$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b2c1f1a2-24e6-3840-a1ea-451f0625a066.roa File: b2c1f1a2-24e6-3840-a1ea-451f0625a066.roa (raw, json) Hash identifier: G3tLQhFx12Qt5yNQn6Lfk3SBImrz01NJRVVC/mVJw8w= Subject key identifier: 8B:66:29:46:26:8D:3C:9B:29:F7:37:4B:89:29:90:2D:CF:AA:B0:3A Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285845462924E20D2C6B6D5B262500 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b2c1f1a2-24e6-3840-a1ea-451f0625a066.roa Signing time: Wed 20 Mar 2024 20:55:34 +0000 ROA not before: Wed 20 Mar 2024 20:55:34 +0000 ROA not after: Tue 18 Jun 2024 20:55:34 +0000 asID: 396982 IP address blocks: 172.253.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 06 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:46:29:24:e2:0d:2c:6b:6d:5b:26:25:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 20 20:55:34 2024 GMT Not After : Jun 18 20:55:34 2024 GMT Subject: CN=7c627adb-b12b-4552-8776-9c3eb411ac32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ec:32:8a:05:b6:de:3f:4c:72:79:46:22:87: d4:a2:09:f2:a2:fd:33:47:56:9c:d3:f1:fd:03:bc: 93:91:67:b6:15:38:3d:65:c1:64:ae:cc:b6:cb:c4: f8:da:d5:40:65:0e:01:1e:9a:5f:a3:48:20:74:4e: f8:3d:e8:4f:c3:07:16:b9:c3:a3:7f:5a:e4:ff:63: 1f:c5:9a:73:9e:d8:a1:66:1b:98:06:fa:2f:4a:ff: a5:81:bb:f2:2f:b5:33:d1:eb:5c:99:54:73:c3:91: 41:0f:25:22:bc:03:f5:64:31:93:c8:fb:ba:00:09: 7a:9b:d9:f5:52:2b:5e:46:e2:45:cf:43:45:4e:80: c1:89:bd:b7:4a:83:d7:d7:41:2a:e1:1c:5f:0c:67: 68:fa:77:74:ae:b8:b5:83:d5:ce:eb:99:04:9b:15: 16:90:39:f4:d2:c9:df:92:a1:e9:1a:e7:2a:de:02: 7d:5f:37:01:5a:01:32:bc:98:71:d7:ef:79:12:06: c3:13:c9:c3:1b:3e:97:83:af:f4:b6:eb:e4:37:89: 67:f2:2d:9d:73:35:2e:e1:5e:69:51:ee:3f:1a:9d: 53:a3:46:3c:54:dd:1f:5f:7a:46:4a:e1:94:92:1d: 93:18:84:c2:47:cd:31:39:46:e4:69:32:85:5d:06: 49:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:66:29:46:26:8D:3C:9B:29:F7:37:4B:89:29:90:2D:CF:AA:B0:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b2c1f1a2-24e6-3840-a1ea-451f0625a066.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:96:90:c4:a4:48:31:2b:04:50:a9:4b:9d:52:18:8b:e9:c2: 9b:c8:3f:61:2a:59:38:28:d9:15:6c:a3:f7:71:2a:b8:07:0b: 8a:9d:54:ac:dd:e0:46:a7:36:88:89:bb:03:41:c8:3a:32:9f: 4d:6b:ef:8a:c0:ba:49:c4:dc:6d:1c:27:b8:a8:28:53:d3:e9: 9a:93:a2:1a:7f:37:b0:7d:20:ed:aa:06:12:3d:21:5d:34:b6: 8f:d5:c4:dc:4c:92:b5:90:12:b3:cb:2c:87:29:b1:5a:10:4c: b5:dd:f1:eb:e1:73:43:02:a2:ae:10:1e:b4:9e:ab:7a:c8:3c: 0e:61:b9:51:ab:73:99:1a:88:39:38:3c:1e:7e:0d:9e:76:7a: cc:9b:d7:c9:2a:9f:63:ac:f5:07:98:7c:d4:fe:d5:ab:13:4b: 34:41:b1:5a:8e:5d:a5:05:d2:c3:2d:91:a5:4f:16:6f:be:62: 2d:38:c7:cd:f7:7f:21:88:97:b1:92:22:7c:2e:d3:3b:7d:e1: 63:63:82:5c:3a:b3:2c:c2:16:43:f1:74:a0:0a:fc:d3:96:5a: 3a:b6:6c:2b:2a:fe:fe:52:cf:61:de:76:f1:64:43:e0:95:15: be:19:b4:1c:2e:dc:1b:ed:bc:a2:c4:39:e1:46:1b:bd:95:93: a1:ea:99:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVGKSTiDSxrbVsmJQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI0MDMyMDIwNTUzNFoXDTI0MDYxODIwNTUzNFowLzEtMCsGA1UEAxMk N2M2MjdhZGItYjEyYi00NTUyLTg3NzYtOWMzZWI0MTFhYzMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOwyigW23j9McnlGIofUognyov0zR1ac0/H9 A7yTkWe2FTg9ZcFkrsy2y8T42tVAZQ4BHppfo0ggdE74PehPwwcWucOjf1rk/2Mf xZpzntihZhuYBvovSv+lgbvyL7Uz0etcmVRzw5FBDyUivAP1ZDGTyPu6AAl6m9n1 UiteRuJFz0NFToDBib23SoPX10Eq4RxfDGdo+nd0rri1g9XO65kEmxUWkDn00snf kqHpGucq3gJ9XzcBWgEyvJhx1+95EgbDE8nDGz6Xg6/0tuvkN4ln8i2dczUu4V5p Ue4/Gp1To0Y8VN0fX3pGSuGUkh2TGITCR80xOUbkaTKFXQZJGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFItmKUYmjTybKfc3S4kpkC3PqrA6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYjJjMWYxYTItMjRlNi0z ODQwLWExZWEtNDUxZjA2MjVhMDY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP0QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGWWkMSkSDErBFCpS51SGIvpwpvIP2EqWTgo2RVso/dxKrgHC4qdVKzd 4EanNoiJuwNByDoyn01r74rAuknE3G0cJ7ioKFPT6ZqTohp/N7B9IO2qBhI9IV00 to/VxNxMkrWQErPLLIcpsVoQTLXd8evhc0MCoq4QHrSeq3rIPA5huVGrc5kaiDk4 PB5+DZ52esyb18kqn2Os9QeYfNT+1asTSzRBsVqOXaUF0sMtkaVPFm++Yi04x833 fyGIl7GSInwu0zt94WNjglw6syzCFkPxdKAK/NOWWjq2bCsq/v5Sz2HedvFkQ+CV Fb4ZtBwu3BvtvKLEOeFGG72Vk6Hqmeo= -----END CERTIFICATE-----Generated at Sun May 5 15:38:08 2024 by rpki-client on console-fra.rpki-client.org