$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c0c31a53-49d3-3138-a70b-db853eeca25c.roa File: c0c31a53-49d3-3138-a70b-db853eeca25c.roa (raw, json) Hash identifier: BShRpCBsurG+IUcwwGM68hgdrvf1oYtDgia+csqFM+I= Subject key identifier: A8:C3:1F:C0:3E:34:CA:0C:F0:2D:CD:8E:02:B0:0D:AF:82:FE:50:23 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285845131ADB121EF7FABC37963480 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c0c31a53-49d3-3138-a70b-db853eeca25c.roa Signing time: Sat 02 Mar 2024 14:00:31 +0000 ROA not before: Sat 02 Mar 2024 14:00:31 +0000 ROA not after: Fri 31 May 2024 13:00:31 +0000 asID: 212238 IP address blocks: 172.111.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 29 Apr 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:13:1a:db:12:1e:f7:fa:bc:37:96:34:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Mar 2 14:00:31 2024 GMT Not After : May 31 13:00:31 2024 GMT Subject: CN=4378f0d2-2f8b-4299-8288-b9f1ecc75090 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:73:00:f4:99:4f:80:52:72:01:79:ac:c3:6c: 85:75:4f:7c:06:22:5e:da:7a:a8:4a:69:17:c2:52: 6c:44:91:a2:bf:e5:f9:56:b6:be:31:59:ea:fb:74: 60:64:1f:47:c4:47:c8:55:04:1c:ba:10:92:2e:1a: c0:d2:74:aa:cc:72:b2:6c:9f:5f:c3:04:48:86:7f: db:74:df:96:00:79:33:16:fd:79:9b:c2:42:50:e5: a2:68:a4:bc:96:28:f6:d2:c5:97:58:75:7c:50:97: e5:0e:8a:24:d7:2f:5c:56:77:c8:49:fe:d3:28:88: 50:86:9b:03:3b:c2:e8:d4:a8:99:03:df:4f:bb:21: bf:dc:da:6d:a5:42:7d:db:67:14:c3:74:80:6a:cf: 18:a8:40:ca:7e:fd:1f:6f:36:7d:20:50:03:52:64: cc:b4:32:dc:d4:8a:a9:e1:51:7c:6d:3e:a7:c5:1b: d2:be:03:54:ab:56:36:29:99:86:b4:38:6b:1b:72: 32:02:2b:f4:05:1f:f5:d3:62:b3:a2:85:86:7a:a9: f7:6b:a8:95:c3:1a:3a:81:67:86:f2:3a:82:b2:fc: 0d:e1:ec:d5:4f:61:10:b2:f7:f0:03:2d:aa:8d:82: 8d:48:b4:a8:55:bc:dc:a3:3c:2f:19:53:b4:de:c3: be:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:C3:1F:C0:3E:34:CA:0C:F0:2D:CD:8E:02:B0:0D:AF:82:FE:50:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c0c31a53-49d3-3138-a70b-db853eeca25c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:e1:6d:22:48:ad:b8:7a:71:1d:f8:ad:ce:47:a3:d9:21:c1: dd:02:d8:99:50:ff:e2:aa:29:2f:f0:61:3c:2d:60:fe:a8:9c: 06:28:cd:1b:fe:a8:f4:36:f7:20:9b:ac:3e:92:e3:77:b3:fd: 54:78:2a:f0:95:5a:ee:93:de:1e:d0:ba:37:87:05:62:ec:88: 03:18:75:fa:14:dc:56:82:5b:c7:27:7c:fd:78:41:bb:69:0c: 68:55:ab:86:8e:76:8e:e9:fc:34:35:33:3a:58:3d:a4:ed:a0: eb:33:68:2e:30:e2:a3:3e:b1:9e:81:63:94:85:3b:c0:51:9e: cd:91:75:6b:b1:8c:d4:7f:04:5d:55:c7:60:2d:be:f3:f1:95: e5:a0:ea:b7:36:52:16:e3:87:90:ef:e4:bc:8b:37:b2:b4:dd: c8:77:0a:8d:62:96:76:af:53:c3:e4:8e:41:51:53:8d:35:3a: 09:5d:93:af:38:3c:0b:80:e9:21:87:84:0b:5e:a1:6e:fb:43: 7c:fd:70:90:b3:90:38:3d:94:d3:24:55:75:2b:50:b8:75:47: 35:35:e5:cf:ab:ea:71:ba:b4:9d:a8:19:cb:1b:a8:7a:f9:7c: 70:ff:55:87:53:bd:dc:3d:df:b5:d3:f9:7d:0f:69:60:a3:df: 27:58:22:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUTGtsSHvf6vDeWNIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI0MDMwMjE0MDAzMVoXDTI0MDUzMTEzMDAzMVowLzEtMCsGA1UEAxMk NDM3OGYwZDItMmY4Yi00Mjk5LTgyODgtYjlmMWVjYzc1MDkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3MA9JlPgFJyAXmsw2yFdU98BiJe2nqoSmkX wlJsRJGiv+X5Vra+MVnq+3RgZB9HxEfIVQQcuhCSLhrA0nSqzHKybJ9fwwRIhn/b dN+WAHkzFv15m8JCUOWiaKS8lij20sWXWHV8UJflDook1y9cVnfISf7TKIhQhpsD O8Lo1KiZA99PuyG/3NptpUJ922cUw3SAas8YqEDKfv0fbzZ9IFADUmTMtDLc1Iqp 4VF8bT6nxRvSvgNUq1Y2KZmGtDhrG3IyAiv0BR/102KzooWGeqn3a6iVwxo6gWeG 8jqCsvwN4ezVT2EQsvfwAy2qjYKNSLSoVbzcozwvGVO03sO+JwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKjDH8A+NMoM8C3NjgKwDa+C/lAjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYzBjMzFhNTMtNDlkMy0z MTM4LWE3MGItZGI4NTNlZWNhMjVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF/hbSJIrbh6cR34rc5Ho9khwd0C2JlQ/+KqKS/wYTwtYP6onAYozRv+ qPQ29yCbrD6S43ez/VR4KvCVWu6T3h7QujeHBWLsiAMYdfoU3FaCW8cnfP14Qbtp DGhVq4aOdo7p/DQ1MzpYPaTtoOszaC4w4qM+sZ6BY5SFO8BRns2RdWuxjNR/BF1V x2AtvvPxleWg6rc2Uhbjh5Dv5LyLN7K03ch3Co1ilnavU8PkjkFRU401Ogldk684 PAuA6SGHhAteoW77Q3z9cJCzkDg9lNMkVXUrULh1RzU15c+r6nG6tJ2oGcsbqHr5 fHD/VYdTvdw937XT+X0PaWCj3ydYIh0= -----END CERTIFICATE-----Generated at Sun Apr 28 03:24:02 2024 by rpki-client on console-ams.rpki-client.org