$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f3fc2a7e-e68e-3d9d-b43c-4ffe97f03670.roa File: f3fc2a7e-e68e-3d9d-b43c-4ffe97f03670.roa (raw, json) Hash identifier: gTSEpBT6ZikUnFbLNAb3emaNg98fjN7wzialmyZ5Mvk= Subject key identifier: 5E:8A:0A:9A:D4:AA:2B:0A:70:F1:EA:2B:7F:8C:C6:3E:C9:8F:A5:5B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858455B92E7B1D64A18F6D21E21A0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f3fc2a7e-e68e-3d9d-b43c-4ffe97f03670.roa Signing time: Thu 28 Mar 2024 13:00:36 +0000 ROA not before: Thu 28 Mar 2024 13:00:36 +0000 ROA not after: Wed 26 Jun 2024 13:00:36 +0000 asID: 36183 IP address blocks: 172.225.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 May 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:5b:92:e7:b1:d6:4a:18:f6:d2:1e:21:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 28 13:00:36 2024 GMT Not After : Jun 26 13:00:36 2024 GMT Subject: CN=207f0a23-8fdb-42b6-896b-db0a864b2f36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:03:d5:0c:ed:db:ae:9d:7a:8b:c9:b2:0b:ec: 81:c6:15:24:6b:9a:bf:24:fa:e1:3f:9f:70:a5:a2: 02:9f:1b:0e:68:31:28:c3:83:80:28:a7:ad:83:da: cc:4a:73:a9:a5:3d:4a:26:3a:6e:20:77:96:8c:cc: 82:0b:5c:28:57:c8:c6:f4:a8:b9:cf:d5:11:60:bf: 24:d7:54:4b:e9:84:cd:5b:9b:42:a0:b2:1b:e7:1b: 8d:a8:71:be:f5:f4:26:fc:c5:9a:9f:03:26:49:1a: 93:5d:53:4b:90:57:3e:e7:09:5d:fd:b0:f1:8c:96: b8:33:ca:6e:74:b3:a9:90:55:e5:74:76:c5:dd:56: f4:1e:39:83:68:84:a6:e2:b4:ac:4e:c1:08:f0:7c: 2a:29:e6:d5:09:0d:d6:7a:33:65:00:5b:f7:2e:54: 67:e7:9c:7a:01:9d:a2:c0:ea:32:c3:95:42:9c:59: dd:a8:33:d6:d1:b5:ba:c9:17:a3:16:85:91:21:ff: a8:dd:1b:20:10:d4:9a:6d:09:0e:23:74:ae:84:55: ff:8c:06:bb:af:26:6f:4f:73:a7:c1:e2:4c:74:a4: 81:a8:33:76:12:60:00:1d:89:b0:0c:f4:3b:1c:77: 43:99:53:1e:83:66:bf:67:a2:30:ed:fb:a9:c1:0e: 38:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:8A:0A:9A:D4:AA:2B:0A:70:F1:EA:2B:7F:8C:C6:3E:C9:8F:A5:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f3fc2a7e-e68e-3d9d-b43c-4ffe97f03670.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:d1:0a:c1:58:a8:7c:be:05:b1:2b:ed:95:8b:04:a6:4a:ce: 74:ee:20:6b:b6:8d:f2:2c:e2:04:53:a3:72:7f:09:4e:df:80: e6:6c:15:c5:dc:e2:94:98:c4:65:12:cc:06:b2:b2:52:04:21: 4c:27:16:db:04:e1:fe:39:91:fb:d2:be:ad:00:57:1b:5e:a0: 35:d1:e7:7d:51:ce:eb:ab:5f:62:e5:da:45:ab:cb:2c:bd:af: d7:b5:96:47:cb:5a:75:24:19:c4:6f:0b:04:fb:73:19:83:05: ed:79:41:b5:79:27:26:5e:50:b4:bb:d7:cf:eb:a8:8f:3c:d8: cf:84:51:14:87:95:a0:00:74:75:90:47:42:40:9e:28:00:d3: b9:79:05:09:df:f7:92:76:b0:bd:02:ad:20:bb:fa:0f:1b:88: 31:5d:42:e7:20:98:63:0d:c7:84:dd:ad:57:05:23:59:4d:36: 3b:ed:8e:e0:9c:2a:dc:b4:5a:50:13:f9:99:95:5b:51:f6:98: a8:36:aa:01:ac:f5:31:e4:30:93:10:9e:cb:4a:5f:67:15:f6: 58:61:6d:97:19:59:b1:a1:f5:ef:f9:4f:c9:30:3b:28:9f:6e: d7:db:64:42:2e:31:0e:47:4e:c0:77:16:40:88:df:eb:4a:a1: e8:04:e0:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVbkuex1koY9tIeIaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MDMyODEzMDAzNloXDTI0MDYyNjEzMDAzNlowLzEtMCsGA1UEAxMk MjA3ZjBhMjMtOGZkYi00MmI2LTg5NmItZGIwYTg2NGIyZjM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxAPVDO3brp16i8myC+yBxhUka5q/JPrhP59w paICnxsOaDEow4OAKKetg9rMSnOppT1KJjpuIHeWjMyCC1woV8jG9Ki5z9URYL8k 11RL6YTNW5tCoLIb5xuNqHG+9fQm/MWanwMmSRqTXVNLkFc+5wld/bDxjJa4M8pu dLOpkFXldHbF3Vb0HjmDaISm4rSsTsEI8HwqKebVCQ3WejNlAFv3LlRn55x6AZ2i wOoyw5VCnFndqDPW0bW6yRejFoWRIf+o3RsgENSabQkOI3SuhFX/jAa7ryZvT3On weJMdKSBqDN2EmAAHYmwDPQ7HHdDmVMeg2a/Z6Iw7fupwQ44owIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF6KCprUqisKcPHqK3+Mxj7Jj6VbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjNmYzJhN2UtZTY4ZS0z ZDlkLWI0M2MtNGZmZTk3ZjAzNjcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOF7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACbRCsFYqHy+BbEr7ZWLBKZKznTuIGu2jfIs4gRTo3J/CU7fgOZsFcXc 4pSYxGUSzAayslIEIUwnFtsE4f45kfvSvq0AVxteoDXR531RzuurX2Ll2kWryyy9 r9e1lkfLWnUkGcRvCwT7cxmDBe15QbV5JyZeULS718/rqI882M+EURSHlaAAdHWQ R0JAnigA07l5BQnf95J2sL0CrSC7+g8biDFdQucgmGMNx4TdrVcFI1lNNjvtjuCc Kty0WlAT+ZmVW1H2mKg2qgGs9THkMJMQnstKX2cV9lhhbZcZWbGh9e/5T8kwOyif btfbZEIuMQ5HTsB3FkCI3+tKoegE4P4= -----END CERTIFICATE-----Generated at Fri May 17 14:11:01 2024 by rpki-client on console-fra.rpki-client.org