$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/fbef1aae-1406-3b2a-8227-bb0f6e60e175.roa File: fbef1aae-1406-3b2a-8227-bb0f6e60e175.roa (raw, json) Hash identifier: hngPoGeTGQrDjHy3sAjLH90oATEj70d84bfAgFyCZgo= Subject key identifier: 45:8E:D7:DE:53:B0:0D:EC:B2:0B:13:ED:CC:C5:B9:E3:9D:5E:74:99 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285847A22F9F2C83AF9BCF2600A9E0 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/fbef1aae-1406-3b2a-8227-bb0f6e60e175.roa Signing time: Wed 23 Oct 2024 05:36:51 +0000 ROA not before: Wed 23 Oct 2024 05:36:51 +0000 ROA not after: Tue 21 Jan 2025 06:36:51 +0000 asID: 197071 IP address blocks: 172.111.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:a2:2f:9f:2c:83:af:9b:cf:26:00:a9:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 23 05:36:51 2024 GMT Not After : Jan 21 06:36:51 2025 GMT Subject: CN=09a1f8bf-ce1e-43c5-9c45-953c661bcfb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:fd:31:00:79:70:8d:a0:f0:18:27:9f:c9:66: f3:49:63:08:56:3b:34:09:95:2d:bf:47:8b:56:56: 40:44:c1:19:57:3e:b1:dd:3b:79:3a:dd:5f:32:04: 26:51:d3:dd:4b:a8:af:1c:3d:7c:95:b1:37:5b:34: 2c:22:42:d6:70:a4:bd:f9:78:6e:c5:07:a0:f7:46: 93:b5:16:42:fa:48:97:27:d6:c3:68:ed:8e:21:a6: a2:3a:d6:cf:d9:ba:27:d8:52:a3:63:8e:a6:7a:39: b5:5e:8a:7e:82:b8:c0:d6:a4:1b:f2:88:19:c1:e6: 4c:19:96:52:52:7e:e0:c8:8b:c1:30:05:2c:85:d5: ff:4a:eb:96:9c:c3:ce:a8:d0:a0:aa:8e:0a:9c:89: bb:d2:d3:7a:4b:29:8d:60:50:c1:52:dd:c0:0a:7a: 69:69:54:4c:95:4e:96:11:04:2f:f0:90:85:42:e4: 3b:75:90:f8:df:76:1a:8e:49:02:39:77:12:29:9f: 64:6b:6b:96:01:96:1a:95:a4:c4:71:f3:a7:ec:b3: bc:9a:2c:95:c9:11:ba:25:66:96:6f:08:a3:34:ed: 0e:a7:e5:cc:a4:08:1f:49:7b:31:ca:78:b7:ca:97: 27:b6:f2:df:4b:42:ff:93:4d:6f:ec:c5:28:65:dd: 12:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:8E:D7:DE:53:B0:0D:EC:B2:0B:13:ED:CC:C5:B9:E3:9D:5E:74:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/fbef1aae-1406-3b2a-8227-bb0f6e60e175.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:2e:6e:74:3c:42:1c:70:ab:ef:70:7b:7c:08:f8:a5:8f:04: 9b:79:a6:72:26:93:0d:25:be:ea:9a:b3:63:b1:31:e4:95:b1: 9c:87:3e:ed:06:a7:a5:a3:b3:77:12:46:8d:10:d8:c0:df:1e: 6f:25:b1:e7:53:80:ce:70:4d:49:14:45:2c:24:c9:f1:e9:7c: d6:e7:cc:a6:64:40:9e:c8:04:b7:7a:c7:81:e2:31:bf:ea:a2: ba:1a:c5:77:20:e3:ec:95:20:68:21:8d:2d:a8:2a:e9:20:33: 74:26:d4:4e:0e:21:d3:ee:d4:8f:8e:dd:ba:ba:0d:b1:aa:db: 47:73:97:cf:36:0f:50:28:02:54:48:15:93:c6:05:20:de:cb: ee:ad:29:21:b2:78:7c:f9:c3:04:40:4d:0c:73:bf:d2:c8:da: 3f:3a:89:e9:fc:ca:62:d4:f6:7b:50:10:78:47:bf:64:57:96: 42:13:20:05:e0:da:16:6b:46:e1:d5:42:bf:9b:19:24:04:33: 3e:f4:cc:b5:a4:b6:e2:3c:28:4a:7a:46:1c:f9:c2:9a:67:8f: 09:cd:f1:0d:a4:d8:4a:fc:58:c9:dc:3f:97:18:c9:63:15:df: ac:f1:20:87:57:f0:d0:ad:a4:4b:32:dd:82:4c:64:8f:c3:40: 56:af:3a:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeiL58sg6+bzyYAqeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI0MTAyMzA1MzY1MVoXDTI1MDEyMTA2MzY1MVowLzEtMCsGA1UEAxMk MDlhMWY4YmYtY2UxZS00M2M1LTljNDUtOTUzYzY2MWJjZmI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApv0xAHlwjaDwGCefyWbzSWMIVjs0CZUtv0eL VlZARMEZVz6x3Tt5Ot1fMgQmUdPdS6ivHD18lbE3WzQsIkLWcKS9+XhuxQeg90aT tRZC+kiXJ9bDaO2OIaaiOtbP2bon2FKjY46mejm1Xop+grjA1qQb8ogZweZMGZZS Un7gyIvBMAUshdX/SuuWnMPOqNCgqo4KnIm70tN6SymNYFDBUt3ACnppaVRMlU6W EQQv8JCFQuQ7dZD433YajkkCOXcSKZ9ka2uWAZYalaTEcfOn7LO8miyVyRG6JWaW bwijNO0Op+XMpAgfSXsxyni3ypcntvLfS0L/k01v7MUoZd0SYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEWO195TsA3ssgsT7czFueOdXnSZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZmJlZjFhYWUtMTQwNi0z YjJhLTgyMjctYmIwZjZlNjBlMTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFoubnQ8Qhxwq+9we3wI+KWPBJt5pnImkw0lvuqas2OxMeSVsZyHPu0G p6Wjs3cSRo0Q2MDfHm8lsedTgM5wTUkURSwkyfHpfNbnzKZkQJ7IBLd6x4HiMb/q oroaxXcg4+yVIGghjS2oKukgM3Qm1E4OIdPu1I+O3bq6DbGq20dzl882D1AoAlRI FZPGBSDey+6tKSGyeHz5wwRATQxzv9LI2j86ien8ymLU9ntQEHhHv2RXlkITIAXg 2hZrRuHVQr+bGSQEMz70zLWktuI8KEp6Rhz5wppnjwnN8Q2k2Er8WMncP5cYyWMV 36zxIIdX8NCtpEsy3YJMZI/DQFavOuI= -----END CERTIFICATE-----Generated at Fri Nov 22 05:50:33 2024 by rpki-client on console-fra.rpki-client.org