$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/bf9e4922-1859-37b0-bf62-2e1ee6ab2e81.roa File: bf9e4922-1859-37b0-bf62-2e1ee6ab2e81.roa (raw, json) Hash identifier: q15kzxP+EKNYsfsAYYms28KGwTKZEpTgYHu6NYC9emo= Subject key identifier: B9:6D:19:FB:D7:B8:D2:6A:F7:58:A1:AF:AC:A3:65:29:28:06:FE:6C Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F432858478F70609ECBE2C697AC8B3000 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/bf9e4922-1859-37b0-bf62-2e1ee6ab2e81.roa Signing time: Wed 16 Oct 2024 12:26:58 +0000 ROA not before: Wed 16 Oct 2024 12:26:58 +0000 ROA not after: Tue 14 Jan 2025 13:26:58 +0000 asID: 396356 IP address blocks: 172.111.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:8f:70:60:9e:cb:e2:c6:97:ac:8b:30:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 16 12:26:58 2024 GMT Not After : Jan 14 13:26:58 2025 GMT Subject: CN=0172793f-045c-43d7-9c1a-06e86abcaa15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:98:38:89:20:5e:62:31:10:a0:cf:b8:2b:b2: 22:81:1d:b8:fb:97:81:a1:0e:fb:0f:29:ad:d0:d4: d0:84:f4:c3:9b:44:04:8e:99:92:62:98:b2:41:0a: a1:4e:c7:9e:84:6a:03:f3:f7:8f:cb:6f:00:a8:10: 81:db:85:3f:ee:67:66:c2:1a:06:24:33:5f:89:c1: 3b:11:84:b5:e2:d4:01:80:04:ec:0d:10:d2:62:45: 1a:01:9b:13:35:f7:34:ce:93:61:29:a1:9d:90:10: 73:89:94:62:1c:b4:c4:4c:4a:10:4b:95:9b:4b:2e: f3:52:c5:3f:56:d4:98:22:a9:45:9d:f8:88:d0:c6: 38:a4:4b:a9:aa:17:33:9f:39:62:0a:00:99:68:5c: 1b:13:eb:11:8e:0d:9d:af:34:69:5a:0b:21:b2:a8: 6d:c5:21:5a:e3:10:e4:63:62:8d:06:e3:7c:7e:65: bb:22:5a:d2:7b:c4:23:43:0a:18:e5:43:e6:0d:85: 6b:e6:d2:40:50:a1:9c:d6:d2:38:c9:59:7f:69:a3: a7:9d:22:fe:0c:29:f2:e9:5c:12:c1:c5:d3:a7:8d: f7:38:97:2f:81:19:c9:16:f8:65:22:8b:71:ee:5c: 84:73:b0:80:43:ff:74:a4:34:d9:fe:c7:87:3e:64: 38:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:6D:19:FB:D7:B8:D2:6A:F7:58:A1:AF:AC:A3:65:29:28:06:FE:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/bf9e4922-1859-37b0-bf62-2e1ee6ab2e81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.146.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:f0:5a:c4:8a:0d:40:6a:c7:53:ef:cb:5d:3e:1e:b5:04:5b: 83:b1:e9:78:1a:9f:02:1d:db:54:ca:2b:dd:c8:e0:7a:da:5c: 15:f2:3a:8a:a7:26:bd:03:04:fa:d4:47:66:0b:a1:bd:29:2d: b5:a2:ce:3b:9e:a0:01:a2:d0:69:ae:77:82:0f:3a:0e:b4:c3: 1a:fc:84:9e:be:3d:ce:56:96:f5:b6:11:24:33:01:df:99:2d: 30:71:61:3f:44:b0:b1:19:94:86:13:f9:6d:aa:3a:f8:a6:ee: ac:c5:ce:54:64:06:b3:09:32:20:d9:c0:a4:84:1c:26:94:d5: e8:eb:f2:b6:9a:03:61:a2:66:b3:20:62:0f:cc:17:5a:4c:1d: 94:c8:ff:26:1d:42:c5:12:6e:32:4d:e5:d6:1e:d4:c0:bf:fa: b9:5d:67:fa:4d:54:00:50:6a:5b:cb:fe:b3:0b:75:c8:d0:0f: 36:d4:12:af:2f:0b:1e:85:3d:b2:c3:a1:0e:22:6e:5b:bb:be: 72:f3:dc:1f:eb:64:97:81:31:8a:a4:e5:7e:7b:08:8c:c1:b3: d3:0d:76:88:fc:93:2f:26:23:e4:4c:3b:d1:69:81:85:78:2e: 42:e3:31:5a:aa:dc:71:82:3a:c2:53:65:a0:ae:aa:d3:98:40: d1:6a:fb:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEePcGCey+LGl6yLMAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI0MTAxNjEyMjY1OFoXDTI1MDExNDEzMjY1OFowLzEtMCsGA1UEAxMk MDE3Mjc5M2YtMDQ1Yy00M2Q3LTljMWEtMDZlODZhYmNhYTE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopg4iSBeYjEQoM+4K7IigR24+5eBoQ77Dymt 0NTQhPTDm0QEjpmSYpiyQQqhTseehGoD8/ePy28AqBCB24U/7mdmwhoGJDNficE7 EYS14tQBgATsDRDSYkUaAZsTNfc0zpNhKaGdkBBziZRiHLTETEoQS5WbSy7zUsU/ VtSYIqlFnfiI0MY4pEupqhcznzliCgCZaFwbE+sRjg2drzRpWgshsqhtxSFa4xDk Y2KNBuN8fmW7IlrSe8QjQwoY5UPmDYVr5tJAUKGc1tI4yVl/aaOnnSL+DCny6VwS wcXTp433OJcvgRnJFvhlIotx7lyEc7CAQ/90pDTZ/seHPmQ4RwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLltGfvXuNJq91ihr6yjZSkoBv5sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYmY5ZTQ5MjItMTg1OS0z N2IwLWJmNjItMmUxZWU2YWIyZTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+SMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACrwWsSKDUBqx1Pvy10+HrUEW4Ox6XganwId21TKK93I4HraXBXyOoqn Jr0DBPrUR2YLob0pLbWizjueoAGi0Gmud4IPOg60wxr8hJ6+Pc5WlvW2ESQzAd+Z LTBxYT9EsLEZlIYT+W2qOvim7qzFzlRkBrMJMiDZwKSEHCaU1ejr8raaA2GiZrMg Yg/MF1pMHZTI/yYdQsUSbjJN5dYe1MC/+rldZ/pNVABQalvL/rMLdcjQDzbUEq8v Cx6FPbLDoQ4iblu7vnLz3B/rZJeBMYqk5X57CIzBs9MNdoj8ky8mI+RMO9FpgYV4 LkLjMVqq3HGCOsJTZaCuqtOYQNFq+8k= -----END CERTIFICATE-----Generated at Sun Nov 24 23:08:20 2024 by rpki-client on console-ams.rpki-client.org