$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/43a9f3ff-ed4b-3b51-b881-fac19d2193ae.roa File: 43a9f3ff-ed4b-3b51-b881-fac19d2193ae.roa (raw, json) Hash identifier: mfnpPVPtboF7hL5IIQyYi6LYhOGFTRxoPeZhdfbuEgY= Subject key identifier: AF:A2:0D:FA:2B:98:CD:D4:CF:68:37:81:39:09:48:7F:51:45:61:B2 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C5817F4AE683A43A81863EA0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/43a9f3ff-ed4b-3b51-b881-fac19d2193ae.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 396982 IP address blocks: 172.253.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:7f:4a:e6:83:a4:3a:81:86:3e:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=91cf231e-9c73-455d-9993-c7c195c2d034 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:f7:d6:c9:bf:62:dd:8e:4e:bf:91:4d:55:91: a4:dc:5b:e2:d7:b9:4d:41:ac:99:a0:0f:8a:8c:86: ef:c7:33:a1:e0:14:9b:df:34:3b:e5:e2:dd:df:9b: 98:c7:86:f9:35:b5:3b:4a:33:d0:66:31:be:94:0c: eb:05:30:e0:5f:01:f4:3e:68:29:1c:3f:aa:85:44: e8:b7:cd:31:37:2c:16:f2:76:47:b7:e5:89:ec:eb: 2c:c9:73:3d:2d:7d:ef:2e:02:c6:a4:86:be:b9:9c: 02:52:16:2d:8b:84:fd:2c:0c:2a:d8:cf:52:d9:c5: 17:e4:72:0b:15:0a:16:18:a2:ad:fa:c4:2a:97:fa: 82:3f:8c:7f:78:b9:79:bf:5c:a7:56:c3:7b:92:c7: d7:de:4a:ea:42:6d:dc:64:f5:b2:67:ed:a0:08:47: 67:06:79:7d:64:c9:13:47:ad:75:63:eb:8c:4c:1e: 99:f8:0a:96:2f:48:41:ff:62:7f:d0:00:53:08:7c: 9c:e1:68:0c:45:9a:83:c2:b7:fd:b9:b8:70:d2:4e: d7:83:0d:de:6a:4b:f3:d0:6d:ff:44:6f:b4:d9:08: e8:b9:c6:62:39:e7:4d:ea:8e:ab:2d:93:9b:71:8c: 33:f8:77:e8:3b:b4:67:a8:95:70:5c:4a:6a:d9:80: 26:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:A2:0D:FA:2B:98:CD:D4:CF:68:37:81:39:09:48:7F:51:45:61:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/43a9f3ff-ed4b-3b51-b881-fac19d2193ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.18.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:e0:a8:49:45:3a:b9:e7:54:7c:d0:ab:2a:44:3e:3c:97:07: 88:73:10:af:e7:90:6d:7a:37:db:5e:d2:d5:e5:79:1c:d8:b0: 5f:cd:61:81:10:4a:35:ab:af:ff:13:ed:38:40:26:28:70:e0: a9:2c:1b:0d:22:15:9c:a6:7e:e9:ad:93:9a:52:da:cb:a5:59: 96:f5:96:7d:83:65:f4:6f:e4:01:75:b8:35:6a:6b:39:c7:80: b8:d3:b4:64:ad:8f:df:1b:97:ad:da:5d:b2:a8:39:8a:8a:a3: 05:dc:f6:49:c8:52:e3:d1:9d:c3:19:66:8e:4a:3e:21:5b:c7: 12:7c:5d:99:db:a5:b4:88:bf:93:bb:c2:de:0b:4f:f6:28:3b: d2:0c:bf:21:60:cf:fa:db:9d:cc:c9:0f:d3:4b:3c:39:fe:ca: ed:f8:0a:8f:c5:a4:94:8a:bc:ba:18:e4:b6:a6:db:c2:b1:a1: 0c:4a:27:97:95:52:a5:64:4f:64:05:66:51:7d:cc:00:f0:4c: 84:b1:09:de:b5:cb:42:e4:92:5a:52:be:45:0e:7a:11:03:1d: 3f:91:43:5f:6e:89:94:6d:ea:df:68:f3:c2:8a:22:28:6c:3f: 01:78:fe:a7:54:6f:dc:af:7f:9c:d6:fc:af:ee:f3:85:5e:f7: 33:86:bf:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgX9K5oOkOoGGPqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk OTFjZjIzMWUtOWM3My00NTVkLTk5OTMtYzdjMTk1YzJkMDM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/fWyb9i3Y5Ov5FNVZGk3Fvi17lNQayZoA+K jIbvxzOh4BSb3zQ75eLd35uYx4b5NbU7SjPQZjG+lAzrBTDgXwH0PmgpHD+qhUTo t80xNywW8nZHt+WJ7OssyXM9LX3vLgLGpIa+uZwCUhYti4T9LAwq2M9S2cUX5HIL FQoWGKKt+sQql/qCP4x/eLl5v1ynVsN7ksfX3krqQm3cZPWyZ+2gCEdnBnl9ZMkT R611Y+uMTB6Z+AqWL0hB/2J/0ABTCHyc4WgMRZqDwrf9ubhw0k7Xgw3eakvz0G3/ RG+02QjoucZiOedN6o6rLZObcYwz+HfoO7RnqJVwXEpq2YAm1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK+iDformM3Uz2g3gTkJSH9RRWGyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNDNhOWYzZmYtZWQ0Yi0z YjUxLWI4ODEtZmFjMTlkMjE5M2FlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP0SMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACLgqElFOrnnVHzQqypEPjyXB4hzEK/nkG16N9te0tXleRzYsF/NYYEQ SjWrr/8T7ThAJihw4KksGw0iFZymfumtk5pS2sulWZb1ln2DZfRv5AF1uDVqaznH gLjTtGStj98bl63aXbKoOYqKowXc9knIUuPRncMZZo5KPiFbxxJ8XZnbpbSIv5O7 wt4LT/YoO9IMvyFgz/rbnczJD9NLPDn+yu34Co/FpJSKvLoY5Lam28KxoQxKJ5eV UqVkT2QFZlF9zADwTISxCd61y0LkklpSvkUOehEDHT+RQ19uiZRt6t9o88KKIihs PwF4/qdUb9yvf5zW/K/u84Ve9zOGv6o= -----END CERTIFICATE-----Generated at Sun Feb 16 15:45:20 2025 by rpki-client