$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f894ad21-c2c3-3920-b6cb-d6a2875cdc6d.roa File: f894ad21-c2c3-3920-b6cb-d6a2875cdc6d.roa (raw, json) Hash identifier: 1ZMNSsG28izgAcsrF0+NtIgrRL+em6WPRtxr23BQRj8= Subject key identifier: 60:8A:4C:2E:73:83:FC:FE:BE:D3:A3:57:28:AA:4C:62:2E:05:05:3B Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F432858453CDD551F2096FA6635D3A380 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f894ad21-c2c3-3920-b6cb-d6a2875cdc6d.roa Signing time: Sun 17 Mar 2024 13:00:30 +0000 ROA not before: Sun 17 Mar 2024 13:00:30 +0000 ROA not after: Sat 15 Jun 2024 13:00:30 +0000 asID: 212238 IP address blocks: 172.111.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 28 Apr 2024 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:3c:dd:55:1f:20:96:fa:66:35:d3:a3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Mar 17 13:00:30 2024 GMT Not After : Jun 15 13:00:30 2024 GMT Subject: CN=87dfbb82-4b06-4dfe-8063-259adff377df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:ba:6c:f1:02:80:92:3e:fd:4f:d5:a0:4d:b3: 6c:71:47:98:31:fb:88:c0:a3:c6:a2:f8:f6:e3:c8: 20:54:82:a3:b1:88:f1:b4:be:d6:bb:18:6a:f7:84: e9:23:ea:70:91:45:41:b3:32:c7:68:dd:11:e2:bf: 2b:c1:76:b7:c0:af:0c:0f:6c:1f:9b:29:52:08:da: ad:bc:ee:02:c6:1b:bd:a2:21:ba:6a:55:7c:a2:fb: a6:33:c9:60:6b:52:c3:00:11:0f:44:26:db:8e:9a: 75:55:73:eb:db:66:6d:cb:25:d1:65:19:1d:f8:55: d5:01:14:25:9f:e2:ec:b6:bf:49:42:d4:0d:5c:f5: 84:e3:e2:0d:65:41:f0:d7:b2:d7:5a:0c:46:cb:9f: d0:bd:8f:da:de:fb:d3:9e:57:79:25:87:90:b4:18: 0f:fb:60:d6:11:7a:ca:42:35:c8:ca:88:72:28:31: 3e:a3:45:f6:60:ce:2e:34:83:8a:15:50:5d:89:9f: e1:b3:0f:b5:ef:9b:9e:3e:53:bb:9e:06:40:6d:31: cb:de:71:14:98:0e:4f:f0:00:9b:33:e5:b2:27:8e: 45:1d:26:58:6e:d3:ee:d2:89:e2:8f:eb:91:eb:b3: 35:6b:a0:0a:98:eb:92:7e:79:7c:6f:95:cc:57:c5: f2:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:8A:4C:2E:73:83:FC:FE:BE:D3:A3:57:28:AA:4C:62:2E:05:05:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f894ad21-c2c3-3920-b6cb-d6a2875cdc6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.149.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:91:da:9f:65:12:79:2b:a9:ee:a7:75:0d:bd:5e:74:63:11: 94:45:c6:49:66:71:db:f0:f7:03:ce:25:29:18:ba:b8:f7:f9: a3:3d:0b:2f:52:f7:1e:af:e7:a5:76:14:13:d2:8e:c5:13:36: aa:51:aa:20:7a:5f:b5:8a:39:39:6d:06:01:34:9e:a2:96:18: a8:c1:8c:b4:7b:2e:25:87:2a:b7:bc:ec:1a:0e:57:55:ca:67: d1:f5:c2:ec:27:10:a0:d8:2e:57:0f:70:73:29:7a:08:03:35: ee:d8:8e:36:c7:6b:6a:33:bb:7d:b1:a3:55:a3:40:43:fe:04: d8:51:00:ae:5e:fd:32:7a:7e:52:d4:ba:4c:31:b5:7c:c6:1d: 65:4a:13:34:a0:dc:0c:31:16:68:59:9c:1a:6e:51:c2:d1:52: 2a:7b:47:ec:04:1b:9a:ba:06:49:ca:4c:87:28:3f:9a:94:1c: 76:4c:ab:86:cd:ca:8d:23:54:3e:88:f6:2f:8c:d5:0a:51:32: 65:31:a9:d3:69:f4:b8:46:ac:73:96:c3:2d:13:b6:16:03:37: 74:d2:ba:63:cc:2a:52:e9:f9:3e:c8:5e:fd:9a:b1:9b:8c:c3: 8b:37:c1:26:7d:0f:3c:73:57:ec:86:ac:1c:90:9b:bf:ee:41: bc:8f:b9:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEU83VUfIJb6ZjXTo4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI0MDMxNzEzMDAzMFoXDTI0MDYxNTEzMDAzMFowLzEtMCsGA1UEAxMk ODdkZmJiODItNGIwNi00ZGZlLTgwNjMtMjU5YWRmZjM3N2RmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkrps8QKAkj79T9WgTbNscUeYMfuIwKPGovj2 48ggVIKjsYjxtL7Wuxhq94TpI+pwkUVBszLHaN0R4r8rwXa3wK8MD2wfmylSCNqt vO4Cxhu9oiG6alV8ovumM8lga1LDABEPRCbbjpp1VXPr22ZtyyXRZRkd+FXVARQl n+Lstr9JQtQNXPWE4+INZUHw17LXWgxGy5/QvY/a3vvTnld5JYeQtBgP+2DWEXrK QjXIyohyKDE+o0X2YM4uNIOKFVBdiZ/hsw+175uePlO7ngZAbTHL3nEUmA5P8ACb M+WyJ45FHSZYbtPu0onij+uR67M1a6AKmOuSfnl8b5XMV8XymwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGCKTC5zg/z+vtOjVyiqTGIuBQU7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZjg5NGFkMjEtYzJjMy0z OTIwLWI2Y2ItZDZhMjg3NWNkYzZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADaR2p9lEnkrqe6ndQ29XnRjEZRFxklmcdvw9wPOJSkYurj3+aM9Cy9S 9x6v56V2FBPSjsUTNqpRqiB6X7WKOTltBgE0nqKWGKjBjLR7LiWHKre87BoOV1XK Z9H1wuwnEKDYLlcPcHMpeggDNe7YjjbHa2ozu32xo1WjQEP+BNhRAK5e/TJ6flLU ukwxtXzGHWVKEzSg3AwxFmhZnBpuUcLRUip7R+wEG5q6BknKTIcoP5qUHHZMq4bN yo0jVD6I9i+M1QpRMmUxqdNp9LhGrHOWwy0TthYDN3TSumPMKlLp+T7IXv2asZuM w4s3wSZ9DzxzV+yGrByQm7/uQbyPuXE= -----END CERTIFICATE-----Generated at Sat Apr 27 15:30:33 2024 by rpki-client on console-ams.rpki-client.org