$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a1c85ec1-36d7-3c6b-ba9f-62cea1b1e759.roa File: a1c85ec1-36d7-3c6b-ba9f-62cea1b1e759.roa (raw, json) Hash identifier: MYoiD+kIKZwznva5R2ChLJLYJY10MAwaXugfjk+tgik= Subject key identifier: B1:BB:DD:85:EB:F8:35:EE:2E:B7:56:FC:09:AC:0F:7D:AD:43:2F:F0 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F432858473A5B8D90B1417CE080EBCC80 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a1c85ec1-36d7-3c6b-ba9f-62cea1b1e759.roa Signing time: Mon 16 Sep 2024 01:00:29 +0000 ROA not before: Mon 16 Sep 2024 01:00:29 +0000 ROA not after: Sun 15 Dec 2024 02:00:29 +0000 asID: 3223 IP address blocks: 172.111.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:3a:5b:8d:90:b1:41:7c:e0:80:eb:cc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Sep 16 01:00:29 2024 GMT Not After : Dec 15 02:00:29 2024 GMT Subject: CN=ad5b59a8-0f7d-4dac-a295-46bb4f94777b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:9f:89:6d:1e:01:e0:f0:b8:d9:21:14:c0:ed: d8:a5:9a:a7:9b:80:9d:53:b0:2b:e4:d7:36:62:14: ef:07:4a:7b:be:4f:22:09:2a:c6:70:68:e6:eb:e7: f0:4d:f8:e8:6d:4c:c9:a4:ef:81:11:e3:2b:a5:6e: ca:8a:5f:c4:0b:e3:e7:2c:b4:11:ee:ea:a2:62:e9: 9e:58:28:5c:d7:b4:18:cb:53:30:05:32:21:55:e5: 1b:96:58:f3:82:db:d5:a5:45:8c:d3:5b:b1:3a:d5: fc:75:36:37:fc:de:df:8c:dd:f6:56:92:60:b4:44: 2b:ae:b9:1b:50:31:69:4d:e7:85:34:29:2f:76:4b: 4d:b6:20:d5:be:92:7e:9d:96:18:53:7f:57:4d:41: 14:fb:b2:fe:fd:b8:54:11:4e:ff:bb:1e:a4:10:f5: 1c:ba:d0:a5:62:0a:e9:25:a6:7b:44:c6:55:2a:7e: 0f:8f:f9:d2:5a:22:f3:08:51:71:05:1b:55:8e:eb: 4f:cb:06:ff:82:39:1a:c6:3a:99:99:aa:0e:9e:14: 83:fa:82:ff:81:ef:4f:42:d1:c4:d3:a1:6e:c3:59: cf:d3:b6:87:fb:5e:66:9b:df:a2:9a:2b:81:7f:1a: 5c:4d:23:82:19:d0:9f:a2:8c:56:63:46:48:72:9c: 2b:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:BB:DD:85:EB:F8:35:EE:2E:B7:56:FC:09:AC:0F:7D:AD:43:2F:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a1c85ec1-36d7-3c6b-ba9f-62cea1b1e759.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.178.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:f3:ea:51:76:9c:a5:58:c3:4b:d7:3c:2c:ce:37:fa:63:9e: 4f:82:3b:f2:bb:c8:c0:06:c6:92:e4:5f:fd:95:96:5c:eb:b9: 5f:27:f0:67:d0:2e:7b:00:0d:2f:17:f4:77:ea:a9:d3:ce:9e: 1b:65:bd:37:47:d9:7f:7a:64:c1:9d:73:6f:16:90:cb:f0:e4: 4e:50:b7:76:f4:47:28:d2:37:39:b0:ef:eb:f2:64:7c:02:1f: 65:f9:36:a6:bb:f2:a8:91:f2:4b:a6:8c:60:ef:83:dc:1d:da: 29:70:48:d3:d2:68:8e:d1:84:66:c1:2c:6f:f4:3c:14:fa:cc: fa:62:8c:92:74:e5:79:59:5f:e3:83:e7:4a:93:ee:4b:4f:0b: 83:2a:26:01:68:fb:73:06:bb:45:b0:f1:61:3d:8c:f6:63:0e: 7b:aa:ed:bb:0b:f4:3b:37:4a:87:09:68:dc:ff:97:52:07:36: 93:ca:8d:67:6a:08:84:c1:b1:fe:b0:fc:12:fc:03:c1:25:58: 12:a5:a3:11:4a:86:60:41:5d:7b:44:c2:2f:60:78:cb:b6:5c: 3e:07:53:bc:3a:86:dc:87:e9:55:fb:a3:45:d2:0e:f4:5d:ec: 39:af:90:fb:6a:1c:a0:ee:c7:e8:40:6f:10:8b:fd:c3:9e:66: 67:03:61:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc6W42QsUF84IDrzIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI0MDkxNjAxMDAyOVoXDTI0MTIxNTAyMDAyOVowLzEtMCsGA1UEAxMk YWQ1YjU5YTgtMGY3ZC00ZGFjLWEyOTUtNDZiYjRmOTQ3NzdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJ+JbR4B4PC42SEUwO3YpZqnm4CdU7Ar5Nc2 YhTvB0p7vk8iCSrGcGjm6+fwTfjobUzJpO+BEeMrpW7Kil/EC+PnLLQR7uqiYume WChc17QYy1MwBTIhVeUblljzgtvVpUWM01uxOtX8dTY3/N7fjN32VpJgtEQrrrkb UDFpTeeFNCkvdktNtiDVvpJ+nZYYU39XTUEU+7L+/bhUEU7/ux6kEPUcutClYgrp JaZ7RMZVKn4Pj/nSWiLzCFFxBRtVjutPywb/gjkaxjqZmaoOnhSD+oL/ge9PQtHE 06Fuw1nP07aH+15mm9+imiuBfxpcTSOCGdCfooxWY0ZIcpwrHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLG73YXr+DXuLrdW/AmsD32tQy/wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYTFjODVlYzEtMzZkNy0z YzZiLWJhOWYtNjJjZWExYjFlNzU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+yMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAPz6lF2nKVYw0vXPCzON/pjnk+CO/K7yMAGxpLkX/2VllzruV8n8GfQ LnsADS8X9HfqqdPOnhtlvTdH2X96ZMGdc28WkMvw5E5Qt3b0RyjSNzmw7+vyZHwC H2X5Nqa78qiR8kumjGDvg9wd2ilwSNPSaI7RhGbBLG/0PBT6zPpijJJ05XlZX+OD 50qT7ktPC4MqJgFo+3MGu0Ww8WE9jPZjDnuq7bsL9Ds3SocJaNz/l1IHNpPKjWdq CITBsf6w/BL8A8ElWBKloxFKhmBBXXtEwi9geMu2XD4HU7w6htyH6VX7o0XSDvRd 7DmvkPtqHKDux+hAbxCL/cOeZmcDYT8= -----END CERTIFICATE-----Generated at Fri Nov 22 04:22:55 2024 by rpki-client on console-fra.rpki-client.org