$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081/8da53e8c-5502-3180-9dc8-5ee8d81f5481.roa File: 8da53e8c-5502-3180-9dc8-5ee8d81f5481.roa (raw, json) Hash identifier: 5WL/G8JTCLB7gB9s2xaUdHcTTs2vUxqtHLIr+b/uS0U= Subject key identifier: F8:D6:11:FA:31:B9:C1:AB:70:96:11:5B:C0:46:22:63:BB:E5:27:FE Certificate issuer: /CN=2ccef7a6-b8db-4753-b71f-dd2e40d58081 Certificate serial: 010D0C9F432858454808152776704E18800F6D00 Authority key identifier: E2:C2:CF:84:93:6A:CB:B4:7D:66:12:04:5C:13:88:E7:23:E3:F0:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081/8da53e8c-5502-3180-9dc8-5ee8d81f5481.roa Signing time: Thu 21 Mar 2024 13:00:33 +0000 ROA not before: Thu 21 Mar 2024 13:00:33 +0000 ROA not after: Wed 19 Jun 2024 13:00:33 +0000 asID: 26548 IP address blocks: 172.111.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081/2ccef7a6-b8db-4753-b71f-dd2e40d58081.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081/2ccef7a6-b8db-4753-b71f-dd2e40d58081.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 May 2024 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:48:08:15:27:76:70:4e:18:80:0f:6d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ccef7a6-b8db-4753-b71f-dd2e40d58081 Validity Not Before: Mar 21 13:00:33 2024 GMT Not After : Jun 19 13:00:33 2024 GMT Subject: CN=20600fae-a006-4a0b-be58-02c5c187475c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:74:ed:4f:95:f3:ef:b8:06:47:e4:65:3d:60: 54:3a:69:71:da:37:eb:63:58:0f:f0:4a:b5:31:37: 9e:85:b3:b8:57:55:f5:b7:ed:d9:30:32:5f:bf:bc: 47:da:4f:36:e9:33:9a:b8:3a:54:cf:89:98:ee:94: 53:c9:2f:30:86:3a:a6:a1:8d:67:67:83:17:d5:29: 19:15:f1:9c:da:ef:5b:cd:5d:ae:02:b7:cc:03:41: f8:a0:e3:92:aa:94:dd:19:c5:a5:8b:8b:76:54:5b: bc:66:a8:f4:e8:5b:5e:3a:89:4a:fa:2f:dc:f3:ea: 80:8a:e3:6c:1b:d0:7c:93:76:f4:f7:43:3c:93:2d: 85:02:02:d8:24:88:90:d6:08:48:af:e2:4d:64:c7: 85:2a:0f:bc:20:9c:d6:f2:96:ce:5c:b8:1a:31:02: d3:46:1d:dd:e1:56:45:31:25:7e:23:2e:c8:83:42: e7:67:92:1b:9f:1d:35:dc:57:23:ec:56:0e:19:0e: b7:35:bd:18:4d:33:52:9c:33:ea:26:54:ab:ad:37: 2f:ac:e9:bb:fa:15:34:7e:93:ee:06:4f:60:dc:ed: 8b:1f:c1:f7:d3:9a:d3:e2:7e:8b:5d:db:ac:40:10: d4:da:5f:34:a6:4d:e8:50:c0:43:c9:77:61:82:b7: 23:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:D6:11:FA:31:B9:C1:AB:70:96:11:5B:C0:46:22:63:BB:E5:27:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081/8da53e8c-5502-3180-9dc8-5ee8d81f5481.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081/2ccef7a6-b8db-4753-b71f-dd2e40d58081.crl X509v3 Authority Key Identifier: keyid:E2:C2:CF:84:93:6A:CB:B4:7D:66:12:04:5C:13:88:E7:23:E3:F0:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081.cer sbgp-ipAddrBlock: critical IPv4: 172.111.48.