$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5a1ead2b-b5d2-3868-b725-983ce24d9e87.roa File: 5a1ead2b-b5d2-3868-b725-983ce24d9e87.roa (raw, json) Hash identifier: FgMSnjSgFE59d78F5mujpw962gD8gvVp5wj4MS9r6p8= Subject key identifier: 7A:76:11:C2:45:1C:30:02:DB:14:1A:93:F2:16:D8:E5:4A:02:DF:48 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F432858457A487A6743B84E5ACF21BC00 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5a1ead2b-b5d2-3868-b725-983ce24d9e87.roa Signing time: Mon 08 Apr 2024 13:00:34 +0000 ROA not before: Mon 08 Apr 2024 13:00:34 +0000 ROA not after: Sun 07 Jul 2024 13:00:34 +0000 asID: 9009 IP address blocks: 172.111.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 29 Apr 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:7a:48:7a:67:43:b8:4e:5a:cf:21:bc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Apr 8 13:00:34 2024 GMT Not After : Jul 7 13:00:34 2024 GMT Subject: CN=7b493138-919d-456c-9b68-ba3ce70c232d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:63:ff:b6:51:e0:06:1d:35:98:e4:e9:48:0e: fb:c4:04:18:26:87:d5:8f:44:e0:07:ce:77:95:33: 38:ad:8d:d6:f0:dd:02:4b:17:f6:8a:e8:60:fa:d3: ea:23:66:84:a3:64:6a:5a:f0:57:37:a6:ed:70:41: 22:3a:53:8f:35:9f:59:d2:6f:3e:52:70:dc:97:38: a6:ff:e5:1d:c6:aa:8a:38:5f:34:8c:53:0c:08:e7: fa:62:ad:1b:ed:94:2e:6b:05:1c:db:90:47:fb:d2: cd:0a:6b:0b:ea:ad:f5:1a:3b:e0:0d:a1:df:ff:c1: a5:c3:8d:35:2d:e4:54:76:66:42:99:4d:9b:f2:ca: b2:69:a6:a8:b3:07:f1:61:69:4e:d9:24:94:c6:81: b8:03:57:a6:4b:52:b5:37:5f:63:d2:4f:b7:b2:2b: 2a:c2:70:c4:e0:1b:d5:13:d3:0a:57:68:d3:ed:40: 9d:af:7b:c0:69:cc:7f:0c:5a:f5:38:a1:25:a9:4c: cd:4d:42:ed:07:ab:65:03:9f:43:7b:b7:71:0c:40: 7a:48:ae:2d:4d:a9:28:20:85:d7:69:a0:45:f1:97: e2:37:91:83:1e:aa:70:fd:ed:38:61:41:67:f6:3a: 9f:54:62:a0:aa:77:5f:97:c7:b4:20:d9:c4:bd:3d: 24:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:76:11:C2:45:1C:30:02:DB:14:1A:93:F2:16:D8:E5:4A:02:DF:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5a1ead2b-b5d2-3868-b725-983ce24d9e87.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:ed:32:97:eb:fc:9c:4e:16:57:c3:1c:38:10:bc:d0:fa:5a: 3d:e4:20:4a:dd:bf:79:cc:f3:00:6e:44:c8:7f:e0:32:cf:c1: 25:9d:48:0c:99:23:03:07:86:a2:df:75:24:e6:53:bb:53:bc: 44:a8:ab:16:69:6c:53:40:46:c6:ef:20:5e:f1:e1:3b:46:49: 30:46:08:54:ee:e1:1b:5e:3b:42:c5:23:65:47:ad:37:1f:0b: 3e:e2:7d:17:bd:ee:e2:c2:19:c2:cc:58:97:00:58:c0:b6:5f: 8b:18:b1:62:0e:8b:19:41:f1:36:7e:2b:e3:b9:3d:8f:6c:71: 18:ea:98:02:07:a5:dc:25:0b:30:6e:bc:84:b6:40:28:39:98: f2:e5:61:c4:7f:39:30:aa:ed:cc:9c:14:32:ef:33:1b:96:a1: 17:b5:12:b9:03:88:7f:6c:f5:16:7d:76:a3:f7:aa:cd:b2:e3: 75:c0:27:f8:41:d8:2e:b1:45:25:28:88:6f:7f:8b:94:7e:4c: 02:ad:7e:75:bf:2e:d7:7e:3b:ba:10:9d:e7:36:74:f0:a9:0e: 5a:63:94:d4:59:77:34:e0:c7:fb:5a:1e:7e:f7:1c:9c:86:e3: 59:a0:3b:32:34:c8:fa:f7:92:74:8a:6e:99:bf:fc:ff:99:54: 9c:40:d0:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEV6SHpnQ7hOWs8hvAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI0MDQwODEzMDAzNFoXDTI0MDcwNzEzMDAzNFowLzEtMCsGA1UEAxMk N2I0OTMxMzgtOTE5ZC00NTZjLTliNjgtYmEzY2U3MGMyMzJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgWP/tlHgBh01mOTpSA77xAQYJofVj0TgB853 lTM4rY3W8N0CSxf2iuhg+tPqI2aEo2RqWvBXN6btcEEiOlOPNZ9Z0m8+UnDclzim /+UdxqqKOF80jFMMCOf6Yq0b7ZQuawUc25BH+9LNCmsL6q31GjvgDaHf/8Glw401 LeRUdmZCmU2b8sqyaaaoswfxYWlO2SSUxoG4A1emS1K1N19j0k+3sisqwnDE4BvV E9MKV2jT7UCdr3vAacx/DFr1OKElqUzNTULtB6tlA59De7dxDEB6SK4tTakoIIXX aaBF8ZfiN5GDHqpw/e04YUFn9jqfVGKgqndfl8e0INnEvT0khwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHp2EcJFHDAC2xQak/IW2OVKAt9IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNWExZWFkMmItYjVkMi0z ODY4LWI3MjUtOTgzY2UyNGQ5ZTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+PMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGftMpfr/JxOFlfDHDgQvND6Wj3kIErdv3nM8wBuRMh/4DLPwSWdSAyZ IwMHhqLfdSTmU7tTvESoqxZpbFNARsbvIF7x4TtGSTBGCFTu4RteO0LFI2VHrTcf Cz7ifRe97uLCGcLMWJcAWMC2X4sYsWIOixlB8TZ+K+O5PY9scRjqmAIHpdwlCzBu vIS2QCg5mPLlYcR/OTCq7cycFDLvMxuWoRe1ErkDiH9s9RZ9dqP3qs2y43XAJ/hB 2C6xRSUoiG9/i5R+TAKtfnW/Ltd+O7oQnec2dPCpDlpjlNRZdzTgx/taHn73HJyG 41mgOzI0yPr3knSKbpm//P+ZVJxA0BI= -----END CERTIFICATE-----Generated at Sun Apr 28 03:24:01 2024 by rpki-client on console-ams.rpki-client.org