$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/571948d2-8027-3582-930f-2b7b5ed13980.roa File: 571948d2-8027-3582-930f-2b7b5ed13980.roa (raw, json) Hash identifier: CaETgRhWvN4Rpphpi1TnJdRZvkPLx9RZ6X6TKwcUD7c= Subject key identifier: 28:32:1A:B9:5F:9E:19:2B:7C:92:A3:44:E9:A9:62:25:C7:5A:11:F9 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285847E62B4B3347EF58842CD0ED80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/571948d2-8027-3582-930f-2b7b5ed13980.roa Signing time: Sat 16 Nov 2024 14:00:41 +0000 ROA not before: Sat 16 Nov 2024 14:00:41 +0000 ROA not after: Fri 14 Feb 2025 14:00:41 +0000 asID: 396982 IP address blocks: 172.253.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e6:2b:4b:33:47:ef:58:84:2c:d0:ed:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Nov 16 14:00:41 2024 GMT Not After : Feb 14 14:00:41 2025 GMT Subject: CN=e1237d14-08d1-401e-a2b6-39795b2fb4aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:dc:99:26:9f:39:e8:f0:00:ad:ff:9f:6c:2a: 56:10:de:76:06:70:d5:c5:35:43:b8:cb:5f:97:2d: 7e:1f:86:19:15:89:6e:e0:57:c4:f5:58:68:52:dd: 29:f1:c8:d0:c1:0d:07:ce:ed:9b:df:7b:c1:a6:65: b5:49:5c:ea:e6:9e:62:cc:32:df:43:53:0d:92:09: e4:24:13:b9:f3:3a:0b:c4:40:5c:52:43:58:be:66: 02:7b:0a:66:0a:5c:51:3a:2d:9a:99:a1:c8:62:9e: 4c:f2:5c:75:08:46:77:44:aa:30:0e:99:b7:89:d1: c1:f1:0c:95:6b:cc:8d:de:cc:4f:84:b2:91:79:bb: 20:44:6a:94:76:44:c8:be:a9:dd:79:f4:49:f7:4a: 36:e6:8b:8c:e2:67:99:37:8c:81:5d:49:9c:74:78: 6a:49:fb:14:8e:10:1d:7e:0a:f7:25:dd:cf:3f:1d: 92:ea:f8:47:f5:e2:95:46:04:60:c3:b0:b9:90:a4: 60:22:ce:1a:3e:2a:d5:7d:24:7a:c5:26:31:70:e9: a5:0d:ff:f7:05:82:49:c9:71:c8:5d:2e:40:eb:81: bf:36:55:8f:27:46:99:59:fd:72:70:f5:e3:6e:f1: 0f:9c:b7:73:22:4d:87:b6:31:33:ed:e0:09:e7:38: f0:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:32:1A:B9:5F:9E:19:2B:7C:92:A3:44:E9:A9:62:25:C7:5A:11:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/571948d2-8027-3582-930f-2b7b5ed13980.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:1b:86:00:61:d8:43:9c:a3:7f:2d:dd:34:d0:34:b1:c0:a8: 18:47:f9:7a:7c:ce:83:c7:b8:7a:48:f0:36:43:91:9d:74:a6: 41:cc:89:f6:21:d8:e5:e8:47:69:ea:54:b8:6a:53:73:bc:bd: ee:3b:b0:84:32:66:ab:b9:04:30:0e:ff:21:5c:cc:cb:b5:44: 00:8f:45:1f:8f:6a:d6:87:84:9a:c1:44:79:e1:d2:a9:77:46: 4d:d3:85:9a:ba:15:3b:f5:14:39:3e:ad:d9:dc:11:c4:f4:3b: 50:97:87:fc:5c:cc:b2:95:3b:84:6a:d0:bc:2e:ce:85:f8:7d: 79:ad:9f:ea:f4:a4:f3:4b:a4:6c:72:32:26:6a:1b:7b:c1:ce: 1b:8c:59:ae:35:11:34:5b:4f:a7:17:86:0a:2a:8c:56:c9:ae: 45:0e:7c:f4:70:8a:2d:6d:4e:ee:2c:0e:28:17:ac:ce:73:d6: 94:17:03:85:78:73:bb:8e:dd:8f:2b:54:37:9e:31:97:8b:8e: ea:7a:e5:6a:ba:0c:c6:a5:3b:cb:66:23:1d:e8:87:22:7b:5f: 26:f3:40:9b:55:3b:f5:f4:bc:c7:2e:70:9f:13:fb:1a:5c:0f: 67:2d:e8:72:53:f8:cd:69:26:5e:f6:fe:b1:59:62:06:64:41: ef:82:4a:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmK0szR+9YhCzQ7YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk ZTEyMzdkMTQtMDhkMS00MDFlLWEyYjYtMzk3OTViMmZiNGFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA29yZJp856PAArf+fbCpWEN52BnDVxTVDuMtf ly1+H4YZFYlu4FfE9VhoUt0p8cjQwQ0Hzu2b33vBpmW1SVzq5p5izDLfQ1MNkgnk JBO58zoLxEBcUkNYvmYCewpmClxROi2amaHIYp5M8lx1CEZ3RKowDpm3idHB8QyV a8yN3sxPhLKRebsgRGqUdkTIvqndefRJ90o25ouM4meZN4yBXUmcdHhqSfsUjhAd fgr3Jd3PPx2S6vhH9eKVRgRgw7C5kKRgIs4aPirVfSR6xSYxcOmlDf/3BYJJyXHI XS5A64G/NlWPJ0aZWf1ycPXjbvEPnLdzIk2HtjEz7eAJ5zjwdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCgyGrlfnhkrfJKjROmpYiXHWhH5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNTcxOTQ4ZDItODAyNy0z NTgyLTkzMGYtMmI3YjVlZDEzOTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP0XMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAIbhgBh2EOco38t3TTQNLHAqBhH+Xp8zoPHuHpI8DZDkZ10pkHMifYh 2OXoR2nqVLhqU3O8ve47sIQyZqu5BDAO/yFczMu1RACPRR+PataHhJrBRHnh0ql3 Rk3ThZq6FTv1FDk+rdncEcT0O1CXh/xczLKVO4Rq0LwuzoX4fXmtn+r0pPNLpGxy MiZqG3vBzhuMWa41ETRbT6cXhgoqjFbJrkUOfPRwii1tTu4sDigXrM5z1pQXA4V4 c7uO3Y8rVDeeMZeLjup65Wq6DMalO8tmIx3ohyJ7XybzQJtVO/X0vMcucJ8T+xpc D2ct6HJT+M1pJl72/rFZYgZkQe+CStg= -----END CERTIFICATE-----Generated at Fri Nov 22 00:25:16 2024 by rpki-client on console-fra.rpki-client.org