$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a2b1e817-581b-3613-bff0-519b62d2c6f2.roa File: a2b1e817-581b-3613-bff0-519b62d2c6f2.roa (raw, json) Hash identifier: VDODyhhwDXd9ctcB0jHLmVTKcl42gmSCEGxDRVxAEao= Subject key identifier: 6B:32:B9:E8:3F:ED:1F:35:D6:2D:01:96:92:5E:53:ED:B6:1E:57:A5 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285845B21E22B349C608C08220D980 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a2b1e817-581b-3613-bff0-519b62d2c6f2.roa Signing time: Sun 28 Apr 2024 13:00:34 +0000 ROA not before: Sun 28 Apr 2024 13:00:34 +0000 ROA not after: Sat 27 Jul 2024 13:00:34 +0000 asID: 9009 IP address blocks: 172.111.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:b2:1e:22:b3:49:c6:08:c0:82:20:d9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Apr 28 13:00:34 2024 GMT Not After : Jul 27 13:00:34 2024 GMT Subject: CN=721e9f0c-62b0-4fea-8d6a-aba6be360d57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:8e:ea:f8:78:98:a5:83:dc:af:cf:00:87:5c: 4b:0c:66:d4:fc:a6:c2:05:b5:4a:74:fe:a4:ab:c1: 4e:79:d4:97:21:23:10:fa:ce:37:69:76:91:81:1f: 90:08:89:f2:6a:56:9a:63:7b:16:41:00:54:ba:18: b1:e0:ad:e0:66:f2:45:15:ae:15:8d:bb:2b:f8:c4: 09:3d:58:06:77:af:19:c6:37:11:58:ea:18:4d:c8: a8:81:8d:0c:02:89:95:e8:e1:93:d5:eb:e3:a6:fe: 3e:fc:a6:87:a2:de:e0:30:bf:5e:02:ea:fa:55:c0: a1:46:40:86:c2:db:51:70:1f:1c:c7:b5:85:fc:86: bf:e8:5d:ba:12:69:70:b1:9d:6a:fb:b2:a9:1c:54: b9:21:3b:f8:c3:d5:58:b4:d3:81:0c:30:c5:6d:8d: 6f:9e:cb:a3:29:18:4f:88:7a:a0:19:2a:38:02:f2: 4b:da:c0:c6:c9:6d:27:c5:66:a0:59:ff:a5:4d:33: 3c:1d:3d:8c:d1:1a:a3:d5:42:33:f7:44:92:0e:79: 57:ce:c8:40:d2:cf:a4:07:14:e6:99:b4:c2:72:55: ba:46:fe:be:f7:7e:0f:83:54:13:92:64:c8:c4:52: c6:7d:36:33:6b:1f:64:a9:fd:9a:5d:84:d3:af:61: a9:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:32:B9:E8:3F:ED:1F:35:D6:2D:01:96:92:5E:53:ED:B6:1E:57:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a2b1e817-581b-3613-bff0-519b62d2c6f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:80:f1:db:4d:da:89:72:be:0b:79:4b:c9:ea:e7:62:e7:b3: 56:d3:79:ae:01:5b:eb:fe:d2:74:fe:ba:25:46:d8:50:91:6b: eb:cd:fb:3d:e6:15:14:ab:27:0c:ab:81:af:fc:37:e5:20:4e: 95:34:98:93:6c:86:5c:e8:53:62:9a:d3:27:79:49:58:87:60: 1d:06:f7:6e:aa:bb:be:ee:90:18:89:0c:72:d1:c7:e3:d8:07: e7:6d:a6:1f:b1:4a:2f:28:b6:8d:ba:cf:25:f6:17:78:9f:a1: 7d:1d:3c:77:4d:d8:ff:ba:30:ae:7f:c0:5f:cc:8e:22:d2:e4: 21:31:fb:ee:8c:e9:23:3e:0d:18:cc:b7:92:14:83:7f:26:a8: f0:0e:36:d8:76:e6:68:6c:59:71:be:8e:34:23:ae:88:f8:fe: f1:5b:1d:be:f2:7d:6a:b6:35:dd:a3:83:86:9f:bc:4d:94:be: e2:e4:8f:c2:7d:d4:da:0f:1f:dd:3d:a5:f0:1b:81:f4:25:7f: fc:88:e1:6e:3e:0a:3c:99:4b:b5:cd:66:8a:61:05:42:01:29: a9:d7:a9:d4:1c:9e:65:94:e0:5a:6e:55:ff:9a:3d:5c:b1:9c: f0:a8:8d:43:4c:cb:ad:23:41:8a:74:f4:49:bf:2a:bd:fb:15: c9:aa:7a:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWyHiKzScYIwIIg2YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI0MDQyODEzMDAzNFoXDTI0MDcyNzEzMDAzNFowLzEtMCsGA1UEAxMk NzIxZTlmMGMtNjJiMC00ZmVhLThkNmEtYWJhNmJlMzYwZDU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjo7q+HiYpYPcr88Ah1xLDGbU/KbCBbVKdP6k q8FOedSXISMQ+s43aXaRgR+QCInyalaaY3sWQQBUuhix4K3gZvJFFa4Vjbsr+MQJ PVgGd68ZxjcRWOoYTciogY0MAomV6OGT1evjpv4+/KaHot7gML9eAur6VcChRkCG wttRcB8cx7WF/Ia/6F26EmlwsZ1q+7KpHFS5ITv4w9VYtNOBDDDFbY1vnsujKRhP iHqgGSo4AvJL2sDGyW0nxWagWf+lTTM8HT2M0Rqj1UIz90SSDnlXzshA0s+kBxTm mbTCclW6Rv6+934Pg1QTkmTIxFLGfTYzax9kqf2aXYTTr2GpvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGsyueg/7R811i0BlpJeU+22HlelMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYTJiMWU4MTctNTgxYi0z NjEzLWJmZjAtNTE5YjYyZDJjNmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/rMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHOA8dtN2olyvgt5S8nq52Lns1bTea4BW+v+0nT+uiVG2FCRa+vN+z3m FRSrJwyrga/8N+UgTpU0mJNshlzoU2Ka0yd5SViHYB0G926qu77ukBiJDHLRx+PY B+dtph+xSi8oto26zyX2F3ifoX0dPHdN2P+6MK5/wF/MjiLS5CEx++6M6SM+DRjM t5IUg38mqPAONth25mhsWXG+jjQjroj4/vFbHb7yfWq2Nd2jg4afvE2UvuLkj8J9 1NoPH909pfAbgfQlf/yI4W4+CjyZS7XNZophBUIBKanXqdQcnmWU4FpuVf+aPVyx nPCojUNMy60jQYp09Em/Kr37FcmqemU= -----END CERTIFICATE-----Generated at Mon May 6 06:27:55 2024 by rpki-client on console-fra.rpki-client.org