$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/75eb61b2-a7ae-3a66-b642-a112bf9206a2.roa File: 75eb61b2-a7ae-3a66-b642-a112bf9206a2.roa (raw, json) Hash identifier: 8Tbazn3+gWEVuHo4rngyGjmrBKlU8LI6mXzYjz/iv20= Subject key identifier: 44:96:95:4D:F9:4D:DF:88:59:3E:96:C4:EF:50:50:4B:D3:DA:8D:0F Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F432858454626F0A61C9EA196CA176BC0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/75eb61b2-a7ae-3a66-b642-a112bf9206a2.roa Signing time: Wed 20 Mar 2024 20:51:07 +0000 ROA not before: Wed 20 Mar 2024 20:51:07 +0000 ROA not after: Tue 18 Jun 2024 20:51:07 +0000 asID: 15169 IP address blocks: 172.253.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:46:26:f0:a6:1c:9e:a1:96:ca:17:6b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 20 20:51:07 2024 GMT Not After : Jun 18 20:51:07 2024 GMT Subject: CN=c17d98e2-bf4a-4064-8708-1061f9b35f24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:10:7b:92:78:8f:7a:b8:e4:89:e9:04:e2:0f: f5:ed:73:e4:4c:67:a9:9a:88:4d:b8:b2:4f:da:a3: 62:23:6f:9b:bb:0b:0c:4e:7b:18:2b:86:bb:dc:58: 8c:06:a9:ec:b5:8e:95:21:8e:a1:58:24:d5:fc:e7: 0d:9c:db:ef:f5:50:59:ab:8f:9f:49:25:21:ea:11: 21:6c:f8:fd:fe:ad:1f:12:dd:bd:e7:39:07:33:06: fc:eb:89:78:52:be:3d:ab:95:3b:e4:7b:ae:bd:da: 50:f6:c2:aa:f4:9a:77:70:b9:3a:5d:63:f5:e2:ec: 2d:a3:97:c4:c1:8a:2b:a3:cf:b2:e8:ba:24:09:0a: 36:44:63:18:62:e8:60:09:bb:36:10:40:33:b0:d8: e2:eb:5f:94:55:ab:53:ec:fb:08:85:9d:36:36:d4: c8:98:1d:b8:34:11:2a:5d:b2:f6:a9:3e:28:eb:76: 8d:07:c8:41:74:7f:ef:c1:af:8e:41:f4:5f:46:f7: 87:d2:a7:db:8d:21:05:36:23:ee:4a:99:d6:8c:22: dc:25:ea:bc:ae:00:0b:a9:95:00:1d:e1:71:d5:fa: fc:4f:5b:1d:c4:29:91:9e:fe:4b:1f:43:38:0b:3e: e0:f4:a6:a5:2f:0a:91:25:b9:9a:06:8d:a8:14:0e: 6e:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:96:95:4D:F9:4D:DF:88:59:3E:96:C4:EF:50:50:4B:D3:DA:8D:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/75eb61b2-a7ae-3a66-b642-a112bf9206a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.63.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:4a:b1:a0:65:11:a7:ce:9e:e9:23:65:a8:44:66:a9:85:e8: 5b:ae:6c:64:02:1b:81:eb:17:90:e9:7b:06:e7:ae:21:9e:cb: 86:51:92:8a:52:27:86:57:82:f9:a8:b1:f6:77:81:e9:a4:63: d5:0b:f9:ca:c0:58:86:d5:70:97:53:98:2f:bf:77:b0:47:37: 34:2c:e0:e5:6e:f9:3a:a6:99:82:9d:06:68:88:52:de:e5:e2: 1f:3e:1a:6e:c5:7f:70:85:a9:15:82:22:06:21:52:bf:e5:27: 7e:e6:1d:ba:7f:b0:39:85:92:16:59:02:c0:c8:d4:16:14:d6: 8a:45:14:c1:9a:03:35:b0:f9:b5:c1:f0:e5:18:26:b0:1a:cb: 26:bd:0c:30:6e:f8:97:b5:34:83:0a:6d:94:6c:45:16:c0:e7: fd:19:0f:a4:c9:ef:88:2f:ab:2e:d6:68:e8:b3:7f:ad:b3:2a: 93:d6:85:65:bb:f6:58:09:39:5e:85:c5:6b:9f:fd:b9:15:32: a6:b2:ca:a6:a0:4d:c6:3a:70:5c:fc:4c:eb:a3:c2:33:e1:f1: 29:d4:70:97:a6:8d:ee:b4:a3:b3:48:20:d0:02:af:a4:e9:3d: 15:f0:99:fb:bf:07:94:d2:3c:be:6c:97:a7:9f:fa:59:1e:c9: 66:d1:96:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVGJvCmHJ6hlsoXa8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI0MDMyMDIwNTEwN1oXDTI0MDYxODIwNTEwN1owLzEtMCsGA1UEAxMk YzE3ZDk4ZTItYmY0YS00MDY0LTg3MDgtMTA2MWY5YjM1ZjI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgBB7kniPerjkiekE4g/17XPkTGepmohNuLJP 2qNiI2+buwsMTnsYK4a73FiMBqnstY6VIY6hWCTV/OcNnNvv9VBZq4+fSSUh6hEh bPj9/q0fEt295zkHMwb864l4Ur49q5U75HuuvdpQ9sKq9Jp3cLk6XWP14uwto5fE wYoro8+y6LokCQo2RGMYYuhgCbs2EEAzsNji61+UVatT7PsIhZ02NtTImB24NBEq XbL2qT4o63aNB8hBdH/vwa+OQfRfRveH0qfbjSEFNiPuSpnWjCLcJeq8rgALqZUA HeFx1fr8T1sdxCmRnv5LH0M4Cz7g9KalLwqRJbmaBo2oFA5uqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFESWlU35Td+IWT6WxO9QUEvT2o0PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNzVlYjYxYjItYTdhZS0z YTY2LWI2NDItYTExMmJmOTIwNmEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP0/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACFKsaBlEafOnukjZahEZqmF6FuubGQCG4HrF5DpewbnriGey4ZRkopS J4ZXgvmosfZ3gemkY9UL+crAWIbVcJdTmC+/d7BHNzQs4OVu+TqmmYKdBmiIUt7l 4h8+Gm7Ff3CFqRWCIgYhUr/lJ37mHbp/sDmFkhZZAsDI1BYU1opFFMGaAzWw+bXB 8OUYJrAayya9DDBu+Je1NIMKbZRsRRbA5/0ZD6TJ74gvqy7WaOizf62zKpPWhWW7 9lgJOV6FxWuf/bkVMqayyqagTcY6cFz8TOujwjPh8SnUcJemje60o7NIINACr6Tp PRXwmfu/B5TSPL5sl6ef+lkeyWbRltE= -----END CERTIFICATE-----Generated at Fri May 17 15:36:50 2024 by rpki-client on console-ams.rpki-client.org