$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ca057c80-f0d7-36c5-8577-0eb8d1ae7e7a.roa File: ca057c80-f0d7-36c5-8577-0eb8d1ae7e7a.roa (raw, json) Hash identifier: TZCpjk3wuWd0cO/zdvNiGLQG4vMYEyGDVkWADfhJLNE= Subject key identifier: 87:BC:29:80:58:48:BA:C7:7C:86:23:38:20:AF:0D:46:41:2A:6B:17 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F432858458B088EA09FB4A67193C14B80 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ca057c80-f0d7-36c5-8577-0eb8d1ae7e7a.roa Signing time: Sun 14 Apr 2024 13:00:34 +0000 ROA not before: Sun 14 Apr 2024 13:00:34 +0000 ROA not after: Sat 13 Jul 2024 13:00:34 +0000 asID: 45671 IP address blocks: 172.111.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 27 Apr 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:8b:08:8e:a0:9f:b4:a6:71:93:c1:4b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Apr 14 13:00:34 2024 GMT Not After : Jul 13 13:00:34 2024 GMT Subject: CN=1c2dcfbf-69b9-4f56-8f28-d01bf92d8a34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:e8:d8:b9:c6:a7:c7:b5:31:46:39:0e:bf:ad: 71:d0:01:1e:29:69:a5:52:f8:8e:96:f4:91:1b:da: 47:c2:29:9f:ff:32:36:d4:ed:c7:fb:45:88:74:7b: 2d:1f:3b:2a:4a:8c:ec:8d:35:53:06:a4:d8:8c:b5: 09:ab:9a:31:d4:69:19:df:4c:d7:ba:be:28:c3:8b: 96:ff:e7:00:16:bf:84:26:54:77:76:a3:70:29:31: e9:78:d2:f7:99:e4:f7:16:c1:e3:07:94:d9:c5:03: 9b:d7:7b:e8:b0:3b:de:0f:fb:4c:e8:37:d2:d9:b5: c0:55:ee:f4:40:84:30:12:bd:e4:e8:a5:8d:4f:9f: a7:dd:ce:4e:45:21:79:c9:ec:65:a9:4c:13:1d:42: 68:61:f2:36:31:56:ca:07:39:e9:82:b1:21:fb:ea: 4f:2b:e9:90:39:c4:ce:72:84:a7:47:3b:5b:bb:ff: 1b:38:23:25:07:b3:86:87:b9:87:56:42:0c:42:88: 53:76:79:a6:d2:88:a0:38:3e:ee:71:bf:95:5d:10: 2b:d9:e7:7f:e9:7d:fb:5b:1f:2b:4c:57:43:ae:a5: 95:bc:85:c6:aa:e2:b6:56:1d:a4:ec:df:27:a7:f0: fe:c2:e6:d9:03:49:5d:38:d1:01:8f:f7:05:ae:da: b5:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:BC:29:80:58:48:BA:C7:7C:86:23:38:20:AF:0D:46:41:2A:6B:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ca057c80-f0d7-36c5-8577-0eb8d1ae7e7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:45:52:91:a1:a4:40:0d:fa:35:30:d2:fc:62:c1:ec:93:76: 82:1d:23:52:6d:17:17:13:33:be:45:aa:a5:09:ea:46:51:c9: d2:aa:4e:2e:ee:e5:8a:e5:ab:57:ba:86:c9:6a:5e:e2:bb:92: 98:dd:7f:10:5a:eb:ff:2e:b3:e8:99:ca:ff:b5:e0:f0:29:de: 74:d8:30:ac:11:be:b8:fc:12:14:ac:13:ed:02:6b:a2:91:c1: c9:c6:09:89:84:2f:47:77:a1:ee:22:be:49:d3:9b:80:f0:5b: 5a:ea:76:99:74:de:75:7c:d9:04:68:51:14:08:79:3f:b4:0a: 45:bf:04:e4:51:11:66:07:a9:d7:7e:f0:67:f2:df:16:39:ab: e8:15:ad:85:c5:0a:12:78:09:38:7d:f1:f1:63:52:65:61:60: 32:9c:a3:f0:58:36:4c:73:4c:50:20:f7:cd:17:27:d7:06:92: e1:1b:28:73:2c:5f:b8:5e:ee:73:f4:82:bc:ca:8f:54:55:fb: 79:17:dd:dd:65:9e:45:22:79:46:85:c0:ac:55:50:98:6c:39: 0f:5b:e5:b4:de:6c:1c:99:cc:d1:7b:7d:7e:f4:f0:01:c5:71: 4a:62:8d:b9:1e:93:f8:64:b8:3b:97:df:78:6c:38:23:6e:d4: 02:20:94:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWLCI6gn7SmcZPBS4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI0MDQxNDEzMDAzNFoXDTI0MDcxMzEzMDAzNFowLzEtMCsGA1UEAxMk MWMyZGNmYmYtNjliOS00ZjU2LThmMjgtZDAxYmY5MmQ4YTM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgOjYucanx7UxRjkOv61x0AEeKWmlUviOlvSR G9pHwimf/zI21O3H+0WIdHstHzsqSozsjTVTBqTYjLUJq5ox1GkZ30zXur4ow4uW /+cAFr+EJlR3dqNwKTHpeNL3meT3FsHjB5TZxQOb13vosDveD/tM6DfS2bXAVe70 QIQwEr3k6KWNT5+n3c5ORSF5yexlqUwTHUJoYfI2MVbKBznpgrEh++pPK+mQOcTO coSnRztbu/8bOCMlB7OGh7mHVkIMQohTdnmm0oigOD7ucb+VXRAr2ed/6X37Wx8r TFdDrqWVvIXGquK2Vh2k7N8np/D+wubZA0ldONEBj/cFrtq1uwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIe8KYBYSLrHfIYjOCCvDUZBKmsXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvY2EwNTdjODAtZjBkNy0z NmM1LTg1NzctMGViOGQxYWU3ZTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIFFUpGhpEAN+jUw0vxiweyTdoIdI1JtFxcTM75FqqUJ6kZRydKqTi7u 5Yrlq1e6hslqXuK7kpjdfxBa6/8us+iZyv+14PAp3nTYMKwRvrj8EhSsE+0Ca6KR wcnGCYmEL0d3oe4ivknTm4DwW1rqdpl03nV82QRoURQIeT+0CkW/BORREWYHqdd+ 8Gfy3xY5q+gVrYXFChJ4CTh98fFjUmVhYDKco/BYNkxzTFAg980XJ9cGkuEbKHMs X7he7nP0grzKj1RV+3kX3d1lnkUieUaFwKxVUJhsOQ9b5bTebByZzNF7fX708AHF cUpijbkek/hkuDuX33hsOCNu1AIglFU= -----END CERTIFICATE-----Generated at Thu Apr 25 22:42:34 2024 by rpki-client on console-fra.rpki-client.org