$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5619dad0-adc5-36da-98cd-88670a8851eb.roa File: 5619dad0-adc5-36da-98cd-88670a8851eb.roa (raw, json) Hash identifier: 8oIIWpb23Vvnm7YMD7mugtqoOGd8EAjFUiMcuKO/fIM= Subject key identifier: BF:36:53:6F:B2:B2:C7:F1:35:CF:E9:A8:80:DC:45:8E:98:EE:D9:27 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584563F31485B7891F9BF8B947B0 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5619dad0-adc5-36da-98cd-88670a8851eb.roa Signing time: Sun 31 Mar 2024 13:00:36 +0000 ROA not before: Sun 31 Mar 2024 13:00:36 +0000 ROA not after: Sat 29 Jun 2024 13:00:36 +0000 asID: 9009 IP address blocks: 172.111.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 29 Apr 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:63:f3:14:85:b7:89:1f:9b:f8:b9:47:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Mar 31 13:00:36 2024 GMT Not After : Jun 29 13:00:36 2024 GMT Subject: CN=dd296cde-1c77-4fec-a13f-81f431dc2feb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:77:cd:30:49:2a:3c:24:34:7e:6d:56:76:57: 0a:9d:59:0c:65:1c:bc:53:af:5a:18:36:62:ad:9a: ab:ad:f9:36:18:59:2c:5b:65:0e:6e:9b:be:a0:6d: c5:84:78:f0:ea:7e:0c:0f:32:88:f4:7e:e1:12:cb: 75:40:3c:e8:4b:15:8b:1c:dc:05:40:6e:ab:46:fb: 5a:1f:17:13:e4:08:54:06:71:0e:97:54:3f:62:cc: e5:9f:a8:66:18:30:44:42:a1:fa:fe:bf:fb:9c:21: fe:0d:3c:89:46:ee:33:9b:49:87:ef:12:45:ae:2a: 03:9b:16:5c:dd:36:4d:33:a0:55:bf:01:0d:b9:8a: 2a:cf:41:16:bc:c6:3f:8c:1d:f4:90:e5:02:b2:01: 2c:a3:70:fb:da:b4:09:44:02:52:d3:b0:fb:6b:9c: 27:c1:15:6c:ef:d1:81:bd:77:c6:c0:fe:da:13:74: 23:44:b3:fc:6e:bc:16:15:24:d1:26:3a:74:34:b7: d7:92:a5:e0:56:6f:78:9a:68:35:db:eb:c5:bb:5f: 6c:18:29:be:9e:48:ee:0c:27:3b:8e:f6:95:d4:29: 48:6b:ab:04:c2:36:a3:e2:dc:75:c5:9a:da:80:5e: c7:93:03:67:09:2b:32:c9:f1:97:d1:23:84:19:72: 5b:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:36:53:6F:B2:B2:C7:F1:35:CF:E9:A8:80:DC:45:8E:98:EE:D9:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5619dad0-adc5-36da-98cd-88670a8851eb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:4e:64:e5:bc:3b:a6:31:d0:28:b2:fa:f2:42:f5:7b:78:fd: 62:ae:0a:5b:f0:0b:e4:ed:8b:f7:bc:7d:8c:e2:14:60:35:f1: e1:0e:13:66:7e:89:86:fb:b5:50:f2:18:79:b3:f7:32:b1:1b: 7b:17:e5:79:d1:29:34:d2:e5:ee:4e:4b:c3:be:23:de:41:58: 87:17:00:2f:e0:0a:a5:09:75:57:dc:0f:7e:c7:36:cd:e0:24: 6e:3a:7e:5e:ff:f1:03:3a:9f:b8:2b:ed:dd:42:20:73:c8:5d: 9e:d5:a6:91:09:33:87:d1:36:7d:46:14:8a:0d:5d:1d:a9:6a: 6a:e9:fb:9b:d3:06:ac:a6:19:20:c9:33:0b:93:2f:e9:06:9d: f3:86:24:eb:49:df:f6:96:18:fe:ef:55:f2:9c:37:b1:db:4f: d0:f6:49:f0:9e:60:66:0d:4a:c7:e7:f7:a3:c4:1e:c5:49:16: 03:35:20:76:84:15:90:19:e3:f5:7f:78:45:98:31:4d:2e:1c: 6f:39:83:7b:f3:11:21:8f:d5:58:59:e8:1f:40:da:e8:01:90: ad:42:22:f0:29:1f:37:07:50:2d:0c:ea:9b:5f:ba:4d:ae:dd: 85:43:0c:a1:48:35:02:4a:f9:49:6a:da:bf:1d:b9:fa:87:c3: c2:3a:4f:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVj8xSFt4kfm/i5R7AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI0MDMzMTEzMDAzNloXDTI0MDYyOTEzMDAzNlowLzEtMCsGA1UEAxMk ZGQyOTZjZGUtMWM3Ny00ZmVjLWExM2YtODFmNDMxZGMyZmViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhHfNMEkqPCQ0fm1WdlcKnVkMZRy8U69aGDZi rZqrrfk2GFksW2UObpu+oG3FhHjw6n4MDzKI9H7hEst1QDzoSxWLHNwFQG6rRvta HxcT5AhUBnEOl1Q/Yszln6hmGDBEQqH6/r/7nCH+DTyJRu4zm0mH7xJFrioDmxZc 3TZNM6BVvwENuYoqz0EWvMY/jB30kOUCsgEso3D72rQJRAJS07D7a5wnwRVs79GB vXfGwP7aE3QjRLP8brwWFSTRJjp0NLfXkqXgVm94mmg12+vFu19sGCm+nkjuDCc7 jvaV1ClIa6sEwjaj4tx1xZragF7HkwNnCSsyyfGX0SOEGXJbjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL82U2+yssfxNc/pqIDcRY6Y7tknMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNTYxOWRhZDAtYWRjNS0z NmRhLTk4Y2QtODg2NzBhODg1MWViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+qMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACZOZOW8O6Yx0Ciy+vJC9Xt4/WKuClvwC+Tti/e8fYziFGA18eEOE2Z+ iYb7tVDyGHmz9zKxG3sX5XnRKTTS5e5OS8O+I95BWIcXAC/gCqUJdVfcD37HNs3g JG46fl7/8QM6n7gr7d1CIHPIXZ7VppEJM4fRNn1GFIoNXR2pamrp+5vTBqymGSDJ MwuTL+kGnfOGJOtJ3/aWGP7vVfKcN7HbT9D2SfCeYGYNSsfn96PEHsVJFgM1IHaE FZAZ4/V/eEWYMU0uHG85g3vzESGP1VhZ6B9A2ugBkK1CIvApHzcHUC0M6ptfuk2u 3YVDDKFINQJK+Ulq2r8dufqHw8I6T1E= -----END CERTIFICATE-----Generated at Sun Apr 28 03:24:01 2024 by rpki-client on console-ams.rpki-client.org