$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a2b1e817-581b-3613-bff0-519b62d2c6f2.roa File: a2b1e817-581b-3613-bff0-519b62d2c6f2.roa (raw, json) Hash identifier: YKIV1l2Is6778pvkijmQ2BJBJF2xZAt4Ij0zfa2IeKU= Subject key identifier: C9:05:D4:FE:9E:9B:44:2E:60:97:14:57:24:7E:80:22:FA:28:82:4B Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285844D17FC7154C08CA8CD6F29380 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a2b1e817-581b-3613-bff0-519b62d2c6f2.roa Signing time: Thu 08 Feb 2024 02:00:26 +0000 ROA not before: Thu 08 Feb 2024 02:00:26 +0000 ROA not after: Wed 08 May 2024 01:00:26 +0000 asID: 9009 IP address blocks: 172.111.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 29 Apr 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:d1:7f:c7:15:4c:08:ca:8c:d6:f2:93:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Feb 8 02:00:26 2024 GMT Not After : May 8 01:00:26 2024 GMT Subject: CN=5f6ec590-788f-4b18-8907-3f60c641c130 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:9a:a9:27:e0:d2:7d:06:44:99:32:fb:44:a3: df:73:02:ff:54:76:b0:3d:39:16:06:a9:0d:68:4f: 56:c7:ad:3d:e3:a7:e3:7b:8c:1e:66:0f:54:cf:1f: 3a:2e:3c:d2:b4:b0:bf:07:96:68:34:a6:24:4c:5c: 09:c0:24:46:92:16:9a:34:a0:1e:0d:7e:0d:80:32: 7a:7e:f6:30:14:fb:4b:c2:86:c4:d9:f2:5e:db:f4: da:cc:ea:27:b6:7f:11:65:6e:41:f6:c4:5c:50:7c: d2:17:27:a7:1a:4c:53:6d:b8:2e:e7:42:f3:b3:0c: 9b:5f:90:94:f7:5c:cd:b0:fb:fc:d5:72:af:ef:5e: cb:d1:47:d1:a2:e2:0d:ee:28:82:5d:8b:67:52:a5: a2:89:f9:79:a5:b4:91:70:82:72:d1:e6:fc:c5:89: f7:10:c1:35:91:22:b4:03:07:3f:96:3d:0c:d9:39: 89:e8:93:b7:73:70:fa:0d:f0:d4:59:29:96:91:a4: 68:c3:00:7d:e5:7c:f4:e2:84:c1:67:78:ee:f7:32: eb:d9:65:a6:72:07:c8:21:d5:5b:c2:5f:6b:75:46: 62:43:16:5f:a8:43:d8:3c:71:cf:70:f2:85:22:7c: e6:83:75:4f:67:89:11:10:3a:56:24:9e:bb:57:4f: 42:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:05:D4:FE:9E:9B:44:2E:60:97:14:57:24:7E:80:22:FA:28:82:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a2b1e817-581b-3613-bff0-519b62d2c6f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:c0:cc:4a:f4:ae:8f:fb:d1:61:85:39:32:d2:7f:be:04:60: 39:e9:50:3a:0d:92:bf:6a:45:49:00:a1:7f:05:53:66:27:3d: d0:b9:b2:b2:8a:16:b5:68:ba:56:5b:81:79:e9:59:63:e0:1f: cd:2f:3d:a3:9e:8d:91:db:aa:4a:75:a8:f3:a9:18:51:c2:dc: e7:56:3c:eb:34:99:9f:31:05:ab:34:d4:4e:63:75:08:9e:7b: f1:5d:29:79:9a:fa:d3:66:1c:4f:2c:b2:e0:a5:f5:3f:ae:fc: ea:a8:a2:01:65:ac:d9:21:ab:d6:a5:cb:a7:68:ad:1c:b3:33: 35:7a:05:8b:4b:55:ef:66:5f:d6:88:93:7b:19:bd:85:4c:6c: 10:ef:c8:42:d1:e3:e8:3b:3a:c1:2d:f8:04:cb:37:81:c9:98: e0:13:32:20:f0:81:4c:85:4f:82:e9:67:d6:26:db:82:73:d7: 5a:72:ab:67:db:df:25:90:d3:80:69:19:5a:1e:88:84:ce:b0: 75:e5:38:ce:91:8f:02:7c:52:a1:27:bc:46:6e:9b:0a:16:80: a6:fa:ef:24:3f:0b:32:36:04:66:ca:b5:db:c5:4c:ce:a4:ca: 87:c6:aa:0a:c9:43:a2:b6:33:75:36:d9:f4:63:7e:02:9a:77: 4a:ff:62:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWETRf8cVTAjKjNbyk4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI0MDIwODAyMDAyNloXDTI0MDUwODAxMDAyNlowLzEtMCsGA1UEAxMk NWY2ZWM1OTAtNzg4Zi00YjE4LTg5MDctM2Y2MGM2NDFjMTMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZqpJ+DSfQZEmTL7RKPfcwL/VHawPTkWBqkN aE9Wx60946fje4weZg9Uzx86LjzStLC/B5ZoNKYkTFwJwCRGkhaaNKAeDX4NgDJ6 fvYwFPtLwobE2fJe2/TazOontn8RZW5B9sRcUHzSFyenGkxTbbgu50LzswybX5CU 91zNsPv81XKv717L0UfRouIN7iiCXYtnUqWiifl5pbSRcIJy0eb8xYn3EME1kSK0 Awc/lj0M2TmJ6JO3c3D6DfDUWSmWkaRowwB95Xz04oTBZ3ju9zLr2WWmcgfIIdVb wl9rdUZiQxZfqEPYPHHPcPKFInzmg3VPZ4kREDpWJJ67V09CEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMkF1P6em0QuYJcUVyR+gCL6KIJLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYTJiMWU4MTctNTgxYi0z NjEzLWJmZjAtNTE5YjYyZDJjNmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/rMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACjAzEr0ro/70WGFOTLSf74EYDnpUDoNkr9qRUkAoX8FU2YnPdC5srKK FrVoulZbgXnpWWPgH80vPaOejZHbqkp1qPOpGFHC3OdWPOs0mZ8xBas01E5jdQie e/FdKXma+tNmHE8ssuCl9T+u/OqoogFlrNkhq9aly6dorRyzMzV6BYtLVe9mX9aI k3sZvYVMbBDvyELR4+g7OsEt+ATLN4HJmOATMiDwgUyFT4LpZ9Ym24Jz11pyq2fb 3yWQ04BpGVoeiITOsHXlOM6RjwJ8UqEnvEZumwoWgKb67yQ/CzI2BGbKtdvFTM6k yofGqgrJQ6K2M3U22fRjfgKad0r/YoY= -----END CERTIFICATE-----Generated at Sun Apr 28 03:24:02 2024 by rpki-client on console-ams.rpki-client.org