$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/41c74682-e260-397d-8267-3a4dc0e8f079.roa File: 41c74682-e260-397d-8267-3a4dc0e8f079.roa (raw, json) Hash identifier: tDBcRezr8KJu/qtLn7XZKeZxCDRFbbrDf9fKRJbWMog= Subject key identifier: 94:9D:95:36:D8:71:EC:EF:59:38:67:27:37:F9:B2:6D:41:01:08:62 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584546291A5C57D2CD76C386C500 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/41c74682-e260-397d-8267-3a4dc0e8f079.roa Signing time: Wed 20 Mar 2024 20:55:29 +0000 ROA not before: Wed 20 Mar 2024 20:55:29 +0000 ROA not after: Tue 18 Jun 2024 20:55:29 +0000 asID: 15169 IP address blocks: 172.253.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:46:29:1a:5c:57:d2:cd:76:c3:86:c5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 20 20:55:29 2024 GMT Not After : Jun 18 20:55:29 2024 GMT Subject: CN=f2abb4a6-024b-4105-96d3-2a6b75c94c35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:10:3e:b2:d7:ac:03:d4:15:23:a2:a7:a8:89: 5b:39:0a:9b:e3:ab:2c:7b:84:ab:0f:13:2d:ad:4b: 18:e5:3e:86:fa:e1:14:d2:49:d3:05:c9:20:6a:d8: 4a:1f:32:59:e6:fe:cb:44:ee:d1:8b:16:5d:1e:a8: bc:69:58:53:aa:e3:1c:ff:6a:ba:4c:2f:fb:da:cc: d4:ab:dd:08:89:fe:f7:ab:bf:07:b4:9c:67:32:94: da:e8:35:15:d1:29:fc:b4:10:d7:41:9c:d5:de:d4: 2b:c9:60:6b:e9:29:90:d0:4c:20:a5:46:44:6a:8a: 33:a0:74:a1:8d:6d:d8:e1:9c:00:c7:da:25:e8:22: 72:f3:b5:15:2b:10:06:f2:b6:1c:48:db:e6:1a:a3: e6:7c:a2:b1:cf:27:be:95:59:50:9a:af:15:57:72: c1:e1:1d:eb:7e:84:ea:9a:e4:66:aa:50:ce:70:5b: 64:8b:df:31:dd:01:84:30:54:8b:e6:5e:5c:f2:7d: 84:85:e9:56:c9:b3:db:81:6d:17:4b:20:b1:93:d2: e6:38:09:24:14:f7:9b:ad:36:c6:b8:9a:87:bd:2d: f3:28:05:8c:1a:41:39:a9:ba:97:e7:54:c5:be:b9: 1e:98:dd:a3:96:ad:92:a7:45:a0:49:40:6e:c0:5f: 53:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:9D:95:36:D8:71:EC:EF:59:38:67:27:37:F9:B2:6D:41:01:08:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/41c74682-e260-397d-8267-3a4dc0e8f079.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:ed:42:4f:ce:42:fd:22:20:f0:b2:21:9c:f4:ee:61:15:8a: d9:43:3b:6c:39:4f:77:04:da:85:a0:0f:b4:89:22:99:a1:28: 25:b3:91:fd:26:de:78:94:2d:94:07:22:d7:dc:00:4c:72:d4: 17:ce:37:d9:a0:b6:83:05:31:82:72:61:10:b1:ce:a9:9f:80: c8:45:15:53:ab:17:e2:75:2e:10:c0:23:8e:fa:4c:ac:b7:6e: 44:d0:a0:23:da:6e:36:ff:c0:40:11:46:db:b6:88:34:de:8f: ac:a0:49:0a:3b:99:27:e7:84:75:83:33:34:c9:26:fe:60:b1: b5:e1:11:b1:2e:73:37:97:4c:47:b3:3c:a6:65:f4:d1:61:0e: f2:70:7d:bb:a0:16:62:f9:cc:c0:75:46:a2:68:6c:eb:ec:fb: 3c:b7:ca:20:da:a2:c1:c5:8e:7e:e1:81:fd:b6:90:d5:96:d7: 77:c7:f7:64:5a:7e:46:0e:d1:ea:94:1c:15:45:e2:b8:a9:68: 82:22:51:c4:32:e6:6f:fd:33:52:68:9d:aa:22:f5:67:38:5e: 11:86:8b:4b:f4:be:ee:32:03:d2:c4:09:ed:73:35:16:2a:87: b5:a8:2b:84:73:7e:81:2e:57:39:0d:27:b8:c0:f3:37:92:60: ec:db:37:0c -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEVGKRpcV9LNdsOGxQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI0MDMyMDIwNTUyOVoXDTI0MDYxODIwNTUyOVowLzEtMCsGA1UEAxMk ZjJhYmI0YTYtMDI0Yi00MTA1LTk2ZDMtMmE2Yjc1Yzk0YzM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhA+stesA9QVI6KnqIlbOQqb46sse4SrDxMt rUsY5T6G+uEU0knTBckgathKHzJZ5v7LRO7RixZdHqi8aVhTquMc/2q6TC/72szU q90Iif73q78HtJxnMpTa6DUV0Sn8tBDXQZzV3tQryWBr6SmQ0EwgpUZEaoozoHSh jW3Y4ZwAx9ol6CJy87UVKxAG8rYcSNvmGqPmfKKxzye+lVlQmq8VV3LB4R3rfoTq muRmqlDOcFtki98x3QGEMFSL5l5c8n2EhelWybPbgW0XSyCxk9LmOAkkFPebrTbG uJqHvS3zKAWMGkE5qbqX51TFvrkemN2jlq2Sp0WgSUBuwF9TQwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFJSdlTbYcezvWThnJzf5sm1BAQhiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNDFjNzQ2ODItZTI2MC0z OTdkLTgyNjctM2E0ZGMwZThmMDc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMArP0wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEADu1CT85C/SIg8LIhnPTuYRWK2UM7bDlPdwTahaAPtIkimaEoJbOR/Sbe eJQtlAci19wATHLUF8432aC2gwUxgnJhELHOqZ+AyEUVU6sX4nUuEMAjjvpMrLdu RNCgI9puNv/AQBFG27aINN6PrKBJCjuZJ+eEdYMzNMkm/mCxteERsS5zN5dMR7M8 pmX00WEO8nB9u6AWYvnMwHVGomhs6+z7PLfKINqiwcWOfuGB/baQ1ZbXd8f3ZFp+ Rg7R6pQcFUXiuKlogiJRxDLmb/0zUmidqiL1ZzheEYaLS/S+7jID0sQJ7XM1FiqH tagrhHN+gS5XOQ0nuMDzN5Jg7Ns3DA== -----END CERTIFICATE-----Generated at Fri May 17 22:52:19 2024 by rpki-client on console-ams.rpki-client.org