$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/b7f9d26e-2d0e-3ec7-b02b-324e16017495.roa File: b7f9d26e-2d0e-3ec7-b02b-324e16017495.roa (raw, json) Hash identifier: uai6pDvik0NZpDJ2QkE+I7ZxhOa9XX6IiKZf/n0LRNI= Subject key identifier: A6:91:37:BB:7C:5A:A0:EC:BC:71:F3:D5:AC:3D:EC:76:22:0A:40:D2 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285845B7B38E0A1350677F8AFAC200 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/b7f9d26e-2d0e-3ec7-b02b-324e16017495.roa Signing time: Tue 30 Apr 2024 13:00:34 +0000 ROA not before: Tue 30 Apr 2024 13:00:34 +0000 ROA not after: Mon 29 Jul 2024 13:00:34 +0000 asID: 9009 IP address blocks: 172.94.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 May 2024 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:b7:b3:8e:0a:13:50:67:7f:8a:fa:c2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Apr 30 13:00:34 2024 GMT Not After : Jul 29 13:00:34 2024 GMT Subject: CN=80b84f42-6f0b-432c-be7b-be1bea089c56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:38:78:23:57:c7:46:a5:79:9c:e6:ab:4b:05: 49:f7:74:63:c0:f0:26:be:5f:42:df:76:12:fb:45: 5b:42:4d:98:40:6a:40:46:27:4e:11:88:75:e0:c6: 18:a7:97:3b:6d:fc:ff:97:2e:f3:58:e3:50:c4:2a: 66:08:0d:66:09:ff:94:3b:87:8c:90:2e:1d:34:b6: ab:dc:d5:38:fc:9e:1e:c3:4b:5b:b1:24:2a:49:7a: a1:e8:12:7d:b0:e8:62:b1:d0:44:63:b8:e4:f3:4f: 9d:4b:6f:eb:bc:ae:46:33:6f:1d:94:12:07:73:d1: 9a:45:d3:38:b3:0f:ee:84:cd:f9:a4:c1:8e:2a:a3: 8e:71:c9:24:48:e2:f4:a5:c4:6b:0f:82:9b:6b:b8: 29:03:16:65:85:91:76:ee:54:60:3d:78:52:ed:b2: 98:7e:5c:2f:bf:8e:e8:33:7f:74:88:14:fe:ae:54: 91:ba:44:65:41:e2:ca:39:f3:b1:8c:a5:33:e4:58: a1:84:fe:05:63:ee:f1:d6:08:57:45:6e:ae:0e:e0: 04:20:d1:c5:cb:48:4a:0a:b1:c0:27:88:97:bf:d1: 06:db:e7:df:c3:cf:d6:d5:36:04:d0:29:37:51:ca: 35:6e:06:f4:36:77:a7:35:77:17:76:23:03:f9:a3: bb:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:91:37:BB:7C:5A:A0:EC:BC:71:F3:D5:AC:3D:EC:76:22:0A:40:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/b7f9d26e-2d0e-3ec7-b02b-324e16017495.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:e4:f3:01:13:71:34:6a:f5:a0:6d:3a:f3:d3:45:2a:c8:69: 34:67:a9:17:b7:4d:7a:f4:55:fc:c2:65:dd:d4:2a:40:8e:49: 28:d0:df:0b:ea:7a:bd:e6:a5:3d:7c:72:47:99:98:fd:91:d2: 75:81:3f:43:30:c6:19:b5:c2:bb:00:66:a6:13:dd:22:ee:fb: 7e:0e:8f:88:7c:78:3f:33:d3:83:ab:60:98:d3:d3:83:ee:65: df:12:f5:2b:ea:32:24:d1:b1:3d:fd:6c:47:fc:4e:dc:ac:88: 32:38:1a:7a:c7:a1:f7:2a:f9:ce:38:76:26:46:99:99:a2:cb: 7b:da:e9:05:ff:ff:74:9b:f5:1e:51:7c:90:07:bc:22:f8:15: 88:d8:f2:d3:28:10:a6:d3:9a:a6:fe:e3:a3:55:cf:e4:7b:f7: 64:80:55:49:0a:e8:ce:86:d8:17:78:2f:46:5f:21:7d:c8:a5: cc:fa:dd:d8:03:1d:0d:a7:7a:b2:40:1c:a2:39:ec:4a:95:db: c6:44:c0:01:2f:b3:8f:85:c8:fc:5a:28:a0:1e:93:5a:0e:81: 8f:49:07:25:4e:be:78:ad:ab:fb:10:8f:37:20:20:2f:16:a2: 74:ad:06:1d:68:8b:70:e6:66:67:9e:97:59:e7:9e:7a:de:25: 34:cc:d4:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEW3s44KE1Bnf4r6wgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI0MDQzMDEzMDAzNFoXDTI0MDcyOTEzMDAzNFowLzEtMCsGA1UEAxMk ODBiODRmNDItNmYwYi00MzJjLWJlN2ItYmUxYmVhMDg5YzU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDh4I1fHRqV5nOarSwVJ93RjwPAmvl9C33YS +0VbQk2YQGpARidOEYh14MYYp5c7bfz/ly7zWONQxCpmCA1mCf+UO4eMkC4dNLar 3NU4/J4ew0tbsSQqSXqh6BJ9sOhisdBEY7jk80+dS2/rvK5GM28dlBIHc9GaRdM4 sw/uhM35pMGOKqOOcckkSOL0pcRrD4Kba7gpAxZlhZF27lRgPXhS7bKYflwvv47o M390iBT+rlSRukRlQeLKOfOxjKUz5FihhP4FY+7x1ghXRW6uDuAEINHFy0hKCrHA J4iXv9EG2+ffw8/W1TYE0Ck3Uco1bgb0NnenNXcXdiMD+aO7KwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKaRN7t8WqDsvHHz1aw97HYiCkDSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYjdmOWQyNmUtMmQwZS0z ZWM3LWIwMmItMzI0ZTE2MDE3NDk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF5vMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHHk8wETcTRq9aBtOvPTRSrIaTRnqRe3TXr0VfzCZd3UKkCOSSjQ3wvq er3mpT18ckeZmP2R0nWBP0Mwxhm1wrsAZqYT3SLu+34Oj4h8eD8z04OrYJjT04Pu Zd8S9SvqMiTRsT39bEf8TtysiDI4GnrHofcq+c44diZGmZmiy3va6QX//3Sb9R5R fJAHvCL4FYjY8tMoEKbTmqb+46NVz+R792SAVUkK6M6G2Bd4L0ZfIX3Ipcz63dgD HQ2nerJAHKI57EqV28ZEwAEvs4+FyPxaKKAek1oOgY9JByVOvnitq/sQjzcgIC8W onStBh1oi3DmZmeel1nnnnreJTTM1PQ= -----END CERTIFICATE-----Generated at Mon May 6 14:50:15 2024 by rpki-client on console-fra.rpki-client.org