$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9d435f49-9dcd-3273-914a-89e66b8a1f88.roa File: 9d435f49-9dcd-3273-914a-89e66b8a1f88.roa (raw, json) Hash identifier: bfWU6RI+eqQ5vdr7FxI2qKm+wWI4Npcew5uJGJF8ibg= Subject key identifier: 8F:B7:03:23:31:31:92:C3:A4:99:74:A9:F0:1E:75:22:0D:38:CA:CA Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584789AF8BDD2B74E78A9DCF0480 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9d435f49-9dcd-3273-914a-89e66b8a1f88.roa Signing time: Mon 14 Oct 2024 10:59:24 +0000 ROA not before: Mon 14 Oct 2024 10:59:24 +0000 ROA not after: Sun 12 Jan 2025 11:59:24 +0000 asID: 9009 IP address blocks: 172.111.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:89:af:8b:dd:2b:74:e7:8a:9d:cf:04:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 14 10:59:24 2024 GMT Not After : Jan 12 11:59:24 2025 GMT Subject: CN=cb35b95f-1597-4856-9b6c-1c1b6a2307d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:74:6a:1d:70:59:9e:75:50:b2:89:28:eb:3d: 54:fb:95:7c:ae:19:eb:fd:de:fc:00:c7:c6:c2:a3: 3c:61:d8:44:68:cf:2a:b2:b3:88:fd:f9:5b:a0:d2: 4b:50:4d:66:ff:07:aa:c0:ee:dc:a9:0f:f4:87:0b: 94:4b:bf:13:29:47:10:fe:e1:90:ee:c8:e5:5c:26: f6:69:f7:bd:ca:2e:6b:62:f3:fc:a9:71:bd:c0:31: 85:41:6a:75:04:2a:ce:7a:d8:c0:55:6e:8f:76:a4: 4d:20:f4:6b:d2:e7:4b:ae:2c:10:db:43:c5:f3:e2: b6:43:b9:20:7d:4c:0d:00:c5:5e:27:f7:02:ef:0f: a6:63:a5:9e:68:de:72:c6:8f:7f:5b:4c:d7:b0:cc: 7b:0b:09:76:ab:d8:d0:ec:63:4b:78:a0:0c:a3:d9: 1f:f9:ec:13:41:0a:33:9b:56:14:ae:d2:34:f2:59: 02:6e:04:9a:e8:5e:b4:93:d3:cd:4a:a0:00:97:36: 4b:e2:b9:6a:d9:63:d7:ee:e7:f9:6a:f8:ba:6f:d2: 86:64:d3:26:a0:a1:93:96:86:57:f5:dc:9e:c8:38: 02:94:1d:00:26:2b:7a:74:6e:b7:2d:4a:ca:e3:3c: 18:1e:e0:3d:35:50:eb:78:7c:3b:e7:25:b3:c0:87: c3:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:B7:03:23:31:31:92:C3:A4:99:74:A9:F0:1E:75:22:0D:38:CA:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9d435f49-9dcd-3273-914a-89e66b8a1f88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:0e:b8:e3:33:79:a4:f2:53:1e:e3:95:60:35:2e:17:c6:02: 78:e0:1a:89:b3:a9:6b:9c:72:d5:47:81:8b:29:26:79:ba:84: 1c:c3:b4:1d:a4:b2:12:05:5e:53:40:3f:8a:4e:7f:2a:d7:97: 67:76:2a:59:95:2a:23:ae:08:9c:70:68:52:f4:d1:d3:f2:1d: 15:1c:51:cb:84:04:d8:d7:53:7e:be:29:f2:c4:ce:e7:47:9d: c8:5f:2e:61:40:4f:a2:b6:19:e1:2c:92:35:2b:a2:56:69:ce: d6:36:48:e3:2e:ee:d3:01:48:c3:51:77:35:e2:64:e8:93:d3: 82:03:58:a6:c2:25:ec:dc:64:79:e3:2a:49:e1:e5:d5:72:4d: a3:a1:33:e6:86:eb:7f:c9:99:88:b8:d0:e2:81:3e:3b:5d:e7: 22:77:b6:0e:d7:75:74:ff:0e:98:07:9d:61:48:fa:a7:6c:3a: 49:b7:c6:ec:f2:7f:80:92:40:bc:49:6b:b2:84:27:c0:93:8d: d1:37:a3:36:7e:13:e6:36:44:c6:b5:4e:01:6d:e7:b4:a8:f9: d5:35:f0:cb:01:a9:f1:2c:7f:76:3c:a0:da:cb:22:48:bd:69: 42:fe:59:2f:bb:47:e0:be:43:11:05:e0:58:e4:da:6f:2d:b7: 9a:fb:21:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeJr4vdK3Tnip3PBIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI0MTAxNDEwNTkyNFoXDTI1MDExMjExNTkyNFowLzEtMCsGA1UEAxMk Y2IzNWI5NWYtMTU5Ny00ODU2LTliNmMtMWMxYjZhMjMwN2Q1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAknRqHXBZnnVQsoko6z1U+5V8rhnr/d78AMfG wqM8YdhEaM8qsrOI/flboNJLUE1m/weqwO7cqQ/0hwuUS78TKUcQ/uGQ7sjlXCb2 afe9yi5rYvP8qXG9wDGFQWp1BCrOetjAVW6PdqRNIPRr0udLriwQ20PF8+K2Q7kg fUwNAMVeJ/cC7w+mY6WeaN5yxo9/W0zXsMx7Cwl2q9jQ7GNLeKAMo9kf+ewTQQoz m1YUrtI08lkCbgSa6F60k9PNSqAAlzZL4rlq2WPX7uf5avi6b9KGZNMmoKGTloZX 9dyeyDgClB0AJit6dG63LUrK4zwYHuA9NVDreHw75yWzwIfDnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI+3AyMxMZLDpJl0qfAedSINOMrKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvOWQ0MzVmNDktOWRjZC0z MjczLTkxNGEtODllNjZiOGExZjg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIoOuOMzeaTyUx7jlWA1LhfGAnjgGomzqWucctVHgYspJnm6hBzDtB2k shIFXlNAP4pOfyrXl2d2KlmVKiOuCJxwaFL00dPyHRUcUcuEBNjXU36+KfLEzudH nchfLmFAT6K2GeEskjUrolZpztY2SOMu7tMBSMNRdzXiZOiT04IDWKbCJezcZHnj Kknh5dVyTaOhM+aG63/JmYi40OKBPjtd5yJ3tg7XdXT/DpgHnWFI+qdsOkm3xuzy f4CSQLxJa7KEJ8CTjdE3ozZ+E+Y2RMa1TgFt57So+dU18MsBqfEsf3Y8oNrLIki9 aUL+WS+7R+C+QxEF4Fjk2m8tt5r7IZU= -----END CERTIFICATE-----Generated at Thu Nov 21 23:36:41 2024 by rpki-client on console-ams.rpki-client.org