$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/41c2f58e-b9d8-3806-973c-7e6256c0f28f.roa File: 41c2f58e-b9d8-3806-973c-7e6256c0f28f.roa (raw, json) Hash identifier: l/DN3TDW3OQVd/5nMZXipDl6nOr51XPiSaJY8bK5hGM= Subject key identifier: FD:94:68:34:A4:7A:24:F7:03:50:B1:35:72:0A:5B:77:67:4A:03:24 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584582A88B0F0B4070E3827C6500 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/41c2f58e-b9d8-3806-973c-7e6256c0f28f.roa Signing time: Thu 11 Apr 2024 13:00:36 +0000 ROA not before: Thu 11 Apr 2024 13:00:36 +0000 ROA not after: Wed 10 Jul 2024 13:00:36 +0000 asID: 3223 IP address blocks: 192.253.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 May 2024 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:82:a8:8b:0f:0b:40:70:e3:82:7c:65:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Apr 11 13:00:36 2024 GMT Not After : Jul 10 13:00:36 2024 GMT Subject: CN=a6f455ca-ecc9-496d-b536-bccb3d7c4588 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:87:cd:08:88:b5:22:45:b3:f4:df:d7:75:c2: 25:26:73:9d:fa:45:ea:e2:ae:c5:50:66:2b:ba:a3: e1:07:e8:e6:e5:b9:4c:e3:af:68:af:5e:da:22:40: b5:da:79:4c:0b:1f:84:21:d8:bc:ec:5f:16:cc:ec: 02:70:8c:c5:19:fe:d9:14:20:7d:3c:a1:59:5a:8b: 51:64:f3:d3:b3:10:5f:41:e6:54:02:52:dc:4a:68: 6f:c7:4b:dd:28:d7:8b:92:90:87:65:2e:f7:a1:7b: fd:46:c5:fb:57:0e:02:3a:b4:16:ba:8a:82:d6:b0: fa:3d:59:86:5d:79:8e:7c:42:49:02:e0:f3:79:ed: d2:5e:9a:b9:d6:b0:a4:bc:2b:f6:a0:8e:47:0f:9a: fd:bf:3d:8f:64:ac:2e:f0:c6:a1:a2:95:55:8a:7e: cf:24:fd:21:fd:78:85:c5:f5:a8:2d:20:ef:8b:2b: ed:54:d6:10:84:d4:1c:23:f5:33:a2:fa:9b:d7:cd: 7d:f5:bf:60:27:d4:c1:94:c3:04:57:5d:62:11:cd: cf:33:27:03:45:a1:ad:59:99:dc:6b:55:25:16:7a: 11:61:85:c3:ef:c9:4b:78:37:4e:59:1e:e7:98:2e: 48:55:d9:f1:9f:67:d0:c1:64:0a:94:9a:78:c9:08: 5a:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:94:68:34:A4:7A:24:F7:03:50:B1:35:72:0A:5B:77:67:4A:03:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/41c2f58e-b9d8-3806-973c-7e6256c0f28f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 192.253.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:bd:44:9d:3f:23:2d:d2:a0:f3:90:18:16:e7:b0:d8:b5:1e: db:cb:f3:65:a2:49:ab:eb:f4:44:64:e2:e7:57:3b:9f:e9:ac: 6a:8a:a0:7f:60:83:75:ee:ce:64:d1:52:d2:5c:12:ea:9a:de: 14:09:06:05:32:b3:ee:7a:3a:ab:f9:c6:c8:41:a8:87:e7:71: 31:b7:73:68:22:e1:17:35:40:7f:46:b6:1c:65:90:fc:eb:a9: 32:02:10:b6:26:8d:3c:85:fb:7a:94:4e:65:cd:72:30:d6:da: 33:1d:4b:52:65:47:d5:26:a4:35:ae:98:c1:ed:18:32:56:81: a9:f1:0f:d4:5a:5c:07:2f:5e:3e:66:7c:3c:35:d3:a9:1e:26: af:14:94:a9:13:ba:09:50:11:e6:3c:55:3e:10:73:2e:d0:8b: da:69:e8:48:2a:ea:80:fc:0f:f8:73:d9:c2:19:88:13:10:1b: 20:48:ff:07:e2:07:a1:86:21:a4:d8:e5:2e:0a:3d:8c:57:41: 17:87:f0:73:d6:13:c7:e4:33:a0:ab:49:ad:36:e7:eb:2a:6b: ee:59:b4:6c:51:64:01:7a:a4:32:d6:31:a7:5d:a7:ee:1d:64: ed:19:e7:ab:96:e7:49:bd:c5:74:e6:27:67:53:c8:1c:cd:ff: 3c:6c:f6:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWCqIsPC0Bw44J8ZQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI0MDQxMTEzMDAzNloXDTI0MDcxMDEzMDAzNlowLzEtMCsGA1UEAxMk YTZmNDU1Y2EtZWNjOS00OTZkLWI1MzYtYmNjYjNkN2M0NTg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYfNCIi1IkWz9N/XdcIlJnOd+kXq4q7FUGYr uqPhB+jm5blM469or17aIkC12nlMCx+EIdi87F8WzOwCcIzFGf7ZFCB9PKFZWotR ZPPTsxBfQeZUAlLcSmhvx0vdKNeLkpCHZS73oXv9RsX7Vw4COrQWuoqC1rD6PVmG XXmOfEJJAuDzee3SXpq51rCkvCv2oI5HD5r9vz2PZKwu8MahopVVin7PJP0h/XiF xfWoLSDviyvtVNYQhNQcI/Uzovqb18199b9gJ9TBlMMEV11iEc3PMycDRaGtWZnc a1UlFnoRYYXD78lLeDdOWR7nmC5IVdnxn2fQwWQKlJp4yQhatQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP2UaDSkeiT3A1CxNXIKW3dnSgMkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNDFjMmY1OGUtYjlkOC0z ODA2LTk3M2MtN2U2MjU2YzBmMjhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwP31MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG29RJ0/Iy3SoPOQGBbnsNi1HtvL82WiSavr9ERk4udXO5/prGqKoH9g g3XuzmTRUtJcEuqa3hQJBgUys+56Oqv5xshBqIfncTG3c2gi4Rc1QH9GthxlkPzr qTICELYmjTyF+3qUTmXNcjDW2jMdS1JlR9UmpDWumMHtGDJWganxD9RaXAcvXj5m fDw106keJq8UlKkTuglQEeY8VT4Qcy7Qi9pp6Egq6oD8D/hz2cIZiBMQGyBI/wfi B6GGIaTY5S4KPYxXQReH8HPWE8fkM6CrSa025+sqa+5ZtGxRZAF6pDLWMaddp+4d ZO0Z56uW50m9xXTmJ2dTyBzN/zxs9jM= -----END CERTIFICATE-----Generated at Sat May 18 16:09:41 2024 by rpki-client on console-ams.rpki-client.org