$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1121e368-1ed6-3819-87a2-f928221a43fe.roa File: 1121e368-1ed6-3819-87a2-f928221a43fe.roa (raw, json) Hash identifier: x9CcZk+BhkDuGTPg+yZjYdMUVcnojOQiJmY9UKMK+yY= Subject key identifier: 20:1C:66:A8:66:39:79:3C:75:4E:92:19:19:22:4B:99:69:BC:34:21 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584555FD864BAED292606856CA40 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1121e368-1ed6-3819-87a2-f928221a43fe.roa Signing time: Tue 26 Mar 2024 13:00:35 +0000 ROA not before: Tue 26 Mar 2024 13:00:35 +0000 ROA not after: Mon 24 Jun 2024 13:00:35 +0000 asID: 8285 IP address blocks: 172.94.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:55:fd:86:4b:ae:d2:92:60:68:56:ca:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Mar 26 13:00:35 2024 GMT Not After : Jun 24 13:00:35 2024 GMT Subject: CN=94fac77b-a30e-4acd-81b1-b4501f026d02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:b7:c6:d4:b4:62:b4:52:8b:80:72:ac:72:a7: 97:5f:8c:1e:cc:ca:1e:8a:e4:ab:26:1a:5b:99:fd: 1d:6e:e3:43:07:96:0d:08:e4:51:2d:57:27:32:e7: b3:f5:da:73:2c:d4:8c:65:c1:8f:1f:91:50:d4:c1: 21:6e:2b:ac:72:7a:e3:60:78:16:50:f8:da:24:43: 4f:f5:f1:4e:e7:93:79:e2:ec:cd:bb:35:d9:e0:58: 87:62:5f:c8:a5:1b:2b:39:6c:f0:4a:32:49:f5:05: 07:68:f5:85:be:88:23:fc:80:54:83:e5:7d:fb:2a: 2b:01:8c:e7:2a:53:71:f0:6f:64:16:a9:6f:f3:1c: 76:a1:e6:ca:7f:27:a3:d4:ec:44:89:c0:98:0c:18: 08:7e:41:eb:a8:55:1c:e9:83:cf:79:a2:0b:e6:ec: 7a:2b:f2:c5:f8:20:4f:47:31:3e:72:67:8b:1f:5f: 89:da:af:50:4a:0f:52:6e:39:39:5d:1d:d7:0e:42: fc:00:2a:b3:e9:df:75:54:52:7b:c0:53:a0:43:29: 55:f6:33:3e:00:0c:31:8f:f1:da:de:8e:22:5a:5e: 76:62:3b:5e:6c:ed:6e:a4:35:db:46:8d:6b:02:30: 97:31:81:47:09:ab:01:ee:f3:64:ec:e9:ae:b1:ad: ac:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:1C:66:A8:66:39:79:3C:75:4E:92:19:19:22:4B:99:69:BC:34:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1121e368-1ed6-3819-87a2-f928221a43fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:64:2f:dd:43:18:07:bb:ad:82:cc:c0:53:03:c3:1f:3d:88: d5:e1:3f:ea:1a:0a:81:a1:e4:48:de:22:13:4b:17:5e:2c:d6: 53:64:94:45:20:d0:56:3a:a2:4b:73:c0:f7:47:b5:3f:6b:25: d4:33:76:25:67:81:13:5f:db:19:09:9d:81:d8:39:0b:7c:6f: 20:c5:81:de:06:4e:87:c0:18:33:84:89:f8:2a:8f:4f:8a:b8: d8:18:ff:ef:23:11:88:14:5c:80:43:29:57:28:4d:52:57:2a: 01:cd:5b:2d:ca:af:59:fa:2d:41:e4:c8:18:3c:01:4b:75:13: df:db:25:42:53:0b:82:20:67:c7:9e:ec:8f:c1:ff:29:26:62: f4:ee:26:de:18:55:93:53:3f:0a:fb:99:e1:35:21:db:b6:0b: 63:58:03:16:2a:ca:c3:5f:3f:4e:50:e3:57:93:35:de:6c:74: 7c:d2:4e:e4:61:8d:89:4f:6b:68:58:3a:70:34:f7:69:34:86: 3b:fe:81:1f:36:af:44:17:d1:37:d6:97:c0:bd:82:ae:55:9b: d4:36:12:c4:85:bc:6c:d8:e0:82:d5:c4:4b:ce:b1:c1:b2:61: 78:69:fb:19:2e:62:2b:44:8e:70:0a:5d:9a:b3:05:92:be:48: 17:f9:92:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVV/YZLrtKSYGhWykAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI0MDMyNjEzMDAzNVoXDTI0MDYyNDEzMDAzNVowLzEtMCsGA1UEAxMk OTRmYWM3N2ItYTMwZS00YWNkLTgxYjEtYjQ1MDFmMDI2ZDAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8rfG1LRitFKLgHKscqeXX4wezMoeiuSrJhpb mf0dbuNDB5YNCORRLVcnMuez9dpzLNSMZcGPH5FQ1MEhbiuscnrjYHgWUPjaJENP 9fFO55N54uzNuzXZ4FiHYl/IpRsrOWzwSjJJ9QUHaPWFvogj/IBUg+V9+yorAYzn KlNx8G9kFqlv8xx2oebKfyej1OxEicCYDBgIfkHrqFUc6YPPeaIL5ux6K/LF+CBP RzE+cmeLH1+J2q9QSg9Sbjk5XR3XDkL8ACqz6d91VFJ7wFOgQylV9jM+AAwxj/Ha 3o4iWl52YjtebO1upDXbRo1rAjCXMYFHCasB7vNk7Omusa2sHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCAcZqhmOXk8dU6SGRkiS5lpvDQhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMTEyMWUzNjgtMWVkNi0z ODE5LTg3YTItZjkyODIyMWE0M2ZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF5gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC1kL91DGAe7rYLMwFMDwx89iNXhP+oaCoGh5EjeIhNLF14s1lNklEUg 0FY6oktzwPdHtT9rJdQzdiVngRNf2xkJnYHYOQt8byDFgd4GTofAGDOEifgqj0+K uNgY/+8jEYgUXIBDKVcoTVJXKgHNWy3Kr1n6LUHkyBg8AUt1E9/bJUJTC4IgZ8ee 7I/B/ykmYvTuJt4YVZNTPwr7meE1Idu2C2NYAxYqysNfP05Q41eTNd5sdHzSTuRh jYlPa2hYOnA092k0hjv+gR82r0QX0TfWl8C9gq5Vm9Q2EsSFvGzY4ILVxEvOscGy YXhp+xkuYitEjnAKXZqzBZK+SBf5kkQ= -----END CERTIFICATE-----Generated at Sat May 18 13:31:02 2024 by rpki-client on console-fra.rpki-client.org