$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/b98545ed-2c17-3993-8759-d3c6a61093ac.roa File: b98545ed-2c17-3993-8759-d3c6a61093ac.roa (raw, json) Hash identifier: czxz+GXMk9loXcTkPMKFzxgsGDNn+LHFuYkgNEwJAPA= Subject key identifier: 5A:C3:69:57:0E:9A:99:1F:18:B7:77:8B:FD:8A:74:2C:57:65:40:A9 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584797E1402A306DD058BC2B26C0 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/b98545ed-2c17-3993-8759-d3c6a61093ac.roa Signing time: Sat 19 Oct 2024 13:00:42 +0000 ROA not before: Sat 19 Oct 2024 13:00:42 +0000 ROA not after: Fri 17 Jan 2025 14:00:42 +0000 asID: 9009 IP address blocks: 172.111.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:97:e1:40:2a:30:6d:d0:58:bc:2b:26:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 19 13:00:42 2024 GMT Not After : Jan 17 14:00:42 2025 GMT Subject: CN=061ef70a-28b9-42c9-b56d-b062f82c64ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:92:73:08:04:1e:36:82:6d:a4:c0:1f:e1:13: 1d:ce:f2:45:81:f1:fc:0e:26:f8:8f:8a:95:4f:94: 4f:ee:84:23:d2:ec:10:3d:07:24:1f:d5:49:a7:10: 19:0e:fd:39:4b:04:7a:62:f2:bd:3f:20:e5:2f:27: 48:fa:ce:a1:92:53:ac:97:a6:2d:60:99:a2:82:4a: db:9c:e2:c5:d9:c0:99:c2:3e:56:b3:33:fd:34:19: 25:4b:cd:8c:8c:94:28:0e:e3:92:0b:73:e7:6f:a1: de:09:41:6a:c9:15:06:97:5a:80:3c:77:98:7a:84: 3b:be:0e:c3:72:54:da:fb:92:67:1e:53:39:7a:e9: 9f:a5:66:e4:1a:a5:75:fe:e5:66:d1:00:21:07:7f: b6:4a:0d:46:e1:63:a0:8f:3b:45:3c:be:f9:91:17: e5:2e:88:fe:b9:c2:b2:04:43:e8:1b:44:1a:bb:bb: b1:c1:af:c2:5f:7c:e9:3b:11:12:08:f3:2c:a6:39: 50:42:49:38:7d:e2:c4:db:98:94:c2:26:91:dd:1a: f9:cd:1c:f9:b9:8d:7f:73:42:1c:2b:be:ee:65:0c: 34:06:29:37:c4:8c:00:ce:d7:2d:71:71:be:cd:6b: ff:35:8c:17:dc:6a:62:c2:ce:97:79:33:a9:56:81: 84:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:C3:69:57:0E:9A:99:1F:18:B7:77:8B:FD:8A:74:2C:57:65:40:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/b98545ed-2c17-3993-8759-d3c6a61093ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.186.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:9c:f8:24:31:fd:78:5d:d4:1f:88:2a:33:6e:06:62:a9:e0: f6:8e:db:b8:98:7f:c4:db:90:4e:fd:58:52:05:9a:ba:61:86: a0:41:d5:fa:61:cf:7a:2a:12:36:1e:ea:62:a8:bc:df:52:02: ba:40:38:d9:7c:6c:8d:fe:e9:42:00:b8:d2:ff:a6:49:b6:e0: 52:77:d1:7e:a4:ec:c5:b8:fd:a8:50:b3:4f:38:83:f6:21:93: 89:fa:47:28:a9:72:dc:de:13:c4:2c:6d:e6:f8:6e:47:8f:82: 99:d2:da:80:1b:ed:ef:1f:55:6d:65:03:91:13:e8:66:0d:f2: a8:c2:df:90:4e:ae:ea:a5:02:68:d8:e4:ad:f9:4d:b4:db:04: c5:56:f9:5c:81:2c:72:39:10:97:dd:48:8b:ca:79:80:1e:2c: c5:31:34:37:37:3f:c7:45:7f:2f:f9:47:c0:ba:2b:b9:4a:54: 25:44:e1:2c:f7:e3:22:b5:62:3d:55:83:03:2c:4a:9f:4f:46: 37:1b:58:7b:6e:64:9f:d7:54:09:1b:48:a0:1a:f1:1d:61:f0: 98:f4:7c:03:29:7f:82:b6:7a:2f:c3:a1:18:2a:ff:01:6a:fd: d4:2a:d2:0d:ae:e9:dd:79:cf:7e:e1:5b:3e:5a:31:ec:c2:33: b5:23:fd:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeX4UAqMG3QWLwrJsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI0MTAxOTEzMDA0MloXDTI1MDExNzE0MDA0MlowLzEtMCsGA1UEAxMk MDYxZWY3MGEtMjhiOS00MmM5LWI1NmQtYjA2MmY4MmM2NGFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJJzCAQeNoJtpMAf4RMdzvJFgfH8Dib4j4qV T5RP7oQj0uwQPQckH9VJpxAZDv05SwR6YvK9PyDlLydI+s6hklOsl6YtYJmigkrb nOLF2cCZwj5WszP9NBklS82MjJQoDuOSC3Pnb6HeCUFqyRUGl1qAPHeYeoQ7vg7D clTa+5JnHlM5eumfpWbkGqV1/uVm0QAhB3+2Sg1G4WOgjztFPL75kRflLoj+ucKy BEPoG0Qau7uxwa/CX3zpOxESCPMspjlQQkk4feLE25iUwiaR3Rr5zRz5uY1/c0Ic K77uZQw0Bik3xIwAztctcXG+zWv/NYwX3Gpiws6XeTOpVoGElwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFrDaVcOmpkfGLd3i/2KdCxXZUCpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYjk4NTQ1ZWQtMmMxNy0z OTkzLTg3NTktZDNjNmE2MTA5M2FjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADic+CQx/Xhd1B+IKjNuBmKp4PaO27iYf8TbkE79WFIFmrphhqBB1fph z3oqEjYe6mKovN9SArpAONl8bI3+6UIAuNL/pkm24FJ30X6k7MW4/ahQs084g/Yh k4n6RyipctzeE8Qsbeb4bkePgpnS2oAb7e8fVW1lA5ET6GYN8qjC35BOruqlAmjY 5K35TbTbBMVW+VyBLHI5EJfdSIvKeYAeLMUxNDc3P8dFfy/5R8C6K7lKVCVE4Sz3 4yK1Yj1VgwMsSp9PRjcbWHtuZJ/XVAkbSKAa8R1h8Jj0fAMpf4K2ei/DoRgq/wFq /dQq0g2u6d15z37hWz5aMezCM7Uj/dM= -----END CERTIFICATE-----Generated at Fri Nov 22 00:23:35 2024 by rpki-client on console-fra.rpki-client.org