$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/28baacda-6a68-3c8f-b393-d75be1456004.roa File: 28baacda-6a68-3c8f-b393-d75be1456004.roa (raw, json) Hash identifier: HEOGK7lTQ8awSoE5OyeFPRWADZEoFkHs6KnkCn9iE7A= Subject key identifier: 0A:5A:BE:93:23:94:9B:0C:BA:E4:63:A1:7A:12:A2:BB:F0:D3:65:17 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285844D17FC6B77C214FF5D2E01540 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/28baacda-6a68-3c8f-b393-d75be1456004.roa Signing time: Thu 08 Feb 2024 02:00:26 +0000 ROA not before: Thu 08 Feb 2024 02:00:26 +0000 ROA not after: Wed 08 May 2024 01:00:26 +0000 asID: 212238 IP address blocks: 172.111.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 29 Apr 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:d1:7f:c6:b7:7c:21:4f:f5:d2:e0:15:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Feb 8 02:00:26 2024 GMT Not After : May 8 01:00:26 2024 GMT Subject: CN=c57b88b2-a45f-42da-9ccd-6bc4005f9a1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:08:af:53:0f:66:ca:76:b1:c4:46:92:f8:c6: 70:5a:fc:2a:b6:9f:c2:9a:c5:f8:f1:68:96:07:84: c8:d0:2b:15:51:6b:50:fe:c9:ac:1c:d3:c7:dc:31: 8f:39:1e:51:65:63:e8:7e:cb:ca:01:da:aa:09:ef: 88:4c:a8:1a:c4:9f:6b:8f:76:54:1e:f6:ea:df:98: e7:4b:38:e7:2a:72:cc:d1:39:6d:a3:66:fd:af:19: ca:56:66:2c:ae:9e:f7:f3:c9:2e:33:40:6a:3c:c5: fe:02:70:98:6d:ef:4b:c4:3b:d7:96:6e:24:fe:37: 5a:94:01:ac:0e:12:5c:07:91:15:ed:f8:e2:93:79: b0:3a:82:ed:d8:f3:8f:b9:f1:61:0d:a4:a9:72:3b: b2:e2:5a:d2:42:0b:dd:ba:ad:bb:7d:3c:47:35:99: 1f:f4:f3:f9:87:9d:92:f7:12:90:a8:fc:0a:87:f3: f2:37:d7:2d:53:5b:de:5d:c5:65:43:35:f2:3f:6f: b3:06:cc:23:36:4f:8f:9e:5e:99:6f:48:08:80:7d: 4b:6f:2a:2e:d1:d8:80:62:fe:d6:f9:c4:ac:e2:52: 1f:cb:92:7b:26:07:9d:fd:69:2a:92:ba:81:6c:49: 3c:db:f0:03:56:c5:bc:31:c5:79:cb:96:90:ba:a4: 52:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:5A:BE:93:23:94:9B:0C:BA:E4:63:A1:7A:12:A2:BB:F0:D3:65:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/28baacda-6a68-3c8f-b393-d75be1456004.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:e9:4d:f8:1a:12:10:f6:72:fc:bf:9f:93:7f:b4:d2:b5:4d: 06:95:41:c0:48:9f:85:8e:3f:99:f1:5a:e6:04:92:a6:54:a6: 26:4d:2a:20:9c:59:b6:30:12:f3:c5:da:6a:5b:86:25:ba:09: 8f:91:da:73:53:97:1c:0c:7f:6a:2b:e4:82:11:16:e6:09:ce: 81:3b:cb:d5:69:67:d6:e2:45:2e:79:4f:3f:c4:ce:d9:62:ea: a9:9e:14:30:cc:f9:1b:d6:41:92:4e:84:fd:ea:f4:3e:c4:b5: 5a:28:8a:f6:9f:4b:fa:52:d8:7b:6d:ef:51:a4:c5:ce:1e:e1: fe:7c:e3:f8:37:db:5d:57:e1:94:36:9d:14:1f:0b:ea:72:87: 92:33:87:07:c8:52:84:bb:cd:29:59:c3:ec:c8:99:e2:45:c8: 0e:8c:6f:0e:db:f8:08:12:ba:fc:f1:fa:b6:f4:dd:ef:91:15: f5:85:3c:3f:32:63:73:88:ad:ca:30:b5:2e:a4:ed:28:5b:e1: e0:70:65:12:2c:4f:43:52:1b:d7:a2:c3:ef:31:97:25:06:7c: 96:e9:ae:d0:c6:57:e4:43:ae:46:55:ec:e2:81:94:5a:4c:8c: fc:ce:ba:14:d3:82:0e:6c:87:24:61:61:6b:e2:5c:ae:04:2b: e8:cb:b0:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWETRf8a3fCFP9dLgFUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI0MDIwODAyMDAyNloXDTI0MDUwODAxMDAyNlowLzEtMCsGA1UEAxMk YzU3Yjg4YjItYTQ1Zi00MmRhLTljY2QtNmJjNDAwNWY5YTFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkAivUw9mynaxxEaS+MZwWvwqtp/CmsX48WiW B4TI0CsVUWtQ/smsHNPH3DGPOR5RZWPofsvKAdqqCe+ITKgaxJ9rj3ZUHvbq35jn SzjnKnLM0Tlto2b9rxnKVmYsrp7388kuM0BqPMX+AnCYbe9LxDvXlm4k/jdalAGs DhJcB5EV7fjik3mwOoLt2POPufFhDaSpcjuy4lrSQgvduq27fTxHNZkf9PP5h52S 9xKQqPwKh/PyN9ctU1veXcVlQzXyP2+zBswjNk+Pnl6Zb0gIgH1Lbyou0diAYv7W +cSs4lIfy5J7Jged/WkqkrqBbEk82/ADVsW8McV5y5aQuqRSLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFApavpMjlJsMuuRjoXoSorvw02UXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMjhiYWFjZGEtNmE2OC0z YzhmLWIzOTMtZDc1YmUxNDU2MDA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA7pTfgaEhD2cvy/n5N/tNK1TQaVQcBIn4WOP5nxWuYEkqZUpiZNKiCc WbYwEvPF2mpbhiW6CY+R2nNTlxwMf2or5IIRFuYJzoE7y9VpZ9biRS55Tz/Eztli 6qmeFDDM+RvWQZJOhP3q9D7EtVooivafS/pS2Htt71Gkxc4e4f584/g3211X4ZQ2 nRQfC+pyh5IzhwfIUoS7zSlZw+zImeJFyA6Mbw7b+AgSuvzx+rb03e+RFfWFPD8y Y3OIrcowtS6k7Shb4eBwZRIsT0NSG9eiw+8xlyUGfJbprtDGV+RDrkZV7OKBlFpM jPzOuhTTgg5shyRhYWviXK4EK+jLsFk= -----END CERTIFICATE-----Generated at Sun Apr 28 03:24:01 2024 by rpki-client on console-ams.rpki-client.org