$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a2fc98b8-1edb-3fa6-a5bc-50b1ad1e3eca.roa File: a2fc98b8-1edb-3fa6-a5bc-50b1ad1e3eca.roa (raw, json) Hash identifier: VQPQlQ23aZnrlevxF7cGcU1lp9AdedhWnZ8Njeu/H1Q= Subject key identifier: 10:66:2F:BF:8B:3B:83:71:9F:34:26:5C:98:E0:7E:0C:46:73:AA:FF Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285844E50A92601527842DD33C3700 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a2fc98b8-1edb-3fa6-a5bc-50b1ad1e3eca.roa Signing time: Thu 15 Feb 2024 02:00:26 +0000 ROA not before: Thu 15 Feb 2024 02:00:26 +0000 ROA not after: Wed 15 May 2024 01:00:26 +0000 asID: 9009 IP address blocks: 172.111.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 28 Apr 2024 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:e5:0a:92:60:15:27:84:2d:d3:3c:37:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Feb 15 02:00:26 2024 GMT Not After : May 15 01:00:26 2024 GMT Subject: CN=4428d730-10e2-4c7f-8471-8f995bd0b7b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f0:97:aa:6f:63:96:3b:5f:94:24:99:1f:22: a0:f7:dc:79:2e:b9:93:e1:be:98:be:be:9b:d1:2e: 94:65:3f:4d:13:45:ec:8f:4f:ca:e2:b5:a9:fe:49: b3:50:a1:06:e1:0d:0f:bc:2f:fa:72:b9:51:d7:a6: 2d:15:6f:19:a8:f4:4a:2a:0f:1a:42:20:48:ea:cb: 9e:4f:e9:13:d7:4b:6a:db:3d:1f:d4:05:53:3e:30: 41:fe:2a:e2:9a:1e:44:9a:57:38:d5:ce:47:fc:06: 82:32:5c:2d:c1:0f:65:5c:31:88:57:49:83:00:18: 8d:61:14:46:91:d6:6f:d8:89:d5:44:ee:d8:3a:75: 50:f1:bf:b3:36:f3:91:fd:2f:17:5a:ce:c8:80:9c: 5d:14:e7:1c:81:5e:1b:39:ef:81:ab:ec:67:94:29: cb:6a:79:91:69:fd:76:8c:92:be:56:f2:fc:b3:d8: 32:d7:ad:ec:dd:68:f1:31:55:74:c6:a8:13:8b:c7: 1d:4d:d8:ae:5f:1b:08:ff:a1:bd:1c:1f:b6:62:56: 67:b8:59:36:93:68:16:a9:5e:80:97:8f:d4:d6:57: 7e:3f:22:92:0b:8b:69:c5:13:21:6f:af:89:25:c3: 0d:9b:cf:68:65:0c:a8:8c:70:af:ef:9c:c7:23:ae: dc:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:66:2F:BF:8B:3B:83:71:9F:34:26:5C:98:E0:7E:0C:46:73:AA:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a2fc98b8-1edb-3fa6-a5bc-50b1ad1e3eca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:7a:b6:2c:4b:a1:60:af:ce:8d:d8:12:0b:f3:68:00:90:82: 91:8e:a6:a6:a0:15:d5:7d:74:cc:ad:bf:93:d8:28:8e:d9:ad: e1:06:3e:e9:c4:5c:fb:04:03:7d:14:7e:74:8a:dc:c9:f6:d9: c8:44:50:b9:df:d0:da:c5:74:d5:47:56:bd:b3:69:70:e4:c1: 26:de:2e:15:2e:28:9e:4b:eb:8f:f4:62:f1:8d:90:24:51:bf: 53:3f:b1:86:fd:e9:e9:23:00:73:17:87:7a:49:f8:5f:ad:76: 4b:54:39:f6:4e:9d:8c:4b:b6:44:92:c6:b9:f8:f8:57:1c:31: e9:43:b2:19:6c:26:f2:07:b4:e6:02:7a:06:b6:78:84:95:02: 14:ea:4f:75:c2:8f:15:13:75:25:13:5c:15:bf:61:d1:6e:0a: 42:1d:aa:e7:a5:cd:9a:ff:89:fb:e9:98:e0:da:04:71:94:9b: 3e:f2:25:2c:32:26:b5:64:84:3b:05:0b:77:3a:9e:33:14:54: 2c:49:e5:00:9f:bc:d8:e6:b3:f4:d4:a2:75:6a:b4:e5:01:ce: ee:b9:c3:25:54:72:55:1b:48:f5:0b:2a:eb:11:73:fa:83:29: 53:fb:25:5c:a7:94:36:89:51:4a:2f:2b:49:be:8c:c9:84:a5: 15:bd:86:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWETlCpJgFSeELdM8NwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI0MDIxNTAyMDAyNloXDTI0MDUxNTAxMDAyNlowLzEtMCsGA1UEAxMk NDQyOGQ3MzAtMTBlMi00YzdmLTg0NzEtOGY5OTViZDBiN2I2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPCXqm9jljtflCSZHyKg99x5LrmT4b6Yvr6b 0S6UZT9NE0Xsj0/K4rWp/kmzUKEG4Q0PvC/6crlR16YtFW8ZqPRKKg8aQiBI6sue T+kT10tq2z0f1AVTPjBB/irimh5Emlc41c5H/AaCMlwtwQ9lXDGIV0mDABiNYRRG kdZv2InVRO7YOnVQ8b+zNvOR/S8XWs7IgJxdFOccgV4bOe+Bq+xnlCnLanmRaf12 jJK+VvL8s9gy163s3WjxMVV0xqgTi8cdTdiuXxsI/6G9HB+2YlZnuFk2k2gWqV6A l4/U1ld+PyKSC4tpxRMhb6+JJcMNm89oZQyojHCv75zHI67cjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBBmL7+LO4NxnzQmXJjgfgxGc6r/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYTJmYzk4YjgtMWVkYi0z ZmE2LWE1YmMtNTBiMWFkMWUzZWNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/TMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB56tixLoWCvzo3YEgvzaACQgpGOpqagFdV9dMytv5PYKI7ZreEGPunE XPsEA30UfnSK3Mn22chEULnf0NrFdNVHVr2zaXDkwSbeLhUuKJ5L64/0YvGNkCRR v1M/sYb96ekjAHMXh3pJ+F+tdktUOfZOnYxLtkSSxrn4+FccMelDshlsJvIHtOYC ega2eISVAhTqT3XCjxUTdSUTXBW/YdFuCkIdquelzZr/ifvpmODaBHGUmz7yJSwy JrVkhDsFC3c6njMUVCxJ5QCfvNjms/TUonVqtOUBzu65wyVUclUbSPULKusRc/qD KVP7JVynlDaJUUovK0m+jMmEpRW9his= -----END CERTIFICATE-----Generated at Sat Apr 27 15:30:33 2024 by rpki-client on console-ams.rpki-client.org