$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/68f36d92-4799-3e71-ac26-4f8973932a80.roa File: 68f36d92-4799-3e71-ac26-4f8973932a80.roa (raw, json) Hash identifier: ThvHWxGm7Cu0aN4yKYw3kho3qWpehgBGFvRxD6nV0jU= Subject key identifier: F9:40:06:9C:AF:90:6D:E1:89:4B:56:88:FD:E6:43:DC:BA:37:4A:8F Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F432858471E70919F80451C1EA17C6266 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/68f36d92-4799-3e71-ac26-4f8973932a80.roa Signing time: Fri 06 Sep 2024 01:00:31 +0000 ROA not before: Fri 06 Sep 2024 01:00:31 +0000 ROA not after: Thu 05 Dec 2024 02:00:31 +0000 asID: 15169 IP address blocks: 172.253.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:1e:70:91:9f:80:45:1c:1e:a1:7c:62:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 6 01:00:31 2024 GMT Not After : Dec 5 02:00:31 2024 GMT Subject: CN=57bf32b6-74c7-43e5-973a-8a4d9ec099cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:bd:fc:de:81:ed:4c:93:a3:6d:4e:82:d1:52: e0:6d:f6:aa:ff:ed:69:84:b1:4e:92:69:f8:fe:bd: 2c:e1:b4:d9:6a:05:04:2e:6f:eb:9c:95:20:29:5f: e4:6d:56:49:b9:08:fc:ef:21:4b:7b:bd:3c:86:c5: c4:4a:ac:5d:06:2d:96:d6:b1:d2:56:5b:bc:6c:bc: 9e:a5:7d:5f:ac:75:e8:1c:3e:ed:a7:fa:25:9c:0a: 74:cd:b2:16:83:32:3c:50:c6:2c:15:e0:30:cf:19: b6:78:bf:68:66:d5:57:e9:5f:7f:17:19:77:60:0b: a7:9b:47:d1:59:80:6a:cd:1f:4d:df:96:16:09:e9: c6:3c:51:ec:e1:bd:d3:29:f1:fe:cd:de:cb:db:4d: 1e:12:ec:16:a9:61:3f:04:a7:b0:e9:69:82:52:8a: 8f:3f:a4:7a:78:ae:43:fe:72:d3:05:a8:f1:4a:c3: 34:34:ee:c5:cc:69:b6:90:47:5f:9e:70:42:0e:3a: 5b:b5:f8:f9:89:57:31:07:8e:5d:14:c7:58:fd:03: e8:08:c7:05:6c:9b:31:cf:4e:9b:aa:3f:8f:ce:88: 2d:0e:09:53:03:2c:54:c8:36:43:86:83:84:60:0f: 8e:74:06:3b:81:df:6e:37:06:12:5c:b1:a0:b5:3b: c2:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:40:06:9C:AF:90:6D:E1:89:4B:56:88:FD:E6:43:DC:BA:37:4A:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/68f36d92-4799-3e71-ac26-4f8973932a80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:97:84:8f:a0:60:c9:fd:59:72:f7:8a:9b:85:f5:7f:c2:5a: 29:ec:e4:ca:50:aa:cc:84:49:68:4f:d7:5c:ab:3e:59:a2:b3: 17:14:a5:9e:e7:e2:13:5c:39:39:94:20:cf:76:2f:7c:d2:a6: a0:b7:15:e5:09:c8:92:4d:fd:b1:8a:4c:42:ef:6f:a9:fe:0a: cd:0e:61:be:b6:6a:13:40:c1:89:fd:fc:2f:fd:9e:a6:5d:a6: 65:ef:d6:11:3e:9d:16:9b:24:08:51:74:e8:ff:e6:79:57:48: 15:94:eb:52:71:11:44:fa:b7:35:e1:7c:f4:0c:78:ea:2f:46: f0:16:91:bc:77:f0:f7:ce:e9:ab:93:06:bc:b2:69:a6:09:a9: ec:fa:ef:5f:3a:e5:62:93:59:ce:53:4e:f0:35:67:df:07:10: 87:b2:f6:16:cc:04:39:30:59:a5:7d:b2:f9:de:22:aa:9b:9b: ac:c0:db:e4:29:17:09:e2:14:1e:07:4b:fb:a5:6e:5c:2b:0d: 5c:1e:ca:c9:d3:52:46:d4:f5:f8:4c:43:8c:bd:45:7e:5a:ea: b0:46:29:36:70:4e:dd:30:de:35:04:97:7a:24:bf:fc:70:80: c2:a9:a0:f1:31:7e:fb:16:0c:4a:06:3c:13:f4:cb:ee:4e:ac: 40:3f:32:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcecJGfgEUcHqF8YmYwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI0MDkwNjAxMDAzMVoXDTI0MTIwNTAyMDAzMVowLzEtMCsGA1UEAxMk NTdiZjMyYjYtNzRjNy00M2U1LTk3M2EtOGE0ZDllYzA5OWNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7383oHtTJOjbU6C0VLgbfaq/+1phLFOkmn4 /r0s4bTZagUELm/rnJUgKV/kbVZJuQj87yFLe708hsXESqxdBi2W1rHSVlu8bLye pX1frHXoHD7tp/olnAp0zbIWgzI8UMYsFeAwzxm2eL9oZtVX6V9/Fxl3YAunm0fR WYBqzR9N35YWCenGPFHs4b3TKfH+zd7L200eEuwWqWE/BKew6WmCUoqPP6R6eK5D /nLTBajxSsM0NO7FzGm2kEdfnnBCDjpbtfj5iVcxB45dFMdY/QPoCMcFbJsxz06b qj+PzogtDglTAyxUyDZDhoOEYA+OdAY7gd9uNwYSXLGgtTvCkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPlABpyvkG3hiUtWiP3mQ9y6N0qPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNjhmMzZkOTItNDc5OS0z ZTcxLWFjMjYtNGY4OTczOTMyYTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP04MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAISXhI+gYMn9WXL3ipuF9X/CWins5MpQqsyESWhP11yrPlmisxcUpZ7n 4hNcOTmUIM92L3zSpqC3FeUJyJJN/bGKTELvb6n+Cs0OYb62ahNAwYn9/C/9nqZd pmXv1hE+nRabJAhRdOj/5nlXSBWU61JxEUT6tzXhfPQMeOovRvAWkbx38PfO6auT BryyaaYJqez671865WKTWc5TTvA1Z98HEIey9hbMBDkwWaV9svneIqqbm6zA2+Qp FwniFB4HS/ulblwrDVweysnTUkbU9fhMQ4y9RX5a6rBGKTZwTt0w3jUEl3okv/xw gMKpoPExfvsWDEoGPBP0y+5OrEA/Mtc= -----END CERTIFICATE-----Generated at Thu Nov 21 23:40:55 2024 by rpki-client on console-ams.rpki-client.org