$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d/80ca88fd-748b-398c-994d-51d5dfc053ba.roa File: 80ca88fd-748b-398c-994d-51d5dfc053ba.roa (raw, json) Hash identifier: LVZzFbhHOlCJPN1ydgq5b9g95mzwz3mGRJ01p7vCLDo= Subject key identifier: D5:12:EA:F5:68:00:B0:68:5C:E2:0C:A7:9F:B6:D0:98:21:87:98:05 Certificate issuer: /CN=8a57b69a-d683-4350-83d4-e449c0242b7d Certificate serial: 010D0C9F43285847D404A5DE9CFBC3DBA3B5F5C0 Authority key identifier: 38:8D:06:A4:B8:D5:B5:2E:32:40:F9:04:97:CD:53:11:DC:85:6F:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d/80ca88fd-748b-398c-994d-51d5dfc053ba.roa Signing time: Sun 10 Nov 2024 02:00:27 +0000 ROA not before: Sun 10 Nov 2024 02:00:27 +0000 ROA not after: Sat 08 Feb 2025 02:00:27 +0000 asID: 55134 IP address blocks: 172.111.16.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d/8a57b69a-d683-4350-83d4-e449c0242b7d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d/8a57b69a-d683-4350-83d4-e449c0242b7d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:d4:04:a5:de:9c:fb:c3:db:a3:b5:f5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a57b69a-d683-4350-83d4-e449c0242b7d Validity Not Before: Nov 10 02:00:27 2024 GMT Not After : Feb 8 02:00:27 2025 GMT Subject: CN=801e0ca1-efc4-4182-8d20-16a979a05068 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:81:51:b7:f5:3a:d4:dd:27:4b:a2:64:35:e9: e5:dc:6c:16:a0:2a:7c:60:34:1f:7d:96:0c:a9:aa: 49:91:5e:0a:54:16:a3:b7:5c:4a:88:7e:5b:c2:0c: 4e:23:73:1d:30:46:e7:ab:9d:67:6a:9b:18:68:d1: 18:50:cc:55:d8:69:1c:62:d4:a5:1d:0a:02:72:b5: f6:7f:05:71:66:5d:6a:1b:71:9c:5f:19:c1:5d:09: 33:1c:fe:6f:d0:ac:07:28:ca:16:bb:ff:87:6e:5a: c0:9e:81:f3:ca:9a:57:2c:f5:b2:4b:11:e1:a7:97: bb:0b:57:d1:9f:2c:61:53:4f:5d:5e:f0:cc:f5:e4: 66:08:d5:13:43:43:c1:68:39:49:38:90:4e:01:05: 50:a5:0e:e7:2d:43:3b:55:69:20:1d:75:d2:72:58: 43:f6:2c:8b:6a:d6:60:86:db:a8:0a:6c:f0:a4:d7: 7c:81:fe:78:b0:c2:e9:a7:d3:81:d6:55:d4:e5:66: 81:f1:03:67:95:b2:ae:12:f8:23:31:11:a4:4b:05: 40:8e:33:45:8d:1e:82:87:30:9f:f3:7a:41:84:e1: 6e:87:eb:44:cf:8f:b2:c3:b3:f4:1e:6f:05:83:fe: e1:f8:91:8f:53:52:48:02:c6:2f:cb:64:a9:61:15: db:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:12:EA:F5:68:00:B0:68:5C:E2:0C:A7:9F:B6:D0:98:21:87:98:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d/80ca88fd-748b-398c-994d-51d5dfc053ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d/8a57b69a-d683-4350-83d4-e449c0242b7d.crl X509v3 Authority Key Identifier: keyid:38:8D:06:A4:B8:D5:B5:2E:32:40:F9:04:97:CD:53:11:DC:85:6F:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d.cer sbgp-ipAddrBlock: critical IPv4: 172.111.