$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/194d75e2-2dcf-3abd-b37d-6d47ea778ae2.roa File: 194d75e2-2dcf-3abd-b37d-6d47ea778ae2.roa (raw, json) Hash identifier: gXZggcb6stVkojS4gV4pSXJkDo4WFOz3uXFnaiQ8Trc= Subject key identifier: C1:6D:C3:FF:73:24:F7:C5:DE:A1:31:36:B2:03:31:11:77:F9:3B:78 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285845A428B37B3FA5CA21CAE94EC0 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/194d75e2-2dcf-3abd-b37d-6d47ea778ae2.roa Signing time: Tue 23 Apr 2024 13:00:34 +0000 ROA not before: Tue 23 Apr 2024 13:00:34 +0000 ROA not after: Mon 22 Jul 2024 13:00:34 +0000 asID: 212238 IP address blocks: 172.111.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 29 Apr 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:a4:28:b3:7b:3f:a5:ca:21:ca:e9:4e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Apr 23 13:00:34 2024 GMT Not After : Jul 22 13:00:34 2024 GMT Subject: CN=42e28f39-84a1-42de-81bc-be7873ae1074 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:14:0d:84:73:a4:70:b3:d3:4e:b5:57:2b:07: ce:c0:f5:1b:c0:4e:18:52:cf:a5:d7:7a:30:c8:fa: ba:d6:c4:8b:ec:b5:5b:fb:9e:a2:d1:71:18:e9:30: bc:89:9e:82:0e:9c:ed:41:c3:29:42:fe:18:d6:f3: 96:f0:75:cf:12:e5:0e:7f:6a:91:39:86:3a:2a:53: ee:b7:57:ee:80:b8:9c:1f:3c:96:d1:b8:b0:26:a9: 93:ef:12:93:6e:f2:92:f3:a9:46:a1:33:51:8a:7b: e8:34:80:79:c7:ae:09:7a:79:bc:05:ff:8f:19:78: 81:4c:43:72:31:2f:f5:14:0b:f8:dc:2a:25:88:a5: 55:2e:e0:9b:71:e2:9d:9c:8f:bf:21:c6:ed:2d:50: f0:12:b9:bf:0a:08:2c:9a:0f:f0:07:ae:12:8f:8a: 38:77:e5:fd:c1:ae:74:19:e1:3d:ad:ad:a3:00:a1: 0e:7c:2e:f4:78:10:78:a0:d7:b7:cb:20:1b:fa:39: c8:b4:b7:d5:e0:43:fb:18:6f:16:ec:ea:63:c9:01: 82:6d:b5:69:87:2b:48:e3:e3:90:05:ab:f3:ec:76: 7c:7b:2a:18:6f:9a:fe:a8:e6:8c:67:22:b1:61:1d: cb:d0:7f:e1:28:e2:06:b6:a5:98:b9:99:8a:a7:1f: ce:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:6D:C3:FF:73:24:F7:C5:DE:A1:31:36:B2:03:31:11:77:F9:3B:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/194d75e2-2dcf-3abd-b37d-6d47ea778ae2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:de:a8:cf:c1:83:c2:ed:b3:50:1f:9e:63:2a:62:06:1b:de: a2:95:f7:6b:36:30:a6:b4:1e:cf:a1:55:df:d3:ed:a7:69:b5: 3b:70:ad:11:4a:bc:8e:1b:f4:a0:fd:ce:be:c9:22:8b:6b:55: 97:78:c5:a1:32:d9:8a:a9:63:ae:8d:90:7e:78:5d:3a:23:ba: 88:f2:7e:45:31:2d:5f:94:9a:18:cd:a6:76:1c:a3:5b:c8:91: f7:b0:5c:c8:1e:95:bf:2d:6e:5b:b7:d8:72:35:02:14:a8:68: ce:6a:ad:d8:74:e9:fe:2b:10:2a:0a:71:ca:16:0d:5d:06:8b: 74:35:4c:3c:15:05:7a:de:a2:d8:53:4b:4e:74:7a:56:24:47: 3f:00:6f:eb:18:a7:e3:40:f3:54:05:06:da:39:76:ae:64:f2: fd:e2:0a:8b:e9:98:54:5b:07:76:fa:18:d8:a0:36:26:2a:91: 16:0c:b4:2b:ad:f6:32:e9:bf:06:39:2e:09:1f:0f:c8:4b:86: ac:2b:b8:8f:1f:99:29:c8:0e:89:39:02:73:f5:68:e2:76:ee: 7d:52:ba:92:8f:bd:d8:26:f5:de:a6:a4:01:5b:06:b9:cb:ba: dc:d2:9e:59:97:a1:70:78:5f:3f:d3:fa:c8:c6:ce:fa:5d:6f: b3:7d:36:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWkKLN7P6XKIcrpTsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI0MDQyMzEzMDAzNFoXDTI0MDcyMjEzMDAzNFowLzEtMCsGA1UEAxMk NDJlMjhmMzktODRhMS00MmRlLTgxYmMtYmU3ODczYWUxMDc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhQNhHOkcLPTTrVXKwfOwPUbwE4YUs+l13ow yPq61sSL7LVb+56i0XEY6TC8iZ6CDpztQcMpQv4Y1vOW8HXPEuUOf2qROYY6KlPu t1fugLicHzyW0biwJqmT7xKTbvKS86lGoTNRinvoNIB5x64Jenm8Bf+PGXiBTENy MS/1FAv43ColiKVVLuCbceKdnI+/IcbtLVDwErm/Cggsmg/wB64Sj4o4d+X9wa50 GeE9ra2jAKEOfC70eBB4oNe3yyAb+jnItLfV4EP7GG8W7OpjyQGCbbVphytI4+OQ Bavz7HZ8eyoYb5r+qOaMZyKxYR3L0H/hKOIGtqWYuZmKpx/OLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMFtw/9zJPfF3qExNrIDMRF3+Tt4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMTk0ZDc1ZTItMmRjZi0z YWJkLWIzN2QtNmQ0N2VhNzc4YWUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/hMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA3eqM/Bg8Lts1AfnmMqYgYb3qKV92s2MKa0Hs+hVd/T7adptTtwrRFK vI4b9KD9zr7JIotrVZd4xaEy2YqpY66NkH54XTojuojyfkUxLV+UmhjNpnYco1vI kfewXMgelb8tblu32HI1AhSoaM5qrdh06f4rECoKccoWDV0Gi3Q1TDwVBXreothT S050elYkRz8Ab+sYp+NA81QFBto5dq5k8v3iCovpmFRbB3b6GNigNiYqkRYMtCut 9jLpvwY5LgkfD8hLhqwruI8fmSnIDok5AnP1aOJ27n1SupKPvdgm9d6mpAFbBrnL utzSnlmXoXB4Xz/T+sjGzvpdb7N9NmA= -----END CERTIFICATE-----Generated at Sat Apr 27 22:32:27 2024 by rpki-client on console-ams.rpki-client.org