$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/53e525d4-39a8-3e09-a5e2-111cbb592081.roa File: 53e525d4-39a8-3e09-a5e2-111cbb592081.roa (raw, json) Hash identifier: oakGZj+kMdqVtppV6Fp9/ZskoZN2L50UJqQMweqJx0s= Subject key identifier: 47:6E:55:60:2C:E8:77:53:CE:93:B4:53:64:99:81:B0:24:C5:AC:E5 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F432858454D9D73BA707C60AD0A76C200 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/53e525d4-39a8-3e09-a5e2-111cbb592081.roa Signing time: Sat 23 Mar 2024 13:00:32 +0000 ROA not before: Sat 23 Mar 2024 13:00:32 +0000 ROA not after: Fri 21 Jun 2024 13:00:32 +0000 asID: 45671 IP address blocks: 172.94.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 27 Apr 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:4d:9d:73:ba:70:7c:60:ad:0a:76:c2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Mar 23 13:00:32 2024 GMT Not After : Jun 21 13:00:32 2024 GMT Subject: CN=cc3ec5ee-b871-4dc0-b364-594369bfe455 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:41:f4:0c:b3:7a:7f:64:d6:87:bb:20:c3:74: 36:05:82:7f:98:87:de:05:e4:61:ce:94:06:75:f0: 85:0c:ec:04:53:57:7e:2a:9c:23:0f:34:82:d8:9a: 57:ee:cc:fb:d6:7b:e1:81:40:51:b1:99:2b:fe:a8: f3:af:59:df:6a:d2:be:b0:4a:19:74:4d:d4:4d:43: 44:b6:53:66:89:39:c8:a6:4e:42:20:68:72:67:c9: f9:87:ec:ce:dc:81:32:92:ea:9f:59:26:08:68:24: dd:da:cb:3a:a2:96:4c:f4:0b:a1:7d:a0:48:4e:94: 8a:de:3b:68:26:1b:2c:49:ae:f9:32:6a:47:9c:e8: ea:58:fe:29:15:da:38:f2:3f:71:53:37:28:60:be: a7:26:72:30:49:a6:a7:7e:65:81:0b:07:be:97:20: 8f:87:ad:73:62:89:10:52:0f:c8:fe:09:b6:54:53: ac:81:b0:d4:15:ef:33:53:cb:76:f0:0e:e2:6f:34: 2a:0f:42:d6:6b:5a:de:ba:13:2e:e5:bd:9c:83:c0: 6e:39:ba:d1:9b:9b:1b:bf:e0:6f:9f:96:ae:33:48: f6:a3:d2:25:38:8a:80:07:58:70:7e:91:de:59:7d: 29:3e:c4:cb:4e:e8:f5:1e:78:29:e9:0e:03:a4:16: 99:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:6E:55:60:2C:E8:77:53:CE:93:B4:53:64:99:81:B0:24:C5:AC:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/53e525d4-39a8-3e09-a5e2-111cbb592081.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:b1:ce:8d:01:2e:e5:d3:f2:c7:c3:47:24:c5:95:d1:f8:28: c1:bf:7b:83:71:2a:9a:fd:3c:ca:c5:17:b7:34:2b:0f:52:d6: b0:81:9f:63:bb:34:17:23:6c:e2:39:3b:83:e1:77:20:42:60: 71:ad:2f:ff:a7:65:f9:96:81:62:77:2a:c2:e0:43:51:0e:d6: 07:7a:aa:ec:9b:7d:eb:a0:18:d9:97:8e:9c:aa:6e:2a:27:77: 54:fb:21:e0:50:73:28:24:b2:ef:74:64:fd:fe:7d:48:ec:77: 0e:cf:af:7e:e3:55:6a:5b:11:9b:69:08:ab:f3:24:ff:22:34: f2:7a:fb:53:0b:cc:6a:f1:69:97:94:46:b7:f7:36:c9:2d:b1: 44:94:78:e5:88:25:aa:68:f3:42:cf:48:98:d7:38:e6:9d:43: c8:77:9e:2f:93:3f:2b:78:2a:20:73:de:fe:fa:c9:7c:6b:60: f1:f4:ea:e3:4c:e7:bd:a6:e9:b2:22:92:5f:10:81:2f:4b:a3: b0:8e:d3:26:82:52:d2:2d:d8:03:aa:b4:0c:67:9d:dc:32:76: 37:bf:d2:d5:1c:f5:62:12:00:05:a8:2e:2f:35:88:1a:f2:05: 15:d9:bd:57:96:ca:37:ad:f8:b0:27:70:bb:7d:8d:37:f3:c6: ec:34:31:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVNnXO6cHxgrQp2wgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI0MDMyMzEzMDAzMloXDTI0MDYyMTEzMDAzMlowLzEtMCsGA1UEAxMk Y2MzZWM1ZWUtYjg3MS00ZGMwLWIzNjQtNTk0MzY5YmZlNDU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlkH0DLN6f2TWh7sgw3Q2BYJ/mIfeBeRhzpQG dfCFDOwEU1d+KpwjDzSC2JpX7sz71nvhgUBRsZkr/qjzr1nfatK+sEoZdE3UTUNE tlNmiTnIpk5CIGhyZ8n5h+zO3IEykuqfWSYIaCTd2ss6opZM9AuhfaBITpSK3jto JhssSa75MmpHnOjqWP4pFdo48j9xUzcoYL6nJnIwSaanfmWBCwe+lyCPh61zYokQ Ug/I/gm2VFOsgbDUFe8zU8t28A7ibzQqD0LWa1reuhMu5b2cg8BuObrRm5sbv+Bv n5auM0j2o9IlOIqAB1hwfpHeWX0pPsTLTuj1Hngp6Q4DpBaZawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEduVWAs6HdTzpO0U2SZgbAkxazlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNTNlNTI1ZDQtMzlhOC0z ZTA5LWE1ZTItMTExY2JiNTkyMDgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF5VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHOxzo0BLuXT8sfDRyTFldH4KMG/e4NxKpr9PMrFF7c0Kw9S1rCBn2O7 NBcjbOI5O4PhdyBCYHGtL/+nZfmWgWJ3KsLgQ1EO1gd6quybfeugGNmXjpyqbion d1T7IeBQcygksu90ZP3+fUjsdw7Pr37jVWpbEZtpCKvzJP8iNPJ6+1MLzGrxaZeU Rrf3NsktsUSUeOWIJapo80LPSJjXOOadQ8h3ni+TPyt4KiBz3v76yXxrYPH06uNM 572m6bIikl8QgS9Lo7CO0yaCUtIt2AOqtAxnndwydje/0tUc9WISAAWoLi81iBry BRXZvVeWyjet+LAncLt9jTfzxuw0MQI= -----END CERTIFICATE-----Generated at Fri Apr 26 11:12:55 2024 by rpki-client on console-ams.rpki-client.org