$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/41c74682-e260-397d-8267-3a4dc0e8f079.roa File: 41c74682-e260-397d-8267-3a4dc0e8f079.roa (raw, json) Hash identifier: 9bjnuc1JFFUS0BTxr2ziKf5+4Lz+xgFZo9BIzMIWIjM= Subject key identifier: 69:ED:1A:64:8D:B3:80:D6:E9:E3:26:A1:AB:4B:A3:D6:FF:CB:0E:A3 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285847E62AAD7D3A53228C60DCEA80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/41c74682-e260-397d-8267-3a4dc0e8f079.roa Signing time: Sat 16 Nov 2024 14:00:41 +0000 ROA not before: Sat 16 Nov 2024 14:00:41 +0000 ROA not after: Fri 14 Feb 2025 14:00:41 +0000 asID: 15169 IP address blocks: 172.253.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e6:2a:ad:7d:3a:53:22:8c:60:dc:ea:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Nov 16 14:00:41 2024 GMT Not After : Feb 14 14:00:41 2025 GMT Subject: CN=63ad5bfa-f437-452b-b955-858fc0c6f62c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f6:be:51:e6:cd:38:a1:ef:af:33:0d:d0:0b: d9:e2:18:94:5d:ae:9c:ad:5c:da:d4:12:a2:b8:ba: fd:ed:a2:f8:f3:39:d0:f1:10:5f:5a:7b:14:ac:18: e4:28:6b:59:02:c2:a4:98:de:ec:31:43:09:c2:4d: f5:05:d1:fa:94:6e:55:d7:f1:b6:04:3d:54:cd:03: f2:8e:c3:6a:4c:22:67:9a:d6:e9:15:75:15:65:ec: e1:15:41:9c:6a:33:48:7a:d1:f1:eb:3a:54:c3:71: 20:8f:c1:8b:39:31:d4:40:65:29:4f:f0:db:44:84: 10:e5:ee:50:78:aa:96:a7:3b:23:75:90:e7:14:8e: 83:8c:ba:35:a1:1f:99:49:64:90:e5:3e:62:84:7a: c8:84:70:36:38:ce:a2:a5:a6:2b:9a:a5:31:ba:9f: af:e6:1b:2e:43:a3:7b:8a:2a:3c:4d:0b:36:79:82: 99:a2:7e:94:e4:0c:16:d3:25:05:98:00:6e:aa:c9: 39:c0:b9:40:f1:ef:6b:cc:5e:e8:d4:aa:65:f2:b6: b2:b7:12:48:01:34:00:11:35:76:58:d7:ab:2d:af: ed:7d:16:e4:77:7a:61:bd:98:02:4c:fd:17:a8:57: 46:15:e2:3e:19:1c:7f:cf:b0:fa:70:73:c8:e0:e8: 62:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:ED:1A:64:8D:B3:80:D6:E9:E3:26:A1:AB:4B:A3:D6:FF:CB:0E:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/41c74682-e260-397d-8267-3a4dc0e8f079.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:f4:41:d1:13:ba:c8:23:58:14:06:f7:ba:57:f0:0e:a6:7c: 3f:c5:4c:64:db:db:28:55:10:26:77:ed:b9:a6:9e:18:a9:80: d2:0c:2b:12:72:e6:3f:29:57:30:9b:ae:32:c5:03:d3:e4:e7: 92:03:7d:0a:fc:ae:24:f4:99:d8:f0:4c:cf:41:f1:b0:1e:54: cc:fe:34:a8:0b:9c:e0:a2:bb:c1:57:a8:18:bb:ba:0d:79:19: 10:66:e5:a9:9d:07:7f:31:41:c1:9c:a7:ba:26:99:08:e6:fe: f9:9a:d7:c7:bb:c6:20:04:b8:23:71:c5:ac:19:ff:bc:5e:c4: 5e:62:25:3c:47:4b:9a:8b:33:bd:5f:d9:46:78:fa:5d:32:c8: 59:4f:f6:58:8d:b8:a7:ae:27:a3:fb:41:4e:f5:a5:5e:c4:37: 3b:7e:ce:e3:3e:61:cd:65:40:3d:6b:61:d2:cb:5f:bb:87:4d: 17:41:a0:2f:c8:08:d6:aa:cd:82:04:7e:a8:a8:c4:35:5c:78: c0:98:f2:f6:6b:91:76:48:91:46:22:31:9b:59:f0:ad:f0:68: e9:f2:a1:06:fa:42:9b:09:91:10:b3:02:9d:20:b1:fc:94:fa: 24:a4:92:d7:d4:d9:d7:cb:83:5a:cf:5f:69:4c:08:00:44:a2: 75:32:d3:29 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEfmKq19OlMijGDc6oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk NjNhZDViZmEtZjQzNy00NTJiLWI5NTUtODU4ZmMwYzZmNjJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfa+UebNOKHvrzMN0AvZ4hiUXa6crVza1BKi uLr97aL48znQ8RBfWnsUrBjkKGtZAsKkmN7sMUMJwk31BdH6lG5V1/G2BD1UzQPy jsNqTCJnmtbpFXUVZezhFUGcajNIetHx6zpUw3Egj8GLOTHUQGUpT/DbRIQQ5e5Q eKqWpzsjdZDnFI6DjLo1oR+ZSWSQ5T5ihHrIhHA2OM6ipaYrmqUxup+v5hsuQ6N7 iio8TQs2eYKZon6U5AwW0yUFmABuqsk5wLlA8e9rzF7o1Kpl8raytxJIATQAETV2 WNerLa/tfRbkd3phvZgCTP0XqFdGFeI+GRx/z7D6cHPI4OhizwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFGntGmSNs4DW6eMmoatLo9b/yw6jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNDFjNzQ2ODItZTI2MC0z OTdkLTgyNjctM2E0ZGMwZThmMDc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMArP0wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAIPRB0RO6yCNYFAb3ulfwDqZ8P8VMZNvbKFUQJnftuaaeGKmA0gwrEnLm PylXMJuuMsUD0+TnkgN9CvyuJPSZ2PBMz0HxsB5UzP40qAuc4KK7wVeoGLu6DXkZ EGblqZ0HfzFBwZynuiaZCOb++ZrXx7vGIAS4I3HFrBn/vF7EXmIlPEdLmoszvV/Z Rnj6XTLIWU/2WI24p64no/tBTvWlXsQ3O37O4z5hzWVAPWth0stfu4dNF0GgL8gI 1qrNggR+qKjENVx4wJjy9muRdkiRRiIxm1nwrfBo6fKhBvpCmwmRELMCnSCx/JT6 JKSS19TZ18uDWs9faUwIAESidTLTKQ== -----END CERTIFICATE-----Generated at Fri Nov 22 00:25:15 2024 by rpki-client on console-fra.rpki-client.org