$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/14268883-68e4-3f48-b13c-d1f6a9bf14e9.roa File: 14268883-68e4-3f48-b13c-d1f6a9bf14e9.roa (raw, json) Hash identifier: fpKjHH+R8OgRbE/U5xaaXUFKWBjvfDYP6wJ/j2G731Q= Subject key identifier: 9B:57:47:11:0A:47:52:B8:9A:16:FF:E5:B1:40:1F:CC:9C:8E:32:F0 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285845D66903F377AAA6D811ECA800 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/14268883-68e4-3f48-b13c-d1f6a9bf14e9.roa Signing time: Sat 11 May 2024 13:00:34 +0000 ROA not before: Sat 11 May 2024 13:00:34 +0000 ROA not after: Fri 09 Aug 2024 13:00:34 +0000 asID: 7040 IP address blocks: 172.111.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 May 2024 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:d6:69:03:f3:77:aa:a6:d8:11:ec:a8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: May 11 13:00:34 2024 GMT Not After : Aug 9 13:00:34 2024 GMT Subject: CN=38594bdf-7c47-4c9f-afeb-e3677d2074fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:98:48:9c:2d:49:f5:65:d0:93:ea:11:bf:5b: b8:3a:3b:47:e5:39:72:47:7b:9e:bf:1e:2a:88:95: 9b:14:b6:70:f8:5f:82:09:bd:2a:4f:85:01:37:b5: 34:b7:0d:b3:cf:89:e7:5d:b5:c9:71:23:eb:f1:ac: c7:28:2b:1c:47:aa:5d:74:a1:a1:60:23:68:4f:d7: 1e:f8:dd:b1:cc:26:bc:fd:7b:6f:26:76:ae:6b:6b: c0:09:b6:3a:a7:78:96:58:5c:76:a3:35:4b:5a:5d: 21:f2:6b:e6:6d:a5:07:d0:32:37:7d:36:ce:e9:8d: bd:60:3c:a7:94:56:1d:56:45:ff:c3:9f:48:0b:7d: fa:93:e5:b3:6c:4e:10:b4:6a:4c:2b:1d:28:35:86: be:45:c4:42:45:fe:ed:5f:b3:aa:cf:98:37:30:fa: dd:cd:27:27:31:42:07:ff:3d:9c:91:59:24:d1:4f: 83:c1:1e:c7:fd:e9:fe:61:52:dd:9f:ac:ad:68:8c: b5:ff:49:fb:68:47:f5:c9:6d:fb:a2:31:6f:af:84: 25:f4:29:43:d4:bf:92:a4:07:85:9c:7b:2a:b4:a5: a4:1a:79:64:1f:37:bd:50:ed:e2:e5:24:e8:4d:7c: 3a:0f:b4:c0:fc:43:51:f6:02:d4:23:a5:a7:30:57: e3:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:57:47:11:0A:47:52:B8:9A:16:FF:E5:B1:40:1F:CC:9C:8E:32:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/14268883-68e4-3f48-b13c-d1f6a9bf14e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:59:e7:e8:38:9e:b5:00:5e:01:18:88:f9:9c:5f:55:0a:0f: 55:4d:2a:01:87:44:be:ca:3a:63:1a:7c:04:22:f7:ef:c6:ba: a7:88:2c:33:68:98:69:e4:11:d6:55:02:b5:4d:c1:d5:8f:36: da:c5:c7:34:24:46:45:73:23:51:7c:76:40:c8:4f:62:96:df: 89:a0:5f:4d:25:ca:96:98:98:0d:4a:6f:92:e7:f2:b9:0b:a0: c3:53:a4:9f:a1:91:5d:1b:31:55:d4:3d:0c:3e:e4:60:a6:07: a9:70:e8:33:67:20:72:fe:43:ed:7e:9c:a0:a9:08:cf:6b:d2: 04:ab:df:aa:4f:3a:30:b5:78:4d:ce:e5:53:dd:b4:2b:d8:0d: 41:4a:db:46:2f:ae:0b:cf:31:a8:f2:9e:4b:ed:1b:c7:7b:f9: e2:09:32:53:e4:e4:02:0e:20:c1:2e:23:05:68:74:28:b0:c3: eb:21:aa:bc:0c:7e:e3:ff:ad:81:01:04:52:e6:ab:1e:aa:8c: 07:03:62:f2:11:13:a1:78:8c:0b:8f:3b:cd:cd:ff:ad:d7:93: fc:95:3d:1d:d8:0d:8d:6a:c6:27:bc:0b:2b:a0:1a:26:d3:00: 9e:27:7f:0e:90:80:a7:7a:cd:7d:b4:98:70:68:9d:74:02:2d: 46:0b:9a:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXWaQPzd6qm2BHsqAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI0MDUxMTEzMDAzNFoXDTI0MDgwOTEzMDAzNFowLzEtMCsGA1UEAxMk Mzg1OTRiZGYtN2M0Ny00YzlmLWFmZWItZTM2NzdkMjA3NGZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZhInC1J9WXQk+oRv1u4OjtH5TlyR3uevx4q iJWbFLZw+F+CCb0qT4UBN7U0tw2zz4nnXbXJcSPr8azHKCscR6pddKGhYCNoT9ce +N2xzCa8/XtvJnaua2vACbY6p3iWWFx2ozVLWl0h8mvmbaUH0DI3fTbO6Y29YDyn lFYdVkX/w59IC336k+WzbE4QtGpMKx0oNYa+RcRCRf7tX7Oqz5g3MPrdzScnMUIH /z2ckVkk0U+DwR7H/en+YVLdn6ytaIy1/0n7aEf1yW37ojFvr4Ql9ClD1L+SpAeF nHsqtKWkGnlkHze9UO3i5SToTXw6D7TA/ENR9gLUI6WnMFfjhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJtXRxEKR1K4mhb/5bFAH8ycjjLwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMTQyNjg4ODMtNjhlNC0z ZjQ4LWIxM2MtZDFmNmE5YmYxNGU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFdZ5+g4nrUAXgEYiPmcX1UKD1VNKgGHRL7KOmMafAQi9+/GuqeILDNo mGnkEdZVArVNwdWPNtrFxzQkRkVzI1F8dkDIT2KW34mgX00lypaYmA1Kb5Ln8rkL oMNTpJ+hkV0bMVXUPQw+5GCmB6lw6DNnIHL+Q+1+nKCpCM9r0gSr36pPOjC1eE3O 5VPdtCvYDUFK20YvrgvPMajynkvtG8d7+eIJMlPk5AIOIMEuIwVodCiww+shqrwM fuP/rYEBBFLmqx6qjAcDYvIRE6F4jAuPO83N/63Xk/yVPR3YDY1qxie8CyugGibT AJ4nfw6QgKd6zX20mHBonXQCLUYLmlE= -----END CERTIFICATE-----Generated at Sat May 18 15:35:26 2024 by rpki-client on console-fra.rpki-client.org