$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7055a96f-f858-3768-bc22-8014d46b2b9b.roa File: 7055a96f-f858-3768-bc22-8014d46b2b9b.roa (raw, json) Hash identifier: Jfd9hxVo8EoL4/AfFwz9UuzxzTL9O2DKs7s7LiUzGKM= Subject key identifier: E4:1E:AA:9E:75:AD:6B:60:D1:E9:FC:75:B9:E1:EA:BB:67:A5:C9:F6 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F432858471E7092340CF1679C76942780 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7055a96f-f858-3768-bc22-8014d46b2b9b.roa Signing time: Fri 06 Sep 2024 01:00:31 +0000 ROA not before: Fri 06 Sep 2024 01:00:31 +0000 ROA not after: Thu 05 Dec 2024 02:00:31 +0000 asID: 15169 IP address blocks: 172.253.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:1e:70:92:34:0c:f1:67:9c:76:94:27:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 6 01:00:31 2024 GMT Not After : Dec 5 02:00:31 2024 GMT Subject: CN=66710702-f796-4352-a330-e4904becd4e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c3:65:44:2c:5b:5b:bc:4a:a1:0b:57:4d:f8: 49:a4:c4:43:30:79:35:6f:e7:86:27:74:01:9f:a5: 71:a9:3d:67:c6:72:34:79:36:7e:cf:05:36:c1:be: f1:d8:71:4d:c5:1e:04:e7:b6:28:92:b5:3c:c5:8d: b7:0b:d6:01:e8:65:2e:86:60:90:a8:62:2e:db:e2: 17:d3:80:ee:b9:cf:40:29:6d:39:a3:9d:91:21:fe: 5e:e7:a6:22:9e:93:7d:d4:11:10:0e:b7:43:b3:73: c7:51:ba:4f:34:08:ac:7a:56:05:5a:27:84:9e:06: 40:05:0d:91:00:2b:fb:44:06:cb:4e:bc:d2:e5:7f: fb:ae:89:5b:59:b0:ba:cd:63:61:ff:60:89:c0:ea: 77:3f:5a:66:9b:69:d6:35:1a:98:e0:11:c9:7f:d1: f6:f3:ee:68:84:b4:d6:20:67:c5:87:d9:fc:97:a7: 4a:2f:2e:ce:e9:08:cd:88:5c:30:95:15:2d:85:a0: 50:81:1c:bf:13:f5:c2:70:74:6a:cc:5c:f6:0b:12: 68:e0:35:56:6f:39:30:7b:1e:e9:99:e1:8a:0d:31: 46:10:a5:07:05:86:ce:e9:29:41:ca:8c:38:79:35: 70:2c:89:c9:c6:33:bf:d1:4b:e2:8b:6c:5d:87:8b: 71:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:1E:AA:9E:75:AD:6B:60:D1:E9:FC:75:B9:E1:EA:BB:67:A5:C9:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7055a96f-f858-3768-bc22-8014d46b2b9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.59.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:46:d0:5a:18:94:29:73:9a:63:e8:33:d0:b7:39:2a:38:d7: 2d:3b:8f:c7:36:74:4e:07:53:90:de:dd:e1:b6:65:b3:34:46: d6:25:cd:e9:20:92:55:59:70:fb:32:ff:87:f3:26:0f:37:89: 47:93:9a:5c:0f:5f:9f:11:0e:b5:7a:40:28:58:fa:52:1a:12: 78:e6:5c:83:72:c9:13:3d:16:5f:d1:ce:75:5b:5e:31:b6:f1: 1a:ea:58:fe:24:96:bf:0c:c2:ee:cf:17:48:df:18:7d:c2:10: 28:f9:be:5c:81:32:c2:a5:30:af:5b:ba:69:41:18:0a:8b:b7: d3:87:e6:35:27:60:fa:53:44:9a:88:a9:1d:b0:23:e4:c1:4a: ec:b4:74:90:09:f6:96:5c:0a:8a:62:59:8a:dc:0b:b9:08:36: a0:78:14:a2:45:00:e7:af:5f:9f:9a:64:cb:d0:2f:9b:68:f5: 9b:e4:84:29:21:cd:c8:68:57:86:03:25:d2:31:44:29:af:d4: 30:16:3c:81:48:26:3f:70:db:70:12:ce:2e:19:bb:f3:2a:31: a4:48:a2:6f:f7:2f:bc:8f:df:b9:de:f6:a0:3c:b0:63:6a:b6: 85:4b:82:b8:bc:b3:35:7a:7b:87:6c:ff:02:2d:41:17:99:fb: 8e:dc:30:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcecJI0DPFnnHaUJ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI0MDkwNjAxMDAzMVoXDTI0MTIwNTAyMDAzMVowLzEtMCsGA1UEAxMk NjY3MTA3MDItZjc5Ni00MzUyLWEzMzAtZTQ5MDRiZWNkNGUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8NlRCxbW7xKoQtXTfhJpMRDMHk1b+eGJ3QB n6VxqT1nxnI0eTZ+zwU2wb7x2HFNxR4E57YokrU8xY23C9YB6GUuhmCQqGIu2+IX 04Duuc9AKW05o52RIf5e56YinpN91BEQDrdDs3PHUbpPNAiselYFWieEngZABQ2R ACv7RAbLTrzS5X/7rolbWbC6zWNh/2CJwOp3P1pmm2nWNRqY4BHJf9H28+5ohLTW IGfFh9n8l6dKLy7O6QjNiFwwlRUthaBQgRy/E/XCcHRqzFz2CxJo4DVWbzkwex7p meGKDTFGEKUHBYbO6SlByow4eTVwLInJxjO/0Uvii2xdh4txMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOQeqp51rWtg0en8dbnh6rtnpcn2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNzA1NWE5NmYtZjg1OC0z NzY4LWJjMjItODAxNGQ0NmIyYjliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP07MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKpG0FoYlClzmmPoM9C3OSo41y07j8c2dE4HU5De3eG2ZbM0RtYlzekg klVZcPsy/4fzJg83iUeTmlwPX58RDrV6QChY+lIaEnjmXINyyRM9Fl/RznVbXjG2 8RrqWP4klr8Mwu7PF0jfGH3CECj5vlyBMsKlMK9bumlBGAqLt9OH5jUnYPpTRJqI qR2wI+TBSuy0dJAJ9pZcCopiWYrcC7kINqB4FKJFAOevX5+aZMvQL5to9ZvkhCkh zchoV4YDJdIxRCmv1DAWPIFIJj9w23ASzi4Zu/MqMaRIom/3L7yP37ne9qA8sGNq toVLgri8szV6e4ds/wItQReZ+47cMKA= -----END CERTIFICATE-----Generated at Sun Nov 24 23:10:12 2024 by rpki-client on console-ams.rpki-client.org