$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/43a9f3ff-ed4b-3b51-b881-fac19d2193ae.roa File: 43a9f3ff-ed4b-3b51-b881-fac19d2193ae.roa (raw, json) Hash identifier: 5DdbrX+S19bo+6hk0XKBsihiaZVovizBg4iuLeP94ho= Subject key identifier: F3:59:30:FE:03:34:D3:AE:CF:0C:A2:77:ED:AC:61:D9:BA:4F:29:13 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F432858454628FE644836D991F2CA7780 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/43a9f3ff-ed4b-3b51-b881-fac19d2193ae.roa Signing time: Wed 20 Mar 2024 20:55:15 +0000 ROA not before: Wed 20 Mar 2024 20:55:15 +0000 ROA not after: Tue 18 Jun 2024 20:55:15 +0000 asID: 396982 IP address blocks: 172.253.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:46:28:fe:64:48:36:d9:91:f2:ca:77:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 20 20:55:15 2024 GMT Not After : Jun 18 20:55:15 2024 GMT Subject: CN=1e9473d6-be5d-4346-b832-d996c326395e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:16:25:41:c1:4d:ab:2b:ed:f3:6f:2e:b6:4e: 7d:94:a3:67:28:b6:32:da:a3:31:f5:cf:8f:b2:cb: 1a:70:14:6f:be:53:62:a6:0d:ff:58:32:ea:24:34: a7:b6:59:65:f8:dc:cc:c7:55:e1:47:6c:17:73:54: 56:c4:7d:c6:2d:9f:c9:5c:1b:ae:1a:6a:3a:f2:81: e3:cc:cb:2b:aa:ce:c9:d5:c5:cb:21:fa:1c:b4:47: 91:35:49:60:66:47:a5:7c:0b:33:4c:0a:9a:bf:f0: 77:1f:7f:22:a2:35:06:37:ef:90:57:8c:bd:97:0e: 96:18:bd:25:cc:72:1a:f6:08:fd:b2:d7:cc:fe:a7: a4:61:84:db:f3:74:27:a9:ac:86:d0:33:15:a1:bf: 84:ef:e6:84:3b:3a:5d:3e:16:60:8d:f7:7f:9d:ba: c7:1f:68:8b:16:4b:17:a5:b1:e0:37:2e:39:81:5f: 5c:a1:62:e3:db:9c:10:2a:11:f4:9f:b6:69:83:2a: 9a:7a:23:ce:c7:9a:e3:27:c7:b4:a2:ae:9a:cb:75: 8e:03:1b:1c:e9:e0:d8:1a:ea:2e:2e:30:ed:35:2e: ea:3b:c8:75:c3:17:ea:f1:c2:38:97:6c:b3:62:85: 1d:ee:81:3c:16:35:4f:32:da:c1:1a:87:21:64:51: 39:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:59:30:FE:03:34:D3:AE:CF:0C:A2:77:ED:AC:61:D9:BA:4F:29:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/43a9f3ff-ed4b-3b51-b881-fac19d2193ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.18.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:a4:40:fe:bf:fe:ea:d3:a9:0e:02:dc:f7:79:73:77:7d:07: ca:79:ad:eb:ad:5e:0b:da:3e:ec:fa:a0:25:32:ac:3d:04:46: 8a:d1:44:91:2d:cd:46:24:06:61:09:18:4f:20:b6:6c:21:02: 5d:c3:d7:b8:3e:bc:c0:9d:f6:45:a6:ff:90:cb:e8:11:d3:a9: c3:7c:e9:c8:41:81:98:ae:f7:69:78:0b:10:5d:a0:f0:79:cd: 25:49:96:d7:22:32:4b:27:0d:63:6a:7d:aa:26:ac:9f:4c:fd: 2b:a9:63:51:0d:ee:a2:83:2a:45:be:b1:4e:ec:14:ee:74:90: 2f:24:83:82:ad:85:97:8c:82:05:c1:22:38:d6:14:bf:5f:60: 85:e1:fa:c8:e1:4e:f1:41:e7:cc:ac:4d:48:56:5c:5b:b5:66: 49:43:9f:53:c4:c2:a1:cf:54:c2:1f:9c:4c:98:39:c5:24:79: ab:45:a4:43:30:db:27:71:eb:a0:0c:df:c9:00:fe:7a:45:b2: 7d:30:c3:d3:e1:33:2a:39:2d:dc:90:9c:0f:b2:7a:2c:3f:ee: bf:35:b9:f4:25:a2:cd:ea:8b:d9:42:78:fc:41:fb:63:68:6c: 79:62:0b:0e:9b:fe:fa:71:9c:39:57:23:d7:a4:24:ce:55:c6: 6a:3a:18:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVGKP5kSDbZkfLKd4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI0MDMyMDIwNTUxNVoXDTI0MDYxODIwNTUxNVowLzEtMCsGA1UEAxMk MWU5NDczZDYtYmU1ZC00MzQ2LWI4MzItZDk5NmMzMjYzOTVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhYlQcFNqyvt828utk59lKNnKLYy2qMx9c+P sssacBRvvlNipg3/WDLqJDSntlll+NzMx1XhR2wXc1RWxH3GLZ/JXBuuGmo68oHj zMsrqs7J1cXLIfoctEeRNUlgZkelfAszTAqav/B3H38iojUGN++QV4y9lw6WGL0l zHIa9gj9stfM/qekYYTb83QnqayG0DMVob+E7+aEOzpdPhZgjfd/nbrHH2iLFksX pbHgNy45gV9coWLj25wQKhH0n7ZpgyqaeiPOx5rjJ8e0oq6ay3WOAxsc6eDYGuou LjDtNS7qO8h1wxfq8cI4l2yzYoUd7oE8FjVPMtrBGochZFE5jwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPNZMP4DNNOuzwyid+2sYdm6TykTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNDNhOWYzZmYtZWQ0Yi0z YjUxLWI4ODEtZmFjMTlkMjE5M2FlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP0SMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK2kQP6//urTqQ4C3Pd5c3d9B8p5reutXgvaPuz6oCUyrD0ERorRRJEt zUYkBmEJGE8gtmwhAl3D17g+vMCd9kWm/5DL6BHTqcN86chBgZiu92l4CxBdoPB5 zSVJltciMksnDWNqfaomrJ9M/SupY1EN7qKDKkW+sU7sFO50kC8kg4KthZeMggXB IjjWFL9fYIXh+sjhTvFB58ysTUhWXFu1ZklDn1PEwqHPVMIfnEyYOcUkeatFpEMw 2ydx66AM38kA/npFsn0ww9PhMyo5LdyQnA+yeiw/7r81ufQlos3qi9lCePxB+2No bHliCw6b/vpxnDlXI9ekJM5Vxmo6GHc= -----END CERTIFICATE-----Generated at Sun May 5 22:39:04 2024 by rpki-client on console-ams.rpki-client.org