$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/aa7e0def-80c6-30d4-9b37-07ae0b48bdfd.roa File: aa7e0def-80c6-30d4-9b37-07ae0b48bdfd.roa (raw, json) Hash identifier: y/JtS0aqxaOxkDwwIyX6xbNnu/f+7gRFHwnZ6d/b+0w= Subject key identifier: 4D:05:55:B1:FF:9E:03:C0:C1:71:95:3A:24:64:80:E4:14:56:3B:08 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F432858473D25F9CF00E64130B293CC80 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/aa7e0def-80c6-30d4-9b37-07ae0b48bdfd.roa Signing time: Tue 17 Sep 2024 01:00:31 +0000 ROA not before: Tue 17 Sep 2024 01:00:31 +0000 ROA not after: Mon 16 Dec 2024 02:00:31 +0000 asID: 3223 IP address blocks: 172.111.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:3d:25:f9:cf:00:e6:41:30:b2:93:cc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Sep 17 01:00:31 2024 GMT Not After : Dec 16 02:00:31 2024 GMT Subject: CN=6725d24b-bb85-49d8-bb12-61bed62a257a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:71:05:b3:5f:c6:53:44:50:86:f2:06:2b:db: 74:9f:64:4b:23:38:8d:69:55:3c:66:20:84:05:33: 1b:0a:c2:ca:6e:16:ce:a3:ce:61:d4:7b:3f:30:2d: 58:47:7c:01:30:12:ab:32:0b:72:d0:d5:c8:92:69: 83:bc:5d:51:04:1a:65:f9:c8:e1:97:3e:61:52:6c: 87:e8:11:3a:15:db:95:e8:8e:fb:d3:d8:67:e7:77: 50:8a:0c:b3:50:4b:98:2f:4a:82:fc:2d:c0:e9:a7: 69:30:38:9d:5e:0d:91:c2:42:65:da:7e:27:e5:1e: 97:ae:0b:4e:26:f9:8b:2d:29:6b:de:5c:60:cf:a4: 79:83:c0:63:dd:e5:cd:c7:63:58:9a:cb:20:c3:89: 02:78:5a:a8:35:2c:54:8a:57:22:7c:73:c2:f9:9c: 68:f6:cd:e7:2b:33:d2:4d:ff:16:41:d8:86:ba:4a: 0e:04:37:80:c2:6b:14:9a:f0:c8:91:a9:5f:8b:04: 06:15:9d:e0:1a:50:1c:9a:0a:4c:c8:bd:f2:c3:8e: 7b:7b:0f:35:a2:42:fa:61:86:5f:88:25:20:04:b8: e6:bd:23:a1:6f:f5:06:ca:5a:d2:2f:42:17:c6:b0: 5c:a9:d9:58:3f:48:42:cd:ec:01:96:6d:b1:b0:51: b2:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:05:55:B1:FF:9E:03:C0:C1:71:95:3A:24:64:80:E4:14:56:3B:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/aa7e0def-80c6-30d4-9b37-07ae0b48bdfd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:46:ae:77:cb:bd:55:65:de:f3:33:fa:0c:84:a8:9c:53:0b: 00:6b:6f:59:18:c3:62:0f:a6:6b:92:b7:ed:32:49:85:ab:50: c1:b9:da:d0:91:ea:72:26:56:11:92:ea:ad:3b:77:89:15:87: 57:f6:b1:73:e5:5e:a1:6d:c0:99:b9:53:ca:df:41:d6:f8:4f: 43:f9:66:03:99:ea:02:a3:a1:9f:ff:94:ab:40:3a:58:d1:b8: 78:c2:a7:5b:04:3c:0e:05:d6:8c:4f:37:50:8b:ac:11:2e:a2: fd:f8:1a:e4:be:16:a5:cc:29:a8:6a:91:60:27:33:f6:7e:31: 35:0c:d5:36:58:cb:e3:8f:85:02:bf:d6:05:fe:fb:fe:c2:14: a6:95:10:8a:2e:d7:be:6a:e8:f1:6f:cc:c3:20:1e:61:e0:77: d7:1b:5c:6c:38:4c:dd:d1:49:e6:7f:31:6e:f0:f6:5f:54:0b: e5:82:f2:59:3b:bd:ef:79:d1:dd:60:e7:3f:88:38:9c:b9:fc: 59:bf:8f:9c:be:9b:45:0b:11:85:b4:5a:83:68:9a:6d:7f:ad: 5f:9f:d5:c9:83:b0:61:b3:c5:0b:f9:c6:a9:ce:90:74:51:b0: 89:f1:a2:47:59:87:54:06:dd:c2:a1:11:13:f9:d1:22:8b:29: 54:a5:83:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc9JfnPAOZBMLKTzIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI0MDkxNzAxMDAzMVoXDTI0MTIxNjAyMDAzMVowLzEtMCsGA1UEAxMk NjcyNWQyNGItYmI4NS00OWQ4LWJiMTItNjFiZWQ2MmEyNTdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHEFs1/GU0RQhvIGK9t0n2RLIziNaVU8ZiCE BTMbCsLKbhbOo85h1Hs/MC1YR3wBMBKrMgty0NXIkmmDvF1RBBpl+cjhlz5hUmyH 6BE6FduV6I7709hn53dQigyzUEuYL0qC/C3A6adpMDidXg2RwkJl2n4n5R6XrgtO JvmLLSlr3lxgz6R5g8Bj3eXNx2NYmssgw4kCeFqoNSxUilcifHPC+Zxo9s3nKzPS Tf8WQdiGukoOBDeAwmsUmvDIkalfiwQGFZ3gGlAcmgpMyL3yw457ew81okL6YYZf iCUgBLjmvSOhb/UGylrSL0IXxrBcqdlYP0hCzewBlm2xsFGySQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE0FVbH/ngPAwXGVOiRkgOQUVjsIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYWE3ZTBkZWYtODBjNi0z MGQ0LTliMzctMDdhZTBiNDhiZGZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABxGrnfLvVVl3vMz+gyEqJxTCwBrb1kYw2IPpmuSt+0ySYWrUMG52tCR 6nImVhGS6q07d4kVh1f2sXPlXqFtwJm5U8rfQdb4T0P5ZgOZ6gKjoZ//lKtAOljR uHjCp1sEPA4F1oxPN1CLrBEuov34GuS+FqXMKahqkWAnM/Z+MTUM1TZYy+OPhQK/ 1gX++/7CFKaVEIou175q6PFvzMMgHmHgd9cbXGw4TN3RSeZ/MW7w9l9UC+WC8lk7 ve950d1g5z+IOJy5/Fm/j5y+m0ULEYW0WoNomm1/rV+f1cmDsGGzxQv5xqnOkHRR sInxokdZh1QG3cKhERP50SKLKVSlgy4= -----END CERTIFICATE-----Generated at Thu Nov 21 23:36:41 2024 by rpki-client on console-ams.rpki-client.org