$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/8bded033-c145-3aad-bef9-ec1a1c913937.roa File: 8bded033-c145-3aad-bef9-ec1a1c913937.roa (raw, json) Hash identifier: 9ozaMPkqC2KYLlrcOoYH9NfFBxIt0HAYWC388I6pZBQ= Subject key identifier: 36:DA:2A:CC:CD:14:25:4C:DD:27:EC:C7:43:92:EB:FD:09:8C:A8:41 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285845C873AB02DB2240B9055B22C0 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/8bded033-c145-3aad-bef9-ec1a1c913937.roa Signing time: Mon 06 May 2024 13:00:34 +0000 ROA not before: Mon 06 May 2024 13:00:34 +0000 ROA not after: Sun 04 Aug 2024 13:00:34 +0000 asID: 9009 IP address blocks: 172.94.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 May 2024 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:c8:73:ab:02:db:22:40:b9:05:5b:22:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: May 6 13:00:34 2024 GMT Not After : Aug 4 13:00:34 2024 GMT Subject: CN=bde49a47-47d1-4cb6-b7f1-136d7690dc79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:13:fb:48:58:fa:a0:0a:9d:4c:04:4d:31:ab: 0c:d4:31:d0:f6:ad:dd:b7:c0:29:fd:8c:cb:c5:59: 9e:96:eb:c9:15:1d:dc:4f:47:1f:17:fa:f4:08:1e: f3:7d:bc:c0:b5:5a:23:e9:9c:20:63:47:17:0b:d0: 5e:ee:d8:6f:74:89:26:d6:51:c9:4a:d8:ba:d6:84: 5c:f7:ed:23:16:6c:14:56:f0:2a:0a:04:81:11:5a: 93:5f:a3:b7:5b:36:ca:2c:d4:f9:be:4b:98:73:96: cb:3c:23:e9:3f:24:73:72:4b:b9:ce:e9:51:78:47: 38:f5:82:95:50:94:7e:91:d8:3c:21:5a:2d:ea:c5: d6:fa:21:6a:31:aa:11:e0:93:69:0f:40:47:d7:72: 68:ac:b8:c5:18:18:72:26:0b:ed:fb:6c:97:ee:e1: 5b:16:b9:c5:46:39:88:73:ce:99:67:69:f9:82:08: d7:41:cf:d5:dc:37:2c:0f:50:bd:8b:98:ad:0c:41: 9c:57:46:9b:ef:ff:07:2c:ae:91:a0:fe:5d:09:e3: 6a:83:0d:94:af:50:fb:40:10:34:89:8f:dc:4e:d9: 74:07:fa:4c:4b:c7:fc:3a:b1:df:03:34:1c:8f:ab: ea:32:8e:b0:35:1a:94:37:b3:58:d5:b9:4d:84:e1: af:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:DA:2A:CC:CD:14:25:4C:DD:27:EC:C7:43:92:EB:FD:09:8C:A8:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/8bded033-c145-3aad-bef9-ec1a1c913937.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:02:6a:23:6b:2b:b4:a1:93:40:41:1d:5b:90:b7:c6:ad:96: f5:98:eb:df:3f:a8:a9:52:62:9d:80:b3:7c:91:6e:06:dd:9e: 1f:a4:bb:a2:4c:15:2e:72:12:b8:80:5b:5c:4b:6f:29:19:7d: 51:9f:2d:65:49:5a:1b:ef:88:0d:6a:95:6f:8a:41:00:b9:0c: 6d:9d:15:06:4e:bd:e5:9d:71:90:59:74:5c:20:44:99:0c:85: 22:df:ff:59:d8:44:68:67:c4:c3:51:0d:b4:9d:25:39:8d:ad: b5:c9:08:5b:1c:8b:c2:0a:7e:0e:4d:cd:b1:2b:e0:d2:78:fc: 41:5e:96:04:b3:ba:9e:cc:c1:5f:d7:23:c0:c9:c1:44:8c:b7: 33:5f:fb:ea:05:12:94:cc:de:ac:d3:c9:a9:ec:5a:67:f8:82: e8:4b:7f:4b:a5:dc:30:bd:a9:74:80:ba:bd:b4:95:38:9f:bb: ca:9b:9b:cc:b3:94:44:93:57:00:b7:6a:c1:d2:d9:e9:0b:b8: 26:bd:46:a7:df:48:10:26:34:48:be:de:df:15:74:39:b8:d0: 2c:b2:39:16:00:4b:a4:89:06:60:d1:6d:59:74:1c:39:be:90: 20:c0:1a:4d:98:49:67:cd:91:fb:5f:09:d7:ae:65:08:ca:d5: c6:35:82:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXIc6sC2yJAuQVbIsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI0MDUwNjEzMDAzNFoXDTI0MDgwNDEzMDAzNFowLzEtMCsGA1UEAxMk YmRlNDlhNDctNDdkMS00Y2I2LWI3ZjEtMTM2ZDc2OTBkYzc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBP7SFj6oAqdTARNMasM1DHQ9q3dt8Ap/YzL xVmeluvJFR3cT0cfF/r0CB7zfbzAtVoj6ZwgY0cXC9Be7thvdIkm1lHJSti61oRc 9+0jFmwUVvAqCgSBEVqTX6O3WzbKLNT5vkuYc5bLPCPpPyRzcku5zulReEc49YKV UJR+kdg8IVot6sXW+iFqMaoR4JNpD0BH13JorLjFGBhyJgvt+2yX7uFbFrnFRjmI c86ZZ2n5ggjXQc/V3DcsD1C9i5itDEGcV0ab7/8HLK6RoP5dCeNqgw2Ur1D7QBA0 iY/cTtl0B/pMS8f8OrHfAzQcj6vqMo6wNRqUN7NY1blNhOGv5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDbaKszNFCVM3Sfsx0OS6/0JjKhBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvOGJkZWQwMzMtYzE0NS0z YWFkLWJlZjktZWMxYTFjOTEzOTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4JMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABECaiNrK7Shk0BBHVuQt8atlvWY698/qKlSYp2As3yRbgbdnh+ku6JM FS5yEriAW1xLbykZfVGfLWVJWhvviA1qlW+KQQC5DG2dFQZOveWdcZBZdFwgRJkM hSLf/1nYRGhnxMNRDbSdJTmNrbXJCFsci8IKfg5NzbEr4NJ4/EFelgSzup7MwV/X I8DJwUSMtzNf++oFEpTM3qzTyansWmf4guhLf0ul3DC9qXSAur20lTifu8qbm8yz lESTVwC3asHS2ekLuCa9RqffSBAmNEi+3t8VdDm40CyyORYAS6SJBmDRbVl0HDm+ kCDAGk2YSWfNkftfCdeuZQjK1cY1gr4= -----END CERTIFICATE-----Generated at Mon May 6 23:14:51 2024 by rpki-client on console-fra.rpki-client.org