$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0d9d3c14-3736-33a4-8def-6c4eb2e01326.roa File: 0d9d3c14-3736-33a4-8def-6c4eb2e01326.roa (raw, json) Hash identifier: rVwazHShFkTtaPo3ogsTyFPCr6gqGTRBzzoTWSrML3w= Subject key identifier: 68:92:F7:BE:06:2F:BC:DF:F0:67:A3:90:7B:94:DF:AE:FC:B2:F1:B4 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285845462CD3A4232C2311F2D1B0C0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0d9d3c14-3736-33a4-8def-6c4eb2e01326.roa Signing time: Wed 20 Mar 2024 21:02:59 +0000 ROA not before: Wed 20 Mar 2024 21:02:59 +0000 ROA not after: Tue 18 Jun 2024 21:02:59 +0000 asID: 396982 IP address blocks: 172.253.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:46:2c:d3:a4:23:2c:23:11:f2:d1:b0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 20 21:02:59 2024 GMT Not After : Jun 18 21:02:59 2024 GMT Subject: CN=c7def442-94d8-4fcf-9773-35840876e9d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:a7:d4:97:ea:5b:1c:93:92:c8:5d:1f:87:d5: 16:cb:9a:65:b3:ed:59:80:b5:00:97:43:c8:40:1a: 96:e1:76:a4:cf:2a:d2:c1:dd:f9:57:f9:03:79:15: 13:66:a4:72:cc:3e:5f:f1:58:ea:0c:42:53:b3:e5: 9a:69:25:17:97:10:35:20:48:bd:14:28:62:3e:f1: 50:f3:b1:59:b2:ab:01:62:98:f7:26:e1:e3:5a:ad: a4:db:a6:82:48:b8:9e:3e:77:d1:e4:13:9d:c6:4c: 81:69:ae:56:90:6c:e2:82:08:bc:24:20:43:a9:82: 56:38:79:d3:ec:6b:1a:bf:a3:f1:62:94:cf:6c:59: a7:ba:c8:6e:54:9c:60:d1:15:5c:dd:d7:ad:b4:d4: 2b:28:33:5d:5a:79:65:e4:60:b7:7c:ec:fd:86:e0: 68:24:32:59:d7:bb:d2:59:30:67:03:b1:b6:25:ca: b4:f2:56:df:9f:b5:30:27:f0:1d:fc:5a:c5:ec:21: bd:9d:9a:64:a2:de:46:d5:33:4f:61:57:85:5b:65: 22:c7:17:85:f1:29:c8:c0:b0:a8:db:6f:f9:19:4b: 93:60:ff:1b:d0:d3:4c:e8:5e:dd:c0:59:d5:83:73: 5d:8c:03:34:dc:01:ed:21:3c:56:37:0f:4f:f0:ee: 71:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:92:F7:BE:06:2F:BC:DF:F0:67:A3:90:7B:94:DF:AE:FC:B2:F1:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0d9d3c14-3736-33a4-8def-6c4eb2e01326.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:a4:78:e4:a4:41:40:f2:55:85:b0:14:56:c3:6c:48:b0:a9: da:5f:fe:bb:c3:dc:94:5f:5c:81:d1:d9:7e:71:f0:81:66:44: 14:db:d9:48:3a:17:a8:dd:47:64:8b:52:47:06:38:9c:f1:1e: 0c:69:96:05:94:04:d4:a9:49:81:72:83:61:5c:66:85:e9:29: c7:74:95:e8:48:13:92:6f:17:c9:33:be:6b:01:0b:b8:cd:b6: 81:07:cb:5a:f3:e2:e9:20:97:30:94:ee:68:42:15:a4:43:50: 54:af:fd:59:84:86:24:cc:52:60:f6:bb:d5:47:1d:93:6c:76: 71:f7:65:b6:8d:5b:e7:1d:41:f8:ea:17:22:ed:a3:0a:b1:2a: 7f:21:bd:42:4d:66:d6:33:4e:b5:54:e8:4c:a0:7f:79:b5:0b: 69:5f:e4:97:8a:d5:ef:34:d0:97:e2:d6:b5:8b:ea:24:02:ff: da:18:20:4e:f9:5a:a2:54:36:60:c5:07:b8:58:d4:3e:0b:e6: 46:7d:bf:44:66:e4:f9:d3:8b:28:26:01:66:28:5e:aa:fe:89: 7f:1c:0f:08:9b:0a:b1:1a:66:e1:1c:5e:8d:f7:c7:66:cf:e4: 5f:6e:7f:08:93:d7:8a:bd:92:ef:d4:e6:a0:e6:f0:0f:b2:e5: f3:87:d0:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVGLNOkIywjEfLRsMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI0MDMyMDIxMDI1OVoXDTI0MDYxODIxMDI1OVowLzEtMCsGA1UEAxMk YzdkZWY0NDItOTRkOC00ZmNmLTk3NzMtMzU4NDA4NzZlOWQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6fUl+pbHJOSyF0fh9UWy5pls+1ZgLUAl0PI QBqW4XakzyrSwd35V/kDeRUTZqRyzD5f8VjqDEJTs+WaaSUXlxA1IEi9FChiPvFQ 87FZsqsBYpj3JuHjWq2k26aCSLiePnfR5BOdxkyBaa5WkGziggi8JCBDqYJWOHnT 7Gsav6PxYpTPbFmnushuVJxg0RVc3dettNQrKDNdWnll5GC3fOz9huBoJDJZ17vS WTBnA7G2Jcq08lbfn7UwJ/Ad/FrF7CG9nZpkot5G1TNPYVeFW2UixxeF8SnIwLCo 22/5GUuTYP8b0NNM6F7dwFnVg3NdjAM03AHtITxWNw9P8O5xwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGiS974GL7zf8GejkHuU3678svG0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMGQ5ZDNjMTQtMzczNi0z M2E0LThkZWYtNmM0ZWIyZTAxMzI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP0UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB+keOSkQUDyVYWwFFbDbEiwqdpf/rvD3JRfXIHR2X5x8IFmRBTb2Ug6 F6jdR2SLUkcGOJzxHgxplgWUBNSpSYFyg2FcZoXpKcd0lehIE5JvF8kzvmsBC7jN toEHy1rz4ukglzCU7mhCFaRDUFSv/VmEhiTMUmD2u9VHHZNsdnH3ZbaNW+cdQfjq FyLtowqxKn8hvUJNZtYzTrVU6Eygf3m1C2lf5JeK1e800Jfi1rWL6iQC/9oYIE75 WqJUNmDFB7hY1D4L5kZ9v0Rm5PnTiygmAWYoXqr+iX8cDwibCrEaZuEcXo33x2bP 5F9ufwiT14q9ku/U5qDm8A+y5fOH0Cw= -----END CERTIFICATE-----Generated at Mon May 6 01:59:39 2024 by rpki-client on console-ams.rpki-client.org