$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/61bf402f-81e3-3147-b52c-113334a06b11.roa File: 61bf402f-81e3-3147-b52c-113334a06b11.roa (raw, json) Hash identifier: b7lqz5thKNz/AVZ83ekYkiUi4+Ao2ws32umURaldEs0= Subject key identifier: 26:42:A9:AB:C1:CA:55:37:7F:EA:B4:74:08:E0:F6:4C:F1:64:4C:FB Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285844E7D53F93D847C95E200BCFFC Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/61bf402f-81e3-3147-b52c-113334a06b11.roa Signing time: Fri 16 Feb 2024 02:00:26 +0000 ROA not before: Fri 16 Feb 2024 02:00:26 +0000 ROA not after: Thu 16 May 2024 01:00:26 +0000 asID: 212238 IP address blocks: 172.94.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 29 Apr 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:e7:d5:3f:93:d8:47:c9:5e:20:0b:cf:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Feb 16 02:00:26 2024 GMT Not After : May 16 01:00:26 2024 GMT Subject: CN=2ad63195-8c98-44fc-9400-a4c738d1703d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:fd:08:fd:29:e0:c7:87:11:f2:39:7e:00:76: 0d:e1:3b:8c:00:23:e9:aa:a5:3a:56:7c:2f:98:fe: 3c:27:e7:70:b5:5d:18:c5:3f:9a:75:2b:d9:f2:34: 9d:27:af:c7:c1:01:41:e4:91:c0:82:2c:68:17:51: 1e:5e:50:0d:ce:e8:11:77:f2:69:cb:37:19:60:86: b0:80:54:44:9d:cf:67:85:f3:5f:52:88:65:10:66: bf:06:ef:35:f7:38:ee:13:45:4c:1b:e1:31:90:95: 6c:a1:96:61:e5:6f:bb:3d:d9:63:77:84:1d:b0:33: 3f:aa:f9:65:88:cc:a8:4c:e4:95:87:3b:31:b7:2b: a9:21:42:8c:c3:ca:9c:f6:c0:f8:9b:16:5c:1f:c8: 53:85:2c:c5:3b:11:c9:e6:09:db:be:dd:7d:57:31: 85:ed:7d:99:a6:31:6e:87:98:0f:a5:24:18:9c:e1: a3:71:e1:7f:f3:76:ab:23:86:31:11:65:42:a5:b6: 79:42:41:dc:76:fc:41:01:4d:ac:8c:71:4b:f2:fa: 64:d4:56:73:31:c8:6c:fd:89:74:11:ca:64:7c:23: 79:37:64:27:72:1e:5d:2a:0a:59:22:77:49:87:dd: 4a:ff:4d:98:93:44:96:f4:0d:a8:b3:0f:e1:77:d7: 72:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:42:A9:AB:C1:CA:55:37:7F:EA:B4:74:08:E0:F6:4C:F1:64:4C:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/61bf402f-81e3-3147-b52c-113334a06b11.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.97.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:76:ba:47:bd:bb:bc:65:3a:f8:cf:af:08:58:38:3d:91:86: 62:1f:83:49:1d:7c:a4:c7:1e:51:62:1f:36:d4:ca:8f:80:73: 50:16:c6:f4:e5:d5:fb:27:4b:b6:8d:b0:b5:c4:2d:24:9b:52: e9:92:b8:6a:8a:c1:50:45:dc:82:53:47:87:60:f1:f7:99:10: 62:6f:af:50:8d:b7:dc:00:70:d1:b3:ae:50:56:ba:0a:db:54: 12:3a:5f:fa:51:bf:3e:3e:57:e6:76:ef:76:69:12:10:31:0a: 1d:14:ef:70:14:ca:d0:36:b8:ba:df:2e:5e:99:81:a2:cc:51: 07:d4:8d:87:c9:5e:b2:69:5a:9f:4e:f3:ae:3e:f2:00:0b:58: 7f:5d:e2:eb:db:0a:43:5b:7e:d1:d8:45:5e:1b:13:d8:3b:77: 79:18:3e:cc:b5:4d:8e:d0:40:98:63:4a:0e:2a:ed:02:66:bc: 1e:a8:df:ea:ec:94:f0:90:fb:2f:1a:06:e7:e8:d6:68:96:01: 5c:4d:e6:00:15:ed:76:e1:a0:11:76:87:a4:82:1f:eb:e6:21: 49:a5:41:a2:47:ea:d6:da:54:31:58:26:65:f3:4d:38:be:25: 7b:71:f1:e8:f0:ba:f5:57:74:72:f2:f0:62:cc:5c:a6:e3:c6: 8b:a8:2c:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWETn1T+T2EfJXiALz/wwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI0MDIxNjAyMDAyNloXDTI0MDUxNjAxMDAyNlowLzEtMCsGA1UEAxMk MmFkNjMxOTUtOGM5OC00NGZjLTk0MDAtYTRjNzM4ZDE3MDNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqP0I/Sngx4cR8jl+AHYN4TuMACPpqqU6Vnwv mP48J+dwtV0YxT+adSvZ8jSdJ6/HwQFB5JHAgixoF1EeXlANzugRd/JpyzcZYIaw gFREnc9nhfNfUohlEGa/Bu819zjuE0VMG+ExkJVsoZZh5W+7Pdljd4QdsDM/qvll iMyoTOSVhzsxtyupIUKMw8qc9sD4mxZcH8hThSzFOxHJ5gnbvt19VzGF7X2ZpjFu h5gPpSQYnOGjceF/83arI4YxEWVCpbZ5QkHcdvxBAU2sjHFL8vpk1FZzMchs/Yl0 EcpkfCN5N2Qnch5dKgpZIndJh91K/02Yk0SW9A2osw/hd9dyzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCZCqavBylU3f+q0dAjg9kzxZEz7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNjFiZjQwMmYtODFlMy0z MTQ3LWI1MmMtMTEzMzM0YTA2YjExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF5hMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD92uke9u7xlOvjPrwhYOD2RhmIfg0kdfKTHHlFiHzbUyo+Ac1AWxvTl 1fsnS7aNsLXELSSbUumSuGqKwVBF3IJTR4dg8feZEGJvr1CNt9wAcNGzrlBWugrb VBI6X/pRvz4+V+Z273ZpEhAxCh0U73AUytA2uLrfLl6ZgaLMUQfUjYfJXrJpWp9O 864+8gALWH9d4uvbCkNbftHYRV4bE9g7d3kYPsy1TY7QQJhjSg4q7QJmvB6o3+rs lPCQ+y8aBufo1miWAVxN5gAV7XbhoBF2h6SCH+vmIUmlQaJH6tbaVDFYJmXzTTi+ JXtx8ejwuvVXdHLy8GLMXKbjxouoLAo= -----END CERTIFICATE-----Generated at Sun Apr 28 03:24:02 2024 by rpki-client on console-ams.rpki-client.org