$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c7da2a17-f363-3951-9e45-45d22ee07e53.roa File: c7da2a17-f363-3951-9e45-45d22ee07e53.roa (raw, json) Hash identifier: 4bq74K5OuSTX+I7bDdLH8IYcQHFfX6UuBd4UilvMzDQ= Subject key identifier: 2F:10:67:A8:56:42:E0:60:6C:51:60:B6:4E:61:55:2B:3F:5B:BE:88 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285847ED24C9D253F1A5AB47FAD080 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c7da2a17-f363-3951-9e45-45d22ee07e53.roa Signing time: Tue 19 Nov 2024 02:00:27 +0000 ROA not before: Tue 19 Nov 2024 02:00:27 +0000 ROA not after: Mon 17 Feb 2025 02:00:27 +0000 asID: 9009 IP address blocks: 172.111.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ed:24:c9:d2:53:f1:a5:ab:47:fa:d0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Nov 19 02:00:27 2024 GMT Not After : Feb 17 02:00:27 2025 GMT Subject: CN=cb5dace2-4ea2-4322-81c4-3faa564be8ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:94:22:e0:f0:a5:f8:90:ab:57:d2:26:a3:31: 30:e7:85:78:96:cd:d0:2e:79:7f:c2:58:a4:b8:61: f6:d4:e4:c8:63:65:ea:2d:6d:4c:e4:76:7b:29:c7: 69:c5:de:17:16:4f:dc:e2:3e:8e:9b:b6:85:71:07: 1f:7d:ab:4a:df:96:da:a0:75:9b:fc:33:93:b3:17: 80:19:1e:88:b9:81:30:82:2b:c4:5a:8a:95:8e:03: 7b:71:56:4c:28:fe:81:8e:d6:87:f6:a9:dc:ca:e1: 8e:ec:d8:0b:bb:26:b1:33:1f:5b:74:56:2b:1d:83: f3:77:cb:0f:51:00:48:a8:aa:60:06:4d:a3:05:93: f0:62:a5:b1:cb:a4:9d:cd:c5:31:b7:53:7b:a4:52: e9:fc:c2:88:73:95:fc:f2:cc:73:f9:ff:fa:2d:5f: d1:38:28:96:74:46:98:6c:b2:6b:d5:4b:07:ba:67: b2:8f:3b:d1:98:97:df:34:2c:98:37:60:6d:3e:ec: 37:2f:aa:16:cf:a1:16:89:7a:30:2a:dd:ad:ef:6c: 63:ad:89:5d:9d:68:5f:aa:0a:c3:e1:dd:73:e9:49: c9:05:8d:75:60:24:85:32:a6:e6:da:35:17:7b:da: 51:97:d3:28:4f:62:76:0f:b7:fe:1d:86:cb:f2:e8: 49:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:10:67:A8:56:42:E0:60:6C:51:60:B6:4E:61:55:2B:3F:5B:BE:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c7da2a17-f363-3951-9e45-45d22ee07e53.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.162.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:dd:9c:a8:81:1d:31:e6:2d:cd:5f:a6:7a:c3:10:ed:1d:dc: 57:9b:b9:34:c4:6a:8d:c8:50:33:5d:d0:fc:4a:d3:2c:e3:18: 9e:a2:37:d5:da:7d:19:e0:dd:da:67:98:04:77:62:b1:2d:18: 8b:15:e6:43:ee:71:ab:95:d5:be:e7:f8:c9:87:17:03:c4:f4: 8c:58:21:db:05:61:8a:26:9a:55:fd:a1:69:1e:cb:ed:70:ed: 58:c6:93:df:4e:44:a1:23:1c:5d:25:f0:c0:9c:65:c9:9c:ee: a1:e1:a5:dc:0c:a9:6c:b7:30:8f:a5:01:cd:c5:3b:50:4d:a1: d1:50:b6:7a:a5:15:9b:5a:8e:1b:4e:ad:07:b4:2b:0a:fb:31: b4:3e:21:79:ee:43:9b:d7:ca:3e:9b:7f:8d:8e:7e:b4:51:dc: da:ed:b5:21:4f:2c:95:52:b2:2a:ca:48:9a:18:26:21:c8:9d: 9f:47:54:68:20:9c:be:e5:78:a3:d4:e4:af:a4:77:8b:42:f7: 7e:49:be:89:f0:c7:de:7e:01:3b:da:8c:ec:2a:be:fb:2f:0f: 85:f8:02:51:46:40:2a:2f:e2:5a:b1:ad:d4:b0:2f:4f:52:a7: 7d:59:d2:3d:f4:6e:46:eb:3d:e8:23:ce:4c:e9:82:29:96:8d: 61:0f:10:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEftJMnSU/Glq0f60IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI0MTExOTAyMDAyN1oXDTI1MDIxNzAyMDAyN1owLzEtMCsGA1UEAxMk Y2I1ZGFjZTItNGVhMi00MzIyLTgxYzQtM2ZhYTU2NGJlOGNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpQi4PCl+JCrV9ImozEw54V4ls3QLnl/wlik uGH21OTIY2XqLW1M5HZ7Kcdpxd4XFk/c4j6Om7aFcQcffatK35baoHWb/DOTsxeA GR6IuYEwgivEWoqVjgN7cVZMKP6BjtaH9qncyuGO7NgLuyaxMx9bdFYrHYPzd8sP UQBIqKpgBk2jBZPwYqWxy6SdzcUxt1N7pFLp/MKIc5X88sxz+f/6LV/ROCiWdEaY bLJr1UsHumeyjzvRmJffNCyYN2BtPuw3L6oWz6EWiXowKt2t72xjrYldnWhfqgrD 4d1z6UnJBY11YCSFMqbm2jUXe9pRl9MoT2J2D7f+HYbL8uhJgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC8QZ6hWQuBgbFFgtk5hVSs/W76IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYzdkYTJhMTctZjM2My0z OTUxLTllNDUtNDVkMjJlZTA3ZTUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+iMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFPdnKiBHTHmLc1fpnrDEO0d3FebuTTEao3IUDNd0PxK0yzjGJ6iN9Xa fRng3dpnmAR3YrEtGIsV5kPucauV1b7n+MmHFwPE9IxYIdsFYYommlX9oWkey+1w 7VjGk99ORKEjHF0l8MCcZcmc7qHhpdwMqWy3MI+lAc3FO1BNodFQtnqlFZtajhtO rQe0Kwr7MbQ+IXnuQ5vXyj6bf42OfrRR3NrttSFPLJVSsirKSJoYJiHInZ9HVGgg nL7leKPU5K+kd4tC935Jvonwx95+ATvajOwqvvsvD4X4AlFGQCov4lqxrdSwL09S p31Z0j30bkbrPegjzkzpgimWjWEPECA= -----END CERTIFICATE-----Generated at Thu Nov 21 23:36:41 2024 by rpki-client on console-ams.rpki-client.org