$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/01ad9c4a-9f64-3060-8b00-ede4e0ddc949.roa File: 01ad9c4a-9f64-3060-8b00-ede4e0ddc949.roa (raw, json) Hash identifier: MRLCcvU5utusSq+J1CxRk3I3VY9lxBfCz++qnv9PHnw= Subject key identifier: F4:B7:B0:46:1A:25:7D:D8:02:06:C2:2E:D5:F6:1D:1B:FE:5B:21:5E Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285847E62B5C26D0120ABCFD2EFB80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/01ad9c4a-9f64-3060-8b00-ede4e0ddc949.roa Signing time: Sat 16 Nov 2024 14:00:41 +0000 ROA not before: Sat 16 Nov 2024 14:00:41 +0000 ROA not after: Fri 14 Feb 2025 14:00:41 +0000 asID: 396982 IP address blocks: 172.253.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e6:2b:5c:26:d0:12:0a:bc:fd:2e:fb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Nov 16 14:00:41 2024 GMT Not After : Feb 14 14:00:41 2025 GMT Subject: CN=df67fb88-a605-4271-ada1-a083bfd9ab75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:b4:ac:c8:7d:7a:a3:70:17:bb:07:96:95:9d: 29:ab:d6:84:1b:04:55:eb:0c:a2:d1:d4:7a:b5:a7: ae:3b:05:4e:eb:05:51:1e:73:c2:fc:18:8f:c5:ce: f6:94:53:a7:d2:7b:14:27:7d:7f:fa:39:53:7c:77: 16:8f:ef:a3:4a:02:6c:47:78:1a:c9:28:0b:c8:cd: 19:cd:84:5a:7f:36:52:b3:4e:0a:7c:e6:7e:84:5a: 08:b0:bb:bd:f8:72:b7:c6:93:30:5f:3f:21:35:75: 04:34:b9:f6:7a:0a:23:51:e1:77:ea:8c:25:2c:c8: 0a:2b:ad:25:3f:8e:c1:8f:48:61:c0:53:51:4c:41: 99:2e:98:60:50:a4:ce:f2:d0:5f:be:b4:78:cc:fe: 37:6c:3b:d3:87:b1:30:b7:74:32:d0:9d:87:ea:32: 6a:f4:10:8f:4c:bd:3e:23:33:be:4d:f5:2c:ca:06: 98:72:08:60:f6:0b:6e:43:e5:8b:aa:ea:3c:5f:14: a3:32:2c:b7:a7:b3:86:a8:18:b3:93:65:67:27:59: e7:2b:b9:8d:2e:e0:b1:64:7e:35:34:e5:8b:3a:b7: 57:b9:80:30:36:5b:d4:b7:d3:14:1f:1e:3a:25:cc: c2:27:fe:f3:d2:45:11:fa:18:84:41:9f:09:d2:b0: 40:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:B7:B0:46:1A:25:7D:D8:02:06:C2:2E:D5:F6:1D:1B:FE:5B:21:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/01ad9c4a-9f64-3060-8b00-ede4e0ddc949.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.22.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:d3:15:08:56:f4:84:a4:0c:84:18:10:89:63:f6:89:4c:66: 56:64:d4:94:93:1f:76:50:3d:8c:47:33:9d:77:0e:84:40:89: 71:04:4b:f9:b3:24:46:07:3f:c9:f9:90:bb:c1:32:d7:a4:d9: d0:c8:66:ab:3b:37:3a:55:3f:a4:dd:dd:4b:cb:52:ce:d0:b4: c1:d3:a0:db:41:fb:e3:8a:96:93:6d:a5:6f:93:bd:ac:b7:54: 33:f8:d4:27:a5:0b:ab:7a:ac:c6:e7:1f:19:a6:bf:08:8c:8f: fd:44:25:02:e9:5a:b4:db:fc:a5:60:3d:2e:e8:64:80:40:35: e9:e3:7b:fd:60:5a:99:ab:95:53:a2:4c:74:1b:47:f2:fa:10: 2a:d0:76:33:98:96:7f:ee:bc:ba:5f:5a:5f:b6:d8:b7:b3:b7: ca:8d:88:a2:3d:d9:59:9a:a8:b6:17:fd:1f:5e:a7:68:f6:32: 05:01:80:4a:f0:ba:17:e6:76:4d:a2:bc:38:9f:64:f3:9a:79: ff:59:68:d0:80:4c:59:5b:f3:ab:08:1e:11:ed:db:46:9a:05: 46:36:76:34:49:20:61:5d:db:2f:cd:6f:c2:ad:3a:5c:8e:0f: f5:c4:c5:95:a4:e3:fe:97:b9:3e:08:92:a5:c3:3c:fc:ba:16: 15:a7:8d:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmK1wm0BIKvP0u+4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk ZGY2N2ZiODgtYTYwNS00MjcxLWFkYTEtYTA4M2JmZDlhYjc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbSsyH16o3AXuweWlZ0pq9aEGwRV6wyi0dR6 taeuOwVO6wVRHnPC/BiPxc72lFOn0nsUJ31/+jlTfHcWj++jSgJsR3gaySgLyM0Z zYRafzZSs04KfOZ+hFoIsLu9+HK3xpMwXz8hNXUENLn2egojUeF36owlLMgKK60l P47Bj0hhwFNRTEGZLphgUKTO8tBfvrR4zP43bDvTh7Ewt3Qy0J2H6jJq9BCPTL0+ IzO+TfUsygaYcghg9gtuQ+WLquo8XxSjMiy3p7OGqBizk2VnJ1nnK7mNLuCxZH41 NOWLOrdXuYAwNlvUt9MUHx46JczCJ/7z0kUR+hiEQZ8J0rBArwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPS3sEYaJX3YAgbCLtX2HRv+WyFeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMDFhZDljNGEtOWY2NC0z MDYwLThiMDAtZWRlNGUwZGRjOTQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP0WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG3TFQhW9ISkDIQYEIlj9olMZlZk1JSTH3ZQPYxHM513DoRAiXEES/mz JEYHP8n5kLvBMtek2dDIZqs7NzpVP6Td3UvLUs7QtMHToNtB++OKlpNtpW+Tvay3 VDP41CelC6t6rMbnHxmmvwiMj/1EJQLpWrTb/KVgPS7oZIBANenje/1gWpmrlVOi THQbR/L6ECrQdjOYln/uvLpfWl+22Lezt8qNiKI92VmaqLYX/R9ep2j2MgUBgErw uhfmdk2ivDifZPOaef9ZaNCATFlb86sIHhHt20aaBUY2djRJIGFd2y/Nb8KtOlyO D/XExZWk4/6XuT4IkqXDPPy6FhWnjaM= -----END CERTIFICATE-----Generated at Thu Nov 21 23:40:50 2024 by rpki-client on console-ams.rpki-client.org