$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/febb0e75-40f1-37a9-a0a4-5dc80635d514.roa File: febb0e75-40f1-37a9-a0a4-5dc80635d514.roa (raw, json) Hash identifier: 8ERirnJXDxSpzlWSwYEVN9iVcGM5BRgw4tBZEfXv6cE= Subject key identifier: F5:D7:80:41:58:EF:61:96:7B:B7:E6:E3:79:58:96:39:34:C3:E3:75 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584784567ABD8E8A224B08047A80 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/febb0e75-40f1-37a9-a0a4-5dc80635d514.roa Signing time: Sat 12 Oct 2024 13:00:42 +0000 ROA not before: Sat 12 Oct 2024 13:00:42 +0000 ROA not after: Fri 10 Jan 2025 14:00:42 +0000 asID: 3223 IP address blocks: 172.111.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:84:56:7a:bd:8e:8a:22:4b:08:04:7a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 12 13:00:42 2024 GMT Not After : Jan 10 14:00:42 2025 GMT Subject: CN=d785edeb-daf5-421f-afee-c95e2782d6bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:7e:26:d6:4b:2b:88:37:38:73:07:b1:48:8f: c7:36:94:67:97:d4:d1:e5:35:38:ac:8b:b0:5d:92: 41:52:a9:05:41:f6:81:7c:2d:34:4e:b0:3c:c1:4c: a9:d2:72:39:f1:24:86:03:19:aa:83:72:80:51:4d: 3a:fb:e9:34:f2:30:f5:e7:5b:ab:12:54:27:82:a7: 64:7a:75:94:76:47:fa:e5:5c:d6:a4:d5:3c:0f:fd: 37:17:42:86:a1:29:81:ed:97:3a:0a:41:ee:08:e0: 15:7e:bf:95:7c:d7:01:64:ef:2b:1f:85:2b:87:f5: 0d:3e:92:03:89:08:97:be:79:c3:75:0e:34:72:f8: 33:fd:42:2b:6f:7b:70:c2:ae:89:6e:73:62:7c:6b: 09:6b:b5:39:88:b4:e5:e4:6f:11:b0:f9:6a:53:8e: ce:dd:9c:bb:79:a9:cd:39:df:bf:2a:d3:69:68:a7: 1f:e6:60:9d:c2:23:fc:69:44:c0:a6:77:a6:bd:6b: 6c:02:3e:55:31:fc:78:74:32:c7:60:fe:ae:31:af: 36:14:e3:ee:b2:f3:03:cf:78:72:71:f2:1e:ef:38: ba:d7:22:b4:29:9e:9d:4b:b4:1c:fe:e3:79:b3:02: 9b:9c:1a:6d:e5:b8:9e:71:cc:c9:da:5b:4a:b4:44: 9e:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:D7:80:41:58:EF:61:96:7B:B7:E6:E3:79:58:96:39:34:C3:E3:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/febb0e75-40f1-37a9-a0a4-5dc80635d514.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:c0:32:7d:7a:fb:5d:85:40:ae:b1:af:f1:16:7a:a6:58:98: 67:90:b4:4b:87:25:94:59:5f:6c:d6:3d:e9:3b:b7:32:8d:1a: d7:ef:41:8f:a9:7f:f2:bb:cc:b0:e4:f5:61:7d:6d:64:c8:0b: e4:ba:02:41:5c:61:28:ab:b2:78:61:57:f8:01:fa:2e:0f:5d: 88:a8:76:fa:c2:53:40:95:50:d0:ba:76:a2:f2:65:eb:0d:e3: a8:e1:c2:8e:0c:3e:ff:85:c5:41:af:ff:fb:e6:3f:2a:c2:fe: 42:7c:b7:36:ca:6f:a5:a4:91:e5:a0:f9:27:a0:4a:7c:2e:a5: 46:a6:de:eb:89:d0:8f:da:15:b7:a3:93:69:16:f8:56:b5:56: 7f:59:2b:ae:9b:73:e8:e4:f7:3a:3d:51:55:20:8e:fd:87:d0: 0c:04:b3:af:a8:53:26:a9:bc:a1:60:33:5a:d1:bf:9b:29:23: ad:34:8b:fc:ed:f4:a2:08:6a:5a:8e:bf:37:e4:f9:aa:81:89: 71:e5:13:90:72:24:53:3c:70:12:ae:9a:d8:b4:fc:39:a5:47: 86:70:3b:76:40:94:01:8e:8d:29:7a:d0:c1:15:da:c0:77:19: 2b:55:1c:1f:38:05:66:86:dc:fc:86:ce:a2:f6:e7:e4:17:c4: 20:6e:fd:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeEVnq9jooiSwgEeoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI0MTAxMjEzMDA0MloXDTI1MDExMDE0MDA0MlowLzEtMCsGA1UEAxMk ZDc4NWVkZWItZGFmNS00MjFmLWFmZWUtYzk1ZTI3ODJkNmJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh34m1ksriDc4cwexSI/HNpRnl9TR5TU4rIuw XZJBUqkFQfaBfC00TrA8wUyp0nI58SSGAxmqg3KAUU06++k08jD151urElQngqdk enWUdkf65VzWpNU8D/03F0KGoSmB7Zc6CkHuCOAVfr+VfNcBZO8rH4Urh/UNPpID iQiXvnnDdQ40cvgz/UIrb3twwq6JbnNifGsJa7U5iLTl5G8RsPlqU47O3Zy7eanN Od+/KtNpaKcf5mCdwiP8aUTApnemvWtsAj5VMfx4dDLHYP6uMa82FOPusvMDz3hy cfIe7zi61yK0KZ6dS7Qc/uN5swKbnBpt5biecczJ2ltKtESeuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPXXgEFY72GWe7fm43lYljk0w+N1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZmViYjBlNzUtNDBmMS0z N2E5LWEwYTQtNWRjODA2MzVkNTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/JMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABfAMn16+12FQK6xr/EWeqZYmGeQtEuHJZRZX2zWPek7tzKNGtfvQY+p f/K7zLDk9WF9bWTIC+S6AkFcYSirsnhhV/gB+i4PXYiodvrCU0CVUNC6dqLyZesN 46jhwo4MPv+FxUGv//vmPyrC/kJ8tzbKb6WkkeWg+SegSnwupUam3uuJ0I/aFbej k2kW+Fa1Vn9ZK66bc+jk9zo9UVUgjv2H0AwEs6+oUyapvKFgM1rRv5spI600i/zt 9KIIalqOvzfk+aqBiXHlE5ByJFM8cBKumti0/DmlR4ZwO3ZAlAGOjSl60MEV2sB3 GStVHB84BWaG3PyGzqL25+QXxCBu/Rs= -----END CERTIFICATE-----Generated at Fri Nov 22 04:22:56 2024 by rpki-client on console-fra.rpki-client.org