$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/2dd78db9-6d0c-3114-a64a-769cedc85549.roa File: 2dd78db9-6d0c-3114-a64a-769cedc85549.roa (raw, json) Hash identifier: ZHqUXV69RKYheWiJKmBenVU04jO+cBDXE3jn9pu2Mko= Subject key identifier: B7:7E:74:93:47:13:BA:2E:B5:6F:79:72:11:FD:84:3E:B8:AD:90:95 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F432858457A488D9966F0EC16B3A9DCC0 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/2dd78db9-6d0c-3114-a64a-769cedc85549.roa Signing time: Mon 08 Apr 2024 13:00:34 +0000 ROA not before: Mon 08 Apr 2024 13:00:34 +0000 ROA not after: Sun 07 Jul 2024 13:00:34 +0000 asID: 9009 IP address blocks: 172.111.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 28 Apr 2024 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:7a:48:8d:99:66:f0:ec:16:b3:a9:dc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Apr 8 13:00:34 2024 GMT Not After : Jul 7 13:00:34 2024 GMT Subject: CN=848b3222-d907-4db1-87a4-19f78801bfe9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:1b:d9:32:08:ce:a6:02:1d:fe:f7:7f:e7:4d: d4:1e:98:48:76:c6:75:7c:80:a4:d2:14:e2:88:75: b0:19:4f:58:ed:9b:fd:69:6c:26:ec:8e:a3:1a:fc: 98:42:22:af:04:d0:30:ea:6e:55:d2:5b:14:8e:b5: d2:ef:bc:f9:3d:61:d7:51:61:42:de:6b:50:3a:21: 61:d4:76:95:df:83:c3:37:15:1f:42:a0:35:42:26: 1c:51:89:fa:89:28:7f:71:25:49:87:5c:f4:9c:45: e6:d9:b0:ae:17:ef:5c:6e:7c:6c:7f:57:92:c2:61: 17:9f:92:fa:4d:1e:8e:5d:81:60:95:e8:7d:b6:32: dd:3d:97:8e:89:95:34:c7:96:ce:de:a3:53:77:ff: 60:7b:40:a1:23:b5:e7:2b:b6:c7:f4:24:73:1d:aa: 04:0a:5c:4c:7a:59:de:60:77:a6:aa:c6:86:22:a8: 18:62:bc:f0:45:35:2d:b1:16:a7:fd:b0:4c:5d:b4: e8:ff:f0:cf:0a:80:52:15:c1:85:72:4b:2b:b5:ef: f5:f1:15:30:a2:46:32:96:03:31:f7:c8:eb:de:20: 36:99:f3:82:42:f8:07:b4:87:a4:a8:76:49:c9:43: 05:73:c3:93:37:96:e4:36:3d:2c:44:b6:01:26:42: 00:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:7E:74:93:47:13:BA:2E:B5:6F:79:72:11:FD:84:3E:B8:AD:90:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/2dd78db9-6d0c-3114-a64a-769cedc85549.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.163.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:cf:9f:72:d8:5f:73:38:cf:05:70:51:d4:71:4a:91:14:00: 23:13:96:ce:6d:c5:ef:af:56:e1:99:08:39:47:2b:2d:7a:0a: e0:7a:b9:fe:1e:ff:19:c7:84:48:4d:ba:28:5e:05:cf:11:ad: b1:7e:b5:a9:22:cc:3c:be:0c:57:96:bb:94:7d:f5:b1:fb:6f: 08:c1:44:51:68:eb:65:cd:b1:a4:7a:38:8e:22:46:91:d8:59: b0:ab:84:83:f5:e2:f5:f9:89:af:30:97:de:41:bb:d0:31:c5: 63:7b:79:d6:27:1e:9b:25:31:16:ad:e4:b5:6b:3d:13:5b:ad: 23:8f:db:cc:b6:dd:b3:a4:bd:6d:a0:b9:a0:84:39:a1:ca:43: 19:85:50:99:82:79:41:09:15:56:14:c2:24:6f:cb:1c:59:a4: 76:0e:da:93:9c:dd:d6:35:3c:e4:ae:2b:ad:66:0e:25:ea:9c: 28:6d:79:df:62:82:7f:8a:9a:ce:3c:70:31:4d:90:8c:8f:b1: de:a7:cd:79:99:0e:d7:46:3e:a2:38:89:d1:80:5f:38:99:64: 49:3f:15:68:3e:4e:97:d8:19:8d:28:7f:72:cc:06:5f:9c:52: a8:cd:a5:3b:54:26:88:c9:90:57:38:50:be:28:78:82:48:11: de:41:d7:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEV6SI2ZZvDsFrOp3MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI0MDQwODEzMDAzNFoXDTI0MDcwNzEzMDAzNFowLzEtMCsGA1UEAxMk ODQ4YjMyMjItZDkwNy00ZGIxLTg3YTQtMTlmNzg4MDFiZmU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRvZMgjOpgId/vd/503UHphIdsZ1fICk0hTi iHWwGU9Y7Zv9aWwm7I6jGvyYQiKvBNAw6m5V0lsUjrXS77z5PWHXUWFC3mtQOiFh 1HaV34PDNxUfQqA1QiYcUYn6iSh/cSVJh1z0nEXm2bCuF+9cbnxsf1eSwmEXn5L6 TR6OXYFgleh9tjLdPZeOiZU0x5bO3qNTd/9ge0ChI7XnK7bH9CRzHaoEClxMelne YHemqsaGIqgYYrzwRTUtsRan/bBMXbTo//DPCoBSFcGFcksrte/18RUwokYylgMx 98jr3iA2mfOCQvgHtIekqHZJyUMFc8OTN5bkNj0sRLYBJkIA1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLd+dJNHE7outW95chH9hD64rZCVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMmRkNzhkYjktNmQwYy0z MTE0LWE2NGEtNzY5Y2VkYzg1NTQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+jMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGnPn3LYX3M4zwVwUdRxSpEUACMTls5txe+vVuGZCDlHKy16CuB6uf4e /xnHhEhNuiheBc8RrbF+takizDy+DFeWu5R99bH7bwjBRFFo62XNsaR6OI4iRpHY WbCrhIP14vX5ia8wl95Bu9AxxWN7edYnHpslMRat5LVrPRNbrSOP28y23bOkvW2g uaCEOaHKQxmFUJmCeUEJFVYUwiRvyxxZpHYO2pOc3dY1POSuK61mDiXqnChted9i gn+Kms48cDFNkIyPsd6nzXmZDtdGPqI4idGAXziZZEk/FWg+TpfYGY0of3LMBl+c UqjNpTtUJojJkFc4UL4oeIJIEd5B1zg= -----END CERTIFICATE-----Generated at Sat Apr 27 15:30:32 2024 by rpki-client on console-ams.rpki-client.org