$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/44cbd2de-b38e-3e00-859e-6395e803cfaf.roa File: 44cbd2de-b38e-3e00-859e-6395e803cfaf.roa (raw, json) Hash identifier: pMdtchjuk2jUPWoQSAHxMk7+tXTWePwQwf969xWsh08= Subject key identifier: 96:AE:DC:A6:50:0D:57:0E:AA:47:57:56:39:9B:54:5A:62:31:A6:ED Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F432858457A30720A826DA470AF3F1C80 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/44cbd2de-b38e-3e00-859e-6395e803cfaf.roa Signing time: Mon 08 Apr 2024 12:12:18 +0000 ROA not before: Mon 08 Apr 2024 12:12:18 +0000 ROA not after: Sun 07 Jul 2024 12:12:18 +0000 asID: 212238 IP address blocks: 172.111.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:7a:30:72:0a:82:6d:a4:70:af:3f:1c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Apr 8 12:12:18 2024 GMT Not After : Jul 7 12:12:18 2024 GMT Subject: CN=eeb2bc20-30ab-4f15-b4da-1c049fbb2296 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:23:f6:1c:e6:1a:25:5b:01:92:90:1a:26:91: 0f:02:1c:0c:bd:28:d1:1d:2c:b4:09:03:0c:d1:60: de:85:03:88:ed:76:23:15:f2:ef:6b:6e:03:7f:1b: 48:2b:1d:f3:6c:e7:df:dd:f3:fd:6e:9a:34:90:09: 53:97:ca:84:dc:cc:cb:90:a0:59:d6:f1:a4:0d:86: 8b:03:55:1e:c7:40:fb:a1:be:7a:3b:57:f0:42:19: f0:95:e3:64:68:f6:69:f4:db:ff:a4:a4:7d:2c:1b: c7:b6:84:6a:bd:cf:3f:9a:4d:7a:35:26:4a:ba:81: 14:2d:53:44:01:eb:e6:ff:70:a9:9c:55:50:0c:7d: 0f:f1:63:69:98:73:4f:34:cf:53:a7:f1:83:5d:ef: e0:d9:a1:72:8f:8d:dc:ff:14:ed:7f:ae:48:ab:28: e0:42:2b:c3:3f:bb:b2:73:75:27:2d:03:40:81:ae: 34:cf:9b:b2:fd:8f:c6:59:f5:df:b5:11:b4:6b:4b: 36:cc:03:a0:73:1d:f0:4e:e0:b1:92:04:b5:a6:cc: 20:5b:d7:1a:fc:89:40:50:ae:66:cc:53:f3:40:ba: 36:52:9c:e2:78:6e:d3:8b:e8:f3:4f:e0:3a:7d:65: 29:03:25:1e:b6:ba:a1:83:24:de:bb:b8:4a:6f:28: 9e:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:AE:DC:A6:50:0D:57:0E:AA:47:57:56:39:9B:54:5A:62:31:A6:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/44cbd2de-b38e-3e00-859e-6395e803cfaf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.150.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:a4:11:c4:1c:ee:4e:8e:d7:35:28:4e:82:16:ff:4f:35:d8: b9:05:4b:6d:be:57:ac:c8:7d:e3:7d:ad:c0:89:60:d3:89:95: e2:e1:2c:15:e5:64:b7:15:70:b5:eb:f5:6f:2d:21:9e:1e:d1: b2:0d:cc:8b:95:9f:9c:fa:9f:20:a8:52:99:9a:33:4b:a9:42: 17:93:23:e5:42:22:60:d5:d0:97:7e:a0:66:42:e9:53:82:c9: 7b:b5:68:0d:cf:2b:9b:77:25:9e:8a:c4:57:06:a3:f8:a2:53: 5b:09:ea:35:8d:dc:32:9e:a1:5c:f4:b7:21:28:3a:d3:08:f2: b3:c1:c6:7a:66:79:43:43:75:86:6e:20:2d:da:e9:0f:79:4a: 70:8a:d7:51:62:c9:89:c0:68:17:86:40:92:9c:f8:1b:0e:13: d5:8d:ea:f3:2e:cc:a4:0d:1f:c4:51:e5:bc:fd:0a:b0:a3:04: 1f:b9:0d:bb:27:0e:2d:9e:99:26:58:ad:46:19:7e:97:fe:4b: 12:b0:6e:de:f5:83:22:89:6b:57:9f:4e:70:e2:41:a2:b3:ef: 2f:e4:bf:76:aa:9b:be:87:14:39:a3:df:80:3d:2e:33:34:33: ff:63:33:b1:61:6d:c4:3a:7c:d2:07:19:d6:52:6a:01:4c:2f: e3:eb:79:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEV6MHIKgm2kcK8/HIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI0MDQwODEyMTIxOFoXDTI0MDcwNzEyMTIxOFowLzEtMCsGA1UEAxMk ZWViMmJjMjAtMzBhYi00ZjE1LWI0ZGEtMWMwNDlmYmIyMjk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyP2HOYaJVsBkpAaJpEPAhwMvSjRHSy0CQMM 0WDehQOI7XYjFfLva24DfxtIKx3zbOff3fP9bpo0kAlTl8qE3MzLkKBZ1vGkDYaL A1Uex0D7ob56O1fwQhnwleNkaPZp9Nv/pKR9LBvHtoRqvc8/mk16NSZKuoEULVNE Aevm/3CpnFVQDH0P8WNpmHNPNM9Tp/GDXe/g2aFyj43c/xTtf65IqyjgQivDP7uy c3UnLQNAga40z5uy/Y/GWfXftRG0a0s2zAOgcx3wTuCxkgS1pswgW9ca/IlAUK5m zFPzQLo2UpzieG7Ti+jzT+A6fWUpAyUetrqhgyTeu7hKbyieqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJau3KZQDVcOqkdXVjmbVFpiMabtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNDRjYmQyZGUtYjM4ZS0z ZTAwLTg1OWUtNjM5NWU4MDNjZmFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADqkEcQc7k6O1zUoToIW/0812LkFS22+V6zIfeN9rcCJYNOJleLhLBXl ZLcVcLXr9W8tIZ4e0bINzIuVn5z6nyCoUpmaM0upQheTI+VCImDV0Jd+oGZC6VOC yXu1aA3PK5t3JZ6KxFcGo/iiU1sJ6jWN3DKeoVz0tyEoOtMI8rPBxnpmeUNDdYZu IC3a6Q95SnCK11FiyYnAaBeGQJKc+BsOE9WN6vMuzKQNH8RR5bz9CrCjBB+5Dbsn Di2emSZYrUYZfpf+SxKwbt71gyKJa1efTnDiQaKz7y/kv3aqm76HFDmj34A9LjM0 M/9jM7FhbcQ6fNIHGdZSagFML+PreeY= -----END CERTIFICATE-----Generated at Wed May 8 02:19:29 2024 by rpki-client on console-ams.rpki-client.org