$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/32a23c32-30aa-3814-87e4-f5250a5cd155.roa File: 32a23c32-30aa-3814-87e4-f5250a5cd155.roa (raw, json) Hash identifier: xFlMS5nA8uPDjJxySBUL1TsCYVXX5ayYsMBp1Qpl+pc= Subject key identifier: CC:97:67:4A:13:DC:70:4C:8B:A3:E0:33:AA:6A:54:68:26:A8:06:95 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285844FE2AE36ABD3CE32233BF9F80 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/32a23c32-30aa-3814-87e4-f5250a5cd155.roa Signing time: Sat 24 Feb 2024 02:00:26 +0000 ROA not before: Sat 24 Feb 2024 02:00:26 +0000 ROA not after: Fri 24 May 2024 01:00:26 +0000 asID: 9009 IP address blocks: 172.94.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 26 Apr 2024 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:fe:2a:e3:6a:bd:3c:e3:22:33:bf:9f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Feb 24 02:00:26 2024 GMT Not After : May 24 01:00:26 2024 GMT Subject: CN=dee3a585-912a-4ba5-8c95-930ae9bf0807 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:54:64:4c:81:d0:ef:6d:35:bf:a7:27:e7:d1: 8f:4c:28:e1:71:9c:e7:8c:45:5f:84:42:6d:d8:f9: e7:a9:1b:1e:4b:35:14:00:15:86:07:68:94:a6:f7: 9f:e3:75:37:64:aa:9f:df:5c:13:51:62:10:61:a0: 60:4f:00:c3:65:0e:bb:f3:d4:86:7a:3a:d3:ae:8e: f7:90:e2:64:94:66:97:4b:f0:b2:3d:8d:56:ec:67: b6:19:68:0f:57:7e:80:e2:76:7b:f1:72:7e:a6:58: 4c:d0:3e:2a:02:e5:e1:f9:10:fa:fd:fc:72:62:48: 35:21:7c:22:dc:6d:65:47:1e:19:29:f9:50:ff:47: f2:a9:86:c9:36:02:0e:20:93:d8:e0:c9:9c:ca:f2: e0:39:b1:93:cb:6d:9e:0c:61:6a:fe:9c:d1:c9:35: 58:04:5c:7c:b1:8f:9b:9a:16:f3:34:08:21:a8:ab: 07:bb:ba:29:7e:8d:36:db:20:43:1d:b0:24:78:8d: 81:0d:cf:d4:a6:ea:2c:f4:e3:1c:a1:e5:71:56:45: d8:43:e1:7f:5b:36:f4:a6:79:b9:45:6e:66:1c:9e: 34:2b:02:d7:7b:07:c7:dd:18:71:8f:39:52:df:ad: 9e:9b:a2:79:da:30:73:1a:f0:3d:1d:94:e2:95:29: 45:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:97:67:4A:13:DC:70:4C:8B:A3:E0:33:AA:6A:54:68:26:A8:06:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/32a23c32-30aa-3814-87e4-f5250a5cd155.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:19:00:73:90:8a:d1:0d:39:74:6f:4d:ee:de:2b:fd:fb:19: 85:70:26:dc:3e:13:75:70:e7:7c:48:fd:fe:54:c2:dc:71:b3: c3:8b:36:9a:b6:04:90:1e:4f:9b:2c:7e:32:ae:ba:eb:a7:17: a8:44:6a:ff:a2:bd:f6:e3:1b:57:4c:59:3f:5c:46:6d:fb:27: 4f:74:60:45:b8:df:0f:5e:82:55:b8:ba:74:c2:db:6d:22:f9: 53:43:1c:38:50:ff:84:91:93:81:ff:a9:5d:79:9b:de:2e:64: 5d:7a:bd:15:18:9d:1c:b3:29:90:5a:6f:46:44:f2:f8:f0:11: 77:67:0b:13:a3:d3:65:b2:d3:84:41:2e:d7:70:6c:3f:56:85: d5:88:21:46:a6:df:ba:08:69:dd:80:ee:dc:05:d0:ac:1a:72: a2:95:1d:3b:8a:94:13:48:b1:a6:0b:e0:0f:ff:64:93:31:65: 60:3b:cf:53:8d:48:14:58:76:de:2e:23:fd:57:96:6a:07:ce: 83:3f:46:b3:bf:d0:a4:76:7b:6f:22:5f:de:3f:21:37:79:e3: 94:42:0d:f8:0e:6b:7a:b2:20:d8:0e:06:81:74:50:17:93:6e: 46:f3:f4:0b:8b:e7:e4:5d:4b:78:c6:c4:dc:56:b2:75:05:53: 4d:ab:d7:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWET+KuNqvTzjIjO/n4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI0MDIyNDAyMDAyNloXDTI0MDUyNDAxMDAyNlowLzEtMCsGA1UEAxMk ZGVlM2E1ODUtOTEyYS00YmE1LThjOTUtOTMwYWU5YmYwODA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFRkTIHQ7201v6cn59GPTCjhcZznjEVfhEJt 2PnnqRseSzUUABWGB2iUpvef43U3ZKqf31wTUWIQYaBgTwDDZQ6789SGejrTro73 kOJklGaXS/CyPY1W7Ge2GWgPV36A4nZ78XJ+plhM0D4qAuXh+RD6/fxyYkg1IXwi 3G1lRx4ZKflQ/0fyqYbJNgIOIJPY4MmcyvLgObGTy22eDGFq/pzRyTVYBFx8sY+b mhbzNAghqKsHu7opfo022yBDHbAkeI2BDc/Upuos9OMcoeVxVkXYQ+F/Wzb0pnm5 RW5mHJ40KwLXewfH3RhxjzlS362em6J52jBzGvA9HZTilSlFgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMyXZ0oT3HBMi6PgM6pqVGgmqAaVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMzJhMjNjMzItMzBhYS0z ODE0LTg3ZTQtZjUyNTBhNWNkMTU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHEZAHOQitENOXRvTe7eK/37GYVwJtw+E3Vw53xI/f5Uwtxxs8OLNpq2 BJAeT5ssfjKuuuunF6hEav+ivfbjG1dMWT9cRm37J090YEW43w9eglW4unTC220i +VNDHDhQ/4SRk4H/qV15m94uZF16vRUYnRyzKZBab0ZE8vjwEXdnCxOj02Wy04RB LtdwbD9WhdWIIUam37oIad2A7twF0KwacqKVHTuKlBNIsaYL4A//ZJMxZWA7z1ON SBRYdt4uI/1XlmoHzoM/RrO/0KR2e28iX94/ITd545RCDfgOa3qyINgOBoF0UBeT bkbz9AuL5+RdS3jGxNxWsnUFU02r10E= -----END CERTIFICATE-----Generated at Thu Apr 25 16:49:42 2024 by rpki-client on console-ams.rpki-client.org