$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c78cab3d-a4bf-328c-a403-e12e770136de.roa File: c78cab3d-a4bf-328c-a403-e12e770136de.roa (raw, json) Hash identifier: DtXHmIwkDl7GQ1WR5h3eAP/1LC4gh38XV50z6Us9/MI= Subject key identifier: A5:8B:99:E0:5D:F7:DC:21:C8:1C:4A:C0:6C:5E:56:2F:41:B3:BC:3E Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F432858456822E9DFECBFA83B7CCFD480 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c78cab3d-a4bf-328c-a403-e12e770136de.roa Signing time: Tue 02 Apr 2024 01:00:26 +0000 ROA not before: Tue 02 Apr 2024 01:00:26 +0000 ROA not after: Mon 01 Jul 2024 01:00:26 +0000 asID: 9009 IP address blocks: 172.111.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 29 Apr 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:68:22:e9:df:ec:bf:a8:3b:7c:cf:d4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Apr 2 01:00:26 2024 GMT Not After : Jul 1 01:00:26 2024 GMT Subject: CN=f2206980-83c8-453d-993d-f85fa0b072e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:66:4c:c3:1e:b3:c6:c2:f0:c7:1e:c6:6d:7e: 6d:60:d8:71:55:83:eb:20:2a:bd:88:89:ac:5f:57: a0:01:f2:53:2c:88:a2:04:d0:de:98:1e:f7:1c:9b: 96:6f:92:9e:dd:1d:ed:9e:2f:3f:6e:b0:3f:58:fc: 89:27:92:8e:86:37:da:13:83:ba:2f:a7:b2:c8:39: 15:27:8e:80:27:c6:f6:9b:63:64:18:33:8b:2c:f9: 3b:61:a3:fc:a9:74:a6:c2:b1:82:8d:ba:36:75:39: 31:12:71:c6:90:da:36:9c:50:77:06:44:58:d3:db: 44:19:ba:2c:32:1d:f7:fa:3b:3a:19:c3:b4:3d:10: a7:93:01:29:e5:1c:32:ba:98:08:d6:6c:d5:75:68: 89:10:3e:18:4f:fb:41:c2:50:23:c4:2e:a4:c2:32: ee:ef:91:69:fa:13:48:01:69:60:57:7c:30:ec:98: 42:c6:3c:f6:e9:7e:02:52:85:50:6a:42:07:eb:21: 9e:40:9e:36:ee:60:57:6c:19:69:2e:65:53:81:a2: 46:21:ed:75:10:a2:f9:17:31:66:21:c7:5b:31:5c: 14:87:c1:f7:7e:d0:f4:1b:7f:be:82:db:66:a1:19: b4:86:49:d3:05:c1:74:f2:20:c6:0b:a0:df:96:03: 1b:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:8B:99:E0:5D:F7:DC:21:C8:1C:4A:C0:6C:5E:56:2F:41:B3:BC:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c78cab3d-a4bf-328c-a403-e12e770136de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:5b:4e:2a:1d:63:37:d5:5f:a2:59:38:f1:1b:54:a0:e7:54: 76:b1:c1:34:fa:54:de:a2:ed:23:ed:61:7d:f5:68:6b:97:f0: ba:04:54:32:73:b0:b0:87:eb:a4:07:17:e6:3e:f8:c2:e5:68: 4f:e7:52:74:57:10:4c:67:70:d5:e6:33:83:6c:e7:94:7f:64: 78:17:65:8d:d1:f3:9f:2d:f4:0f:e7:e0:19:89:43:2b:8d:13: f7:2b:dc:b4:44:c9:e6:de:43:b7:a9:77:1b:cb:bb:c5:56:ed: d2:0c:64:03:90:06:da:a2:4f:8e:b6:4b:c0:a7:38:ad:aa:ce: 79:a2:71:62:cf:c8:77:28:4e:7a:2b:0a:71:48:be:1d:b6:e0: 85:cf:5f:0e:68:a5:d1:68:50:25:c8:86:d8:15:6c:9a:6c:16: 1c:c8:29:22:e4:ff:1d:9c:bb:a2:9d:e5:24:a9:b6:81:6e:d8: 78:c0:3f:0a:29:d8:b3:3a:d4:74:01:87:da:00:08:44:c4:48: 83:8b:67:cd:1f:f1:58:af:77:bf:b1:bb:af:8e:ac:96:ca:d3: ac:e2:e4:8e:5b:b8:97:cc:cd:de:38:e4:88:4d:15:6b:ac:e5: cc:ec:84:31:82:1b:3c:2d:02:db:d5:e9:60:9b:83:a1:b9:a4: e2:8e:98:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVoIunf7L+oO3zP1IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI0MDQwMjAxMDAyNloXDTI0MDcwMTAxMDAyNlowLzEtMCsGA1UEAxMk ZjIyMDY5ODAtODNjOC00NTNkLTk5M2QtZjg1ZmEwYjA3MmUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmZMwx6zxsLwxx7GbX5tYNhxVYPrICq9iIms X1egAfJTLIiiBNDemB73HJuWb5Ke3R3tni8/brA/WPyJJ5KOhjfaE4O6L6eyyDkV J46AJ8b2m2NkGDOLLPk7YaP8qXSmwrGCjbo2dTkxEnHGkNo2nFB3BkRY09tEGbos Mh33+js6GcO0PRCnkwEp5RwyupgI1mzVdWiJED4YT/tBwlAjxC6kwjLu75Fp+hNI AWlgV3ww7JhCxjz26X4CUoVQakIH6yGeQJ427mBXbBlpLmVTgaJGIe11EKL5FzFm IcdbMVwUh8H3ftD0G3++gttmoRm0hknTBcF08iDGC6DflgMbLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKWLmeBd99whyBxKwGxeVi9Bs7w+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYzc4Y2FiM2QtYTRiZi0z MjhjLWE0MDMtZTEyZTc3MDEzNmRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG5bTiodYzfVX6JZOPEbVKDnVHaxwTT6VN6i7SPtYX31aGuX8LoEVDJz sLCH66QHF+Y++MLlaE/nUnRXEExncNXmM4Ns55R/ZHgXZY3R858t9A/n4BmJQyuN E/cr3LREyebeQ7epdxvLu8VW7dIMZAOQBtqiT462S8CnOK2qznmicWLPyHcoTnor CnFIvh224IXPXw5opdFoUCXIhtgVbJpsFhzIKSLk/x2cu6Kd5SSptoFu2HjAPwop 2LM61HQBh9oACETESIOLZ80f8Vivd7+xu6+OrJbK06zi5I5buJfMzd445IhNFWus 5czshDGCGzwtAtvV6WCbg6G5pOKOmF8= -----END CERTIFICATE-----Generated at Sun Apr 28 03:24:02 2024 by rpki-client on console-ams.rpki-client.org