$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4de94d45-a09b-3c63-b68b-5ad89b9714d4.roa File: 4de94d45-a09b-3c63-b68b-5ad89b9714d4.roa (raw, json) Hash identifier: wJ5pLTEhGvjPmDga3n7p/t2Oo3y9fQuC2flsLCjt5DE= Subject key identifier: F0:55:48:9B:C8:97:E8:54:EA:C2:C0:71:93:D0:05:A6:32:77:B4:E0 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F432858456822EA48876E37AFBED60C80 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4de94d45-a09b-3c63-b68b-5ad89b9714d4.roa Signing time: Tue 02 Apr 2024 01:00:26 +0000 ROA not before: Tue 02 Apr 2024 01:00:26 +0000 ROA not after: Mon 01 Jul 2024 01:00:26 +0000 asID: 9009 IP address blocks: 172.94.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 29 Apr 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:68:22:ea:48:87:6e:37:af:be:d6:0c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Apr 2 01:00:26 2024 GMT Not After : Jul 1 01:00:26 2024 GMT Subject: CN=3c385e42-0406-4427-890c-65bd873ad7e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:95:64:23:a2:7a:25:3e:40:27:5f:cf:fd:1c: 81:d8:08:2d:39:98:ca:d5:90:1a:f5:d3:6e:5c:36: 74:37:d8:81:48:9a:04:98:c4:88:42:8a:8c:05:72: b7:08:34:63:08:a3:da:b9:78:99:86:a6:fa:04:6f: b9:90:f5:b9:d8:7d:77:46:72:e2:57:24:7d:62:1b: 5c:3c:c8:28:91:70:6a:cc:c5:4f:05:cc:3f:58:f7: 5d:81:e0:69:95:f2:33:19:78:2e:91:a5:68:18:c9: 04:6f:17:79:3a:d5:13:29:81:46:71:4a:45:28:2d: a1:16:44:92:4b:71:81:d8:7c:21:3f:50:bc:92:5a: 98:2d:30:74:fa:2a:09:76:3b:49:8c:c8:41:d8:5c: bc:5d:43:dd:33:0e:04:59:73:41:ad:61:41:c5:fb: 6e:0e:b1:45:9c:59:05:c8:b5:e2:e4:24:9e:d9:4d: bb:38:ed:14:7f:e4:cb:2c:1c:f4:75:a1:21:6b:84: f9:b5:f3:a0:9d:95:08:92:18:c5:16:7e:f5:fb:5a: 43:dc:bc:57:83:ea:be:e9:4f:c4:4b:14:ea:80:88: ef:03:52:c9:3e:30:e4:94:62:e2:22:00:d1:01:22: 01:b5:37:9a:82:3b:70:bc:52:ac:7c:ef:02:78:d6: 0e:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:55:48:9B:C8:97:E8:54:EA:C2:C0:71:93:D0:05:A6:32:77:B4:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4de94d45-a09b-3c63-b68b-5ad89b9714d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.74.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:47:a4:bf:af:08:d0:9b:77:46:02:a2:9d:8c:72:11:66:e2: 67:bb:47:bb:6a:eb:a0:9b:7d:7b:10:f4:00:9a:ab:7e:24:8e: c9:79:97:26:13:85:dd:8a:8e:10:28:eb:c7:aa:cb:83:f4:2d: a4:7c:98:0c:a4:b2:d9:7c:77:bf:da:b2:20:b3:61:9e:0c:2d: ed:70:e8:23:18:97:4b:09:4d:14:b6:be:3d:57:5f:7b:0f:e3: 1e:84:1d:ad:46:76:e1:3c:14:00:eb:d7:e1:b7:f7:d7:c1:c6: ef:45:ca:1c:98:ad:8b:8d:3a:e1:4b:47:12:7d:76:85:98:07: 7d:5e:28:90:1e:8f:64:2b:c9:43:1a:46:8c:d6:14:90:04:7c: c7:21:bd:46:3f:d2:d4:6f:bb:cd:3c:15:0a:cb:44:90:51:f4: 36:3a:22:32:a0:ab:0c:58:c3:0f:5b:62:9f:62:d2:c6:a1:b9: 29:f6:c7:53:f2:f6:3f:d4:9e:32:ec:be:b0:f0:8c:6b:cd:5b: e3:ca:f7:3c:fd:70:53:a0:4c:ae:ea:22:fe:c8:a7:8f:b0:5a: 8e:d8:94:85:49:47:39:ae:7f:b9:d6:b4:28:54:08:1f:59:a8: f1:ec:2a:77:b1:26:ba:f3:d3:3a:ff:73:4f:ce:fe:09:7c:48: 89:12:c3:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVoIupIh243r77WDIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI0MDQwMjAxMDAyNloXDTI0MDcwMTAxMDAyNlowLzEtMCsGA1UEAxMk M2MzODVlNDItMDQwNi00NDI3LTg5MGMtNjViZDg3M2FkN2U3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJVkI6J6JT5AJ1/P/RyB2AgtOZjK1ZAa9dNu XDZ0N9iBSJoEmMSIQoqMBXK3CDRjCKPauXiZhqb6BG+5kPW52H13RnLiVyR9Yhtc PMgokXBqzMVPBcw/WPddgeBplfIzGXgukaVoGMkEbxd5OtUTKYFGcUpFKC2hFkSS S3GB2HwhP1C8klqYLTB0+ioJdjtJjMhB2Fy8XUPdMw4EWXNBrWFBxftuDrFFnFkF yLXi5CSe2U27OO0Uf+TLLBz0daEha4T5tfOgnZUIkhjFFn71+1pD3LxXg+q+6U/E SxTqgIjvA1LJPjDklGLiIgDRASIBtTeagjtwvFKsfO8CeNYO8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPBVSJvIl+hU6sLAcZPQBaYyd7TgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNGRlOTRkNDUtYTA5Yi0z YzYzLWI2OGItNWFkODliOTcxNGQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF5KMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADpHpL+vCNCbd0YCop2MchFm4me7R7tq66CbfXsQ9ACaq34kjsl5lyYT hd2KjhAo68eqy4P0LaR8mAykstl8d7/asiCzYZ4MLe1w6CMYl0sJTRS2vj1XX3sP 4x6EHa1GduE8FADr1+G399fBxu9FyhyYrYuNOuFLRxJ9doWYB31eKJAej2QryUMa RozWFJAEfMchvUY/0tRvu808FQrLRJBR9DY6IjKgqwxYww9bYp9i0sahuSn2x1Py 9j/UnjLsvrDwjGvNW+PK9zz9cFOgTK7qIv7Ip4+wWo7YlIVJRzmuf7nWtChUCB9Z qPHsKnexJrrz0zr/c0/O/gl8SIkSw+M= -----END CERTIFICATE-----Generated at Sun Apr 28 14:31:50 2024 by rpki-client on console-ams.rpki-client.org