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:18:a7:99:60:4c:e2:f3:b5:ca:89:00:d1:ef:b1:e4:7b:82: 67:59:e0:97:57:99:57:b9:f4:f5:04:21:ad:14:81:d3:4e:c5: 2f:23:0c:23:4f:57:e0:d1:4f:cb:dc:c2:a2:ae:94:e3:90:bc: cb:b6:c9:24:ca:1a:2f:ec:42:43:a7:69:a8:97:55:e3:be:65: a2:81:ca:dd:4d:a6:ed:e6:6a:96:98:2a:d6:fc:f7:e4:67:44: 38:16:30:2e:33:b5:db:5c:97:9a:82:ad:38:44:22:e5:c4:ab: ca:ff:78:18:4d:e8:20:bb:49:d5:16:7d:47:72:8c:d4:d2:ed: 7e:0a:d7:ad:da:9e:0c:4c:43:36:d4:9e:99:25:f0:ee:45:5a: a9:a5:e0:c0:91:2e:ab:c5:68:aa:86:f2:e6:fe:b2:f8:9f:be: e9:72:17:06:1f:ff:91:b5:3a:b9:19:0e:3e:35:d5:e4:96:04: d9:8d:2f:c8:eb:af:84:c8:45:8d:48:b7:c7:84:d6:9a:c0:1a: a4:53:e6:f5:c5:0e:ba:6c:16:a2:a2:07:d4:d9:79:07:38:dc: 56:b1:b4:61:d5:2a:a4:01:7b:d1:14:f2:5f:3d:7f:ff:36:7f: 31:a9:be:4e:9c:17:86:44:52:79:33:7d:72:4e:58:8b:b1:c9: f6:93:e5:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVICBUndnBOGIAPbQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmNjZWY3YTYtYjhkYi00NzUzLWI3MWYtZGQyZTQwZDU4 MDgxMB4XDTI0MDMyMTEzMDAzM1oXDTI0MDYxOTEzMDAzM1owLzEtMCsGA1UEAxMk MjA2MDBmYWUtYTAwNi00YTBiLWJlNTgtMDJjNWMxODc0NzVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5XTtT5Xz77gGR+RlPWBUOmlx2jfrY1gP8Eq1 MTeehbO4V1X1t+3ZMDJfv7xH2k826TOauDpUz4mY7pRTyS8whjqmoY1nZ4MX1SkZ FfGc2u9bzV2uArfMA0H4oOOSqpTdGcWli4t2VFu8Zqj06FteOolK+i/c8+qAiuNs G9B8k3b090M8ky2FAgLYJIiQ1ghIr+JNZMeFKg+8IJzW8pbOXLgaMQLTRh3d4VZF MSV+Iy7Ig0LnZ5Ibnx013Fcj7FYOGQ63Nb0YTTNSnDPqJlSrrTcvrOm7+hU0fpPu Bk9g3O2LH8H305rT4n6LXdusQBDU2l80pk3oUMBDyXdhgrcj+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPjWEfoxucGrcJYRW8BGImO75Sf+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yY2Nl ZjdhNi1iOGRiLTQ3NTMtYjcxZi1kZDJlNDBkNTgwODEvOGRhNTNlOGMtNTUwMi0z MTgwLTlkYzgtNWVlOGQ4MWY1NDgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMmNjZWY3YTYtYjhkYi00NzUzLWI3 MWYtZGQyZTQwZDU4MDgxLzJjY2VmN2E2LWI4ZGItNDc1My1iNzFmLWRkMmU0MGQ1 ODA4MS5jcmwwHwYDVR0jBBgwFoAU4sLPhJNqy7R9ZhIEXBOI5yPj8J0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yY2NlZjdhNi1iOGRiLTQ3NTMtYjcxZi1kZDJl NDBkNTgwODEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG8wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABQYp5lgTOLztcqJANHvseR7gmdZ4JdXmVe59PUEIa0UgdNOxS8jDCNP V+DRT8vcwqKulOOQvMu2ySTKGi/sQkOnaaiXVeO+ZaKByt1Npu3mapaYKtb89+Rn RDgWMC4ztdtcl5qCrThEIuXEq8r/eBhN6CC7SdUWfUdyjNTS7X4K163angxMQzbU npkl8O5FWqml4MCRLqvFaKqG8ub+svifvulyFwYf/5G1OrkZDj411eSWBNmNL8jr r4TIRY1It8eE1prAGqRT5vXFDrpsFqKiB9TZeQc43FaxtGHVKqQBe9EU8l89f/82 fzGpvk6cF4ZEUnkzfXJOWIuxyfaT5e8= -----END CERTIFICATE-----Generated at Sun May 12 01:34:10 2024 by rpki-client on console-fra.rpki-client.org