$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4e14254d-55fc-35e4-8793-8e34aa78e99e.roa File: 4e14254d-55fc-35e4-8793-8e34aa78e99e.roa (raw, json) Hash identifier: TbkmTjmOFleOdyU2b0irx/ngNn343v7hBFfjOp20Iw8= Subject key identifier: BF:24:38:8C:7E:9D:BB:59:B5:B6:DE:85:2D:2E:D6:F4:13:A5:AB:AB Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285844E7D53FD68D7899B89FBED600 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4e14254d-55fc-35e4-8793-8e34aa78e99e.roa Signing time: Fri 16 Feb 2024 02:00:26 +0000 ROA not before: Fri 16 Feb 2024 02:00:26 +0000 ROA not after: Thu 16 May 2024 01:00:26 +0000 asID: 212238 IP address blocks: 172.94.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 30 Apr 2024 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:e7:d5:3f:d6:8d:78:99:b8:9f:be:d6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Feb 16 02:00:26 2024 GMT Not After : May 16 01:00:26 2024 GMT Subject: CN=acb1d6cd-36da-4b5e-b896-61282d87e2f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:1a:f9:62:ff:51:bd:98:32:8b:f6:ec:ee:af: 27:29:13:06:a9:66:6e:e6:8d:79:c4:63:3d:07:13: 72:16:4c:f4:a8:29:0e:41:14:e1:2c:59:ec:ff:09: 6c:c8:5c:05:89:0b:80:e9:6d:bd:4f:a4:a2:0a:55: 5d:ab:19:20:3b:55:8d:af:87:79:ce:71:97:fa:98: 5b:eb:79:a7:16:66:a9:a7:ec:4e:28:22:a7:87:67: f3:b2:76:29:45:65:20:ab:ee:f9:ed:9c:7d:4a:d1: a4:18:67:03:57:31:00:ae:01:65:c6:a0:b0:a6:dc: e1:0c:b7:38:0a:a6:9a:8c:87:de:19:44:45:79:2e: 34:b2:50:54:68:0a:26:3e:ed:c8:cc:49:be:4e:5d: 7c:f4:4f:dc:b2:5a:7d:37:b6:a8:6c:68:95:b4:b7: 9c:d2:34:9a:a6:c3:47:9c:b5:2f:c4:ef:3a:eb:05: c7:81:48:3b:40:6a:79:14:44:cf:87:b3:56:97:31: b6:57:7d:04:5f:89:41:ab:76:40:1e:15:65:ea:e8: 1d:86:01:12:dd:b0:ca:68:bd:41:3a:7b:8f:36:79: 64:0c:06:84:ce:51:df:2e:c9:9f:6b:b3:5e:1a:90: c6:da:0d:94:87:9a:07:7c:f9:ec:55:47:a6:2d:8d: f3:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:24:38:8C:7E:9D:BB:59:B5:B6:DE:85:2D:2E:D6:F4:13:A5:AB:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4e14254d-55fc-35e4-8793-8e34aa78e99e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:38:ef:0c:c5:0e:fc:d0:e5:57:8a:ca:c7:ca:bb:01:8d:b3: 90:97:d9:69:d7:b0:4b:19:d5:aa:d5:29:7a:76:78:a2:71:29: 4c:5e:54:9c:7f:32:e7:2e:17:ad:b3:1f:61:81:67:8b:5a:f3: 2a:db:ba:90:7b:5f:7b:25:08:a1:54:55:73:dc:c3:2d:96:95: 70:df:4f:f8:5e:48:c7:15:3a:44:33:04:68:09:e9:94:56:e5: 8f:9e:30:ee:f3:44:d8:d3:9f:5c:4e:75:48:db:ea:ea:2c:46: f7:20:ef:87:ae:e8:89:1d:d4:a7:17:42:ff:72:74:da:70:d5: 47:c0:ce:d5:a7:e4:18:23:fa:bb:c8:3e:1d:1c:9b:40:c2:50: f3:97:76:81:28:67:f5:2a:e5:9f:db:7e:0e:a6:6c:ac:85:06: ea:5f:c1:da:1f:d8:fb:b2:06:ac:0a:95:50:76:ce:51:5b:2b: 0c:22:6d:73:d9:47:b4:6a:ac:3b:dd:40:e2:ce:8b:52:f6:15: 6c:7c:8e:c9:f9:ab:3d:3e:a1:fa:58:42:30:7c:05:87:b7:4a: be:1f:1f:c0:21:17:51:c5:e3:e4:e9:9b:8d:d2:9d:fd:93:55: 87:41:82:1d:50:f5:94:2a:6f:09:1a:98:d0:ca:b2:fa:4d:a0: 48:ff:0d:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWETn1T/WjXiZuJ++1gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI0MDIxNjAyMDAyNloXDTI0MDUxNjAxMDAyNlowLzEtMCsGA1UEAxMk YWNiMWQ2Y2QtMzZkYS00YjVlLWI4OTYtNjEyODJkODdlMmY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRr5Yv9RvZgyi/bs7q8nKRMGqWZu5o15xGM9 BxNyFkz0qCkOQRThLFns/wlsyFwFiQuA6W29T6SiClVdqxkgO1WNr4d5znGX+phb 63mnFmapp+xOKCKnh2fzsnYpRWUgq+757Zx9StGkGGcDVzEArgFlxqCwptzhDLc4 CqaajIfeGURFeS40slBUaAomPu3IzEm+Tl189E/cslp9N7aobGiVtLec0jSapsNH nLUvxO866wXHgUg7QGp5FETPh7NWlzG2V30EX4lBq3ZAHhVl6ugdhgES3bDKaL1B OnuPNnlkDAaEzlHfLsmfa7NeGpDG2g2Uh5oHfPnsVUemLY3zCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL8kOIx+nbtZtbbehS0u1vQTpaurMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNGUxNDI1NGQtNTVmYy0z NWU0LTg3OTMtOGUzNGFhNzhlOTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABA47wzFDvzQ5VeKysfKuwGNs5CX2WnXsEsZ1arVKXp2eKJxKUxeVJx/ MucuF62zH2GBZ4ta8yrbupB7X3slCKFUVXPcwy2WlXDfT/heSMcVOkQzBGgJ6ZRW 5Y+eMO7zRNjTn1xOdUjb6uosRvcg74eu6Ikd1KcXQv9ydNpw1UfAztWn5Bgj+rvI Ph0cm0DCUPOXdoEoZ/Uq5Z/bfg6mbKyFBupfwdof2PuyBqwKlVB2zlFbKwwibXPZ R7RqrDvdQOLOi1L2FWx8jsn5qz0+ofpYQjB8BYe3Sr4fH8AhF1HF4+Tpm43Snf2T VYdBgh1Q9ZQqbwkamNDKsvpNoEj/Dcg= -----END CERTIFICATE-----Generated at Sun Apr 28 16:12:05 2024 by rpki-client on console-fra.rpki-client.org