$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/dd286b0d-fea4-3601-918a-5d36548adbf8.roa File: dd286b0d-fea4-3601-918a-5d36548adbf8.roa (raw, json) Hash identifier: NZ/BQqADKGNrdznnVGLRWBcdZfRLC6wakCN757rIHGI= Subject key identifier: 9F:84:0E:17:0F:39:E5:32:65:63:7F:8C:8A:56:62:43:7A:ED:61:D1 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285847DD547907650E473A420121A0 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/dd286b0d-fea4-3601-918a-5d36548adbf8.roa Signing time: Wed 13 Nov 2024 10:03:48 +0000 ROA not before: Wed 13 Nov 2024 10:03:48 +0000 ROA not after: Tue 11 Feb 2025 10:03:48 +0000 asID: 53356 IP address blocks: 172.111.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:dd:54:79:07:65:0e:47:3a:42:01:21:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Nov 13 10:03:48 2024 GMT Not After : Feb 11 10:03:48 2025 GMT Subject: CN=a6d98040-ede4-451e-bfb8-11eca35161af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:b4:8d:81:b5:19:68:00:e0:21:48:5c:cf:7b: 7a:89:d0:7d:7b:f6:08:eb:b9:52:ae:3d:c7:f9:04: 98:3b:02:96:e8:6c:e5:c9:a6:9f:55:4d:82:f2:7a: f9:49:5c:97:07:9e:10:27:92:b7:31:4d:10:20:e6: 51:88:ff:ab:d5:02:15:8f:23:a4:d6:b3:0a:a8:9f: 14:5d:fc:2f:48:a3:dc:17:87:89:de:ce:b6:e1:9c: 68:58:1b:43:f7:7c:aa:d3:0a:a5:44:c5:c5:31:82: 99:05:16:93:fd:fe:c4:9b:cb:c1:86:23:aa:91:36: 44:2f:c6:b3:1a:f3:ee:36:13:75:2b:e2:e7:f1:26: 4c:a3:ea:0c:4b:11:ae:2e:84:c0:44:1e:3e:c9:d2: c3:19:ad:02:41:74:db:4d:db:ef:1b:38:11:37:3d: eb:ce:ba:d1:bb:51:45:8e:98:5b:a5:52:8f:8e:b7: cf:0c:dc:1c:9e:c9:a5:6f:4b:d1:b5:a3:8a:12:ff: ba:3a:36:e4:ab:8e:89:9b:91:aa:83:bd:87:16:27: 3e:d1:a3:af:03:d1:b1:63:7e:fd:53:ab:3d:e4:a8: c2:29:92:d6:cd:7a:39:21:b9:63:e1:d6:61:4c:bb: 72:e3:fd:cc:95:56:22:57:8b:39:df:58:93:7a:6d: 77:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:84:0E:17:0F:39:E5:32:65:63:7F:8C:8A:56:62:43:7A:ED:61:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/dd286b0d-fea4-3601-918a-5d36548adbf8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:fa:df:80:07:1f:ae:57:99:c4:ae:3c:b0:14:d7:79:dc:2e: 19:43:b7:7f:a3:35:90:b2:32:2f:8f:e0:d5:b3:18:6d:16:02: 77:71:75:6f:54:94:5e:39:a1:6b:a2:ef:f5:10:22:0e:53:f5: 6d:59:0b:93:2a:88:18:fe:27:2e:89:1d:a9:41:4f:e9:e8:cf: 5f:67:15:09:30:25:6a:7b:2f:cb:91:8f:11:ce:b9:2d:7b:6e: ea:f2:e0:71:7f:ca:19:a4:da:88:42:11:ea:ba:dd:bc:ab:15: 37:67:4d:b2:fd:56:32:c1:41:5a:06:36:27:a8:b0:3e:db:6e: f3:b7:4e:61:55:4b:9a:8b:b2:55:84:65:52:b9:9f:a9:a3:4b: 97:20:9f:f2:47:d5:21:a5:ac:2c:70:a0:46:d9:12:45:74:23: 16:8a:63:0f:d8:27:a2:b2:04:25:48:26:d2:d0:9e:17:49:42: 69:fe:ae:32:a1:73:dd:ca:de:4c:fa:c7:c2:85:2f:1d:66:35: c6:c5:68:cc:eb:63:5b:81:91:98:65:62:89:81:4f:c3:a3:32: 76:8b:ba:bc:18:0c:ee:f2:ff:46:fa:6a:75:92:bb:7b:a6:cc: 57:cf:2f:80:9e:b6:ce:04:93:54:bd:15:83:04:93:f3:15:04: 25:27:d7:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfdVHkHZQ5HOkIBIaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI0MTExMzEwMDM0OFoXDTI1MDIxMTEwMDM0OFowLzEtMCsGA1UEAxMk YTZkOTgwNDAtZWRlNC00NTFlLWJmYjgtMTFlY2EzNTE2MWFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibSNgbUZaADgIUhcz3t6idB9e/YI67lSrj3H +QSYOwKW6GzlyaafVU2C8nr5SVyXB54QJ5K3MU0QIOZRiP+r1QIVjyOk1rMKqJ8U XfwvSKPcF4eJ3s624ZxoWBtD93yq0wqlRMXFMYKZBRaT/f7Em8vBhiOqkTZEL8az GvPuNhN1K+Ln8SZMo+oMSxGuLoTARB4+ydLDGa0CQXTbTdvvGzgRNz3rzrrRu1FF jphbpVKPjrfPDNwcnsmlb0vRtaOKEv+6Ojbkq46Jm5Gqg72HFic+0aOvA9GxY379 U6s95KjCKZLWzXo5Iblj4dZhTLty4/3MlVYiV4s531iTem13iQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ+EDhcPOeUyZWN/jIpWYkN67WHRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZGQyODZiMGQtZmVhNC0z NjAxLTkxOGEtNWQzNjU0OGFkYmY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+fMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIT634AHH65XmcSuPLAU13ncLhlDt3+jNZCyMi+P4NWzGG0WAndxdW9U lF45oWui7/UQIg5T9W1ZC5MqiBj+Jy6JHalBT+noz19nFQkwJWp7L8uRjxHOuS17 bury4HF/yhmk2ohCEeq63byrFTdnTbL9VjLBQVoGNieosD7bbvO3TmFVS5qLslWE ZVK5n6mjS5cgn/JH1SGlrCxwoEbZEkV0IxaKYw/YJ6KyBCVIJtLQnhdJQmn+rjKh c93K3kz6x8KFLx1mNcbFaMzrY1uBkZhlYomBT8OjMnaLurwYDO7y/0b6anWSu3um zFfPL4Cets4Ek1S9FYMEk/MVBCUn1w4= -----END CERTIFICATE-----Generated at Fri Nov 22 05:50:33 2024 by rpki-client on console-fra.rpki-client.org