$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/21121190-c709-304d-9477-0e0a0ca38ccc.roa File: 21121190-c709-304d-9477-0e0a0ca38ccc.roa (raw, json) Hash identifier: /WcMP2JMwyPU3T5YwrUdbhfbM06T/FzkXyeEG9cfxTA= Subject key identifier: 23:40:93:0D:0A:DC:8B:57:E9:F1:98:E7:6E:1A:4D:54:7E:39:B3:9A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858456128498A5AF15EC505E95D78 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/21121190-c709-304d-9477-0e0a0ca38ccc.roa Signing time: Sat 30 Mar 2024 13:00:38 +0000 ROA not before: Sat 30 Mar 2024 13:00:38 +0000 ROA not after: Fri 28 Jun 2024 13:00:38 +0000 asID: 36183 IP address blocks: 172.225.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 May 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:61:28:49:8a:5a:f1:5e:c5:05:e9:5d:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 30 13:00:38 2024 GMT Not After : Jun 28 13:00:38 2024 GMT Subject: CN=d561d35d-1a99-449b-bb63-0012c2e64d19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:6d:d4:ba:a9:2c:96:25:cd:db:31:fa:17:09: 27:b9:20:66:9a:88:c8:8a:c5:80:0f:ac:46:5c:49: f7:23:46:35:de:49:54:c2:92:1b:51:3f:9c:f6:de: 43:de:f6:dc:67:15:4e:a9:41:fa:5b:9a:30:7b:4f: 29:bc:21:10:49:51:c6:3a:7c:49:ba:83:d4:c0:46: ab:15:ba:dd:a5:f8:af:e1:90:74:f4:36:a6:35:e7: 77:09:8e:40:21:84:fb:6b:48:a9:d5:8e:5f:49:03: 7e:f1:69:d4:a8:27:4e:d5:f5:60:cf:48:d4:4f:83: 3c:af:de:25:63:5a:2a:ad:72:cb:d6:90:e7:e7:46: 6d:e2:14:e1:39:b6:84:37:5a:bb:13:8a:3a:1c:e4: e2:77:3b:c8:4e:fe:c7:eb:e0:e4:52:24:6a:5c:11: e8:a4:df:c2:45:a9:85:86:8a:8a:b2:6b:b3:51:60: a5:f8:2e:51:fe:bc:1e:f7:9e:26:53:ab:ba:20:05: 60:3e:c9:f9:cc:09:f1:ef:7c:88:67:b8:2f:93:01: 91:02:20:65:ea:5e:f4:79:32:d1:7a:ca:d8:60:0e: a7:2c:e9:b9:07:b7:77:7a:aa:ee:dc:f6:0b:9e:32: 7f:83:ad:c9:c6:38:0a:b3:97:5f:ee:fe:7e:f9:55: 74:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:40:93:0D:0A:DC:8B:57:E9:F1:98:E7:6E:1A:4D:54:7E:39:B3:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/21121190-c709-304d-9477-0e0a0ca38ccc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:fb:83:fd:55:fe:99:5c:9d:f0:67:22:e7:d1:43:bb:f3:f1: f5:73:47:6c:3f:6e:08:4c:04:97:d9:81:d8:45:4d:b5:22:d9: 60:85:be:08:c5:b9:ec:c9:85:de:74:06:45:e6:7d:c8:69:61: 56:55:54:8e:44:84:ad:4f:b6:cd:74:77:e0:b1:d7:89:b4:2c: 9a:d1:a6:d4:9c:7b:1d:4a:3f:c0:c3:6c:c0:b4:2c:a5:64:19: 09:a3:14:d7:05:9e:33:07:5b:1a:76:5d:41:ea:a4:ac:ca:bb: 26:71:f2:58:a5:32:de:f4:3b:8b:3d:ab:05:a6:64:2b:8a:3e: d2:70:69:9d:5e:9a:75:e9:d4:0f:3e:b0:0c:40:11:e6:c2:a7: 57:ff:27:5d:66:0a:f4:35:07:2d:9e:83:cf:9f:58:7f:ef:7a: 94:86:99:54:c1:b6:0a:43:20:6e:23:76:f0:53:cc:ca:de:12: fb:51:64:72:83:27:46:c1:0b:60:00:8d:d2:fe:61:70:fc:5e: f2:3b:c5:04:be:f0:ee:3a:3e:8d:57:54:02:9d:bc:0e:72:ac: 5d:8b:2b:50:ad:c0:bc:47:64:03:18:44:09:30:ee:94:8b:61: fe:66:a4:57:a4:79:05:37:78:e4:75:ca:ab:4e:90:b4:b9:7b: d2:eb:03:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVhKEmKWvFexQXpXXgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MDMzMDEzMDAzOFoXDTI0MDYyODEzMDAzOFowLzEtMCsGA1UEAxMk ZDU2MWQzNWQtMWE5OS00NDliLWJiNjMtMDAxMmMyZTY0ZDE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu23UuqksliXN2zH6FwknuSBmmojIisWAD6xG XEn3I0Y13klUwpIbUT+c9t5D3vbcZxVOqUH6W5owe08pvCEQSVHGOnxJuoPUwEar Fbrdpfiv4ZB09DamNed3CY5AIYT7a0ip1Y5fSQN+8WnUqCdO1fVgz0jUT4M8r94l Y1oqrXLL1pDn50Zt4hThObaEN1q7E4o6HOTidzvITv7H6+DkUiRqXBHopN/CRamF hoqKsmuzUWCl+C5R/rwe954mU6u6IAVgPsn5zAnx73yIZ7gvkwGRAiBl6l70eTLR esrYYA6nLOm5B7d3eqru3PYLnjJ/g63JxjgKs5df7v5++VV0uwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCNAkw0K3ItX6fGY524aTVR+ObOaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjExMjExOTAtYzcwOS0z MDRkLTk0NzctMGUwYTBjYTM4Y2NjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOHcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF/7g/1V/plcnfBnIufRQ7vz8fVzR2w/bghMBJfZgdhFTbUi2WCFvgjF uezJhd50BkXmfchpYVZVVI5EhK1Pts10d+Cx14m0LJrRptScex1KP8DDbMC0LKVk GQmjFNcFnjMHWxp2XUHqpKzKuyZx8lilMt70O4s9qwWmZCuKPtJwaZ1emnXp1A8+ sAxAEebCp1f/J11mCvQ1By2eg8+fWH/vepSGmVTBtgpDIG4jdvBTzMreEvtRZHKD J0bBC2AAjdL+YXD8XvI7xQS+8O46Po1XVAKdvA5yrF2LK1CtwLxHZAMYRAkw7pSL Yf5mpFekeQU3eOR1yqtOkLS5e9LrA1Y= -----END CERTIFICATE-----Generated at Fri May 17 13:14:19 2024 by rpki-client on console-ams.rpki-client.org