$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f135a6c0-f413-3403-8690-6cddb169d2cb.roa File: f135a6c0-f413-3403-8690-6cddb169d2cb.roa (raw, json) Hash identifier: PaND1UHRCXr/DZHob/V3IdMBJ7o3r4HEA+GEWSJTk/4= Subject key identifier: EA:E7:50:0D:28:06:6A:E0:A1:FF:4A:32:B3:B3:C8:67:1B:F7:86:98 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584742BB52460BEE5885564F0A00 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f135a6c0-f413-3403-8690-6cddb169d2cb.roa Signing time: Thu 19 Sep 2024 01:00:31 +0000 ROA not before: Thu 19 Sep 2024 01:00:31 +0000 ROA not after: Wed 18 Dec 2024 02:00:31 +0000 asID: 3223 IP address blocks: 172.111.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:42:bb:52:46:0b:ee:58:85:56:4f:0a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Sep 19 01:00:31 2024 GMT Not After : Dec 18 02:00:31 2024 GMT Subject: CN=a79a5272-bda7-4b82-a1ec-a33b7f9a3895 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:28:cb:18:f1:74:b8:e9:ff:2f:4b:94:df:bc: 32:b2:cc:bf:9d:55:f9:32:f3:07:81:9c:8d:4e:64: 92:16:87:ba:6f:84:b2:33:d1:81:b9:19:b9:47:43: 6c:1d:5f:c2:89:9c:9e:59:54:d4:46:79:9e:ae:f8: e8:ba:2b:60:7a:7b:85:61:d3:04:f5:b1:71:26:07: 9a:ca:21:81:57:bb:76:a7:da:e1:bf:b1:a4:4d:55: a2:6a:44:8f:28:94:63:b3:0e:9e:12:77:d4:29:5d: a9:37:76:e3:7b:52:66:e8:58:40:dc:b9:88:1a:27: cb:45:8c:ea:0a:8d:7a:65:1f:c1:ae:96:84:d5:61: d3:66:4d:19:f3:ec:a6:7c:c5:09:d4:15:e5:52:bd: 87:14:54:89:ff:21:11:79:44:0d:f9:5b:af:9b:c0: 5d:4c:ee:41:81:98:33:9e:77:19:8d:52:92:18:e8: 2d:1c:3d:d2:bb:79:03:93:f4:7f:c5:64:6d:76:30: a9:1a:c5:6c:9b:90:ab:b4:95:a9:98:8f:e5:91:37: ae:e8:f9:57:9d:bc:13:74:14:97:cc:6d:79:30:f4: fd:5f:74:e7:f8:fc:8d:2f:4c:76:a5:3d:26:ae:b2: f5:a6:de:68:0d:0f:ea:df:be:5f:88:56:41:84:9c: af:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:E7:50:0D:28:06:6A:E0:A1:FF:4A:32:B3:B3:C8:67:1B:F7:86:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f135a6c0-f413-3403-8690-6cddb169d2cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:80:c7:77:a9:3a:01:74:77:3f:3e:1d:8f:5c:1b:3e:8d:6f: ae:03:09:ad:77:6e:1e:1e:a3:ce:4b:6e:e0:2b:f0:b3:3e:69: 8d:87:c8:89:51:d6:f5:b9:39:e5:35:08:3e:53:0b:7c:38:9b: 0a:58:76:36:82:b6:57:ca:a5:e5:01:f0:e3:8a:7d:52:39:e5: af:6c:27:80:32:8e:d8:be:dd:b6:56:81:18:9b:d3:c4:e6:4e: 1a:90:87:25:f9:a7:6f:85:e5:14:55:82:f4:1e:ab:7a:ae:d4: f8:53:22:db:f2:c9:4d:07:e5:fa:0f:1e:fe:9c:42:d1:13:d0: b5:42:7e:27:f4:b7:20:27:2c:74:07:e2:88:5f:61:a9:c2:1a: e2:13:48:e5:71:04:19:81:20:c6:d8:bd:14:3f:ae:d6:9f:56: 66:7d:f1:6a:7d:15:b2:fe:cb:09:45:59:b0:b8:74:80:e5:41: a3:8b:bf:5d:6e:58:93:fa:1a:73:48:60:35:20:a2:07:fb:31: 36:6a:12:3e:55:49:d1:6d:dc:59:d9:3c:eb:68:3a:bd:8e:21: 0e:14:f3:a2:03:35:65:27:85:49:29:bf:4b:82:3d:73:56:43: 8b:94:42:ae:d9:01:01:f5:6a:4f:d5:d0:99:eb:c3:24:75:2f: b9:62:91:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdCu1JGC+5YhVZPCgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI0MDkxOTAxMDAzMVoXDTI0MTIxODAyMDAzMVowLzEtMCsGA1UEAxMk YTc5YTUyNzItYmRhNy00YjgyLWExZWMtYTMzYjdmOWEzODk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCjLGPF0uOn/L0uU37wyssy/nVX5MvMHgZyN TmSSFoe6b4SyM9GBuRm5R0NsHV/CiZyeWVTURnmervjouitgenuFYdME9bFxJgea yiGBV7t2p9rhv7GkTVWiakSPKJRjsw6eEnfUKV2pN3bje1Jm6FhA3LmIGifLRYzq Co16ZR/BrpaE1WHTZk0Z8+ymfMUJ1BXlUr2HFFSJ/yEReUQN+Vuvm8BdTO5BgZgz nncZjVKSGOgtHD3Su3kDk/R/xWRtdjCpGsVsm5CrtJWpmI/lkTeu6PlXnbwTdBSX zG15MPT9X3Tn+PyNL0x2pT0mrrL1pt5oDQ/q375fiFZBhJyvxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOrnUA0oBmrgof9KMrOzyGcb94aYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZjEzNWE2YzAtZjQxMy0z NDAzLTg2OTAtNmNkZGIxNjlkMmNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABqAx3epOgF0dz8+HY9cGz6Nb64DCa13bh4eo85LbuAr8LM+aY2HyIlR 1vW5OeU1CD5TC3w4mwpYdjaCtlfKpeUB8OOKfVI55a9sJ4Ayjti+3bZWgRib08Tm ThqQhyX5p2+F5RRVgvQeq3qu1PhTItvyyU0H5foPHv6cQtET0LVCfif0tyAnLHQH 4ohfYanCGuITSOVxBBmBIMbYvRQ/rtafVmZ98Wp9FbL+ywlFWbC4dIDlQaOLv11u WJP6GnNIYDUgogf7MTZqEj5VSdFt3FnZPOtoOr2OIQ4U86IDNWUnhUkpv0uCPXNW Q4uUQq7ZAQH1ak/V0JnrwyR1L7likXM= -----END CERTIFICATE-----Generated at Fri Nov 22 04:37:34 2024 by rpki-client on console-ams.rpki-client.org