$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/6c385945-dabd-3e5d-a4b5-c6dd31528be7.roa File: 6c385945-dabd-3e5d-a4b5-c6dd31528be7.roa (raw, json) Hash identifier: e3nb4EK92+pKi4QQIB5WbYN1PgILsRwQIbikWFtixBM= Subject key identifier: 72:EF:52:97:56:2E:FA:9D:20:05:D3:72:D5:2B:B1:BA:F1:72:55:E5 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285844E93A93E2ACEA95EDF86B8F40 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/6c385945-dabd-3e5d-a4b5-c6dd31528be7.roa Signing time: Fri 16 Feb 2024 14:00:29 +0000 ROA not before: Fri 16 Feb 2024 14:00:29 +0000 ROA not after: Thu 16 May 2024 13:00:29 +0000 asID: 9009 IP address blocks: 172.111.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 28 Apr 2024 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:e9:3a:93:e2:ac:ea:95:ed:f8:6b:8f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Feb 16 14:00:29 2024 GMT Not After : May 16 13:00:29 2024 GMT Subject: CN=0a89d457-9a7a-4523-9363-08a8a2851924 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d6:17:b3:da:a9:fb:c5:7b:b3:96:64:c2:a4: 54:44:81:fd:7f:42:3d:66:f2:9b:25:2f:33:c5:c5: 75:23:29:e7:ea:c4:41:06:5d:3e:f6:b2:42:03:a8: dc:2b:c1:83:d5:15:01:ab:43:21:6d:87:8e:e3:8a: 60:e8:a4:2d:f7:cc:ea:0f:2b:2f:91:a8:e0:eb:25: ed:b9:96:e0:e8:a2:8e:de:76:7f:76:53:8e:e4:28: 0b:f7:2e:2f:75:51:ce:56:3d:bd:1c:f8:23:96:6a: 5a:c1:33:7a:c4:d1:23:53:ff:94:2f:5e:51:1b:2a: 54:1f:57:a5:09:2d:24:a0:86:17:e2:bb:36:0d:83: bc:a1:e8:c3:e9:87:79:3d:66:d3:f0:bb:e1:03:db: 05:fc:1b:d9:93:ac:d0:08:f3:50:67:cf:bb:d7:86: 7f:fb:76:e3:39:42:02:b5:c9:3d:24:d5:f3:40:9e: ab:e3:f0:72:a6:70:74:28:e3:35:50:bd:6b:59:5a: 27:ac:eb:20:63:73:9b:d2:30:de:43:23:7b:45:98: 68:75:b0:44:f6:57:36:91:07:d4:23:b3:2e:eb:85: 05:08:91:83:e4:5d:ca:08:9a:7a:a6:0a:89:cd:3f: 90:5b:3b:a9:26:29:1e:2d:17:d7:b0:87:5d:99:fa: c1:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:EF:52:97:56:2E:FA:9D:20:05:D3:72:D5:2B:B1:BA:F1:72:55:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/6c385945-dabd-3e5d-a4b5-c6dd31528be7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.169.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:5a:7e:47:7e:65:7c:d7:eb:49:e3:4b:fb:01:f9:ec:d0:50: 3c:95:e0:4b:36:07:49:bf:a4:8f:b9:c3:80:59:7f:ba:4e:83: 91:a1:4f:c0:91:27:02:fe:d0:a4:e6:68:98:7e:6c:ad:14:6a: 13:49:d8:d8:3f:31:53:21:d7:3f:9c:97:d1:78:6d:ab:7a:8d: 9b:6a:91:bc:0a:8d:67:4d:41:75:bd:02:f8:b1:eb:d4:ae:9b: 06:28:75:2f:9d:eb:3d:69:c9:e5:39:e6:17:69:f9:74:47:6c: 59:94:b7:02:33:b6:ae:56:7b:28:b5:25:b2:7b:f7:7d:58:b8: 97:d1:cb:6f:d4:80:19:3e:fb:17:f8:0e:5a:a8:4a:51:8b:36: 7c:8a:06:18:aa:77:0d:36:e1:a9:f4:ae:d8:3c:19:ad:50:dd: cc:5f:2c:a5:79:8c:8a:57:71:13:f8:c2:1f:af:ac:ff:d9:6c: 70:fe:79:26:b3:af:0a:b8:61:67:a9:38:43:27:d8:02:76:53: 44:8e:dc:b5:cb:3a:f1:f2:9c:f5:20:e2:7c:26:51:18:6b:fd: 3e:5a:1f:de:73:93:59:e4:d9:ed:8d:a5:42:5b:b5:0e:a5:89: a0:54:e2:06:31:83:25:de:cd:cc:dc:bc:88:52:1e:49:38:ce: 65:ef:79:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWETpOpPirOqV7fhrj0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI0MDIxNjE0MDAyOVoXDTI0MDUxNjEzMDAyOVowLzEtMCsGA1UEAxMk MGE4OWQ0NTctOWE3YS00NTIzLTkzNjMtMDhhOGEyODUxOTI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAydYXs9qp+8V7s5ZkwqRURIH9f0I9ZvKbJS8z xcV1Iynn6sRBBl0+9rJCA6jcK8GD1RUBq0MhbYeO44pg6KQt98zqDysvkajg6yXt uZbg6KKO3nZ/dlOO5CgL9y4vdVHOVj29HPgjlmpawTN6xNEjU/+UL15RGypUH1el CS0koIYX4rs2DYO8oejD6Yd5PWbT8LvhA9sF/BvZk6zQCPNQZ8+714Z/+3bjOUIC tck9JNXzQJ6r4/BypnB0KOM1UL1rWVonrOsgY3Ob0jDeQyN7RZhodbBE9lc2kQfU I7Mu64UFCJGD5F3KCJp6pgqJzT+QWzupJikeLRfXsIddmfrBQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHLvUpdWLvqdIAXTctUrsbrxclXlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNmMzODU5NDUtZGFiZC0z ZTVkLWE0YjUtYzZkZDMxNTI4YmU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+pMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHRafkd+ZXzX60njS/sB+ezQUDyV4Es2B0m/pI+5w4BZf7pOg5GhT8CR JwL+0KTmaJh+bK0UahNJ2Ng/MVMh1z+cl9F4bat6jZtqkbwKjWdNQXW9Avix69Su mwYodS+d6z1pyeU55hdp+XRHbFmUtwIztq5Weyi1JbJ7931YuJfRy2/UgBk++xf4 DlqoSlGLNnyKBhiqdw024an0rtg8Ga1Q3cxfLKV5jIpXcRP4wh+vrP/ZbHD+eSaz rwq4YWepOEMn2AJ2U0SO3LXLOvHynPUg4nwmURhr/T5aH95zk1nk2e2NpUJbtQ6l iaBU4gYxgyXezczcvIhSHkk4zmXveTg= -----END CERTIFICATE-----Generated at Sat Apr 27 15:30:32 2024 by rpki-client on console-ams.rpki-client.org