$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/7b8c9d8e-2061-3c21-b077-496e1768ef18.roa File: 7b8c9d8e-2061-3c21-b077-496e1768ef18.roa (raw, json) Hash identifier: xfhS5picKP6ikvLfZ2XKnLzHAT+0tBaV5tITKaoq6T4= Subject key identifier: E1:7B:AD:D7:F2:A0:25:E8:27:16:96:E9:89:B7:2B:C6:2E:49:77:A1 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285845A428B3E4FD83E4AD3C3B4A80 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/7b8c9d8e-2061-3c21-b077-496e1768ef18.roa Signing time: Tue 23 Apr 2024 13:00:34 +0000 ROA not before: Tue 23 Apr 2024 13:00:34 +0000 ROA not after: Mon 22 Jul 2024 13:00:34 +0000 asID: 203020 IP address blocks: 172.111.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 May 2024 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:a4:28:b3:e4:fd:83:e4:ad:3c:3b:4a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Apr 23 13:00:34 2024 GMT Not After : Jul 22 13:00:34 2024 GMT Subject: CN=dcc122c8-3e83-44ee-ae93-353b33175fec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:22:bc:85:00:e9:95:ba:74:34:eb:7f:38:b3: 64:cc:d7:f9:24:70:74:89:84:52:70:52:81:33:7c: 1b:2a:82:18:89:de:3e:e5:70:9c:70:49:4c:d9:b1: c5:df:d9:e4:60:4c:cb:3a:eb:15:d5:40:ec:1b:cc: 89:4a:d9:dd:c9:f7:f9:a1:04:07:86:49:57:be:ea: a5:34:ad:7d:0f:86:2a:21:d2:36:38:5f:53:e7:e1: 30:9a:52:e8:5d:d3:ef:f0:aa:74:df:00:fd:43:17: f9:d2:ff:c9:c3:a1:b4:8d:c5:a3:73:53:1f:34:d5: 41:62:4a:d4:7e:71:ff:7c:d9:1d:ce:73:1d:d7:0c: 0f:8d:b2:bd:ef:2c:dc:e7:10:68:50:7e:31:58:ff: 9c:21:47:81:f6:02:77:67:49:3e:90:35:7e:20:49: 84:ab:37:c1:bc:c7:4e:46:ca:9d:88:9c:6c:8d:bc: f5:47:f4:8b:f9:9c:49:60:c3:18:ea:2d:ef:f7:06: c1:02:78:ad:43:8b:32:03:a7:8f:0e:a6:9f:ed:c2: 2d:1a:04:c5:0c:58:ca:91:b2:84:7e:0d:c1:72:fa: fc:c7:33:cb:f2:83:a1:2a:4c:68:63:60:4f:e4:84: 2a:bd:b0:84:cc:3c:54:1d:77:b4:2d:27:a4:b4:a7: 30:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:7B:AD:D7:F2:A0:25:E8:27:16:96:E9:89:B7:2B:C6:2E:49:77:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/7b8c9d8e-2061-3c21-b077-496e1768ef18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:7e:f6:9d:c4:18:71:24:87:6b:1e:cc:20:02:76:45:69:40: e9:8c:2e:8a:2f:15:67:26:a8:95:9e:57:0d:e4:93:fa:1c:f9: 8a:25:1f:45:61:7d:63:b5:52:0c:55:16:eb:9c:c1:17:13:2a: 54:73:de:9a:97:da:08:b6:49:75:a4:8a:46:9e:9d:e7:c8:91: 87:cc:80:f5:ae:1c:ba:59:d4:8f:11:59:fa:af:df:82:e4:00: 06:79:a9:00:c1:38:82:cd:78:9c:35:53:df:ac:71:c3:ee:8a: b5:3d:08:50:4f:4b:d7:10:59:5c:5f:26:d5:9f:50:b4:25:31: 0f:f2:17:50:e8:c0:65:fc:e5:ad:7e:6c:e2:6e:fd:96:82:9f: 7f:43:39:f2:c1:83:a1:3d:8c:37:4d:2c:8e:a2:85:fc:21:a5: 33:dc:d5:41:51:42:07:ad:28:4b:f6:41:37:69:ee:ca:7e:54: 0a:ac:4f:06:4e:2d:31:48:80:3d:21:32:b5:1d:af:37:81:09: 49:24:65:0e:1a:5f:c2:5b:ee:97:5d:f0:30:c4:22:84:92:09: d8:be:19:ef:3d:6c:f7:91:6f:5b:4b:66:c4:a8:c8:3a:0e:c9: a4:cc:29:a2:3f:c2:3f:51:2c:a1:77:44:c3:89:12:f1:d3:6a: 27:28:9b:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWkKLPk/YPkrTw7SoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI0MDQyMzEzMDAzNFoXDTI0MDcyMjEzMDAzNFowLzEtMCsGA1UEAxMk ZGNjMTIyYzgtM2U4My00NGVlLWFlOTMtMzUzYjMzMTc1ZmVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSK8hQDplbp0NOt/OLNkzNf5JHB0iYRScFKB M3wbKoIYid4+5XCccElM2bHF39nkYEzLOusV1UDsG8yJStndyff5oQQHhklXvuql NK19D4YqIdI2OF9T5+EwmlLoXdPv8Kp03wD9Qxf50v/Jw6G0jcWjc1MfNNVBYkrU fnH/fNkdznMd1wwPjbK97yzc5xBoUH4xWP+cIUeB9gJ3Z0k+kDV+IEmEqzfBvMdO RsqdiJxsjbz1R/SL+ZxJYMMY6i3v9wbBAnitQ4syA6ePDqaf7cItGgTFDFjKkbKE fg3Bcvr8xzPL8oOhKkxoY2BP5IQqvbCEzDxUHXe0LSektKcwtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOF7rdfyoCXoJxaW6Ym3K8YuSXehMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvN2I4YzlkOGUtMjA2MS0z YzIxLWIwNzctNDk2ZTE3NjhlZjE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEV+9p3EGHEkh2sezCACdkVpQOmMLoovFWcmqJWeVw3kk/oc+YolH0Vh fWO1UgxVFuucwRcTKlRz3pqX2gi2SXWkikaenefIkYfMgPWuHLpZ1I8RWfqv34Lk AAZ5qQDBOILNeJw1U9+sccPuirU9CFBPS9cQWVxfJtWfULQlMQ/yF1DowGX85a1+ bOJu/ZaCn39DOfLBg6E9jDdNLI6ihfwhpTPc1UFRQgetKEv2QTdp7sp+VAqsTwZO LTFIgD0hMrUdrzeBCUkkZQ4aX8Jb7pdd8DDEIoSSCdi+Ge89bPeRb1tLZsSoyDoO yaTMKaI/wj9RLKF3RMOJEvHTaicom6M= -----END CERTIFICATE-----Generated at Fri May 17 01:55:00 2024 by rpki-client on console-fra.rpki-client.org