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:6b:83:73:1d:8b:f9:17:eb:02:70:62:2a:35:37:dd:7a:4e: 73:d0:55:d7:db:cd:71:2d:6e:74:fe:47:8d:cf:4b:44:49:c2: 63:f7:08:43:5f:1d:73:6e:3b:f6:02:0c:39:a2:1c:99:c8:5f: 29:2f:ae:80:6b:93:90:c7:b2:8a:47:17:d5:f8:15:8f:16:53: 12:f3:13:a7:d6:91:e4:d4:03:a8:3a:75:05:37:ad:67:c1:5b: 35:8e:a5:33:6e:df:c8:be:d9:06:6b:e4:2f:0b:11:c1:b2:ad: 4d:55:36:84:de:31:7f:92:a5:b8:34:1b:f9:33:3b:1b:f6:09: 96:15:6c:e3:1c:00:91:77:b9:24:50:dd:ef:d9:dd:fe:5f:64: 06:5e:3b:f2:82:98:70:48:20:48:94:e7:fe:57:41:fd:d6:95: e1:9c:ac:8c:9e:f1:f0:af:f1:b3:2b:13:7f:55:ac:08:e6:d3: 96:5d:bc:0c:ef:03:49:26:4b:69:f1:cf:11:92:82:20:cc:c1: 54:e9:b2:38:c2:9b:52:13:59:63:92:b3:85:7e:8f:cb:bc:44: 94:38:9d:54:d4:98:be:35:fb:7b:ec:80:2d:eb:74:6a:5a:8e: fc:fa:d7:54:53:0e:b0:e8:48:d3:d7:70:87:a3:12:2f:27:33: b8:bd:6b:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfUBKXenPvD26O19cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1N2I2OWEtZDY4My00MzUwLTgzZDQtZTQ0OWMwMjQy YjdkMB4XDTI0MTExMDAyMDAyN1oXDTI1MDIwODAyMDAyN1owLzEtMCsGA1UEAxMk ODAxZTBjYTEtZWZjNC00MTgyLThkMjAtMTZhOTc5YTA1MDY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYFRt/U61N0nS6JkNenl3GwWoCp8YDQffZYM qapJkV4KVBajt1xKiH5bwgxOI3MdMEbnq51napsYaNEYUMxV2GkcYtSlHQoCcrX2 fwVxZl1qG3GcXxnBXQkzHP5v0KwHKMoWu/+HblrAnoHzyppXLPWySxHhp5e7C1fR nyxhU09dXvDM9eRmCNUTQ0PBaDlJOJBOAQVQpQ7nLUM7VWkgHXXSclhD9iyLatZg htuoCmzwpNd8gf54sMLpp9OB1lXU5WaB8QNnlbKuEvgjMRGkSwVAjjNFjR6ChzCf 83pBhOFuh+tEz4+yw7P0Hm8Fg/7h+JGPU1JIAsYvy2SpYRXb3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNUS6vVoALBoXOIMp5+20Jghh5gFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84YTU3 YjY5YS1kNjgzLTQzNTAtODNkNC1lNDQ5YzAyNDJiN2QvODBjYTg4ZmQtNzQ4Yi0z OThjLTk5NGQtNTFkNWRmYzA1M2JhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOGE1N2I2OWEtZDY4My00MzUwLTgz ZDQtZTQ0OWMwMjQyYjdkLzhhNTdiNjlhLWQ2ODMtNDM1MC04M2Q0LWU0NDljMDI0 MmI3ZC5jcmwwHwYDVR0jBBgwFoAUOI0GpLjVtS4yQPkEl81TEdyFbwkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84YTU3YjY5YS1kNjgzLTQzNTAtODNkNC1lNDQ5 YzAyNDJiN2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrG8QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC9rg3Mdi/kX6wJwYio1N916TnPQVdfbzXEtbnT+R43PS0RJwmP3CENf HXNuO/YCDDmiHJnIXykvroBrk5DHsopHF9X4FY8WUxLzE6fWkeTUA6g6dQU3rWfB WzWOpTNu38i+2QZr5C8LEcGyrU1VNoTeMX+Spbg0G/kzOxv2CZYVbOMcAJF3uSRQ 3e/Z3f5fZAZeO/KCmHBIIEiU5/5XQf3WleGcrIye8fCv8bMrE39VrAjm05ZdvAzv A0kmS2nxzxGSgiDMwVTpsjjCm1ITWWOSs4V+j8u8RJQ4nVTUmL41+3vsgC3rdGpa jvz611RTDrDoSNPXcIejEi8nM7i9a70= -----END CERTIFICATE-----Generated at Thu Nov 21 23:37:23 2024 by rpki-client on console-ams.rpki-client.org