$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d56d197e-5c29-3a3f-8fae-ccf02e1f2cee.roa File: d56d197e-5c29-3a3f-8fae-ccf02e1f2cee.roa (raw, json) Hash identifier: cIpHNCZtM8CZVTk+NJQ0v6xJtBVNz574uGmJv9o4b8k= Subject key identifier: DA:B7:19:CB:E2:16:01:1F:C9:E9:B5:B9:C4:87:A9:0D:77:36:C4:69 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285845C5A8F8800784CA2FE840C480 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d56d197e-5c29-3a3f-8fae-ccf02e1f2cee.roa Signing time: Sun 05 May 2024 13:00:34 +0000 ROA not before: Sun 05 May 2024 13:00:34 +0000 ROA not after: Sat 03 Aug 2024 13:00:34 +0000 asID: 3223 IP address blocks: 172.111.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 May 2024 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:c5:a8:f8:80:07:84:ca:2f:e8:40:c4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: May 5 13:00:34 2024 GMT Not After : Aug 3 13:00:34 2024 GMT Subject: CN=f2916e4e-a6a7-4f66-8f41-83f96ce64bd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:f7:1f:ea:ef:ee:48:69:d5:bb:1a:0f:8f:94: 10:21:dc:8c:01:83:72:ec:85:00:3b:78:c6:35:e1: 29:32:46:a2:cb:da:73:77:6b:a5:40:d2:c8:ee:41: 67:e3:4b:f6:00:ab:44:92:2f:76:c7:22:00:1c:fb: d0:5c:ce:54:31:83:42:e3:4e:dc:ba:eb:21:72:f8: 5c:8d:6c:5d:22:3a:ff:92:bc:72:a2:9c:71:9d:b5: c8:34:6b:91:1c:b9:8c:6c:c5:2e:93:e0:77:72:b8: f1:17:1c:1e:ff:48:88:68:4b:1d:07:c3:b2:bb:0c: 92:85:f3:8a:a3:0d:b1:e5:f8:d4:58:81:c8:a6:31: 8f:a6:1d:44:37:af:69:fc:15:04:f0:00:15:61:36: 29:2a:1b:95:1b:32:49:12:09:64:97:aa:23:7e:a3: 52:19:c3:47:d7:ea:53:33:21:1e:bf:d0:5b:03:30: 38:83:ea:b4:c0:be:bd:50:08:32:68:16:89:ce:77: b2:a8:93:a0:7d:dc:b3:89:0b:da:df:46:20:32:4d: 86:82:1c:40:ae:63:80:20:f3:dd:e0:b8:da:80:fc: b3:9a:d2:ca:96:37:33:94:03:bf:07:24:e8:6c:a8: 21:79:c6:35:7e:04:ae:0c:1c:a8:ae:ad:87:41:ee: 6c:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:B7:19:CB:E2:16:01:1F:C9:E9:B5:B9:C4:87:A9:0D:77:36:C4:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d56d197e-5c29-3a3f-8fae-ccf02e1f2cee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:8c:b3:51:9e:5d:a0:86:d1:db:93:24:b0:f6:2c:92:9a:73: 2c:a5:43:01:79:bd:93:69:59:5d:7d:c4:07:7f:e0:2d:2d:4a: c4:9f:d9:ec:2c:d7:01:5a:70:7d:79:54:dc:70:18:63:d3:f7: dc:88:6e:10:48:70:d2:b9:d2:ef:33:33:a8:fa:cb:65:ee:cb: 1c:c0:5b:0d:31:55:63:2b:76:ac:c6:23:bd:03:78:48:ef:56: 8a:31:13:11:28:37:02:76:fc:ad:76:87:34:61:34:d4:4d:f9: 4c:ab:2d:fe:eb:f0:76:bc:1f:92:d0:7c:ca:61:39:c4:9b:e4: 03:7b:fa:c5:92:f9:50:ea:7c:69:45:d5:28:38:b8:42:ec:ff: de:9e:41:84:a4:cd:73:11:ea:c1:40:bd:b5:68:39:a5:bf:4c: 1a:1e:6b:4c:c5:e6:70:4e:7d:d5:02:bd:97:a6:79:d5:97:d6: 60:df:0f:88:60:7c:61:f7:87:e0:e8:c4:e9:c3:30:0b:06:ea: 38:d8:9b:e4:89:41:6d:f2:f9:03:1a:96:a2:0f:59:91:6a:c2: 66:f7:8a:87:8c:eb:3f:00:2a:27:49:7d:52:b7:4b:46:78:d0: d7:65:10:58:f9:63:8a:86:54:66:4c:f6:97:2b:5e:e4:87:9e: 9d:3d:3e:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXFqPiAB4TKL+hAxIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI0MDUwNTEzMDAzNFoXDTI0MDgwMzEzMDAzNFowLzEtMCsGA1UEAxMk ZjI5MTZlNGUtYTZhNy00ZjY2LThmNDEtODNmOTZjZTY0YmQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/cf6u/uSGnVuxoPj5QQIdyMAYNy7IUAO3jG NeEpMkaiy9pzd2ulQNLI7kFn40v2AKtEki92xyIAHPvQXM5UMYNC407cuushcvhc jWxdIjr/krxyopxxnbXINGuRHLmMbMUuk+B3crjxFxwe/0iIaEsdB8OyuwyShfOK ow2x5fjUWIHIpjGPph1EN69p/BUE8AAVYTYpKhuVGzJJEglkl6ojfqNSGcNH1+pT MyEev9BbAzA4g+q0wL69UAgyaBaJzneyqJOgfdyziQva30YgMk2GghxArmOAIPPd 4LjagPyzmtLKljczlAO/ByTobKghecY1fgSuDByorq2HQe5sQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNq3GcviFgEfyem1ucSHqQ13NsRpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZDU2ZDE5N2UtNWMyOS0z YTNmLThmYWUtY2NmMDJlMWYyY2VlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+tMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIqMs1GeXaCG0duTJLD2LJKacyylQwF5vZNpWV19xAd/4C0tSsSf2ews 1wFacH15VNxwGGPT99yIbhBIcNK50u8zM6j6y2XuyxzAWw0xVWMrdqzGI70DeEjv VooxExEoNwJ2/K12hzRhNNRN+UyrLf7r8Ha8H5LQfMphOcSb5AN7+sWS+VDqfGlF 1Sg4uELs/96eQYSkzXMR6sFAvbVoOaW/TBoea0zF5nBOfdUCvZemedWX1mDfD4hg fGH3h+DoxOnDMAsG6jjYm+SJQW3y+QMalqIPWZFqwmb3ioeM6z8AKidJfVK3S0Z4 0NdlEFj5Y4qGVGZM9pcrXuSHnp09Psw= -----END CERTIFICATE-----Generated at Fri May 24 15:51:41 2024 by rpki-client on console-fra.rpki-client.org