$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/3ea7b71c-86f8-3fe0-9a7f-1671a3e56d5d.roa File: 3ea7b71c-86f8-3fe0-9a7f-1671a3e56d5d.roa (raw, json) Hash identifier: kWIwwywrmwI294Sk7nyhca9f/zAQCeQdoUH7PnH+FMw= Subject key identifier: B3:78:EB:05:51:05:4F:64:0D:80:E0:66:D0:C5:4A:7A:E2:D4:D3:2D Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285844FCC561777A6748ABADF188C0 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/3ea7b71c-86f8-3fe0-9a7f-1671a3e56d5d.roa Signing time: Fri 23 Feb 2024 14:00:31 +0000 ROA not before: Fri 23 Feb 2024 14:00:31 +0000 ROA not after: Thu 23 May 2024 13:00:31 +0000 asID: 9009 IP address blocks: 172.111.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 29 Apr 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:fc:c5:61:77:7a:67:48:ab:ad:f1:88:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Feb 23 14:00:31 2024 GMT Not After : May 23 13:00:31 2024 GMT Subject: CN=615a091a-6f7f-4331-a1ab-199a377210d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:46:6d:13:ef:16:e6:86:24:f0:84:bb:e4:71: a0:b0:1a:82:c7:8e:82:bd:3d:e8:ec:ce:80:4d:d8: bc:c7:52:3b:13:04:d1:b2:24:1e:75:4c:ad:f9:90: 64:35:7a:5c:fb:94:da:5a:79:31:40:c8:d1:0d:c9: d3:3b:e4:a5:9f:7a:41:88:40:2c:f4:3c:f7:8c:64: b8:3f:0c:d9:26:6a:c6:e2:28:6c:c5:86:83:64:4d: 2b:eb:aa:63:c9:35:1f:9c:e5:22:07:54:1e:3a:97: ef:05:d1:99:18:13:bc:9d:ac:f0:35:44:fe:97:88: 10:ab:62:be:0e:b4:64:36:ac:0d:4a:28:76:dd:61: 54:d1:04:c5:5d:60:e0:45:da:f4:01:75:23:a6:10: b2:70:99:3b:8a:c4:67:ef:e9:ff:60:cb:03:39:85: 1a:8a:e6:17:7c:10:df:04:e9:9c:13:7f:80:6b:43: 4d:c7:d1:9a:59:71:a2:7b:1e:8f:1d:8b:90:4d:9c: 29:0b:bc:65:c3:35:40:65:fd:44:9b:c1:f5:c2:bb: 2f:a6:dc:28:d9:51:c2:33:16:1e:a8:1e:69:f6:05: 9a:b0:58:68:59:bf:96:c9:4c:86:b6:b4:31:14:b0: f4:4b:e4:2c:97:e3:ec:c0:7b:6d:01:90:fe:f9:a3: 91:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:78:EB:05:51:05:4F:64:0D:80:E0:66:D0:C5:4A:7A:E2:D4:D3:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/3ea7b71c-86f8-3fe0-9a7f-1671a3e56d5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.218.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:a1:ec:0f:91:eb:b6:25:60:83:99:6e:9a:93:6c:c8:32:a7: 5a:77:c9:24:07:29:b4:51:73:b9:1d:7d:6e:41:63:a5:35:bd: 84:d0:20:44:b9:7b:d8:ec:ee:e9:3c:f0:e8:08:50:61:22:49: be:69:df:cb:dc:04:18:9c:e4:0a:3b:91:e5:ca:c6:61:93:15: f9:79:40:7f:07:df:8f:13:ae:73:9b:a6:06:3a:16:e9:52:e3: 5d:fe:96:df:62:22:d5:49:c9:65:39:06:11:9d:25:9e:19:69: b4:aa:a8:ac:58:d5:a9:60:95:b2:d0:92:85:44:27:9d:ee:34: 59:65:1e:fb:99:8c:6e:5c:e2:f3:ca:91:d6:f9:e5:92:85:90: 4f:c4:77:4d:62:71:b8:85:b7:0d:f2:08:36:1b:61:3a:f7:b7: 03:a4:d1:34:cb:67:0b:99:b2:7c:2a:8a:be:4a:f3:b4:c9:a8: da:b7:e0:0a:e1:20:d1:e0:ae:27:35:ca:33:f5:50:e7:2b:f5: e3:c6:9e:7e:64:ad:cc:b1:fc:d0:38:59:68:15:49:37:da:8d: 2e:3a:a2:04:7c:27:31:9f:3b:63:92:d4:de:c2:44:b0:fa:c6: a8:2e:3c:4d:40:3e:a0:5d:ad:2f:29:64:bb:45:5c:13:3a:eb: c7:fc:76:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWET8xWF3emdIq63xiMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI0MDIyMzE0MDAzMVoXDTI0MDUyMzEzMDAzMVowLzEtMCsGA1UEAxMk NjE1YTA5MWEtNmY3Zi00MzMxLWExYWItMTk5YTM3NzIxMGQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEZtE+8W5oYk8IS75HGgsBqCx46CvT3o7M6A Tdi8x1I7EwTRsiQedUyt+ZBkNXpc+5TaWnkxQMjRDcnTO+Sln3pBiEAs9Dz3jGS4 PwzZJmrG4ihsxYaDZE0r66pjyTUfnOUiB1QeOpfvBdGZGBO8nazwNUT+l4gQq2K+ DrRkNqwNSih23WFU0QTFXWDgRdr0AXUjphCycJk7isRn7+n/YMsDOYUaiuYXfBDf BOmcE3+Aa0NNx9GaWXGiex6PHYuQTZwpC7xlwzVAZf1Em8H1wrsvptwo2VHCMxYe qB5p9gWasFhoWb+WyUyGtrQxFLD0S+Qsl+PswHttAZD++aORmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLN46wVRBU9kDYDgZtDFSnri1NMtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvM2VhN2I3MWMtODZmOC0z ZmUwLTlhN2YtMTY3MWEzZTU2ZDVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/aMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB+h7A+R67YlYIOZbpqTbMgyp1p3ySQHKbRRc7kdfW5BY6U1vYTQIES5 e9js7uk88OgIUGEiSb5p38vcBBic5Ao7keXKxmGTFfl5QH8H348TrnObpgY6FulS 413+lt9iItVJyWU5BhGdJZ4ZabSqqKxY1alglbLQkoVEJ53uNFllHvuZjG5c4vPK kdb55ZKFkE/Ed01icbiFtw3yCDYbYTr3twOk0TTLZwuZsnwqir5K87TJqNq34Arh INHgric1yjP1UOcr9ePGnn5krcyx/NA4WWgVSTfajS46ogR8JzGfO2OS1N7CRLD6 xqguPE1APqBdrS8pZLtFXBM668f8dkQ= -----END CERTIFICATE-----Generated at Sun Apr 28 03:24:01 2024 by rpki-client on console-ams.rpki-client.org