$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2c82a951-058b-3b7b-89b6-010786c16010.roa File: 2c82a951-058b-3b7b-89b6-010786c16010.roa (raw, json) Hash identifier: FjwCUkYVZySyOesoiZD+fK0rsKmSV/FJDuQGoGo8KSo= Subject key identifier: 31:86:8D:98:91:D2:D2:FC:90:DA:3A:21:1E:BF:9B:54:AE:63:79:58 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285845462665A352900ECB90CC3D88 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2c82a951-058b-3b7b-89b6-010786c16010.roa Signing time: Wed 20 Mar 2024 20:50:01 +0000 ROA not before: Wed 20 Mar 2024 20:50:01 +0000 ROA not after: Tue 18 Jun 2024 20:50:01 +0000 asID: 15169 IP address blocks: 172.253.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:46:26:65:a3:52:90:0e:cb:90:cc:3d:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 20 20:50:01 2024 GMT Not After : Jun 18 20:50:01 2024 GMT Subject: CN=e1d69b48-1c87-4e7b-8fe0-00b3022e32ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:14:f1:f1:d9:d4:6b:19:2f:9c:c0:5a:27:25: 02:2a:06:eb:bd:6d:52:b3:dc:19:b5:cb:a3:94:57: f1:dc:14:f5:b6:7e:3a:dd:99:be:9a:d4:9b:42:b7: ed:9b:34:50:3d:e8:d1:d2:31:3e:f2:9b:c7:32:2f: 0c:cb:11:68:6f:e5:31:91:c8:0f:50:cc:eb:f5:87: 3e:15:03:5e:db:16:c7:09:84:29:15:13:00:0d:df: 05:fc:67:82:ed:dd:3e:3c:44:95:7e:fd:40:d8:ce: 30:9b:2e:a4:ef:f4:fa:da:62:b6:3a:71:a2:13:fc: 97:d9:88:d8:81:25:0a:a0:40:13:ed:94:f5:4c:0d: b9:cd:b7:63:c1:95:47:53:91:37:c6:d2:7e:7f:54: 89:7d:5e:3e:9c:16:ea:5d:3c:38:97:41:b3:e8:8b: 95:ce:5a:34:45:e4:5e:03:7e:23:96:54:0b:e8:c7: be:86:c0:31:06:ff:63:f8:1d:4e:99:17:91:ea:f4: bb:cf:5c:fb:9a:04:10:1f:bf:4f:da:32:52:c1:d6: 6c:4d:00:17:6f:26:1a:12:b7:cd:68:49:fc:92:01: c6:aa:25:22:4f:72:73:91:13:df:ab:4d:57:9c:56: 49:12:d6:a9:31:0f:80:dd:54:35:a8:8e:e2:ec:ce: ad:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:86:8D:98:91:D2:D2:FC:90:DA:3A:21:1E:BF:9B:54:AE:63:79:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2c82a951-058b-3b7b-89b6-010786c16010.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:1f:64:3c:18:22:ed:cf:07:8a:56:11:29:83:df:f3:ab:06: 94:52:35:54:6d:05:2b:e9:2b:d7:bc:b2:e1:42:e8:1f:88:75: 42:f8:91:69:37:4b:f8:b3:af:46:6e:dc:6c:1f:44:31:3d:02: e1:83:9f:0c:b8:8d:77:ee:ae:c3:f5:3c:47:21:8b:b0:34:29: 22:52:69:55:a1:d9:74:1f:86:be:0e:13:9a:07:74:1c:07:40: 57:db:96:e0:e7:c2:ca:d5:f7:49:53:e2:14:2c:c6:b0:4c:b3: 7c:ac:cb:54:a7:d0:fc:4c:77:9b:63:27:78:8c:4d:db:8a:6b: bd:4f:81:b3:92:cb:44:3d:19:19:ad:2e:c4:0b:e4:bc:0b:d2: c4:06:ac:76:e1:eb:81:ee:23:db:f1:96:58:fe:6a:b5:fb:88: 3b:8d:dc:dc:3a:87:1f:c1:65:d6:e2:74:f0:f8:15:30:64:05: 0e:1c:de:db:7b:8e:ed:92:4b:15:cb:2c:20:ee:48:a4:47:c0: 37:47:7a:23:61:42:75:ea:50:12:a2:10:21:47:16:3e:29:c6: 28:a8:ea:ac:b1:d3:bf:fb:3f:d9:74:d9:8c:53:08:ed:41:87: cc:41:c0:37:30:e6:d4:fd:3e:71:20:a8:ff:e3:15:96:cc:45: 0e:e5:29:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVGJmWjUpAOy5DMPYgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI0MDMyMDIwNTAwMVoXDTI0MDYxODIwNTAwMVowLzEtMCsGA1UEAxMk ZTFkNjliNDgtMWM4Ny00ZTdiLThmZTAtMDBiMzAyMmUzMmNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRTx8dnUaxkvnMBaJyUCKgbrvW1Ss9wZtcuj lFfx3BT1tn463Zm+mtSbQrftmzRQPejR0jE+8pvHMi8MyxFob+UxkcgPUMzr9Yc+ FQNe2xbHCYQpFRMADd8F/GeC7d0+PESVfv1A2M4wmy6k7/T62mK2OnGiE/yX2YjY gSUKoEAT7ZT1TA25zbdjwZVHU5E3xtJ+f1SJfV4+nBbqXTw4l0Gz6IuVzlo0ReRe A34jllQL6Me+hsAxBv9j+B1OmReR6vS7z1z7mgQQH79P2jJSwdZsTQAXbyYaErfN aEn8kgHGqiUiT3JzkRPfq01XnFZJEtapMQ+A3VQ1qI7i7M6t6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDGGjZiR0tL8kNo6IR6/m1SuY3lYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMmM4MmE5NTEtMDU4Yi0z YjdiLTg5YjYtMDEwNzg2YzE2MDEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP18MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEAfZDwYIu3PB4pWESmD3/OrBpRSNVRtBSvpK9e8suFC6B+IdUL4kWk3 S/izr0Zu3GwfRDE9AuGDnwy4jXfursP1PEchi7A0KSJSaVWh2XQfhr4OE5oHdBwH QFfbluDnwsrV90lT4hQsxrBMs3ysy1Sn0PxMd5tjJ3iMTduKa71PgbOSy0Q9GRmt LsQL5LwL0sQGrHbh64HuI9vxllj+arX7iDuN3Nw6hx/BZdbidPD4FTBkBQ4c3tt7 ju2SSxXLLCDuSKRHwDdHeiNhQnXqUBKiECFHFj4pxiio6qyx07/7P9l02YxTCO1B h8xBwDcw5tT9PnEgqP/jFZbMRQ7lKX8= -----END CERTIFICATE-----Generated at Sat May 18 01:58:29 2024 by rpki-client on console-ams.rpki-client.org