$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/28baacda-6a68-3c8f-b393-d75be1456004.roa File: 28baacda-6a68-3c8f-b393-d75be1456004.roa (raw, json) Hash identifier: M870/iDMQ61JPLtgK8yxrheR32TiW1Bq+b6vEZYWg/8= Subject key identifier: BA:06:08:CA:2E:D9:08:88:DD:E8:31:E2:36:BF:2A:99:BC:B6:80:AD Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285845B21E2238429D7AD0256BD280 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/28baacda-6a68-3c8f-b393-d75be1456004.roa Signing time: Sun 28 Apr 2024 13:00:34 +0000 ROA not before: Sun 28 Apr 2024 13:00:34 +0000 ROA not after: Sat 27 Jul 2024 13:00:34 +0000 asID: 212238 IP address blocks: 172.111.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 May 2024 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:b2:1e:22:38:42:9d:7a:d0:25:6b:d2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Apr 28 13:00:34 2024 GMT Not After : Jul 27 13:00:34 2024 GMT Subject: CN=a49d7137-f60e-4691-bafd-e046a94adb09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:da:8d:27:91:96:1a:ee:01:30:45:7e:a0:c3: 13:84:a5:aa:a0:6a:c2:99:8a:cc:4d:15:db:74:32: 84:7f:69:f8:7e:9e:6c:c5:e1:64:fa:1f:df:bc:a5: 08:0b:61:58:b9:dd:3d:87:83:0d:4b:5b:a9:e4:63: f6:46:76:2b:31:91:45:08:b9:a6:04:fc:95:b7:f0: f1:e9:26:6a:5a:b2:74:91:68:34:ae:50:f5:64:57: bf:40:33:e2:80:35:f7:56:a1:4e:09:e7:2d:6c:d5: ea:4d:ac:55:11:b6:14:3f:a6:bd:35:b2:12:a1:e9: 5c:d8:1a:8c:79:ac:d9:0d:e9:20:7a:c7:f4:61:da: 37:82:ac:28:7d:26:96:e4:93:e7:20:ed:67:82:e5: 98:3e:4c:89:fd:d1:67:17:25:96:2a:3c:7c:ea:a1: b5:66:8b:5c:08:4d:7b:65:00:91:08:f9:e9:df:ab: 3c:33:59:33:2f:52:eb:45:7e:ff:b9:92:95:6f:72: 87:70:56:52:d5:50:16:40:77:c2:93:26:fe:31:f8: 56:76:77:04:48:92:2e:1e:48:fd:48:d3:5d:54:b8: 1c:f8:48:d7:1b:21:93:ba:79:47:1a:14:bd:e0:da: 68:1c:e8:e3:95:f5:98:b0:26:cf:ec:e0:a9:78:8d: bc:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:06:08:CA:2E:D9:08:88:DD:E8:31:E2:36:BF:2A:99:BC:B6:80:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/28baacda-6a68-3c8f-b393-d75be1456004.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:ea:2d:e7:cf:38:a6:11:ba:02:c9:dc:08:de:83:5c:fd:7a: 7a:58:6c:76:01:30:57:14:9d:4f:45:39:a3:e5:16:93:d8:66: ad:27:f4:e3:4d:bf:d8:e0:bc:16:25:89:d8:92:fb:87:2f:fa: e5:5c:c3:19:96:c7:c1:5f:3c:cc:e3:35:3b:a6:c7:ab:c9:a4: 19:3c:76:5f:e5:50:fc:fb:8c:89:0b:43:98:27:37:6b:5b:78: 27:95:95:9d:78:65:9f:c4:38:73:a2:85:6a:00:55:74:3f:7b: 54:52:69:2c:10:20:e1:52:8b:9e:4b:be:15:62:0f:2b:f0:c1: c7:9f:d9:50:81:40:e6:87:c4:76:99:51:e2:f4:1a:de:fc:3c: 79:58:d7:8c:d0:3f:3e:01:2a:a6:38:c6:42:03:b3:a7:6b:37: b7:d2:37:4d:e7:12:27:c6:c3:8b:20:15:59:fc:6b:05:ee:59: 46:13:70:c6:f8:4f:a7:5e:f7:3d:cc:b8:ed:ab:ec:49:7d:36: cf:e0:16:8c:b0:04:8d:15:d9:d9:c3:78:76:b1:0e:3a:4f:53: e5:98:69:4a:ea:bd:95:32:00:52:e1:c3:7c:3d:44:02:0c:22: 11:46:b0:f9:01:76:b8:d5:3a:97:9b:39:32:d5:5a:b1:18:aa: bc:bd:da:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWyHiI4Qp160CVr0oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI0MDQyODEzMDAzNFoXDTI0MDcyNzEzMDAzNFowLzEtMCsGA1UEAxMk YTQ5ZDcxMzctZjYwZS00NjkxLWJhZmQtZTA0NmE5NGFkYjA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptqNJ5GWGu4BMEV+oMMThKWqoGrCmYrMTRXb dDKEf2n4fp5sxeFk+h/fvKUIC2FYud09h4MNS1up5GP2RnYrMZFFCLmmBPyVt/Dx 6SZqWrJ0kWg0rlD1ZFe/QDPigDX3VqFOCectbNXqTaxVEbYUP6a9NbISoelc2BqM eazZDekgesf0Ydo3gqwofSaW5JPnIO1nguWYPkyJ/dFnFyWWKjx86qG1ZotcCE17 ZQCRCPnp36s8M1kzL1LrRX7/uZKVb3KHcFZS1VAWQHfCkyb+MfhWdncESJIuHkj9 SNNdVLgc+EjXGyGTunlHGhS94NpoHOjjlfWYsCbP7OCpeI28nwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLoGCMou2QiI3egx4ja/Kpm8toCtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMjhiYWFjZGEtNmE2OC0z YzhmLWIzOTMtZDc1YmUxNDU2MDA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEPqLefPOKYRugLJ3Ajeg1z9enpYbHYBMFcUnU9FOaPlFpPYZq0n9ONN v9jgvBYlidiS+4cv+uVcwxmWx8FfPMzjNTumx6vJpBk8dl/lUPz7jIkLQ5gnN2tb eCeVlZ14ZZ/EOHOihWoAVXQ/e1RSaSwQIOFSi55LvhViDyvwwcef2VCBQOaHxHaZ UeL0Gt78PHlY14zQPz4BKqY4xkIDs6drN7fSN03nEifGw4sgFVn8awXuWUYTcMb4 T6de9z3MuO2r7El9Ns/gFoywBI0V2dnDeHaxDjpPU+WYaUrqvZUyAFLhw3w9RAIM IhFGsPkBdrjVOpebOTLVWrEYqry92rE= -----END CERTIFICATE-----Generated at Wed May 8 23:45:22 2024 by rpki-client on console-fra.rpki-client.org