$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a1c85ec1-36d7-3c6b-ba9f-62cea1b1e759.roa File: a1c85ec1-36d7-3c6b-ba9f-62cea1b1e759.roa (raw, json) Hash identifier: ddcwpLb+4ncIg43fDazjO4rySdRS8gA7KrQ+IYFT+JA= Subject key identifier: DC:DD:21:07:0E:85:20:0E:FA:2B:2E:42:2A:45:28:1D:63:DB:A2:C2 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F432858457A488DD2DE34257166E30000 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a1c85ec1-36d7-3c6b-ba9f-62cea1b1e759.roa Signing time: Mon 08 Apr 2024 13:00:34 +0000 ROA not before: Mon 08 Apr 2024 13:00:34 +0000 ROA not after: Sun 07 Jul 2024 13:00:34 +0000 asID: 3223 IP address blocks: 172.111.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 May 2024 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:7a:48:8d:d2:de:34:25:71:66:e3:00:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Apr 8 13:00:34 2024 GMT Not After : Jul 7 13:00:34 2024 GMT Subject: CN=346efef7-ab19-44f8-b0e6-57dd158b8d43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:71:17:a0:41:16:50:ce:01:c5:d8:95:7c:a2: b6:67:91:bf:9e:99:cf:ce:76:0a:8f:ff:5f:c6:80: 00:59:f5:46:c0:5a:4a:6c:89:b4:25:95:ea:92:47: e3:35:3b:1c:a6:8a:e8:a3:5b:70:4a:70:fd:78:d3: b8:6c:96:57:b8:9a:d7:dc:f7:5f:f8:ef:7c:ae:20: 85:5f:ed:88:35:49:b3:23:38:20:02:76:3a:24:70: 61:ab:84:17:1f:bd:90:9a:4a:7b:0f:5e:f5:9c:09: bd:01:9c:93:87:6e:59:c4:4a:97:5e:2a:e4:52:b2: 5b:06:5b:5c:0c:48:4b:1b:e1:07:40:7e:47:d4:0a: 4d:e3:24:5f:af:42:bd:74:20:84:a6:ec:b2:62:fc: a7:a1:48:d6:a4:13:93:15:e9:62:6b:b4:67:ab:0a: 65:77:4c:25:c9:4e:b0:71:a6:89:cf:33:5f:21:8d: aa:57:0f:a4:36:1c:d1:28:ba:71:10:0e:ea:1d:a7: 14:2d:87:e5:f3:e7:01:c9:c7:4e:1a:bd:2c:3b:84: 68:ca:7a:e0:5c:fc:0f:84:3a:08:25:47:2c:98:ff: 0e:b3:35:f1:26:7f:6f:93:1b:f1:0b:0d:e6:f9:18: 99:c6:1d:9a:de:36:01:d3:d6:2b:c3:97:bc:5c:7d: 54:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:DD:21:07:0E:85:20:0E:FA:2B:2E:42:2A:45:28:1D:63:DB:A2:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a1c85ec1-36d7-3c6b-ba9f-62cea1b1e759.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.178.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:54:0f:eb:9d:4f:0e:b7:f7:08:91:67:a8:70:01:e3:fa:76: 74:19:f6:90:32:19:26:c5:20:29:6f:fd:14:35:27:a8:43:29: cc:05:8a:0e:9b:13:87:2d:a1:28:cb:5a:98:2d:45:9d:56:f8: 05:28:d2:94:46:27:88:24:b6:ad:41:c4:c4:f1:82:86:96:68: bc:6b:15:98:be:83:26:4d:af:de:24:03:bc:6a:23:f4:43:0b: 54:2f:20:65:6a:91:ed:62:67:ee:82:01:df:56:9e:3f:31:5a: f1:c8:4f:c4:1d:47:20:d7:4a:9f:9e:79:7c:36:00:bb:8d:5d: 46:ed:f2:4e:8b:1e:67:eb:2d:20:bd:d2:01:fc:7d:4b:5c:f6: 26:e4:65:3d:f2:2b:17:40:37:1c:ce:41:c1:15:cd:38:57:56: 50:24:a2:42:de:bc:db:23:e7:d4:b6:64:7c:a1:98:37:35:29: 7d:3d:52:fa:9e:d2:87:3e:7b:14:48:21:1f:d7:e9:f1:34:58: 25:d2:24:cd:3c:13:79:54:77:ac:7f:86:39:5c:b8:ce:cb:e4: bb:26:e0:f4:6f:06:a5:79:19:85:97:bd:d6:ba:80:a5:5b:b2: cf:c1:09:ec:4c:e2:e0:43:7a:7d:58:b7:53:04:3f:5a:47:be: cc:13:00:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEV6SI3S3jQlcWbjAAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI0MDQwODEzMDAzNFoXDTI0MDcwNzEzMDAzNFowLzEtMCsGA1UEAxMk MzQ2ZWZlZjctYWIxOS00NGY4LWIwZTYtNTdkZDE1OGI4ZDQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhHEXoEEWUM4BxdiVfKK2Z5G/npnPznYKj/9f xoAAWfVGwFpKbIm0JZXqkkfjNTscporoo1twSnD9eNO4bJZXuJrX3Pdf+O98riCF X+2INUmzIzggAnY6JHBhq4QXH72Qmkp7D171nAm9AZyTh25ZxEqXXirkUrJbBltc DEhLG+EHQH5H1ApN4yRfr0K9dCCEpuyyYvynoUjWpBOTFelia7Rnqwpld0wlyU6w caaJzzNfIY2qVw+kNhzRKLpxEA7qHacULYfl8+cBycdOGr0sO4RoynrgXPwPhDoI JUcsmP8OszXxJn9vkxvxCw3m+RiZxh2a3jYB09Yrw5e8XH1UBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNzdIQcOhSAO+isuQipFKB1j26LCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYTFjODVlYzEtMzZkNy0z YzZiLWJhOWYtNjJjZWExYjFlNzU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+yMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAABUD+udTw639wiRZ6hwAeP6dnQZ9pAyGSbFIClv/RQ1J6hDKcwFig6b E4ctoSjLWpgtRZ1W+AUo0pRGJ4gktq1BxMTxgoaWaLxrFZi+gyZNr94kA7xqI/RD C1QvIGVqke1iZ+6CAd9Wnj8xWvHIT8QdRyDXSp+eeXw2ALuNXUbt8k6LHmfrLSC9 0gH8fUtc9ibkZT3yKxdANxzOQcEVzThXVlAkokLevNsj59S2ZHyhmDc1KX09Uvqe 0oc+exRIIR/X6fE0WCXSJM08E3lUd6x/hjlcuM7L5Lsm4PRvBqV5GYWXvda6gKVb ss/BCexM4uBDen1Yt1MEP1pHvswTACE= -----END CERTIFICATE-----Generated at Sat May 18 16:09:41 2024 by rpki-client on console-ams.rpki-client.org