3c:82:09:84:ce:c4:0f:31:47: 08:33:55:80:86:67:8f:39:a5:09:b8:26:0c:6c:57:0d:14:b9: 2c:4e:ab:d8:64:4a:24:62:31:22:7b:69:88:77:c6:37:cb:51: 15:75:2f:f3:6e:a1:fc:85:5b:39:48:61:f9:93:08:c3:23:73: a3:36:0b:eb:03:bb:c3:29:a6:4d:82:eb:f8:4c:66:6c:d4:16: ab:c9:e8:63:f1:ba:c4:01:de:a6:58:0a:e3:d6:f8:1c:9f:68: 74:32:51:9d:3d:15:ed:37:9f:4f:81:3f:53:2c:83:de:66:79: 20:99:bb:0f:f2:7c:e0:88:0c:f4:5a:56:55:68:c1:4d:92:d1: a3:65:06:2a:cb:58:2c:90:36:5d:76:ac:77:74:03:f0:df:8a: 6a:82:4c:ba:0b:e4:a1:c5:a0:57:e7:f0:e4:bd:2e:f9:a6:eb: 22:eb:b1:65:7c:7a:97:d4:dd:3c:a5:71:57:8c:7a:cc:79:54: 32:51:5a:24:07:91:70:cf:31:8e:27:bd:b7:38:49:0d:c9:29: 32:c8:a5:d8:20:27:f9:e9:89:c4:05:41:e5:14:98:38:03:1d: b1:8a:8f:09:43:ab:32:89:49:49:54:05:be:bf:d5:d9:b2:73: 07:b0:c7:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeEVmTnbVOHUtpOyAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI0MTAxMjEzMDA0MloXDTI1MDExMDE0MDA0MlowLzEtMCsGA1UEAxMk MzQ0N2UzYWQtYTQ5ZS00YTM1LWI1NjEtZTNjODg0NWU3ZGNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDoEnYeb6nxcweuEQn9Ua9EpH9TqbtVZCpfY 4OlOeT1mG6acefbbOrtW7OdXCp7tmmtGL4tomq0EkMBJGXN6Xujf6foNIrLwkfxy Q0w75oHHDntupKt5ocsJS2w1+ZV6A1bdO82kxdG9/byPYhToM1SbGdiTS+ZcVvLL T+9jIHBZpfbnBNPM+o6p5QO9Gn8YFQLofMeSZj/WJvgUCz/5qnCA85rcH6JjdD6R sIEy7enPS/9KaGip0NEPEGuwaTFky+GMv4bOa64pDwUAquTVXApg1DGUMAudYIHc N4Ad672WO5+TSgoTYjtzhXfpJktBqBl15sC+b/oYtreGOQKk6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFq4k9rUrr/9T/R52XuqqPuZNRLwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvOThjODljN2EtYjAxNC0z ODA1LTkyNGQtNDgzMTE0MWNhNGI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+hMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACWv8KgunaNNfjyCCYTOxA8xRwgzVYCGZ485pQm4JgxsVw0UuSxOq9hk SiRiMSJ7aYh3xjfLURV1L/NuofyFWzlIYfmTCMMjc6M2C+sDu8Mppk2C6/hMZmzU FqvJ6GPxusQB3qZYCuPW+ByfaHQyUZ09Fe03n0+BP1Msg95meSCZuw/yfOCIDPRa VlVowU2S0aNlBirLWCyQNl12rHd0A/DfimqCTLoL5KHFoFfn8OS9Lvmm6yLrsWV8 epfU3TylcVeMesx5VDJRWiQHkXDPMY4nvbc4SQ3JKTLIpdggJ/npicQFQeUUmDgD HbGKjwlDqzKJSUlUBb6/1dmycwewx+E= -----END CERTIFICATE-----Generated at Fri Nov 22 05:50:33 2024 by rpki-client on console-fra.rpki-client.org