$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e896b2a5-29cd-342f-b12a-8f1ff76d0a15.roa File: e896b2a5-29cd-342f-b12a-8f1ff76d0a15.roa (raw, json) Hash identifier: b9cfB1U/ZoWgqK+pvpQkx+wY3oTgs81qE+62XdJ100I= Subject key identifier: 41:DE:3C:E6:EA:85:66:CB:C7:5C:51:3B:24:DA:F1:31:55:8B:1D:6A Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285844D17FC73D60DDB2CCB950FF40 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e896b2a5-29cd-342f-b12a-8f1ff76d0a15.roa Signing time: Thu 08 Feb 2024 02:00:26 +0000 ROA not before: Thu 08 Feb 2024 02:00:26 +0000 ROA not after: Wed 08 May 2024 01:00:26 +0000 asID: 212238 IP address blocks: 172.111.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 29 Apr 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:d1:7f:c7:3d:60:dd:b2:cc:b9:50:ff:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Feb 8 02:00:26 2024 GMT Not After : May 8 01:00:26 2024 GMT Subject: CN=6b37d9e7-c2ee-4cf2-b813-49a16dcd745c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a2:0c:89:52:06:a6:a5:21:99:e5:fd:87:7d: e7:04:c2:9f:5e:27:20:7d:1d:53:66:69:37:90:30: d0:a1:f7:5f:5c:24:eb:5f:7f:b3:e6:39:ef:0a:d2: cc:e8:72:27:68:29:4e:f7:5e:b9:53:8a:47:dd:4c: db:94:bb:53:28:81:75:0b:7b:43:f1:48:34:43:ae: 3e:77:4a:c1:02:64:3e:85:6b:de:f9:4a:f6:e8:73: c6:b9:24:be:55:36:1c:48:7c:5c:9b:22:c5:ec:e7: 0d:8b:71:f9:3e:b0:c3:d9:ea:7d:55:35:f3:c0:81: 74:96:d8:ad:da:84:98:ad:ef:ee:ce:70:99:fc:c1: 29:09:0a:38:6c:79:7d:58:1b:19:97:6e:b2:7f:9f: b7:54:3d:2c:13:16:b5:c4:62:57:61:58:6c:7b:17: a7:01:12:02:9f:9d:76:c3:4d:c9:68:7e:47:07:99: a3:68:40:33:83:74:2d:f3:9c:af:60:9e:ee:30:b6: 17:84:41:13:a2:95:a9:06:c8:0a:7c:30:47:c0:9d: b7:b0:3f:8d:77:f4:39:f8:48:33:36:de:d2:b7:33: 71:8f:fc:10:39:06:93:8f:f3:c7:28:dd:b8:7b:f2: 64:36:b1:4c:20:e6:49:91:b9:64:bb:74:9b:14:94: ef:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:DE:3C:E6:EA:85:66:CB:C7:5C:51:3B:24:DA:F1:31:55:8B:1D:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e896b2a5-29cd-342f-b12a-8f1ff76d0a15.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.174.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:01:86:aa:dc:2e:ed:3f:75:81:e8:c5:de:61:d1:84:6d:59: 55:f4:43:20:ce:59:75:76:92:62:ec:2f:af:e3:65:83:d5:22: 8a:e3:40:66:d8:ad:18:1a:25:8d:6b:f4:fb:85:58:ee:77:07: d9:65:f6:df:61:66:f5:2e:55:df:82:3a:df:cc:14:3a:1c:a9: 40:d1:e2:ed:8d:7f:c7:06:cf:4d:1c:95:4d:cf:3d:01:32:f5: be:3e:f2:df:4e:61:49:6e:85:d0:f7:1a:1f:53:bc:f9:04:ac: c9:3c:ea:60:64:11:56:b8:15:dc:73:71:c2:42:00:35:0f:40: 3c:70:e7:57:ae:8c:c7:eb:34:ab:3f:13:a5:21:09:1b:26:03: 90:66:b5:ce:26:0f:79:12:a3:a9:fa:61:67:82:0e:c4:df:60: d1:4a:12:0e:e3:38:bf:cc:86:57:f2:ac:a4:ff:c1:9a:55:d0: ef:57:8c:3d:39:ee:33:3c:a7:76:b8:ed:d0:f6:31:ef:1a:8f: 5b:49:b7:ff:0f:77:42:5a:13:30:01:d2:a4:6f:5b:45:92:f3: 58:f7:ea:a8:26:13:cb:2a:6f:a5:85:94:bc:27:5e:80:b3:96: ce:27:b6:a1:f9:b4:3b:cc:50:80:66:9b:e8:e3:b0:20:b7:86: 73:57:ff:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWETRf8c9YN2yzLlQ/0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI0MDIwODAyMDAyNloXDTI0MDUwODAxMDAyNlowLzEtMCsGA1UEAxMk NmIzN2Q5ZTctYzJlZS00Y2YyLWI4MTMtNDlhMTZkY2Q3NDVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6IMiVIGpqUhmeX9h33nBMKfXicgfR1TZmk3 kDDQofdfXCTrX3+z5jnvCtLM6HInaClO9165U4pH3UzblLtTKIF1C3tD8Ug0Q64+ d0rBAmQ+hWve+Ur26HPGuSS+VTYcSHxcmyLF7OcNi3H5PrDD2ep9VTXzwIF0ltit 2oSYre/uznCZ/MEpCQo4bHl9WBsZl26yf5+3VD0sExa1xGJXYVhsexenARICn512 w03JaH5HB5mjaEAzg3Qt85yvYJ7uMLYXhEETopWpBsgKfDBHwJ23sD+Nd/Q5+Egz Nt7StzNxj/wQOQaTj/PHKN24e/JkNrFMIOZJkblku3SbFJTveQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEHePObqhWbLx1xROyTa8TFVix1qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZTg5NmIyYTUtMjljZC0z NDJmLWIxMmEtOGYxZmY3NmQwYTE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+uMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABEBhqrcLu0/dYHoxd5h0YRtWVX0QyDOWXV2kmLsL6/jZYPVIorjQGbY rRgaJY1r9PuFWO53B9ll9t9hZvUuVd+COt/MFDocqUDR4u2Nf8cGz00clU3PPQEy 9b4+8t9OYUluhdD3Gh9TvPkErMk86mBkEVa4FdxzccJCADUPQDxw51eujMfrNKs/ E6UhCRsmA5Bmtc4mD3kSo6n6YWeCDsTfYNFKEg7jOL/MhlfyrKT/wZpV0O9XjD05 7jM8p3a47dD2Me8aj1tJt/8Pd0JaEzAB0qRvW0WS81j36qgmE8sqb6WFlLwnXoCz ls4ntqH5tDvMUIBmm+jjsCC3hnNX/1o= -----END CERTIFICATE-----Generated at Sun Apr 28 03:24:02 2024 by rpki-client on console-ams.rpki-client.org