$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/02a72700-abb9-3c55-b4f4-e68d71a71217.roa File: 02a72700-abb9-3c55-b4f4-e68d71a71217.roa (raw, json) Hash identifier: 4MQLg42lFTPwa5uXe1GFGdfhX59s2DnXQlHDNxbuU4s= Subject key identifier: 9D:DB:7A:8E:4A:FA:5A:76:94:37:8C:F4:B2:31:77:65:A2:D2:36:C4 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584561284FEA168212AB3A40A3E0 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/02a72700-abb9-3c55-b4f4-e68d71a71217.roa Signing time: Sat 30 Mar 2024 13:00:38 +0000 ROA not before: Sat 30 Mar 2024 13:00:38 +0000 ROA not after: Fri 28 Jun 2024 13:00:38 +0000 asID: 9009 IP address blocks: 172.94.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 28 Apr 2024 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:61:28:4f:ea:16:82:12:ab:3a:40:a3:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Mar 30 13:00:38 2024 GMT Not After : Jun 28 13:00:38 2024 GMT Subject: CN=c84e636d-d8a9-4e32-a353-d9ba72d4f1ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:5d:0b:d0:6f:5e:55:a3:5a:1a:f7:9f:93:67: cb:60:d3:75:ca:44:8a:8c:2f:ca:06:ad:d7:44:88: 29:1c:46:ad:12:75:a5:91:30:c3:95:e1:28:81:08: bd:37:83:a9:df:42:e4:18:17:e3:96:f9:a2:96:f5: eb:41:b9:90:9a:e8:54:f8:09:5a:2a:a8:0c:04:1b: 10:e1:33:71:8b:73:a2:2f:c1:61:cc:7f:4a:f2:37: 57:82:d8:95:c0:0f:27:68:1f:5d:75:b4:e8:65:bc: a6:40:06:bb:0d:74:05:78:0c:83:1e:14:14:38:7b: a4:77:d3:8a:b0:ce:a2:09:97:c0:eb:87:73:d8:23: 0a:a8:d4:99:29:e3:63:f7:88:44:54:c0:83:c0:39: 4c:c8:01:bb:cb:0b:1f:ae:ec:9a:99:6b:e1:0a:c5: 0c:b2:ec:36:f7:23:c6:a5:ff:67:56:37:ca:a1:95: 58:c1:41:20:b8:5c:c5:9f:df:88:8e:35:46:dc:3d: c4:63:b7:71:18:df:53:2c:63:80:20:3a:0e:1d:2b: d0:2e:ce:68:dc:4a:71:03:e7:77:c5:1d:eb:ea:24: 10:05:1b:2b:aa:7c:f3:d9:b1:42:15:37:97:db:a6: d8:4a:90:1b:ce:b1:2f:9e:9a:d2:45:22:d1:6a:ca: 83:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:DB:7A:8E:4A:FA:5A:76:94:37:8C:F4:B2:31:77:65:A2:D2:36:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/02a72700-abb9-3c55-b4f4-e68d71a71217.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.53.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:59:a3:36:30:83:d2:9d:2d:02:5d:c5:a5:61:a1:7c:bf:60: 1a:f3:ef:5f:1a:45:42:84:61:6e:6f:d4:94:6f:80:6c:83:b3: 19:52:f3:30:c9:94:ac:3d:e4:78:c0:24:2e:3e:fb:26:23:44: cc:5c:4d:57:0f:64:3e:54:9e:6a:b9:51:b0:e9:73:9c:9a:4f: 54:45:8c:85:8b:b2:31:4c:f9:25:61:85:05:07:ab:51:d8:c1: 6e:2b:bf:b6:c6:aa:70:43:be:eb:4c:04:e2:72:5c:07:31:0d: 80:d6:45:8d:a0:b8:9b:c9:3c:12:53:d3:b5:48:45:d0:cb:41: e7:0f:49:f5:6e:ca:97:f3:bb:b4:22:96:4b:18:09:f7:3d:d5: c4:06:5f:32:2c:53:71:ea:34:ec:58:24:a7:5c:83:8b:af:a5: 1c:f2:9c:2a:be:a5:f9:b0:f4:33:18:e7:f0:c2:53:c2:03:8b: fb:4c:5e:ef:f9:2b:5b:2e:03:42:a0:db:26:d0:9c:b9:fa:73: 0d:59:79:e7:04:7a:d0:d3:64:f5:18:ba:6d:33:4a:c3:1e:6a: 9c:7c:b6:c1:64:a7:ef:2e:1b:7a:2c:ef:7a:11:67:f3:d8:db: 6d:b4:17:c6:93:62:0a:36:fc:d2:2f:8e:be:83:c5:b4:52:0d: ea:2f:05:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVhKE/qFoISqzpAo+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI0MDMzMDEzMDAzOFoXDTI0MDYyODEzMDAzOFowLzEtMCsGA1UEAxMk Yzg0ZTYzNmQtZDhhOS00ZTMyLWEzNTMtZDliYTcyZDRmMWNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjV0L0G9eVaNaGvefk2fLYNN1ykSKjC/KBq3X RIgpHEatEnWlkTDDleEogQi9N4Op30LkGBfjlvmilvXrQbmQmuhU+AlaKqgMBBsQ 4TNxi3OiL8FhzH9K8jdXgtiVwA8naB9ddbToZbymQAa7DXQFeAyDHhQUOHukd9OK sM6iCZfA64dz2CMKqNSZKeNj94hEVMCDwDlMyAG7ywsfruyamWvhCsUMsuw29yPG pf9nVjfKoZVYwUEguFzFn9+IjjVG3D3EY7dxGN9TLGOAIDoOHSvQLs5o3EpxA+d3 xR3r6iQQBRsrqnzz2bFCFTeX26bYSpAbzrEvnprSRSLRasqDhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ3beo5K+lp2lDeM9LIxd2Wi0jbEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMDJhNzI3MDAtYWJiOS0z YzU1LWI0ZjQtZTY4ZDcxYTcxMjE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF41MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACxZozYwg9KdLQJdxaVhoXy/YBrz718aRUKEYW5v1JRvgGyDsxlS8zDJ lKw95HjAJC4++yYjRMxcTVcPZD5Unmq5UbDpc5yaT1RFjIWLsjFM+SVhhQUHq1HY wW4rv7bGqnBDvutMBOJyXAcxDYDWRY2guJvJPBJT07VIRdDLQecPSfVuypfzu7Qi lksYCfc91cQGXzIsU3HqNOxYJKdcg4uvpRzynCq+pfmw9DMY5/DCU8IDi/tMXu/5 K1suA0Kg2ybQnLn6cw1ZeecEetDTZPUYum0zSsMeapx8tsFkp+8uG3os73oRZ/PY 2220F8aTYgo2/NIvjr6DxbRSDeovBTE= -----END CERTIFICATE-----Generated at Sat Apr 27 15:30:32 2024 by rpki-client on console-ams.rpki-client.org