$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c9a346b1-e60d-3223-91d4-e14b1326a280.roa File: c9a346b1-e60d-3223-91d4-e14b1326a280.roa (raw, json) Hash identifier: f/Lllrb/ff6oS4hBXvs0ZY2aS9m96j9wX/aT0KEfTr8= Subject key identifier: D4:B6:2D:29:CF:53:48:4D:EF:89:46:56:CB:15:88:AA:EB:EB:99:FE Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F432858477230F23A046C0A9FB24D82E8 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c9a346b1-e60d-3223-91d4-e14b1326a280.roa Signing time: Sun 06 Oct 2024 01:00:31 +0000 ROA not before: Sun 06 Oct 2024 01:00:31 +0000 ROA not after: Sat 04 Jan 2025 02:00:31 +0000 asID: 212238 IP address blocks: 172.111.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:72:30:f2:3a:04:6c:0a:9f:b2:4d:82:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 6 01:00:31 2024 GMT Not After : Jan 4 02:00:31 2025 GMT Subject: CN=8e20f7d0-bebb-4903-8bc6-a501d9b9c32d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:31:3c:c0:8e:18:02:b8:fe:56:15:ba:15:99: f0:07:ce:59:28:d8:b0:70:4f:8f:d0:b0:13:49:66: 18:51:e7:ef:53:d7:9d:ea:b7:fe:d0:19:f6:69:cb: 34:70:25:fe:19:cb:52:df:15:db:c6:48:a0:24:d0: 3b:86:83:04:c0:bc:2d:f6:58:26:1c:dd:0a:2d:11: 69:bd:4f:27:e8:bb:e9:59:94:f3:18:f1:1c:1b:c9: 96:3a:9e:c2:48:55:bb:7a:30:fa:b5:83:8b:33:d8: 7d:4b:78:2d:c6:ae:39:cb:9a:30:e4:89:56:ca:b9: 3c:57:6e:88:5d:1d:d8:7a:43:f7:df:4c:d7:04:68: 34:a7:3f:b9:35:06:5f:84:11:b0:96:16:e2:27:0d: d2:c2:2d:c4:e3:b3:5b:73:2e:59:7c:c3:ef:a4:14: 39:96:05:19:16:0b:7b:e1:12:a8:8a:c1:cf:46:5d: ba:38:65:73:d1:36:cd:da:db:0b:7d:33:86:ce:82: dc:22:de:5d:c7:94:eb:84:3b:97:49:b2:eb:49:ec: d6:57:28:01:a0:e4:d1:38:e2:cb:3f:81:f4:80:19: 6b:74:e4:11:4a:57:f4:2d:b1:e6:37:45:47:ee:0e: 44:99:2f:43:28:35:3f:9d:a5:e4:70:4b:40:ac:1f: b1:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:B6:2D:29:CF:53:48:4D:EF:89:46:56:CB:15:88:AA:EB:EB:99:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c9a346b1-e60d-3223-91d4-e14b1326a280.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:23:98:b6:bf:fe:01:49:33:72:24:98:f8:c5:fe:3c:7c:6e: e0:69:6b:c4:3d:1f:4b:eb:f2:3c:71:2b:47:cc:7a:8c:a0:16: b9:52:1e:69:d8:ad:d5:95:38:a2:aa:72:c1:0b:74:ed:e5:12: 0f:62:43:65:57:a5:fb:9a:50:b1:5f:fe:7d:08:3e:81:3f:34: ec:13:7c:02:0c:9e:66:06:17:5f:b3:43:aa:fa:6b:d3:a9:9a: 79:80:67:a1:10:31:12:f0:37:74:93:ae:2e:9b:bf:55:ac:84: d2:73:29:3a:ee:ed:81:d3:83:b3:7c:44:e8:da:84:8b:22:b5: 68:de:05:c8:60:1e:5f:45:b4:0e:40:46:fa:3a:bf:97:dd:b1: 40:e4:52:01:a3:60:7a:ea:05:f6:a8:52:64:07:1c:75:3a:1d: 08:9b:34:a3:c8:b9:17:eb:95:58:19:59:41:61:a6:8c:ac:6d: ac:3f:f5:a2:c5:f9:84:7f:ff:e7:d3:f7:60:e7:d1:6e:94:c8: 4b:b3:73:c3:f8:ec:03:8f:c0:4e:91:80:ac:6b:52:54:58:7e: e3:9c:26:9e:89:9c:ba:f0:a0:7e:8c:af:bf:c1:d5:08:da:1b: bd:6b:a9:16:d2:22:9a:2e:4e:a5:e5:69:77:df:3f:1d:08:03: f7:87:18:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdyMPI6BGwKn7JNgugwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI0MTAwNjAxMDAzMVoXDTI1MDEwNDAyMDAzMVowLzEtMCsGA1UEAxMk OGUyMGY3ZDAtYmViYi00OTAzLThiYzYtYTUwMWQ5YjljMzJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5jE8wI4YArj+VhW6FZnwB85ZKNiwcE+P0LAT SWYYUefvU9ed6rf+0Bn2acs0cCX+GctS3xXbxkigJNA7hoMEwLwt9lgmHN0KLRFp vU8n6LvpWZTzGPEcG8mWOp7CSFW7ejD6tYOLM9h9S3gtxq45y5ow5IlWyrk8V26I XR3YekP330zXBGg0pz+5NQZfhBGwlhbiJw3Swi3E47Nbcy5ZfMPvpBQ5lgUZFgt7 4RKoisHPRl26OGVz0TbN2tsLfTOGzoLcIt5dx5TrhDuXSbLrSezWVygBoOTROOLL P4H0gBlrdOQRSlf0LbHmN0VH7g5EmS9DKDU/naXkcEtArB+xgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNS2LSnPU0hN74lGVssViKrr65n+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYzlhMzQ2YjEtZTYwZC0z MjIzLTkxZDQtZTE0YjEzMjZhMjgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+LMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEMjmLa//gFJM3IkmPjF/jx8buBpa8Q9H0vr8jxxK0fMeoygFrlSHmnY rdWVOKKqcsELdO3lEg9iQ2VXpfuaULFf/n0IPoE/NOwTfAIMnmYGF1+zQ6r6a9Op mnmAZ6EQMRLwN3STri6bv1WshNJzKTru7YHTg7N8ROjahIsitWjeBchgHl9FtA5A Rvo6v5fdsUDkUgGjYHrqBfaoUmQHHHU6HQibNKPIuRfrlVgZWUFhpoysbaw/9aLF +YR//+fT92Dn0W6UyEuzc8P47AOPwE6RgKxrUlRYfuOcJp6JnLrwoH6Mr7/B1Qja G71rqRbSIpouTqXlaXffPx0IA/eHGKM= -----END CERTIFICATE-----Generated at Fri Nov 22 04:22:55 2024 by rpki-client on console-fra.rpki-client.org