$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/18cce3f0-6a9b-362d-8fd9-8c716ddc1a6d.roa File: 18cce3f0-6a9b-362d-8fd9-8c716ddc1a6d.roa (raw, json) Hash identifier: XNy+CV4kyHNxRD0px64bZUuzbDMMvqK2dHR83POtwnk= Subject key identifier: 17:17:61:69:2F:8B:0E:83:AC:00:52:73:9D:4B:F0:B4:99:0F:5F:61 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285845883DE9D83D1BAA92B2A85E00 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/18cce3f0-6a9b-362d-8fd9-8c716ddc1a6d.roa Signing time: Sat 13 Apr 2024 13:00:34 +0000 ROA not before: Sat 13 Apr 2024 13:00:34 +0000 ROA not after: Fri 12 Jul 2024 13:00:34 +0000 asID: 9009 IP address blocks: 172.94.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 29 Apr 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:88:3d:e9:d8:3d:1b:aa:92:b2:a8:5e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Apr 13 13:00:34 2024 GMT Not After : Jul 12 13:00:34 2024 GMT Subject: CN=bc9e3563-1616-4294-a9a6-b5569c37570c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:9f:35:25:2d:bc:bf:b5:42:d7:47:11:34:4c: 7f:59:16:e0:c7:5c:f4:44:ec:9e:9c:5b:cc:9c:fb: 06:c0:3b:3f:27:a1:23:2d:36:5c:39:35:93:5e:67: fb:6d:c5:40:b1:51:c4:45:4c:dc:a3:5c:ef:f2:f5: aa:30:11:37:a4:92:1e:9d:e7:44:f5:48:9c:39:b2: 0b:54:88:30:a5:13:5d:f6:31:ca:e1:e1:90:6c:73: a3:36:ac:cd:fc:df:a1:25:95:5c:62:42:90:10:55: 00:d6:c3:5f:7e:8d:b5:2a:bf:c8:0e:78:49:6c:21: c8:0a:e1:58:9e:74:de:6f:9a:63:e7:18:01:76:72: 99:9e:41:c2:8c:5e:8f:30:6d:71:4b:e5:42:0e:19: d9:f1:dd:89:f7:40:b9:98:38:fa:02:03:77:39:a3: 1e:81:4b:ef:f5:12:a3:17:e6:ff:8f:7e:18:23:8e: d4:64:dd:d6:fa:99:f1:07:a7:ba:ef:27:e3:50:95: ce:c8:8d:eb:2f:df:c4:24:28:0a:a2:e0:85:a3:c7: d9:59:e5:ad:6b:92:55:61:74:d3:76:4b:73:25:f3: dc:27:73:50:ea:73:f1:f0:69:67:75:20:31:fc:ca: fb:2c:dd:d7:2b:d6:23:4b:91:ed:78:47:f1:ed:a6: ef:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:17:61:69:2F:8B:0E:83:AC:00:52:73:9D:4B:F0:B4:99:0F:5F:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/18cce3f0-6a9b-362d-8fd9-8c716ddc1a6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.25.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:58:db:57:e8:62:88:ea:8a:44:19:3e:31:77:b5:1d:d1:4a: eb:ca:c4:d7:09:f4:b4:bc:d4:cb:50:c1:94:d4:8c:23:6d:2b: 67:bb:b4:a9:34:a7:d0:d8:da:a8:ce:a5:ce:b3:37:fb:e0:98: 49:4d:8d:6e:0b:6c:8d:17:58:62:71:73:8c:2f:bc:97:85:59: 4e:83:3f:5f:8b:12:ca:ab:f8:36:8b:0e:47:23:53:4c:b0:91: f4:80:3c:d0:af:ac:1c:f3:d1:98:e8:3b:0f:4d:44:20:f7:cf: bf:27:7c:59:31:f5:25:bf:a6:43:2d:ff:7b:99:ea:dc:d7:18: eb:b6:fa:6a:2b:c6:11:1c:12:7d:25:37:c6:d7:81:77:87:a8: 73:fc:4f:89:bb:0e:71:f1:b0:f8:c3:63:21:93:2d:d1:70:3a: 29:cb:4f:bc:2c:61:a8:75:88:8f:d6:1a:47:2d:44:bb:9e:1b: b9:a5:fd:1a:bd:e8:37:d4:6f:22:61:4b:30:cd:76:e9:e2:b7: 38:79:a7:f2:77:4e:6e:44:e2:71:6e:ae:e3:57:1b:67:c3:85: b6:97:fa:af:e7:50:02:57:3c:3d:f0:cb:af:bc:1f:e4:01:5a: 40:d8:6a:58:9a:e2:bf:b0:bf:05:69:3a:04:24:3a:a5:06:ea: e6:ca:e4:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWIPenYPRuqkrKoXgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI0MDQxMzEzMDAzNFoXDTI0MDcxMjEzMDAzNFowLzEtMCsGA1UEAxMk YmM5ZTM1NjMtMTYxNi00Mjk0LWE5YTYtYjU1NjljMzc1NzBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJ81JS28v7VC10cRNEx/WRbgx1z0ROyenFvM nPsGwDs/J6EjLTZcOTWTXmf7bcVAsVHERUzco1zv8vWqMBE3pJIenedE9UicObIL VIgwpRNd9jHK4eGQbHOjNqzN/N+hJZVcYkKQEFUA1sNffo21Kr/IDnhJbCHICuFY nnTeb5pj5xgBdnKZnkHCjF6PMG1xS+VCDhnZ8d2J90C5mDj6AgN3OaMegUvv9RKj F+b/j34YI47UZN3W+pnxB6e67yfjUJXOyI3rL9/EJCgKouCFo8fZWeWta5JVYXTT dktzJfPcJ3NQ6nPx8GlndSAx/Mr7LN3XK9YjS5HteEfx7abvKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBcXYWkviw6DrABSc51L8LSZD19hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMThjY2UzZjAtNmE5Yi0z NjJkLThmZDktOGM3MTZkZGMxYTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4ZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFtY21foYojqikQZPjF3tR3RSuvKxNcJ9LS81MtQwZTUjCNtK2e7tKk0 p9DY2qjOpc6zN/vgmElNjW4LbI0XWGJxc4wvvJeFWU6DP1+LEsqr+DaLDkcjU0yw kfSAPNCvrBzz0ZjoOw9NRCD3z78nfFkx9SW/pkMt/3uZ6tzXGOu2+morxhEcEn0l N8bXgXeHqHP8T4m7DnHxsPjDYyGTLdFwOinLT7wsYah1iI/WGkctRLueG7ml/Rq9 6DfUbyJhSzDNdunitzh5p/J3Tm5E4nFuruNXG2fDhbaX+q/nUAJXPD3wy6+8H+QB WkDYalia4r+wvwVpOgQkOqUG6ubK5KY= -----END CERTIFICATE-----Generated at Sun Apr 28 03:24:01 2024 by rpki-client on console-ams.rpki-client.org