$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c9a346b1-e60d-3223-91d4-e14b1326a280.roa File: c9a346b1-e60d-3223-91d4-e14b1326a280.roa (raw, json) Hash identifier: WlxV1JUXknYdIL+SmdmA+r3UVYxf/GP4ZXThCnMpiss= Subject key identifier: B4:FA:6C:06:BB:A8:F0:F3:4B:5A:17:60:C8:ED:8F:8E:5B:F2:35:E3 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285845B21E303FA6FE130A42AC9560 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c9a346b1-e60d-3223-91d4-e14b1326a280.roa Signing time: Sun 28 Apr 2024 13:00:34 +0000 ROA not before: Sun 28 Apr 2024 13:00:34 +0000 ROA not after: Sat 27 Jul 2024 13:00:34 +0000 asID: 212238 IP address blocks: 172.111.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:b2:1e:30:3f:a6:fe:13:0a:42:ac:95:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Apr 28 13:00:34 2024 GMT Not After : Jul 27 13:00:34 2024 GMT Subject: CN=bbbc9e64-bf9a-4205-afe4-128ca5820864 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:af:32:4e:d6:5a:3d:06:39:4e:75:18:be:93: 26:9b:2b:89:53:df:22:16:07:c5:6d:53:27:1d:3a: 21:ff:fb:45:34:ce:95:f0:f3:48:cf:fe:61:ca:7b: ca:13:24:30:44:bf:e1:75:39:e8:d4:76:e9:95:ce: 39:9a:de:50:48:8a:52:5d:74:87:04:06:28:98:b6: 35:68:2c:8b:56:8c:9d:c4:c4:5c:d7:fd:44:cb:1b: a8:6e:a1:bc:f9:ef:02:05:85:87:27:83:50:49:03: 00:47:cd:a6:b0:6f:e0:48:dd:e8:ac:cf:db:35:00: 9b:d7:d5:9d:ea:b1:42:22:fa:96:a8:d4:1f:c7:4c: be:66:39:5d:6e:67:c6:e9:47:a2:88:c4:c6:20:80: 5e:c6:db:9e:0f:b6:ee:5f:09:5b:49:95:51:aa:22: c9:6a:48:52:46:c5:be:08:76:5d:a4:8f:de:37:33: dc:8f:93:e4:93:7d:2f:4d:8d:f3:c2:06:35:00:78: 4c:38:cd:02:cf:d8:73:db:17:c5:ca:4d:0d:9f:ff: e6:2a:9f:a7:a8:b9:93:34:ff:95:04:82:46:e4:f6: 77:9e:f3:97:4b:d4:6e:11:90:02:c0:2f:34:0a:51: ef:b0:27:d7:28:bd:a3:33:5a:6c:17:35:96:48:35: ae:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:FA:6C:06:BB:A8:F0:F3:4B:5A:17:60:C8:ED:8F:8E:5B:F2:35:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c9a346b1-e60d-3223-91d4-e14b1326a280.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:21:38:d1:04:bf:d4:f3:02:bb:b0:f9:be:9b:51:52:3c:bf: 30:9c:03:4a:bf:6f:af:7c:d5:33:3e:67:c0:ba:ad:b6:71:7c: 68:f5:87:cc:c2:0e:a2:98:80:00:c9:b4:71:8b:8f:b3:fa:1b: fd:e1:f6:83:9f:db:c7:4d:09:46:31:f6:89:e6:d4:7e:fa:73: 21:dd:da:f7:15:10:bd:8f:91:27:ae:7d:0e:a7:10:16:5e:c7: f8:bb:1c:93:c4:c3:52:ee:cf:70:da:14:23:e1:0b:d9:df:e1: f7:8b:f3:cf:55:46:81:51:0d:83:c6:05:28:6c:b9:12:f6:48: cc:00:1a:fc:aa:19:66:57:aa:68:51:e5:93:e1:51:00:7a:05: 1b:10:e4:47:f0:e8:6e:1f:5f:28:4f:4a:3a:aa:6b:31:44:20: 26:4b:b3:cd:91:f0:b9:4a:9d:86:be:71:0b:ca:20:9c:25:c6: 0d:ac:7a:80:7f:e6:9d:c1:fa:ad:b7:83:0d:25:9c:bf:ad:f8: 9c:8e:a0:1b:09:21:38:b7:24:93:78:61:bd:cb:e3:aa:4d:4b: 88:80:6b:cd:20:e5:48:78:ed:b3:06:16:b4:71:f9:93:9c:e1: 15:56:c2:e8:c7:92:66:ba:e7:f5:9e:39:c2:45:08:b9:25:10: e1:ee:c5:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWyHjA/pv4TCkKslWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI0MDQyODEzMDAzNFoXDTI0MDcyNzEzMDAzNFowLzEtMCsGA1UEAxMk YmJiYzllNjQtYmY5YS00MjA1LWFmZTQtMTI4Y2E1ODIwODY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6K8yTtZaPQY5TnUYvpMmmyuJU98iFgfFbVMn HToh//tFNM6V8PNIz/5hynvKEyQwRL/hdTno1Hbplc45mt5QSIpSXXSHBAYomLY1 aCyLVoydxMRc1/1EyxuobqG8+e8CBYWHJ4NQSQMAR82msG/gSN3orM/bNQCb19Wd 6rFCIvqWqNQfx0y+ZjldbmfG6UeiiMTGIIBextueD7buXwlbSZVRqiLJakhSRsW+ CHZdpI/eNzPcj5Pkk30vTY3zwgY1AHhMOM0Cz9hz2xfFyk0Nn//mKp+nqLmTNP+V BIJG5PZ3nvOXS9RuEZACwC80ClHvsCfXKL2jM1psFzWWSDWu5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLT6bAa7qPDzS1oXYMjtj45b8jXjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYzlhMzQ2YjEtZTYwZC0z MjIzLTkxZDQtZTE0YjEzMjZhMjgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+LMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIshONEEv9TzAruw+b6bUVI8vzCcA0q/b6981TM+Z8C6rbZxfGj1h8zC DqKYgADJtHGLj7P6G/3h9oOf28dNCUYx9onm1H76cyHd2vcVEL2PkSeufQ6nEBZe x/i7HJPEw1Luz3DaFCPhC9nf4feL889VRoFRDYPGBShsuRL2SMwAGvyqGWZXqmhR 5ZPhUQB6BRsQ5Efw6G4fXyhPSjqqazFEICZLs82R8LlKnYa+cQvKIJwlxg2seoB/ 5p3B+q23gw0lnL+t+JyOoBsJITi3JJN4Yb3L46pNS4iAa80g5Uh47bMGFrRx+ZOc 4RVWwujHkma65/WeOcJFCLklEOHuxWA= -----END CERTIFICATE-----Generated at Wed May 8 02:19:29 2024 by rpki-client on console-ams.rpki-client.org