$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/857a8ac3-9e70-3af6-a632-538bb6d423d8.roa File: 857a8ac3-9e70-3af6-a632-538bb6d423d8.roa (raw, json) Hash identifier: ImokCqa6KOERgmBkm4CXsOY2MlSLCXZDa4GteOTJLe8= Subject key identifier: 40:40:B5:C0:22:18:E2:C0:89:12:2E:B6:47:48:C4:28:36:D5:70:DA Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285845A428B3932201ED9060DA3100 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/857a8ac3-9e70-3af6-a632-538bb6d423d8.roa Signing time: Tue 23 Apr 2024 13:00:34 +0000 ROA not before: Tue 23 Apr 2024 13:00:34 +0000 ROA not after: Mon 22 Jul 2024 13:00:34 +0000 asID: 212238 IP address blocks: 172.94.92.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 28 Apr 2024 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:a4:28:b3:93:22:01:ed:90:60:da:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Apr 23 13:00:34 2024 GMT Not After : Jul 22 13:00:34 2024 GMT Subject: CN=805e61fe-d953-4f27-aeb3-b2a71ac14b1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:3a:b0:08:03:25:6e:b5:80:1e:bd:3a:9d:8b: 08:a0:e8:b9:8b:25:04:e8:b8:db:26:f1:aa:2b:a3: 77:e0:7a:8e:3c:41:2f:ed:d8:34:7d:37:cd:2c:90: fc:2f:e4:eb:02:20:8e:68:2e:38:ec:f1:4c:9d:f1: 3b:d1:c7:73:76:03:b2:4a:0c:8e:e8:87:e6:8c:fc: 66:40:ce:ec:a3:46:c4:e5:1a:61:f6:87:d8:35:34: 8e:19:d3:2a:18:e6:3c:53:92:76:0d:96:ce:48:57: a3:96:00:eb:6a:15:4b:0b:ab:60:5f:1f:ae:b0:98: 56:9d:1a:30:fc:4d:d0:13:20:09:d4:1f:4f:49:90: 40:4a:27:39:6e:fb:bc:65:e3:ed:ee:75:a2:51:08: 39:46:fc:a7:45:7c:46:91:e0:27:ce:e1:46:53:c5: 8d:e2:37:fe:cc:40:8c:68:c7:b8:b0:bf:b5:c3:bd: c4:cd:56:03:c8:fe:6a:44:f5:07:37:e0:f3:eb:61: 78:bc:77:bb:af:2c:95:f4:98:ea:46:10:11:b8:4f: ba:b8:cb:0f:40:06:ea:13:60:12:c0:a9:77:19:fe: 6a:5a:4e:bc:c5:7a:b9:aa:b0:51:56:8c:5e:ab:fb: 1c:6e:69:8b:5a:47:41:06:14:9a:3b:cb:f4:5e:a1: 55:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:40:B5:C0:22:18:E2:C0:89:12:2E:B6:47:48:C4:28:36:D5:70:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/857a8ac3-9e70-3af6-a632-538bb6d423d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.92.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:91:a4:dc:f2:e1:10:67:65:27:2c:9d:65:be:c7:4b:68:b7: c5:45:7f:f1:16:c5:14:fc:15:89:43:4b:05:0c:35:27:f0:c2: 74:31:a8:66:c7:b2:4e:9c:1f:7e:99:f2:fb:eb:97:62:68:d5: 38:c7:99:de:33:bb:b8:a1:19:f8:0f:ad:b9:92:ec:22:21:37: b3:d2:4b:63:d8:da:98:61:6e:1a:90:55:62:64:72:84:7c:0f: 1e:3b:46:c0:11:d2:5b:7c:8a:c4:26:83:29:4f:00:71:5b:9f: 88:51:9e:dd:d4:5f:e7:fb:6e:7a:f0:fb:d3:bb:bb:ed:61:d3: 49:32:12:96:6d:94:81:bb:76:84:5d:23:15:e9:b1:38:12:86: b2:eb:76:34:87:f3:70:18:32:ff:cb:11:b6:a3:ef:11:ae:0f: 53:42:91:d5:e5:6b:e2:b9:e3:d7:8c:9c:b2:01:0e:a6:50:06: c1:e1:a3:a7:c4:9a:95:b8:6f:14:fe:75:d3:19:07:61:0a:16: 35:89:92:7c:4a:46:60:24:4a:a0:e6:86:4a:9f:31:58:78:5f: f5:59:dd:66:f4:a0:b3:a3:27:b4:ff:36:a0:5e:b1:82:f8:d3: fe:9f:57:ea:68:e7:f5:75:aa:2b:62:3d:e4:11:6e:36:6e:b8: 19:6d:e9:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWkKLOTIgHtkGDaMQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI0MDQyMzEzMDAzNFoXDTI0MDcyMjEzMDAzNFowLzEtMCsGA1UEAxMk ODA1ZTYxZmUtZDk1My00ZjI3LWFlYjMtYjJhNzFhYzE0YjFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2TqwCAMlbrWAHr06nYsIoOi5iyUE6LjbJvGq K6N34HqOPEEv7dg0fTfNLJD8L+TrAiCOaC447PFMnfE70cdzdgOySgyO6IfmjPxm QM7so0bE5Rph9ofYNTSOGdMqGOY8U5J2DZbOSFejlgDrahVLC6tgXx+usJhWnRow /E3QEyAJ1B9PSZBASic5bvu8ZePt7nWiUQg5RvynRXxGkeAnzuFGU8WN4jf+zECM aMe4sL+1w73EzVYDyP5qRPUHN+Dz62F4vHe7ryyV9JjqRhARuE+6uMsPQAbqE2AS wKl3Gf5qWk68xXq5qrBRVoxeq/scbmmLWkdBBhSaO8v0XqFVYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEBAtcAiGOLAiRIutkdIxCg21XDaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvODU3YThhYzMtOWU3MC0z YWY2LWE2MzItNTM4YmI2ZDQyM2Q4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF5cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAaRpNzy4RBnZScsnWW+x0tot8VFf/EWxRT8FYlDSwUMNSfwwnQxqGbH sk6cH36Z8vvrl2Jo1TjHmd4zu7ihGfgPrbmS7CIhN7PSS2PY2phhbhqQVWJkcoR8 Dx47RsAR0lt8isQmgylPAHFbn4hRnt3UX+f7bnrw+9O7u+1h00kyEpZtlIG7doRd IxXpsTgShrLrdjSH83AYMv/LEbaj7xGuD1NCkdXla+K549eMnLIBDqZQBsHho6fE mpW4bxT+ddMZB2EKFjWJknxKRmAkSqDmhkqfMVh4X/VZ3Wb0oLOjJ7T/NqBesYL4 0/6fV+po5/V1qitiPeQRbjZuuBlt6ZY= -----END CERTIFICATE-----Generated at Sat Apr 27 15:30:33 2024 by rpki-client on console-ams.rpki-client.org