$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d187a421-c3fa-3a3d-82ce-a52b6630982c.roa File: d187a421-c3fa-3a3d-82ce-a52b6630982c.roa (raw, json) Hash identifier: IXXKv8htuIAFRdNIHitEUoUqPm1eKzOfnqvkRcz/XhQ= Subject key identifier: 97:CA:DB:7B:6F:D7:86:A4:C9:22:8B:0D:FD:A2:45:1D:9E:F7:31:C1 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584784567C5C3D84EBD315ED1438 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d187a421-c3fa-3a3d-82ce-a52b6630982c.roa Signing time: Sat 12 Oct 2024 13:00:42 +0000 ROA not before: Sat 12 Oct 2024 13:00:42 +0000 ROA not after: Fri 10 Jan 2025 14:00:42 +0000 asID: 9009 IP address blocks: 172.111.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:84:56:7c:5c:3d:84:eb:d3:15:ed:14:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 12 13:00:42 2024 GMT Not After : Jan 10 14:00:42 2025 GMT Subject: CN=2d0d1ea2-6136-4357-bcc9-20df2bb29a54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:e3:8b:2f:13:e0:7a:eb:a9:72:d7:37:36:02: e8:c4:e1:f2:66:51:e9:9e:a5:6a:76:42:39:77:26: 22:b7:d7:dd:bb:18:46:9b:5b:08:5f:5e:08:4a:88: cb:ed:08:09:8a:5f:e6:55:87:dc:40:be:81:8b:16: 08:9c:0c:48:72:66:14:e3:93:da:1a:73:20:97:cb: b4:a7:fe:a7:88:b3:a7:24:a4:e2:1e:db:7e:c4:f9: 16:1a:77:05:65:17:8d:32:ab:54:87:39:db:e6:4f: 77:89:55:03:13:5f:a1:c7:a1:46:b5:6a:0b:5e:55: d3:2b:d3:b9:e5:6b:73:3a:ca:ea:1b:82:a9:ea:b5: 6d:2f:b5:d6:93:c9:c0:ee:bc:65:3c:de:50:49:9c: ad:fe:d8:69:b7:dd:42:41:b7:ff:ed:c6:27:a9:5b: a5:10:61:3f:3b:71:5f:a8:97:bd:af:4b:70:cd:05: f2:61:fd:64:cd:5f:64:14:2b:d1:c1:2b:61:65:a6: 6f:19:92:5c:26:e8:16:f4:a5:d1:e9:07:d9:d6:0c: b3:41:4b:c5:88:63:b5:ce:43:a1:cb:a6:50:95:06: a1:03:1a:23:4f:2e:85:66:8c:1c:fb:c2:09:5c:e6: 16:38:d3:33:75:05:b2:69:4e:85:02:6d:80:cc:2c: 51:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:CA:DB:7B:6F:D7:86:A4:C9:22:8B:0D:FD:A2:45:1D:9E:F7:31:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d187a421-c3fa-3a3d-82ce-a52b6630982c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.210.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:86:35:d3:d3:1b:e0:5b:a2:e2:49:aa:f4:3f:bd:c6:63:8d: 83:98:68:b7:be:66:e8:96:5c:f0:dc:15:dc:a0:88:c6:28:8b: f4:97:94:1b:e4:18:07:68:ab:d6:9c:9b:b5:20:e4:68:3a:99: 54:35:60:dd:ca:c9:fe:d5:4d:fd:a3:af:8d:49:c5:bb:4a:10: f7:b5:fb:76:8f:56:58:1e:03:3e:e2:87:31:66:d3:d4:e4:10: 09:c0:da:79:46:3d:cc:de:7d:7d:12:d0:e6:39:41:fa:a7:40: 14:b4:2b:00:97:89:77:db:d7:70:81:e0:a4:ba:8d:3b:5e:f7: 19:a6:52:71:0c:1f:5e:6d:91:f6:39:35:4a:8d:06:37:a9:28: 52:31:e9:ca:74:82:5e:c6:f6:f3:13:12:11:82:9a:c2:65:6b: b0:db:b0:b6:25:3a:3a:09:c3:2f:43:61:72:69:30:26:2b:ba: 7e:88:d9:9e:ac:cd:b3:88:b0:60:78:e1:50:c0:9b:fa:56:9a: 7e:18:91:fd:3e:9d:4e:91:21:fa:2f:a0:09:4d:0c:b7:f7:df: d5:02:e1:43:d4:56:1d:e8:81:51:fe:c0:42:36:5a:98:89:3d: 93:80:3a:01:5f:b5:ae:53:60:02:02:44:6e:67:3b:51:68:9b: bc:23:bf:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeEVnxcPYTr0xXtFDgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI0MTAxMjEzMDA0MloXDTI1MDExMDE0MDA0MlowLzEtMCsGA1UEAxMk MmQwZDFlYTItNjEzNi00MzU3LWJjYzktMjBkZjJiYjI5YTU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkOOLLxPgeuupctc3NgLoxOHyZlHpnqVqdkI5 dyYit9fduxhGm1sIX14ISojL7QgJil/mVYfcQL6BixYInAxIcmYU45PaGnMgl8u0 p/6niLOnJKTiHtt+xPkWGncFZReNMqtUhznb5k93iVUDE1+hx6FGtWoLXlXTK9O5 5WtzOsrqG4Kp6rVtL7XWk8nA7rxlPN5QSZyt/thpt91CQbf/7cYnqVulEGE/O3Ff qJe9r0twzQXyYf1kzV9kFCvRwSthZaZvGZJcJugW9KXR6QfZ1gyzQUvFiGO1zkOh y6ZQlQahAxojTy6FZowc+8IJXOYWONMzdQWyaU6FAm2AzCxR5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJfK23tv14akySKLDf2iRR2e9zHBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZDE4N2E0MjEtYzNmYS0z YTNkLTgyY2UtYTUyYjY2MzA5ODJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/SMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGaGNdPTG+BbouJJqvQ/vcZjjYOYaLe+ZuiWXPDcFdygiMYoi/SXlBvk GAdoq9acm7Ug5Gg6mVQ1YN3Kyf7VTf2jr41JxbtKEPe1+3aPVlgeAz7ihzFm09Tk EAnA2nlGPczefX0S0OY5QfqnQBS0KwCXiXfb13CB4KS6jTte9xmmUnEMH15tkfY5 NUqNBjepKFIx6cp0gl7G9vMTEhGCmsJla7DbsLYlOjoJwy9DYXJpMCYrun6I2Z6s zbOIsGB44VDAm/pWmn4Ykf0+nU6RIfovoAlNDLf339UC4UPUVh3ogVH+wEI2WpiJ PZOAOgFfta5TYAICRG5nO1Fom7wjv7A= -----END CERTIFICATE-----Generated at Thu Nov 21 23:36:41 2024 by rpki-client on console-ams.rpki-client.org