$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9d30d5e9-83a9-3f51-a4ff-138784b5b0a0.roa File: 9d30d5e9-83a9-3f51-a4ff-138784b5b0a0.roa (raw, json) Hash identifier: CvM1iZb0GbLZo+XVTxiFiHYEzMjN6/Dg7n+DaN2VPVw= Subject key identifier: A7:E6:4B:78:60:F4:F3:1A:5E:69:04:68:6D:93:81:F9:AD:D1:8C:D2 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584507F029078037425B80B3CC80 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9d30d5e9-83a9-3f51-a4ff-138784b5b0a0.roa Signing time: Tue 27 Feb 2024 14:00:31 +0000 ROA not before: Tue 27 Feb 2024 14:00:31 +0000 ROA not after: Mon 27 May 2024 13:00:31 +0000 asID: 9009 IP address blocks: 192.253.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 29 Apr 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:07:f0:29:07:80:37:42:5b:80:b3:cc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Feb 27 14:00:31 2024 GMT Not After : May 27 13:00:31 2024 GMT Subject: CN=7ffb6ae9-cc16-4d68-8354-09cd8af59c05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:0d:0c:0d:3a:5f:6f:e9:56:b6:d3:c7:67:86: fe:96:86:42:fc:31:55:63:61:e2:a2:13:11:45:46: e1:8b:36:09:49:6f:d9:f9:51:3b:36:5d:7b:09:65: 32:cd:47:c5:e6:b6:03:5f:0c:e0:23:22:0a:0a:b1: d7:90:8c:cd:f9:21:29:6e:9b:7f:f7:c6:40:aa:46: b1:6e:e1:b2:a5:b5:ed:82:5b:54:92:03:c7:79:95: 8a:b2:9b:f3:23:e0:21:bc:80:88:23:74:43:4f:5b: 72:ae:e2:3e:54:03:a0:3f:e8:2b:dc:56:fe:17:b4: 84:73:ae:88:6d:1d:af:60:fb:08:3d:e7:22:07:c1: cb:90:97:86:cc:24:c8:77:ec:2e:ce:a6:06:5e:7e: 68:fa:45:8b:e7:b3:99:5a:20:67:d0:bf:9e:c9:a7: 75:6b:c5:ac:67:80:95:87:a9:99:62:34:f1:cd:f9: a6:cc:a5:01:89:10:ab:8d:29:f5:e9:fe:15:99:de: 25:9c:77:07:e3:be:1d:8f:24:bf:8a:09:ab:2d:f6: 64:38:17:a3:12:b3:e7:dd:42:c6:59:ab:c3:b4:f4: 5f:a2:d1:0c:8f:e7:03:f6:99:18:39:2a:69:50:9f: b6:61:a4:de:bf:04:0f:8b:c0:4d:e6:4c:7d:6b:a6: dc:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:E6:4B:78:60:F4:F3:1A:5E:69:04:68:6D:93:81:F9:AD:D1:8C:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9d30d5e9-83a9-3f51-a4ff-138784b5b0a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 192.253.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:5f:c1:fc:a9:ca:12:e5:b3:1f:98:9a:c4:5c:35:94:65:af: 05:74:7f:4d:75:01:1e:58:22:57:bf:7d:72:c9:9a:8b:9a:7d: 02:d0:e0:78:a4:f9:c4:83:bd:05:29:3e:f6:34:df:1b:59:da: e6:e5:07:16:4d:24:7e:9a:1f:92:53:76:3b:f1:c8:86:03:16: 49:0f:19:22:10:51:46:14:10:9a:dc:e8:ca:76:eb:27:22:db: 5b:ef:3c:c0:0f:f7:cc:7e:f2:ed:10:4f:71:62:3a:3f:1b:92: 63:44:db:82:fd:85:ba:73:a8:12:a9:44:e4:25:58:0c:47:35: 65:bb:79:ce:98:94:3a:a9:75:50:2c:4a:04:c6:6b:c6:ac:2b: fc:41:66:85:c5:f8:a3:0f:fa:c2:a1:3f:2f:26:48:27:bb:5a: 8f:6b:84:b6:37:a4:6b:3d:70:ae:1c:36:24:c6:94:4e:94:d4: ac:e0:96:e6:8d:04:42:eb:4e:be:4b:0a:76:c2:98:6b:d4:a9: a1:2f:b3:41:94:9d:cf:bb:4b:7a:c0:13:24:16:17:3e:21:3c: 20:79:f1:37:14:2b:43:b6:37:f5:67:84:f5:67:81:95:a9:ab: 1f:a6:cd:7c:7c:22:19:82:42:39:65:1f:f5:49:f9:ea:a1:19: 0c:cb:64:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUH8CkHgDdCW4CzzIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI0MDIyNzE0MDAzMVoXDTI0MDUyNzEzMDAzMVowLzEtMCsGA1UEAxMk N2ZmYjZhZTktY2MxNi00ZDY4LTgzNTQtMDljZDhhZjU5YzA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArA0MDTpfb+lWttPHZ4b+loZC/DFVY2HiohMR RUbhizYJSW/Z+VE7Nl17CWUyzUfF5rYDXwzgIyIKCrHXkIzN+SEpbpt/98ZAqkax buGypbXtgltUkgPHeZWKspvzI+AhvICII3RDT1tyruI+VAOgP+gr3Fb+F7SEc66I bR2vYPsIPeciB8HLkJeGzCTId+wuzqYGXn5o+kWL57OZWiBn0L+eyad1a8WsZ4CV h6mZYjTxzfmmzKUBiRCrjSn16f4Vmd4lnHcH474djyS/igmrLfZkOBejErPn3ULG WavDtPRfotEMj+cD9pkYOSppUJ+2YaTevwQPi8BN5kx9a6bcJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKfmS3hg9PMaXmkEaG2Tgfmt0YzSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvOWQzMGQ1ZTktODNhOS0z ZjUxLWE0ZmYtMTM4Nzg0YjViMGEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwP35MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFxfwfypyhLlsx+YmsRcNZRlrwV0f011AR5YIle/fXLJmouafQLQ4Hik +cSDvQUpPvY03xtZ2ublBxZNJH6aH5JTdjvxyIYDFkkPGSIQUUYUEJrc6Mp26yci 21vvPMAP98x+8u0QT3FiOj8bkmNE24L9hbpzqBKpROQlWAxHNWW7ec6YlDqpdVAs SgTGa8asK/xBZoXF+KMP+sKhPy8mSCe7Wo9rhLY3pGs9cK4cNiTGlE6U1KzgluaN BELrTr5LCnbCmGvUqaEvs0GUnc+7S3rAEyQWFz4hPCB58TcUK0O2N/VnhPVngZWp qx+mzXx8IhmCQjllH/VJ+eqhGQzLZI4= -----END CERTIFICATE-----Generated at Sun Apr 28 03:24:02 2024 by rpki-client on console-ams.rpki-client.org