$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e32a88c6-d0d0-3e0f-96a7-4812e1f5cff2.roa File: e32a88c6-d0d0-3e0f-96a7-4812e1f5cff2.roa (raw, json) Hash identifier: c6AsnT7fhuQ7+HQSzzihwTH4NqeVGEgwLtrcgLDCufc= Subject key identifier: F7:D5:77:FC:F4:0D:C0:DE:6C:79:24:CF:27:6F:E0:0B:36:4D:67:C3 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285847EE2DCBE79CCEDD1FA3A0A740 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e32a88c6-d0d0-3e0f-96a7-4812e1f5cff2.roa Signing time: Tue 19 Nov 2024 10:54:37 +0000 ROA not before: Tue 19 Nov 2024 10:54:37 +0000 ROA not after: Mon 17 Feb 2025 10:54:37 +0000 asID: 43260 IP address blocks: 172.111.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ee:2d:cb:e7:9c:ce:dd:1f:a3:a0:a7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Nov 19 10:54:37 2024 GMT Not After : Feb 17 10:54:37 2025 GMT Subject: CN=aa5af4fa-8606-45c0-bd00-83954cb91937 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:10:50:9c:89:05:84:5c:02:c2:35:93:a9:90: 0d:d1:cf:da:fd:2a:6a:3b:4a:2a:9c:6f:a0:15:e7: 06:49:a1:d2:50:4f:8d:61:cd:38:b8:87:ee:2c:9f: 71:a9:32:f8:9c:c8:96:fa:bd:5d:0b:87:86:9f:d4: 1f:e3:08:9a:8b:a9:af:c5:be:1f:22:5e:5c:8a:9a: 88:77:90:fc:23:b0:a4:89:7e:a6:9e:bb:b4:5a:92: 6e:31:90:73:1b:45:e1:53:de:f3:26:91:56:6b:ea: 81:c1:6e:b2:ec:e8:13:12:f5:ec:26:ef:a6:05:de: 43:70:d6:99:38:5e:c8:bf:24:0a:30:7f:9e:1c:cc: 7b:ff:40:98:09:47:92:ff:66:1b:8a:9e:44:da:05: 84:44:88:c1:87:33:25:41:80:56:59:67:58:1d:55: 1c:10:5b:ce:5d:05:b5:bb:09:b9:8a:7b:85:23:9e: 3e:17:dc:41:2a:b2:09:99:5e:e6:5c:eb:3c:5d:b6: 3f:09:7b:fc:5b:04:8e:d9:2f:aa:9f:2c:35:43:f8: d0:07:cd:a8:d6:a8:7e:b5:b3:3f:39:6e:00:5e:10: 36:31:76:d9:bb:75:d9:61:41:c0:86:d3:13:e3:cd: 6c:64:ae:91:b5:d7:e6:7a:05:46:fa:ea:16:a3:5f: 64:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:D5:77:FC:F4:0D:C0:DE:6C:79:24:CF:27:6F:E0:0B:36:4D:67:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e32a88c6-d0d0-3e0f-96a7-4812e1f5cff2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:e7:8e:be:0a:55:71:ee:84:b7:b9:1d:bb:70:95:d4:2a:09: aa:48:e4:06:6c:58:48:35:1b:09:3b:9e:5b:a8:2f:b7:02:7b: f4:ae:c2:99:a1:6f:ce:9a:07:48:06:e7:34:1c:0c:59:a6:80: 9a:7a:dd:5b:e2:06:f1:f5:d6:60:8a:37:de:4b:d5:8d:83:41: 10:b0:61:44:a4:34:f3:19:39:e9:c9:c7:57:60:e7:a1:97:6e: 59:a3:10:f9:6f:77:5e:4d:05:00:4e:da:58:4f:d1:e2:d5:a1: 14:37:d1:1c:3e:50:70:0c:fb:98:a9:e4:4a:52:9a:e6:fd:98: 64:42:14:ef:fd:8e:9b:ab:cc:7c:30:9a:4c:7e:59:93:49:34: c2:66:3a:cb:0b:6d:5f:54:a6:77:8b:0a:e7:46:c9:4f:16:42: 45:6c:ba:6c:ef:48:2d:08:29:46:f0:e7:be:6b:bb:38:7e:e5: 0f:f2:ce:eb:f6:cc:17:c7:3e:58:dc:62:69:43:ac:0b:24:b5: f4:3e:50:00:da:c9:d8:05:ae:79:53:d0:68:5d:16:58:c9:0f: 21:65:6b:1c:87:38:ce:cd:9e:07:70:9f:5e:e6:e4:8b:37:e9: 7a:07:fa:30:14:e2:7c:a0:b2:1d:49:39:ec:5d:c3:94:03:18: ba:93:0a:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfuLcvnnM7dH6Ogp0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI0MTExOTEwNTQzN1oXDTI1MDIxNzEwNTQzN1owLzEtMCsGA1UEAxMk YWE1YWY0ZmEtODYwNi00NWMwLWJkMDAtODM5NTRjYjkxOTM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBBQnIkFhFwCwjWTqZAN0c/a/SpqO0oqnG+g FecGSaHSUE+NYc04uIfuLJ9xqTL4nMiW+r1dC4eGn9Qf4wiai6mvxb4fIl5cipqI d5D8I7CkiX6mnru0WpJuMZBzG0XhU97zJpFWa+qBwW6y7OgTEvXsJu+mBd5DcNaZ OF7IvyQKMH+eHMx7/0CYCUeS/2Ybip5E2gWERIjBhzMlQYBWWWdYHVUcEFvOXQW1 uwm5inuFI54+F9xBKrIJmV7mXOs8XbY/CXv8WwSO2S+qnyw1Q/jQB82o1qh+tbM/ OW4AXhA2MXbZu3XZYUHAhtMT481sZK6RtdfmegVG+uoWo19kSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPfVd/z0DcDebHkkzydv4As2TWfDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZTMyYTg4YzYtZDBkMC0z ZTBmLTk2YTctNDgxMmUxZjVjZmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/fMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGbnjr4KVXHuhLe5HbtwldQqCapI5AZsWEg1Gwk7nluoL7cCe/Suwpmh b86aB0gG5zQcDFmmgJp63VviBvH11mCKN95L1Y2DQRCwYUSkNPMZOenJx1dg56GX blmjEPlvd15NBQBO2lhP0eLVoRQ30Rw+UHAM+5ip5EpSmub9mGRCFO/9jpurzHww mkx+WZNJNMJmOssLbV9UpneLCudGyU8WQkVsumzvSC0IKUbw575ruzh+5Q/yzuv2 zBfHPljcYmlDrAsktfQ+UADaydgFrnlT0GhdFljJDyFlaxyHOM7Nngdwn17m5Is3 6XoH+jAU4nygsh1JOexdw5QDGLqTCmw= -----END CERTIFICATE-----Generated at Thu Nov 21 23:36:41 2024 by rpki-client on console-ams.rpki-client.org