$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d56d197e-5c29-3a3f-8fae-ccf02e1f2cee.roa File: d56d197e-5c29-3a3f-8fae-ccf02e1f2cee.roa (raw, json) Hash identifier: Ekh0DZH80WLIw1Mj6GuLR2q01qdKENBZbA23uojua30= Subject key identifier: 5B:9E:2B:55:39:FA:8B:7F:CD:90:7D:83:5F:36:4A:2E:31:33:B8:4E Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584784567ED08C519B58BCF871C0 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d56d197e-5c29-3a3f-8fae-ccf02e1f2cee.roa Signing time: Sat 12 Oct 2024 13:00:42 +0000 ROA not before: Sat 12 Oct 2024 13:00:42 +0000 ROA not after: Fri 10 Jan 2025 14:00:42 +0000 asID: 3223 IP address blocks: 172.111.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:84:56:7e:d0:8c:51:9b:58:bc:f8:71:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 12 13:00:42 2024 GMT Not After : Jan 10 14:00:42 2025 GMT Subject: CN=5499badd-d050-4da6-9ce6-93a6526fa997 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:0f:bd:f5:3d:4c:9e:d0:fb:09:0e:a0:04:a2: 5c:9e:47:ef:70:69:bf:82:2a:a6:b9:e2:e9:dc:9c: ed:42:6f:f0:13:e5:d7:62:3b:c3:8e:f3:2f:8e:25: 42:a6:26:e6:65:05:b0:8a:c9:b1:c5:69:6f:d3:31: b0:bf:a1:0b:45:f6:da:60:e3:49:a4:0f:77:ec:c3: c8:0e:eb:21:0d:01:03:42:c5:ce:e4:36:2f:19:7d: 63:eb:1d:ed:c1:8d:9e:2a:66:cc:79:0d:a5:86:70: de:a1:06:52:6d:b6:7d:10:36:91:dc:08:e9:e3:25: 89:69:40:9b:f0:e2:9a:9f:8a:bf:c6:8e:04:3a:c5: 39:1f:08:30:3c:40:ba:0a:1c:ac:21:fd:ff:a0:b4: d5:f9:b0:f5:09:55:86:f8:06:91:47:4d:95:e7:b6: ac:a9:8b:95:72:7f:77:5b:e1:fa:e8:fe:24:1d:9b: 43:89:f0:79:61:2a:e1:db:d9:ab:a2:78:34:91:e2: b7:bb:64:37:32:e5:75:ba:ac:b9:a4:40:5d:bc:6c: 58:55:f8:be:9f:2f:5f:4c:fd:3c:64:90:3e:f7:e2: e9:02:a6:85:0c:71:5a:db:72:c9:f1:86:14:b7:5c: 63:7a:e3:1b:52:7b:2b:a3:aa:85:fb:fe:02:aa:86: 5e:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:9E:2B:55:39:FA:8B:7F:CD:90:7D:83:5F:36:4A:2E:31:33:B8:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d56d197e-5c29-3a3f-8fae-ccf02e1f2cee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:5b:41:31:c0:e3:e1:fd:68:b5:76:41:00:fb:6c:cb:d0:1b: a9:c8:45:58:ca:65:3d:70:6b:36:1f:3b:93:bd:64:2f:72:cb: 6b:d6:b8:a6:71:b5:54:f6:b9:5d:20:16:14:7f:ab:57:29:fd: 1e:3b:b4:cb:cb:18:dc:82:35:05:83:54:4a:33:cb:07:4c:70: af:1e:29:54:97:74:a2:dd:44:f3:ae:bd:46:21:79:71:21:8e: 69:47:e6:0c:f6:af:76:c1:fe:9b:94:a6:9c:5e:8e:b0:10:0d: ca:1a:cb:fa:d5:b7:81:df:5d:94:41:f4:7d:e2:33:0b:40:a7: 5e:88:6e:22:85:44:ab:b9:7c:20:a2:cd:81:d7:14:9f:87:a0: c1:7c:cf:da:51:bc:0e:f7:5d:83:fd:17:d1:d2:28:ed:06:60: 9c:b6:e3:a5:fb:d7:bb:96:89:92:20:82:bb:76:53:26:4e:69: c9:fe:91:2b:01:43:d2:8d:30:f4:d7:b5:27:17:6a:63:8a:ad: c4:ce:cb:3e:b3:3e:d5:bf:9e:8b:1d:4f:47:5b:40:4a:e9:dc: e4:38:0c:9b:d8:64:d9:51:eb:3d:79:33:86:6a:26:7a:59:08: f4:61:72:6c:8f:be:a2:59:ed:73:74:f5:f4:e5:ec:fc:86:22: da:ca:0b:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeEVn7QjFGbWLz4ccAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI0MTAxMjEzMDA0MloXDTI1MDExMDE0MDA0MlowLzEtMCsGA1UEAxMk NTQ5OWJhZGQtZDA1MC00ZGE2LTljZTYtOTNhNjUyNmZhOTk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArA+99T1MntD7CQ6gBKJcnkfvcGm/giqmueLp 3JztQm/wE+XXYjvDjvMvjiVCpibmZQWwismxxWlv0zGwv6ELRfbaYONJpA937MPI DushDQEDQsXO5DYvGX1j6x3twY2eKmbMeQ2lhnDeoQZSbbZ9EDaR3Ajp4yWJaUCb 8OKan4q/xo4EOsU5HwgwPEC6ChysIf3/oLTV+bD1CVWG+AaRR02V57asqYuVcn93 W+H66P4kHZtDifB5YSrh29mrong0keK3u2Q3MuV1uqy5pEBdvGxYVfi+ny9fTP08 ZJA+9+LpAqaFDHFa23LJ8YYUt1xjeuMbUnsro6qF+/4CqoZerQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFueK1U5+ot/zZB9g182Si4xM7hOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZDU2ZDE5N2UtNWMyOS0z YTNmLThmYWUtY2NmMDJlMWYyY2VlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+tMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGdbQTHA4+H9aLV2QQD7bMvQG6nIRVjKZT1wazYfO5O9ZC9yy2vWuKZx tVT2uV0gFhR/q1cp/R47tMvLGNyCNQWDVEozywdMcK8eKVSXdKLdRPOuvUYheXEh jmlH5gz2r3bB/puUppxejrAQDcoay/rVt4HfXZRB9H3iMwtAp16IbiKFRKu5fCCi zYHXFJ+HoMF8z9pRvA73XYP9F9HSKO0GYJy246X717uWiZIggrt2UyZOacn+kSsB Q9KNMPTXtScXamOKrcTOyz6zPtW/nosdT0dbQErp3OQ4DJvYZNlR6z15M4ZqJnpZ CPRhcmyPvqJZ7XN09fTl7PyGItrKC18= -----END CERTIFICATE-----Generated at Fri Nov 22 04:22:55 2024 by rpki-client on console-fra.rpki-client.org