$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9900537f-d5e2-3806-9033-2c220187a308.roa File: 9900537f-d5e2-3806-9033-2c220187a308.roa (raw, json) Hash identifier: TyAK+mlIUv72kgLAXcFerKxhqGK0Nlu3YA6m5W/rtsM= Subject key identifier: 2A:22:8A:E7:C4:FB:28:51:51:0A:90:66:D5:86:76:E5:78:70:5D:BA Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F432858476B363CBE00D15B49D3E3FF80 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9900537f-d5e2-3806-9033-2c220187a308.roa Signing time: Thu 03 Oct 2024 13:00:41 +0000 ROA not before: Thu 03 Oct 2024 13:00:41 +0000 ROA not after: Wed 01 Jan 2025 14:00:41 +0000 asID: 9009 IP address blocks: 172.111.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:6b:36:3c:be:00:d1:5b:49:d3:e3:ff:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 3 13:00:41 2024 GMT Not After : Jan 1 14:00:41 2025 GMT Subject: CN=35a89292-493a-41b7-ad4e-69d323439d41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:43:51:90:d4:af:d6:9b:fc:fd:ee:e7:40:21: 52:1e:16:f7:45:91:dd:86:7c:4e:46:48:3d:2c:ff: 34:33:26:37:36:4c:83:b8:d7:4a:ba:f3:95:36:47: 12:00:79:ef:7f:d8:4e:c1:c8:65:25:ad:07:0d:92: 8c:aa:70:4e:bd:e8:31:d9:2e:83:a8:45:26:13:ff: 6f:28:58:84:cd:15:80:d9:68:dd:6c:95:95:ae:f7: 12:7b:38:bd:f3:c7:84:fc:43:83:64:82:01:ed:6b: 36:32:4e:6c:fa:c1:5e:db:15:0e:05:d6:ce:08:b7: df:21:00:ae:c9:1d:3c:2a:aa:d4:71:76:90:dd:65: 28:fb:cb:62:eb:7e:b3:82:e6:46:5c:dd:2e:6d:e2: c9:77:6c:10:a9:d9:4b:26:83:7e:46:69:ce:85:ce: 5c:e5:80:9e:27:d4:06:5b:a9:ae:aa:cc:b4:c5:97: d9:93:27:ad:bf:48:05:6b:99:bd:dc:91:ad:da:33: ea:e2:99:ed:24:b5:72:af:6e:ef:42:10:2a:94:d8: 74:e0:94:15:64:30:51:ef:44:62:8b:fa:5a:78:39: fc:78:b8:10:86:9c:b3:1b:db:25:08:22:9b:b9:3e: b1:f9:d3:11:a9:36:08:0d:9b:69:54:db:54:85:08: 77:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:22:8A:E7:C4:FB:28:51:51:0A:90:66:D5:86:76:E5:78:70:5D:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9900537f-d5e2-3806-9033-2c220187a308.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.181.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:23:f6:ca:2c:55:6f:46:10:e6:6f:a1:e7:5a:78:51:58:25: e1:98:7f:a6:96:54:be:c9:ba:36:48:c1:31:b5:7d:c0:ef:72: cd:b8:b0:79:5f:77:d8:bd:9b:3e:59:ca:ac:d4:56:0f:eb:79: ba:e2:25:cd:2f:94:48:0e:e6:9a:02:90:76:65:99:d5:f0:13: e6:14:4f:ea:cd:a2:aa:d7:05:0d:ac:e1:8c:0c:29:24:fd:22: 72:41:7c:22:6a:02:ff:41:2e:03:2f:11:ca:4b:25:f8:4c:92: 61:bd:b9:b8:01:8f:21:f1:6a:79:51:62:5d:ba:97:e8:dd:5e: 63:00:97:08:56:e1:af:18:a9:dd:be:df:ad:59:be:ea:75:6d: 4f:e0:8b:d4:43:26:a5:7e:23:39:23:99:1f:b6:a9:46:07:83: b6:01:44:a7:14:3f:73:5d:2d:3e:89:fc:c1:df:34:2f:00:f9: 4b:be:fc:f0:f9:e2:7b:f6:e6:9d:7f:d9:19:6c:2d:b4:e3:a5: c9:7b:8e:67:86:be:c4:b2:91:76:6b:ca:6e:0f:db:25:d7:19: 31:f3:4a:77:d7:12:0d:f4:a5:25:54:90:d3:a4:08:37:a6:70: e6:5c:3b:6b:e8:b4:eb:d5:c1:b5:f4:ce:20:09:36:9f:8d:95: 8a:62:c4:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdrNjy+ANFbSdPj/4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI0MTAwMzEzMDA0MVoXDTI1MDEwMTE0MDA0MVowLzEtMCsGA1UEAxMk MzVhODkyOTItNDkzYS00MWI3LWFkNGUtNjlkMzIzNDM5ZDQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3kNRkNSv1pv8/e7nQCFSHhb3RZHdhnxORkg9 LP80MyY3NkyDuNdKuvOVNkcSAHnvf9hOwchlJa0HDZKMqnBOvegx2S6DqEUmE/9v KFiEzRWA2WjdbJWVrvcSezi988eE/EODZIIB7Ws2Mk5s+sFe2xUOBdbOCLffIQCu yR08KqrUcXaQ3WUo+8ti636zguZGXN0ubeLJd2wQqdlLJoN+RmnOhc5c5YCeJ9QG W6muqsy0xZfZkyetv0gFa5m93JGt2jPq4pntJLVyr27vQhAqlNh04JQVZDBR70Ri i/paeDn8eLgQhpyzG9slCCKbuT6x+dMRqTYIDZtpVNtUhQh3oQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCoiiufE+yhRUQqQZtWGduV4cF26MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvOTkwMDUzN2YtZDVlMi0z ODA2LTkwMzMtMmMyMjAxODdhMzA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFMj9sosVW9GEOZvoedaeFFYJeGYf6aWVL7JujZIwTG1fcDvcs24sHlf d9i9mz5ZyqzUVg/rebriJc0vlEgO5poCkHZlmdXwE+YUT+rNoqrXBQ2s4YwMKST9 InJBfCJqAv9BLgMvEcpLJfhMkmG9ubgBjyHxanlRYl26l+jdXmMAlwhW4a8Yqd2+ 361Zvup1bU/gi9RDJqV+IzkjmR+2qUYHg7YBRKcUP3NdLT6J/MHfNC8A+Uu+/PD5 4nv25p1/2RlsLbTjpcl7jmeGvsSykXZrym4P2yXXGTHzSnfXEg30pSVUkNOkCDem cOZcO2votOvVwbX0ziAJNp+NlYpixEE= -----END CERTIFICATE-----Generated at Fri Nov 22 00:23:35 2024 by rpki-client on console-fra.rpki-client.org