$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/902266be-57f4-3c03-a13a-cbc839fb0cb0.roa File: 902266be-57f4-3c03-a13a-cbc839fb0cb0.roa (raw, json) Hash identifier: vLrGfswuzqlxWuneEEV6ZgnZ3xnI8hw/Yb1XMT0NGZA= Subject key identifier: D5:D0:10:8C:29:42:F4:27:DB:1B:9C:C6:CC:33:94:CB:3F:1C:DA:22 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F432858457D13355B733B3FCEC89CAD60 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/902266be-57f4-3c03-a13a-cbc839fb0cb0.roa Signing time: Tue 09 Apr 2024 13:00:34 +0000 ROA not before: Tue 09 Apr 2024 13:00:34 +0000 ROA not after: Mon 08 Jul 2024 13:00:34 +0000 asID: 3223 IP address blocks: 172.94.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 May 2024 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:7d:13:35:5b:73:3b:3f:ce:c8:9c:ad:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Apr 9 13:00:34 2024 GMT Not After : Jul 8 13:00:34 2024 GMT Subject: CN=d27a63ab-8c41-4f7a-b5ac-38a0c82a1239 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f1:d7:dc:14:5f:7e:06:bf:8c:51:14:d3:bc: d1:28:70:ef:c9:d2:a0:2c:81:00:87:10:09:c9:ed: f5:93:23:7e:6c:74:ca:6f:52:90:5d:b5:45:eb:83: 8b:c4:2a:e6:94:9d:77:20:9a:f1:79:cd:df:c9:22: 4b:3d:37:15:33:12:62:1c:fe:bf:ae:68:36:8e:1a: 9d:8d:a9:c8:06:ea:ba:02:fb:4a:5d:16:74:7a:20: 52:2a:1b:d4:72:a7:1f:17:1d:0f:46:38:16:33:4e: 07:08:10:a3:b2:67:d1:7b:52:f2:f0:80:2d:90:36: 9f:98:10:8f:38:3a:51:2e:2d:40:fb:72:65:1a:61: 7f:00:32:e4:5b:ed:f0:8d:86:26:e1:77:f3:4c:66: 78:d3:66:20:d1:21:1c:44:1b:a4:be:26:c5:3a:ca: 08:c6:6a:58:91:26:9c:79:fb:87:4a:d1:72:93:84: 9b:e1:bb:bb:bf:05:c5:24:a2:b7:b7:79:0d:e3:e3: c4:82:4c:e4:1a:16:dc:7a:c1:ff:8a:b4:80:e8:69: d8:58:2e:df:35:f3:3b:73:93:a9:3c:0b:15:21:04: 85:00:f5:96:8e:6f:87:b8:3e:03:22:15:a3:27:22: ea:74:ad:e9:cf:29:3c:1b:e8:45:01:c3:0f:c0:42: 68:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:D0:10:8C:29:42:F4:27:DB:1B:9C:C6:CC:33:94:CB:3F:1C:DA:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/902266be-57f4-3c03-a13a-cbc839fb0cb0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:b8:bc:7e:3a:3d:8e:90:0b:9c:55:ea:50:a8:bc:b0:e9:d2: 63:6c:6c:c6:9f:10:d3:d5:6f:e8:66:4f:a0:60:30:bf:b0:1b: ba:19:73:94:05:bf:2e:ba:79:2e:f5:55:ea:3b:0e:bb:da:a5: 7e:f2:71:3a:70:07:2d:01:6d:70:ba:3d:6e:e5:21:be:54:b5: 9f:ac:99:de:66:a3:d6:5a:81:0a:ee:0a:1c:ce:3d:f9:1d:c1: 02:ee:d8:3c:56:6e:a5:e7:7e:84:da:ea:78:0d:ca:71:44:22: 53:db:20:bb:62:0c:41:4a:5f:53:a5:d2:7d:04:7f:2c:29:f4: 98:df:c6:0f:b4:ae:85:99:4b:33:7d:5c:66:ba:55:74:66:80: f3:f0:c3:48:e5:2f:ca:07:4a:67:d7:d9:b4:19:92:c6:97:de: 92:b9:59:b8:2b:0c:40:a4:15:cd:8d:43:30:f0:d9:92:d3:85: 14:d0:4c:64:89:f8:18:d5:29:3b:04:6c:09:a3:50:8a:f0:11: cd:bc:71:87:ba:a0:e3:e6:c9:87:c9:67:7d:47:66:9e:39:79: b9:5b:d4:8c:b8:66:7e:03:bf:ce:52:0c:53:7f:5c:64:a6:ee: f8:53:09:c6:ad:d2:ae:d4:23:76:8d:20:85:e9:50:83:2b:b8: a2:f1:77:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEV9EzVbczs/zsicrWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI0MDQwOTEzMDAzNFoXDTI0MDcwODEzMDAzNFowLzEtMCsGA1UEAxMk ZDI3YTYzYWItOGM0MS00ZjdhLWI1YWMtMzhhMGM4MmExMjM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxfHX3BRffga/jFEU07zRKHDvydKgLIEAhxAJ ye31kyN+bHTKb1KQXbVF64OLxCrmlJ13IJrxec3fySJLPTcVMxJiHP6/rmg2jhqd janIBuq6AvtKXRZ0eiBSKhvUcqcfFx0PRjgWM04HCBCjsmfRe1Ly8IAtkDafmBCP ODpRLi1A+3JlGmF/ADLkW+3wjYYm4XfzTGZ402Yg0SEcRBukvibFOsoIxmpYkSac efuHStFyk4Sb4bu7vwXFJKK3t3kN4+PEgkzkGhbcesH/irSA6GnYWC7fNfM7c5Op PAsVIQSFAPWWjm+HuD4DIhWjJyLqdK3pzyk8G+hFAcMPwEJoPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNXQEIwpQvQn2xucxswzlMs/HNoiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvOTAyMjY2YmUtNTdmNC0z YzAzLWExM2EtY2JjODM5ZmIwY2IwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHm4vH46PY6QC5xV6lCovLDp0mNsbMafENPVb+hmT6BgML+wG7oZc5QF vy66eS71Veo7DrvapX7ycTpwBy0BbXC6PW7lIb5UtZ+smd5mo9ZagQruChzOPfkd wQLu2DxWbqXnfoTa6ngNynFEIlPbILtiDEFKX1Ol0n0Efywp9Jjfxg+0roWZSzN9 XGa6VXRmgPPww0jlL8oHSmfX2bQZksaX3pK5WbgrDECkFc2NQzDw2ZLThRTQTGSJ +BjVKTsEbAmjUIrwEc28cYe6oOPmyYfJZ31HZp45eblb1Iy4Zn4Dv85SDFN/XGSm 7vhTCcat0q7UI3aNIIXpUIMruKLxdwQ= -----END CERTIFICATE-----Generated at Fri May 17 01:55:00 2024 by rpki-client on console-fra.rpki-client.org