$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/865955ac-d856-324b-9aeb-ff7e8f71dadd.roa File: 865955ac-d856-324b-9aeb-ff7e8f71dadd.roa (raw, json) Hash identifier: Kft457SwE2m4zrNjJ0+cJ3aEKIk8donATq+bl/5t+SQ= Subject key identifier: AF:12:89:77:66:BD:D0:30:B5:D8:2E:9C:3D:CC:B0:44:03:60:92:46 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285845883DEA3460D553424B21B900 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/865955ac-d856-324b-9aeb-ff7e8f71dadd.roa Signing time: Sat 13 Apr 2024 13:00:34 +0000 ROA not before: Sat 13 Apr 2024 13:00:34 +0000 ROA not after: Fri 12 Jul 2024 13:00:34 +0000 asID: 9009 IP address blocks: 172.111.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 28 Apr 2024 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:88:3d:ea:34:60:d5:53:42:4b:21:b9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Apr 13 13:00:34 2024 GMT Not After : Jul 12 13:00:34 2024 GMT Subject: CN=fb54a25a-e754-49b3-9bdb-91dc72bd4bd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:d2:39:5c:58:e6:9b:66:76:40:cb:50:9f:d1: 9d:aa:5f:c7:ed:d3:3e:69:7d:d5:00:e2:64:da:30: 70:9a:68:52:ea:19:b1:02:0a:c0:7d:48:5c:01:96: 29:84:90:d8:41:1d:28:93:11:85:4a:d2:17:2e:68: 05:d0:3f:7f:fa:30:36:bb:37:ae:a9:1b:27:a2:6a: 3c:6a:d4:86:42:1d:26:3a:43:a4:bb:07:3b:0c:d7: 7c:81:5f:6d:2d:38:9e:24:8e:02:04:ac:43:be:1e: 3e:da:40:62:ea:65:dd:75:13:5e:7e:54:63:e4:98: 7b:5a:b6:14:6f:f7:62:5b:80:2c:80:f0:19:91:17: 15:bc:95:61:43:47:c3:80:0f:de:d0:08:ed:f2:28: 59:9b:8f:ee:9c:a9:af:06:01:30:0f:34:ab:52:ac: 4e:35:40:af:2e:77:dd:56:58:7c:e0:ed:44:fa:83: b9:8c:de:43:23:5d:94:e4:81:0f:bd:83:7e:31:0e: fd:ac:10:46:18:ed:25:03:f4:b7:f3:9c:b3:8a:00: d0:e0:80:76:2d:81:ba:b5:56:6d:81:39:44:59:67: 28:78:d6:50:db:15:72:2b:ff:80:19:e3:3a:2a:20: 86:91:22:ed:f6:09:1c:7c:d3:9d:69:32:3c:43:c4: 08:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:12:89:77:66:BD:D0:30:B5:D8:2E:9C:3D:CC:B0:44:03:60:92:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/865955ac-d856-324b-9aeb-ff7e8f71dadd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:ef:6f:48:af:f9:c9:55:92:49:1d:07:27:52:4f:fd:4f:2e: e0:33:0f:09:13:29:bf:9d:78:e0:f1:99:20:b0:89:03:19:7d: aa:30:04:d7:b0:7f:23:0d:c8:ce:c4:0a:8f:e0:8a:cc:b9:78: c4:aa:37:c9:98:4b:14:e2:e5:11:87:53:65:f7:0a:d3:4e:d1: 61:9b:af:d7:d0:08:64:0c:b8:12:8a:28:c8:08:c2:eb:a2:b9: 21:24:4f:02:e2:70:ec:25:36:ee:48:61:8f:33:ba:ce:a5:a7: 35:9e:cf:3c:11:1e:12:7b:48:20:ed:a1:7c:c8:d3:2d:4a:1c: 47:a4:8c:25:fc:9d:0a:31:e1:c9:34:be:3d:02:1f:54:98:82: e9:99:6a:69:62:7f:e1:55:7f:73:8b:a7:46:10:08:ae:f4:54: d3:db:2a:a1:c3:9a:6e:d9:db:d0:ef:23:0d:6c:52:3c:fd:84: 4c:dc:0a:15:2e:74:fe:c9:0f:3f:f9:e9:40:9f:46:2d:d3:1a: 7f:55:59:02:1c:5a:e8:e7:5d:1e:e0:c3:7d:03:a8:d9:18:ec: d6:57:49:d9:13:ba:c5:47:c9:87:56:be:8d:ff:26:5d:78:48: b8:5a:b8:6f:10:ea:a2:64:34:ec:ac:ab:33:87:42:94:0b:96: f4:07:23:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWIPeo0YNVTQkshuQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI0MDQxMzEzMDAzNFoXDTI0MDcxMjEzMDAzNFowLzEtMCsGA1UEAxMk ZmI1NGEyNWEtZTc1NC00OWIzLTliZGItOTFkYzcyYmQ0YmQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiNI5XFjmm2Z2QMtQn9Gdql/H7dM+aX3VAOJk 2jBwmmhS6hmxAgrAfUhcAZYphJDYQR0okxGFStIXLmgF0D9/+jA2uzeuqRsnomo8 atSGQh0mOkOkuwc7DNd8gV9tLTieJI4CBKxDvh4+2kBi6mXddRNeflRj5Jh7WrYU b/diW4AsgPAZkRcVvJVhQ0fDgA/e0Ajt8ihZm4/unKmvBgEwDzSrUqxONUCvLnfd Vlh84O1E+oO5jN5DI12U5IEPvYN+MQ79rBBGGO0lA/S385yzigDQ4IB2LYG6tVZt gTlEWWcoeNZQ2xVyK/+AGeM6KiCGkSLt9gkcfNOdaTI8Q8QIbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK8SiXdmvdAwtdgunD3MsEQDYJJGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvODY1OTU1YWMtZDg1Ni0z MjRiLTlhZWItZmY3ZThmNzFkYWRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+aMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAnvb0iv+clVkkkdBydST/1PLuAzDwkTKb+deODxmSCwiQMZfaowBNew fyMNyM7ECo/gisy5eMSqN8mYSxTi5RGHU2X3CtNO0WGbr9fQCGQMuBKKKMgIwuui uSEkTwLicOwlNu5IYY8zus6lpzWezzwRHhJ7SCDtoXzI0y1KHEekjCX8nQox4ck0 vj0CH1SYgumZamlif+FVf3OLp0YQCK70VNPbKqHDmm7Z29DvIw1sUjz9hEzcChUu dP7JDz/56UCfRi3TGn9VWQIcWujnXR7gw30DqNkY7NZXSdkTusVHyYdWvo3/Jl14 SLhauG8Q6qJkNOysqzOHQpQLlvQHI6g= -----END CERTIFICATE-----Generated at Sat Apr 27 15:30:33 2024 by rpki-client on console-ams.rpki-client.org