$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/c37a3bdf-ccb5-3d79-9ee0-b954ae9dad9a.roa File: c37a3bdf-ccb5-3d79-9ee0-b954ae9dad9a.roa (raw, json) Hash identifier: ZXWHcNxVW4e5RzwEaHh8OMbcsQbdBI/Uc1gL+XK1AEU= Subject key identifier: CC:78:04:C5:EB:52:BC:B9:90:CF:01:EF:97:9B:8E:17:F5:19:A1:FB Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63 Certificate serial: 010D0C9F43285845D503B29EDBDD551F160A1780 Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/c37a3bdf-ccb5-3d79-9ee0-b954ae9dad9a.roa Signing time: Sat 11 May 2024 01:00:27 +0000 ROA not before: Sat 11 May 2024 01:00:27 +0000 ROA not after: Fri 09 Aug 2024 01:00:27 +0000 asID: 54113 IP address blocks: 172.111.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Jun 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:d5:03:b2:9e:db:dd:55:1f:16:0a:17:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63 Validity Not Before: May 11 01:00:27 2024 GMT Not After : Aug 9 01:00:27 2024 GMT Subject: CN=1e445c36-090d-42df-b7ce-c67a40b3d874 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:20:94:be:1e:01:96:eb:ed:93:7f:f2:24:09: f8:bc:c1:be:e0:dc:f3:89:03:be:76:50:dd:98:30: 6e:87:be:fa:0f:a0:a0:57:e5:70:80:a0:4d:a9:60: 9a:6a:fc:89:33:b4:8d:8e:e2:b6:3a:39:a8:af:2f: a8:94:fe:79:d0:f4:8d:12:d3:cd:e1:c3:61:ec:8f: 3a:01:b6:ad:aa:13:8a:5a:7c:bd:49:82:5a:2a:32: 87:8a:36:c9:28:5a:8e:98:a1:a3:d6:2f:6d:5e:08: b7:5c:95:de:94:20:fe:a7:57:6f:6d:43:85:3e:86: 10:f1:ab:3a:7a:5f:9d:d2:ce:13:c6:f8:11:93:31: 75:3a:11:76:84:16:95:24:ec:64:98:dc:9b:3e:e2: 93:ff:5d:56:0f:46:54:b7:a5:43:9c:43:bf:0c:d1: 93:1d:df:8d:dd:e0:d4:69:6d:b2:6c:b0:38:13:5b: b1:0a:1f:d2:f0:c3:05:f2:f9:fa:9f:4a:c5:8c:03: 43:d0:01:26:b6:a1:89:d3:4f:7b:96:18:b5:bf:45: 84:e6:5c:e7:c1:b1:8f:10:6a:2b:66:83:8a:2c:db: 20:77:15:92:eb:ee:33:57:9f:a3:5e:4b:4a:c9:5e: 9d:86:9e:99:09:66:73:8e:c7:d8:33:ba:7e:b6:ed: 0c:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:78:04:C5:EB:52:BC:B9:90:CF:01:EF:97:9B:8E:17:F5:19:A1:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/c37a3bdf-ccb5-3d79-9ee0-b954ae9dad9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl X509v3 Authority Key Identifier: keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer sbgp-ipAddrBlock: critical IPv4: 172.111.122.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:bc:d5:c3:49:65:3d:08:94:f5:7f:24:df:b3:c5:88:63:61: 56:d6:af:96:6d:bf:08:09:5e:fd:64:64:59:61:c7:e3:e7:1c: a0:c5:3a:71:9a:db:6b:9a:39:3e:84:87:f8:29:bb:61:13:76: 70:09:04:7a:2e:81:dd:12:f9:7a:d6:4c:de:bb:a4:8a:fe:fa: 1d:45:8d:6c:bb:e8:ce:1a:f7:0e:d9:37:07:73:65:2d:96:67: 3e:a5:d1:e7:b4:55:76:2c:bb:86:00:f1:9a:9a:60:95:b5:8e: 03:44:23:cf:09:f1:0a:ea:d1:7f:da:63:6a:43:49:a5:ba:6a: ad:8f:87:22:90:4f:f7:cb:7b:e2:9b:d3:c9:5f:4a:7a:8d:d7: af:53:ae:3c:8b:c6:b4:0a:d1:62:06:0b:4b:99:00:b2:74:aa: c1:42:3e:b1:cd:ca:e5:76:b1:ce:b0:c4:37:58:31:72:9d:2e: 8b:28:53:42:41:30:df:51:19:1c:29:a9:76:61:35:7a:b8:20: 0f:dd:9d:ca:a3:39:b7:fc:12:7d:90:a5:41:04:76:01:88:78: 09:c5:9d:9f:06:6c:28:68:e6:2d:91:80:71:59:30:19:04:a9: c5:86:10:72:5e:24:30:44:b9:40:a3:76:20:5c:79:4d:6c:92: f6:f9:27:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXVA7Ke291VHxYKF4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz YTYzMB4XDTI0MDUxMTAxMDAyN1oXDTI0MDgwOTAxMDAyN1owLzEtMCsGA1UEAxMk MWU0NDVjMzYtMDkwZC00MmRmLWI3Y2UtYzY3YTQwYjNkODc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCCUvh4Bluvtk3/yJAn4vMG+4NzziQO+dlDd mDBuh776D6CgV+VwgKBNqWCaavyJM7SNjuK2Ojmory+olP550PSNEtPN4cNh7I86 AbatqhOKWny9SYJaKjKHijbJKFqOmKGj1i9tXgi3XJXelCD+p1dvbUOFPoYQ8as6 el+d0s4TxvgRkzF1OhF2hBaVJOxkmNybPuKT/11WD0ZUt6VDnEO/DNGTHd+N3eDU aW2ybLA4E1uxCh/S8MMF8vn6n0rFjAND0AEmtqGJ0097lhi1v0WE5lznwbGPEGor ZoOKLNsgdxWS6+4zV5+jXktKyV6dhp6ZCWZzjsfYM7p+tu0MFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMx4BMXrUry5kM8B75ebjhf1GaH7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1 ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvYzM3YTNiZGYtY2NiNS0z ZDc5LTllZTAtYjk1NGFlOWRhZDlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3 M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1 YzA5NzNhNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG96MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACu81cNJZT0IlPV/JN+zxYhjYVbWr5ZtvwgJXv1kZFlhx+PnHKDFOnGa 22uaOT6Eh/gpu2ETdnAJBHougd0S+XrWTN67pIr++h1FjWy76M4a9w7ZNwdzZS2W Zz6l0ee0VXYsu4YA8ZqaYJW1jgNEI88J8Qrq0X/aY2pDSaW6aq2PhyKQT/fLe+Kb 08lfSnqN169TrjyLxrQK0WIGC0uZALJ0qsFCPrHNyuV2sc6wxDdYMXKdLosoU0JB MN9RGRwpqXZhNXq4IA/dncqjObf8En2QpUEEdgGIeAnFnZ8GbCho5i2RgHFZMBkE qcWGEHJeJDBEuUCjdiBceU1skvb5J1I= -----END CERTIFICATE-----Generated at Sun Jun 2 19:33:03 2024 by rpki-client on console-ams.rpki-client.org