$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/baa6a648-7ab8-39bf-8357-a787b0346893.roa File: baa6a648-7ab8-39bf-8357-a787b0346893.roa (raw, json) Hash identifier: Q/SeDNrtu3b0KwQxaQElkhY/EyC96i3ksxO1CITcT6s= Subject key identifier: D7:F4:C7:9F:53:63:30:00:5E:9A:D6:F2:0C:7B:9F:3C:FC:3C:27:17 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285845CE08F548BA4E2502AEACB480 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/baa6a648-7ab8-39bf-8357-a787b0346893.roa Signing time: Wed 08 May 2024 13:00:34 +0000 ROA not before: Wed 08 May 2024 13:00:34 +0000 ROA not after: Tue 06 Aug 2024 13:00:34 +0000 asID: 3223 IP address blocks: 172.94.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:ce:08:f5:48:ba:4e:25:02:ae:ac:b4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: May 8 13:00:34 2024 GMT Not After : Aug 6 13:00:34 2024 GMT Subject: CN=4387e5ce-75fc-4036-ab71-ccbcd1f15acd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:f9:07:bd:a5:77:fb:e4:5b:6b:69:fd:84:62: 5f:50:e8:30:70:0a:cf:cc:6c:5f:f1:3b:17:ca:14: c5:99:bf:af:31:f0:71:6a:eb:20:f9:56:c9:7b:07: 70:94:07:c9:cc:ad:9f:07:1e:7f:bf:81:4c:c9:da: 83:96:cd:ac:ab:3c:dc:32:c4:b1:4b:2f:d0:b4:3f: bf:0b:11:f6:e9:2c:96:88:7b:58:35:75:e4:f8:81: 46:42:76:85:d2:c5:80:13:da:0a:71:59:36:05:8b: 49:ae:e1:69:2e:9c:41:01:2c:bf:ad:34:4c:3f:de: ef:bf:73:f6:f9:cd:7b:ab:63:40:05:a4:18:b4:fe: 5e:03:bc:0f:f8:13:35:e9:91:d8:7e:d5:98:fd:3c: 38:3e:f7:4d:51:62:49:2c:d9:1f:a2:19:fc:4f:84: 33:b1:64:cd:90:c0:69:08:76:22:fb:87:5b:ad:69: 98:24:8f:9b:57:11:12:73:1c:cb:ed:84:78:44:7f: 40:71:10:31:a5:a4:2e:9e:82:5c:5f:36:f9:65:5e: 7e:b2:99:6d:0a:62:60:84:0a:6e:7e:d4:d7:af:f3: 6b:9e:cb:08:44:50:84:b5:ef:d4:f7:67:d3:a1:7c: 23:0b:4b:1e:02:cd:a4:4a:ca:74:4d:6f:fa:0b:8d: 90:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:F4:C7:9F:53:63:30:00:5E:9A:D6:F2:0C:7B:9F:3C:FC:3C:27:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/baa6a648-7ab8-39bf-8357-a787b0346893.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:0e:66:37:d5:cb:15:d7:2a:42:c4:0e:c7:32:b2:5f:40:03: 78:0d:c6:3d:da:39:3d:03:02:18:6f:ab:aa:d6:6c:aa:71:0b: 72:18:42:83:ce:20:61:91:63:b2:91:14:58:a6:f7:73:8d:25: 83:1d:cb:99:95:e6:e3:f6:a1:90:21:94:a4:c1:91:27:5c:16: 59:f0:24:d3:9d:cd:c3:ac:ca:58:23:2b:15:2a:f1:aa:db:b3: 7f:04:75:a3:e5:c4:cc:a4:1d:f0:66:8a:a4:fc:99:4b:ef:10: 04:d3:e9:9b:a4:22:73:4c:67:50:40:73:ed:0f:7a:23:38:ef: c8:9f:2a:db:72:92:57:be:50:ba:40:33:ba:3f:88:43:64:86: 23:b7:d6:c2:6f:25:ab:29:d5:3c:65:78:7f:d2:af:a7:49:25: 07:84:16:69:88:c6:64:7e:3b:8d:dc:a9:c9:a2:f1:9f:a4:5f: c8:67:6b:07:37:8a:46:57:da:24:b2:bd:3d:7d:64:71:ce:56: 2d:8c:95:00:cd:45:29:c8:a4:a8:30:d8:db:82:65:fa:bc:19: 26:9b:3b:8f:14:f0:80:c5:60:20:bd:c7:fc:7e:0b:dd:b9:b8: 16:4d:a6:2f:8f:4a:d2:bf:9b:49:ee:33:95:3b:a1:94:dd:2a: 0d:54:de:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXOCPVIuk4lAq6stIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI0MDUwODEzMDAzNFoXDTI0MDgwNjEzMDAzNFowLzEtMCsGA1UEAxMk NDM4N2U1Y2UtNzVmYy00MDM2LWFiNzEtY2NiY2QxZjE1YWNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhfkHvaV3++Rba2n9hGJfUOgwcArPzGxf8TsX yhTFmb+vMfBxausg+VbJewdwlAfJzK2fBx5/v4FMydqDls2sqzzcMsSxSy/QtD+/ CxH26SyWiHtYNXXk+IFGQnaF0sWAE9oKcVk2BYtJruFpLpxBASy/rTRMP97vv3P2 +c17q2NABaQYtP5eA7wP+BM16ZHYftWY/Tw4PvdNUWJJLNkfohn8T4QzsWTNkMBp CHYi+4dbrWmYJI+bVxEScxzL7YR4RH9AcRAxpaQunoJcXzb5ZV5+spltCmJghApu ftTXr/NrnssIRFCEte/U92fToXwjC0seAs2kSsp0TW/6C42Q2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNf0x59TYzAAXprW8gx7nzz8PCcXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYmFhNmE2NDgtN2FiOC0z OWJmLTgzNTctYTc4N2IwMzQ2ODkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4RMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACsOZjfVyxXXKkLEDscysl9AA3gNxj3aOT0DAhhvq6rWbKpxC3IYQoPO IGGRY7KRFFim93ONJYMdy5mV5uP2oZAhlKTBkSdcFlnwJNOdzcOsylgjKxUq8arb s38EdaPlxMykHfBmiqT8mUvvEATT6ZukInNMZ1BAc+0PeiM478ifKttykle+ULpA M7o/iENkhiO31sJvJasp1TxleH/Sr6dJJQeEFmmIxmR+O43cqcmi8Z+kX8hnawc3 ikZX2iSyvT19ZHHOVi2MlQDNRSnIpKgw2NuCZfq8GSabO48U8IDFYCC9x/x+C925 uBZNpi+PStK/m0nuM5U7oZTdKg1U3ic= -----END CERTIFICATE-----Generated at Mon May 20 01:48:00 2024 by rpki-client on console-ams.rpki-client.org