$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/3c1f52fe-3cd6-3531-9b8a-eac5dc4fb0f8.roa File: 3c1f52fe-3cd6-3531-9b8a-eac5dc4fb0f8.roa (raw, json) Hash identifier: 2qTyj5AlgMYJp7ihF3RcGYYMVKappUxvEWYN0zjIUjw= Subject key identifier: AB:7E:7E:19:88:B1:21:C0:12:2B:2D:36:8B:16:63:97:24:F7:14:21 Certificate issuer: /CN=b472af2f-c62b-4c94-904b-aa7bffda4fcb Certificate serial: 010D0C9F4328584566BDB5903DE8240F437A35C0 Authority key identifier: 17:00:4E:49:7C:45:40:F1:3D:56:51:BA:F6:F7:8B:AD:6A:15:BB:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/3c1f52fe-3cd6-3531-9b8a-eac5dc4fb0f8.roa Signing time: Mon 01 Apr 2024 13:00:36 +0000 ROA not before: Mon 01 Apr 2024 13:00:36 +0000 ROA not after: Sun 30 Jun 2024 13:00:36 +0000 asID: 14618 IP address blocks: 192.111.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/b472af2f-c62b-4c94-904b-aa7bffda4fcb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/b472af2f-c62b-4c94-904b-aa7bffda4fcb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 25 Apr 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:66:bd:b5:90:3d:e8:24:0f:43:7a:35:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b472af2f-c62b-4c94-904b-aa7bffda4fcb Validity Not Before: Apr 1 13:00:36 2024 GMT Not After : Jun 30 13:00:36 2024 GMT Subject: CN=61831b11-c462-43a6-8059-a1d06e0b8278 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:1e:48:27:8b:d6:fe:a5:73:e7:b8:2b:7d:d9: e0:c7:61:77:1d:61:fe:a8:26:3b:b1:21:f4:a2:19: c2:7c:aa:41:60:d5:57:d6:37:d0:3e:a0:8f:21:52: 8b:e2:9e:91:b8:84:8b:a5:59:33:c3:d9:d1:00:ff: f3:6d:81:2d:48:16:53:12:e7:d4:44:a2:5a:ff:af: ce:1d:f4:49:f2:30:36:b8:d0:14:fd:c1:44:9b:0d: 81:4d:20:44:6c:42:2d:97:72:90:33:4b:5e:b7:ca: 6e:60:1d:f4:57:6f:aa:8f:5c:d0:ad:4a:37:d1:24: 2c:d4:0e:14:2f:b3:86:e3:51:87:d2:f7:3e:bc:03: ec:7f:91:57:ac:5b:f8:dd:72:4d:8d:09:84:5c:19: a3:c4:be:98:5a:16:64:6c:04:8f:38:c4:17:33:e7: b0:0b:3d:b2:76:d0:5f:97:33:ad:88:59:af:8f:d7: af:a2:38:df:83:d2:87:53:59:94:4c:6d:52:e8:9e: be:ba:48:38:f8:ce:ce:8e:e0:7e:67:fa:0f:d6:fe: b2:e9:a8:9e:64:c1:e1:4a:68:8c:26:0d:ad:27:c6: c8:99:61:5a:8a:4b:d7:62:4f:27:20:0e:22:65:96: 62:db:25:92:13:a4:d6:0d:b5:f5:0a:56:0d:b4:58: d3:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:7E:7E:19:88:B1:21:C0:12:2B:2D:36:8B:16:63:97:24:F7:14:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/3c1f52fe-3cd6-3531-9b8a-eac5dc4fb0f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/b472af2f-c62b-4c94-904b-aa7bffda4fcb.crl X509v3 Authority Key Identifier: keyid:17:00:4E:49:7C:45:40:F1:3D:56:51:BA:F6:F7:8B:AD:6A:15:BB:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb.cer sbgp-ipAddrBlock: critical IPv4: 192.111.