$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/ac899459-f0f1-3fb9-8e1d-b4e1b4a1749a.roa File: ac899459-f0f1-3fb9-8e1d-b4e1b4a1749a.roa (raw, json) Hash identifier: 71MspqMUoG/TsaAFlF+/FDCZESCg+SGfcFlkixrnDvo= Subject key identifier: F1:87:75:C1:C3:9D:F9:89:5E:53:26:64:63:CF:5D:61:4E:83:96:1D Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63 Certificate serial: 010D0C9F43285847BEF6C767350F90F9C6B8DE80 Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/ac899459-f0f1-3fb9-8e1d-b4e1b4a1749a.roa Signing time: Sat 02 Nov 2024 13:00:42 +0000 ROA not before: Sat 02 Nov 2024 13:00:42 +0000 ROA not after: Fri 31 Jan 2025 14:00:42 +0000 asID: 54113 IP address blocks: 172.111.124.0/27 maxlen: 27 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:be:f6:c7:67:35:0f:90:f9:c6:b8:de:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63 Validity Not Before: Nov 2 13:00:42 2024 GMT Not After : Jan 31 14:00:42 2025 GMT Subject: CN=481beac5-52fe-4539-98bd-67bcab0fb5ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:11:a4:ce:b5:66:32:94:dd:b7:d2:ec:a8:b9: 0d:9d:92:fc:5e:2b:40:8d:59:b7:b6:8b:59:70:91: 25:68:14:ca:67:da:a1:d9:b2:65:1d:51:30:31:5e: 61:ea:30:6b:af:bb:9c:aa:f6:27:83:7d:f7:73:0f: d3:07:4f:7d:94:ce:7f:ed:dc:66:aa:33:d8:37:81: 32:45:eb:46:14:87:c2:a9:6e:6b:d9:22:7b:99:d0: 4e:43:2a:96:7a:2c:a5:8e:86:5c:fd:03:d4:b4:fd: f3:12:8b:a8:98:4b:d4:ad:e4:83:d8:ac:45:19:4c: 07:b2:78:df:b7:29:e2:a2:89:04:e0:cf:02:c8:93: 2c:95:44:49:1f:d1:c8:36:a5:9a:e4:32:39:5e:11: 7e:14:a6:66:ec:83:62:35:24:94:0a:49:ff:5a:ee: 14:d7:fc:f5:1b:59:88:b8:de:c9:a8:db:39:7b:70: 20:8c:c4:13:3b:9e:74:ce:1c:95:62:ae:ec:00:d7: a6:06:92:b9:59:41:0b:f0:53:68:3b:c3:e1:31:ff: 12:d1:ec:62:60:01:aa:f6:68:ff:c8:08:18:a1:73: c6:1f:db:40:80:07:36:c1:ee:e1:77:3e:a2:b7:ef: 41:a1:66:1f:eb:19:4a:35:75:bd:bf:0a:87:08:4a: e0:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:87:75:C1:C3:9D:F9:89:5E:53:26:64:63:CF:5D:61:4E:83:96:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/ac899459-f0f1-3fb9-8e1d-b4e1b4a1749a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl X509v3 Authority Key Identifier: keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer sbgp-ipAddrBlock: critical IPv4: 172.111.124.0/27 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:ee:98:34:19:a9:43:0d:25:17:7a:89:79:db:e8:0a:33:6e: 5d:7e:9c:14:83:90:17:20:82:e5:77:f8:27:a1:75:9b:bf:22: c4:b4:0d:7b:b4:7e:f2:56:f0:ce:a9:c7:1f:be:90:e6:70:16: ff:a1:82:cc:22:15:1e:0b:d0:3f:e1:b2:ed:48:21:ef:d3:2b: 7a:29:4d:93:f8:48:35:b4:45:3c:d5:cd:21:84:c6:da:5f:58: 25:25:12:2d:8d:04:5a:bd:28:de:b6:08:a6:8b:4e:54:c5:8d: ff:04:17:51:5c:9d:aa:a5:3f:4e:b9:84:86:1e:2f:35:f4:8b: 7c:75:8d:8b:05:af:46:e1:60:8e:9e:6e:ea:33:e5:03:8a:c1: 99:da:43:ee:91:90:94:0b:92:ec:85:62:88:88:e8:99:df:e4: 65:ee:de:ef:5d:ae:15:61:8d:48:88:32:fc:05:6a:3d:e3:c0: d7:51:83:26:d9:5c:05:d2:44:ec:35:b1:60:ca:04:23:f3:f8: 21:c5:87:6d:f8:15:f7:7d:65:77:ec:c8:3c:6e:f5:dd:46:25: 3e:21:3e:29:a1:ba:86:91:33:ed:c5:00:d0:ae:6d:9b:43:34: b9:67:8c:5e:31:a8:4a:e2:de:4a:0b:d6:6b:80:5c:a3:1d:52: 91:5f:63:ff -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEe+9sdnNQ+Q+ca43oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz YTYzMB4XDTI0MTEwMjEzMDA0MloXDTI1MDEzMTE0MDA0MlowLzEtMCsGA1UEAxMk NDgxYmVhYzUtNTJmZS00NTM5LTk4YmQtNjdiY2FiMGZiNWZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1hGkzrVmMpTdt9LsqLkNnZL8XitAjVm3totZ cJElaBTKZ9qh2bJlHVEwMV5h6jBrr7ucqvYng333cw/TB099lM5/7dxmqjPYN4Ey RetGFIfCqW5r2SJ7mdBOQyqWeiyljoZc/QPUtP3zEouomEvUreSD2KxFGUwHsnjf tyniookE4M8CyJMslURJH9HINqWa5DI5XhF+FKZm7INiNSSUCkn/Wu4U1/z1G1mI uN7JqNs5e3AgjMQTO550zhyVYq7sANemBpK5WUEL8FNoO8PhMf8S0exiYAGq9mj/ yAgYoXPGH9tAgAc2we7hdz6it+9BoWYf6xlKNXW9vwqHCErgzQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPGHdcHDnfmJXlMmZGPPXWFOg5YdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1 ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvYWM4OTk0NTktZjBmMS0z ZmI5LThlMWQtYjRlMWI0YTE3NDlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3 M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1 YzA5NzNhNjMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUFrG98ADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAq7pg0GalDDSUXeol52+gKM25dfpwUg5AXIILld/gnoXWbvyLEtA17 tH7yVvDOqccfvpDmcBb/oYLMIhUeC9A/4bLtSCHv0yt6KU2T+Eg1tEU81c0hhMba X1glJRItjQRavSjetgimi05UxY3/BBdRXJ2qpT9OuYSGHi819It8dY2LBa9G4WCO nm7qM+UDisGZ2kPukZCUC5LshWKIiOiZ3+Rl7t7vXa4VYY1IiDL8BWo948DXUYMm 2VwF0kTsNbFgygQj8/ghxYdt+BX3fWV37Mg8bvXdRiU+IT4pobqGkTPtxQDQrm2b QzS5Z4xeMahK4t5KC9ZrgFyjHVKRX2P/ -----END CERTIFICATE-----Generated at Mon Nov 25 13:41:14 2024 by rpki-client on console-fra.rpki-client.org