$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/01ad9c4a-9f64-3060-8b00-ede4e0ddc949.roa File: 01ad9c4a-9f64-3060-8b00-ede4e0ddc949.roa (raw, json) Hash identifier: C2wRTv40Q7cPv1gxg5tEb4lQOVVPc1a/NyqTUowZEs0= Subject key identifier: 99:FB:E5:7C:60:15:BB:29:E7:78:95:75:D5:6D:50:F2:B5:43:65:CC Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285845462C6153E36F36CD45A281C0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/01ad9c4a-9f64-3060-8b00-ede4e0ddc949.roa Signing time: Wed 20 Mar 2024 21:02:05 +0000 ROA not before: Wed 20 Mar 2024 21:02:05 +0000 ROA not after: Tue 18 Jun 2024 21:02:05 +0000 asID: 396982 IP address blocks: 172.253.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:46:2c:61:53:e3:6f:36:cd:45:a2:81:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 20 21:02:05 2024 GMT Not After : Jun 18 21:02:05 2024 GMT Subject: CN=e058d44f-24c3-4e91-b1bb-146952de485b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:9e:e2:86:01:9a:94:9c:db:f9:f1:72:d8:5a: 62:4e:cf:74:97:83:22:84:56:d2:27:6b:42:49:a1: 06:50:ce:45:65:18:70:a1:dd:30:6a:33:a5:6c:be: 09:95:bf:ee:c4:f9:4d:cd:9a:21:1a:78:0c:fa:0a: 83:2d:45:8d:b7:49:25:25:ee:3b:eb:c0:eb:49:f7: a7:c4:2d:d1:a9:5a:99:a3:97:fa:06:c2:eb:e9:dd: 39:f2:5d:77:3c:d6:5c:61:f0:e9:cb:b4:92:20:27: 0e:1f:c1:52:c0:2a:8f:78:56:80:df:f0:2f:bf:37: e3:ff:84:ad:5b:a6:2a:c8:f2:87:97:a8:ca:14:62: 86:ca:2c:3d:71:68:76:b7:8b:ce:d3:1b:5e:31:fd: 35:9f:49:44:39:6f:2f:ce:7c:7f:29:e4:4e:c3:b7: f5:ab:d5:6c:7c:b6:6d:7b:a0:07:6c:00:33:0d:33: 56:e7:65:15:ed:e0:ed:83:ed:60:99:3c:25:5e:33: 36:08:1f:01:19:bb:49:06:3b:81:e4:c3:7b:93:4f: d8:3a:09:cb:88:20:70:61:47:04:be:08:27:cb:38: 5c:a4:6e:53:de:59:50:50:57:5d:9b:de:39:c6:82: 72:c1:ee:9f:42:2d:ff:bc:e4:38:d1:c6:12:78:ab: 8f:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:FB:E5:7C:60:15:BB:29:E7:78:95:75:D5:6D:50:F2:B5:43:65:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/01ad9c4a-9f64-3060-8b00-ede4e0ddc949.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.22.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:89:16:0f:8a:52:6e:30:55:27:8d:af:89:aa:8f:51:e7:08: 76:41:83:b2:df:33:26:13:49:a5:26:2a:f8:ff:47:f0:50:86: a9:ef:a1:fc:8c:3a:80:f6:06:c2:28:dc:7f:9f:50:bb:8f:bc: 54:8c:9c:b7:de:84:f0:8d:4a:fb:ec:23:a1:0a:5b:12:b8:8e: 23:93:56:e9:49:b5:ac:9a:d1:af:b9:fe:e4:b0:ac:ea:55:cb: c7:60:10:ff:87:3d:f7:86:b9:b1:ca:f4:e1:a5:4f:0a:91:aa: ec:aa:a0:24:5e:81:e6:d4:e2:15:8a:8f:e8:b8:82:ce:07:99: 29:72:4f:c3:d7:15:5b:44:a2:17:5d:ea:17:08:9c:ac:23:03: d7:47:a3:25:64:a2:a6:90:92:69:84:79:80:06:4b:84:c4:2b: b6:2b:63:78:43:3f:a1:70:0d:b1:fb:cb:76:cb:5f:0d:c5:73: 55:fb:1e:7f:47:0e:c9:c0:37:81:42:40:94:8b:68:d4:c2:e3: 3e:4a:df:9b:e1:22:5d:70:db:16:65:ef:69:2d:4d:ef:f9:cc: 93:48:fd:c3:68:7c:7e:07:9d:7b:7a:f0:bf:e6:db:46:36:90: 10:a7:9e:b2:71:1a:6a:b0:40:f5:87:80:3b:9e:dd:41:93:d3: cf:13:ab:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVGLGFT4282zUWigcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI0MDMyMDIxMDIwNVoXDTI0MDYxODIxMDIwNVowLzEtMCsGA1UEAxMk ZTA1OGQ0NGYtMjRjMy00ZTkxLWIxYmItMTQ2OTUyZGU0ODViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZ7ihgGalJzb+fFy2FpiTs90l4MihFbSJ2tC SaEGUM5FZRhwod0wajOlbL4Jlb/uxPlNzZohGngM+gqDLUWNt0klJe4768DrSfen xC3RqVqZo5f6BsLr6d058l13PNZcYfDpy7SSICcOH8FSwCqPeFaA3/Avvzfj/4St W6YqyPKHl6jKFGKGyiw9cWh2t4vO0xteMf01n0lEOW8vznx/KeROw7f1q9VsfLZt e6AHbAAzDTNW52UV7eDtg+1gmTwlXjM2CB8BGbtJBjuB5MN7k0/YOgnLiCBwYUcE vggnyzhcpG5T3llQUFddm945xoJywe6fQi3/vOQ40cYSeKuPVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJn75XxgFbsp53iVddVtUPK1Q2XMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMDFhZDljNGEtOWY2NC0z MDYwLThiMDAtZWRlNGUwZGRjOTQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP0WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIeJFg+KUm4wVSeNr4mqj1HnCHZBg7LfMyYTSaUmKvj/R/BQhqnvofyM OoD2BsIo3H+fULuPvFSMnLfehPCNSvvsI6EKWxK4jiOTVulJtaya0a+5/uSwrOpV y8dgEP+HPfeGubHK9OGlTwqRquyqoCRegebU4hWKj+i4gs4HmSlyT8PXFVtEohdd 6hcInKwjA9dHoyVkoqaQkmmEeYAGS4TEK7YrY3hDP6FwDbH7y3bLXw3Fc1X7Hn9H DsnAN4FCQJSLaNTC4z5K35vhIl1w2xZl72ktTe/5zJNI/cNofH4HnXt68L/m20Y2 kBCnnrJxGmqwQPWHgDue3UGT088Tq+A= -----END CERTIFICATE-----Generated at Mon May 6 02:01:43 2024 by rpki-client on console-fra.rpki-client.org