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:19:1c:e2:f4:cb:ac:2f:ad:25:fb:51:a7:81:f8:d9:ae:db: 4f:ff:c0:ee:c0:3e:e2:93:88:1d:e0:9e:96:2c:b8:fd:51:65: c4:b6:a4:70:76:46:bb:5e:57:5d:38:71:a4:d6:33:c9:ae:d4: cd:9b:a2:1b:90:2b:2b:12:7b:e1:f1:b2:59:65:16:f7:2d:62: 66:27:fe:8d:fb:ef:d7:f1:d0:8c:3c:22:ce:ac:e7:61:46:04: e4:14:99:45:62:28:97:3a:cd:8b:42:99:7d:fb:0e:4a:5e:31: 52:bc:86:da:b2:19:2e:e8:32:3a:df:23:e4:c3:7d:8f:87:6f: 6b:39:63:48:f8:92:c1:52:a2:16:ae:0a:3f:04:f7:ad:fc:87: 4c:35:1e:f7:71:da:51:27:a2:2e:cf:c7:62:0a:3a:43:12:e1: e4:82:72:af:a4:f1:c0:66:fd:ba:aa:55:f8:d5:fa:71:5b:c8: bb:49:c0:df:d1:79:1e:18:c7:9b:95:7a:a0:b3:f5:77:f9:05: fc:63:c6:64:d6:10:8f:da:13:fd:b7:67:b5:0f:51:b8:19:11: e7:6d:51:70:a5:cc:c9:be:7c:5a:51:13:37:fe:eb:3e:02:ae: 2c:bd:9c:c8:30:5a:16:5a:9c:da:51:8d:bc:6a:95:06:0f:e0: b5:73:4d:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVmvbWQPegkD0N6NcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQ3MmFmMmYtYzYyYi00Yzk0LTkwNGItYWE3YmZmZGE0 ZmNiMB4XDTI0MDQwMTEzMDAzNloXDTI0MDYzMDEzMDAzNlowLzEtMCsGA1UEAxMk NjE4MzFiMTEtYzQ2Mi00M2E2LTgwNTktYTFkMDZlMGI4Mjc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmB5IJ4vW/qVz57grfdngx2F3HWH+qCY7sSH0 ohnCfKpBYNVX1jfQPqCPIVKL4p6RuISLpVkzw9nRAP/zbYEtSBZTEufURKJa/6/O HfRJ8jA2uNAU/cFEmw2BTSBEbEItl3KQM0tet8puYB30V2+qj1zQrUo30SQs1A4U L7OG41GH0vc+vAPsf5FXrFv43XJNjQmEXBmjxL6YWhZkbASPOMQXM+ewCz2ydtBf lzOtiFmvj9evojjfg9KHU1mUTG1S6J6+ukg4+M7OjuB+Z/oP1v6y6aieZMHhSmiM Jg2tJ8bImWFaikvXYk8nIA4iZZZi2yWSE6TWDbX1ClYNtFjTvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKt+fhmIsSHAEistNosWY5ck9xQhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNDcy YWYyZi1jNjJiLTRjOTQtOTA0Yi1hYTdiZmZkYTRmY2IvM2MxZjUyZmUtM2NkNi0z NTMxLTliOGEtZWFjNWRjNGZiMGY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjQ3MmFmMmYtYzYyYi00Yzk0LTkw NGItYWE3YmZmZGE0ZmNiL2I0NzJhZjJmLWM2MmItNGM5NC05MDRiLWFhN2JmZmRh NGZjYi5jcmwwHwYDVR0jBBgwFoAUFwBOSXxFQPE9VlG69veLrWoVuz8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iNDcyYWYyZi1jNjJiLTRjOTQtOTA0Yi1hYTdi ZmZkYTRmY2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwG8EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHYZHOL0y6wvrSX7UaeB+Nmu20//wO7APuKTiB3gnpYsuP1RZcS2pHB2 RrteV104caTWM8mu1M2bohuQKysSe+HxslllFvctYmYn/o3779fx0Iw8Is6s52FG BOQUmUViKJc6zYtCmX37DkpeMVK8htqyGS7oMjrfI+TDfY+Hb2s5Y0j4ksFSohau Cj8E9638h0w1Hvdx2lEnoi7Px2IKOkMS4eSCcq+k8cBm/bqqVfjV+nFbyLtJwN/R eR4Yx5uVeqCz9Xf5BfxjxmTWEI/aE/23Z7UPUbgZEedtUXClzMm+fFpREzf+6z4C riy9nMgwWhZanNpRjbxqlQYP4LVzTU4= -----END CERTIFICATE-----Generated at Wed Apr 24 02:01:38 2024 by rpki-client on console-fra.rpki-client.org