$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/71caa928-410b-3dac-b40d-bf6cf8a7795f.roa File: 71caa928-410b-3dac-b40d-bf6cf8a7795f.roa (raw, json) Hash identifier: 5Ndg+B4sZBWR8MdJ193AW3nLKnFt4cU4CC5E3OliTgE= Subject key identifier: 61:2F:EF:32:97:CF:FF:11:9F:2D:48:E7:6C:E7:74:00:A0:1C:DE:31 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285847E62B382C800396661AC6A300 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/71caa928-410b-3dac-b40d-bf6cf8a7795f.roa Signing time: Sat 16 Nov 2024 14:00:41 +0000 ROA not before: Sat 16 Nov 2024 14:00:41 +0000 ROA not after: Fri 14 Feb 2025 14:00:41 +0000 asID: 15169 IP address blocks: 172.253.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e6:2b:38:2c:80:03:96:66:1a:c6:a3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Nov 16 14:00:41 2024 GMT Not After : Feb 14 14:00:41 2025 GMT Subject: CN=0d67906c-e14f-4f5c-90a6-524586bb046d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:77:c4:38:aa:e3:2a:55:7c:d9:24:62:da:7a: 83:f2:20:f9:c8:8b:37:c5:eb:62:a2:bb:4a:00:d4: 0b:ac:78:46:85:bf:9d:7a:ed:a4:4f:67:10:5b:a5: 9a:70:c1:68:41:4b:3e:19:01:59:e8:bd:2a:96:05: c1:7b:ca:b9:3d:3b:ca:7b:83:c2:51:9d:14:d0:45: 80:86:85:91:12:cf:f2:95:7f:ef:72:18:14:70:72: d5:b5:a2:78:3b:16:bf:bb:66:94:88:5c:ef:d5:06: bb:b5:82:1d:66:e3:12:e5:16:6e:1b:63:67:ae:01: e3:73:fe:0b:78:2d:e2:d0:7d:49:d1:8c:76:a9:31: b2:cf:f0:fd:10:c3:ad:bf:35:f2:05:45:48:9a:e9: f9:3d:02:f9:70:22:35:ed:94:91:6e:47:d9:67:f0: be:cd:70:ca:31:05:ce:e7:4a:60:8b:dc:f2:a6:74: f3:bf:63:ad:7b:38:6e:3e:5b:98:1b:07:07:fd:9d: 35:b1:8a:d9:a6:0a:71:e8:82:27:cd:eb:ce:b3:38: fe:5c:2b:85:76:3a:35:13:b0:59:67:3c:17:8e:76: 7c:66:d1:b5:ff:f0:88:1e:ac:7b:e5:46:ca:2d:5e: 3a:cc:7c:35:de:90:aa:72:8e:c3:d4:2a:a6:43:f3: e6:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:2F:EF:32:97:CF:FF:11:9F:2D:48:E7:6C:E7:74:00:A0:1C:DE:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/71caa928-410b-3dac-b40d-bf6cf8a7795f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:3f:12:f9:39:0a:7f:e7:f3:a7:52:67:c4:57:e0:5f:ea:40: 95:e8:24:18:34:08:d8:76:ad:b6:0c:d7:7d:3c:ed:1c:f1:16: 14:95:50:d7:c9:ea:26:1d:e8:21:1b:62:a4:21:e8:47:f7:3a: 3e:51:63:46:99:f0:3b:11:3e:a8:05:ad:8d:20:37:0f:b7:68: 16:d8:e1:ce:a3:1b:1c:23:34:8a:37:0c:06:9e:19:c0:e2:5f: 0a:8d:2f:eb:51:2d:4e:99:a9:e7:87:ef:1a:81:dc:ea:df:a3: c0:f0:39:cd:18:76:ca:eb:73:e7:56:04:da:37:b3:0e:84:d2: 5b:4d:82:91:08:92:4d:3c:30:11:92:b6:81:39:64:bd:76:ba: 1c:38:2f:03:ab:e7:2f:68:2c:24:fe:49:d9:17:74:58:19:5b: 76:04:86:43:3e:af:62:5e:c0:70:68:04:ac:26:78:04:fe:ea: 72:f5:82:0c:99:90:5d:ef:02:54:27:a4:4b:46:5b:de:b7:e6: 46:af:13:06:7b:11:cc:59:62:fb:9d:55:c4:98:02:b8:9d:82: 9c:b5:1a:d8:39:a9:64:ba:34:0f:79:e6:0e:e2:99:ff:a3:a4: fb:00:41:05:55:0a:64:90:2c:98:cc:6f:dd:c0:b1:c6:3c:9b: 1d:57:dc:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKzgsgAOWZhrGowAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk MGQ2NzkwNmMtZTE0Zi00ZjVjLTkwYTYtNTI0NTg2YmIwNDZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnfEOKrjKlV82SRi2nqD8iD5yIs3xetiortK ANQLrHhGhb+deu2kT2cQW6WacMFoQUs+GQFZ6L0qlgXBe8q5PTvKe4PCUZ0U0EWA hoWREs/ylX/vchgUcHLVtaJ4Oxa/u2aUiFzv1Qa7tYIdZuMS5RZuG2NnrgHjc/4L eC3i0H1J0Yx2qTGyz/D9EMOtvzXyBUVImun5PQL5cCI17ZSRbkfZZ/C+zXDKMQXO 50pgi9zypnTzv2OtezhuPluYGwcH/Z01sYrZpgpx6IInzevOszj+XCuFdjo1E7BZ ZzwXjnZ8ZtG1//CIHqx75UbKLV46zHw13pCqco7D1CqmQ/PmDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGEv7zKXz/8Rny1I52zndACgHN4xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNzFjYWE5MjgtNDEwYi0z ZGFjLWI0MGQtYmY2Y2Y4YTc3OTVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP14MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHQ/Evk5Cn/n86dSZ8RX4F/qQJXoJBg0CNh2rbYM13087RzxFhSVUNfJ 6iYd6CEbYqQh6Ef3Oj5RY0aZ8DsRPqgFrY0gNw+3aBbY4c6jGxwjNIo3DAaeGcDi XwqNL+tRLU6ZqeeH7xqB3Orfo8DwOc0Ydsrrc+dWBNo3sw6E0ltNgpEIkk08MBGS toE5ZL12uhw4LwOr5y9oLCT+SdkXdFgZW3YEhkM+r2JewHBoBKwmeAT+6nL1ggyZ kF3vAlQnpEtGW9635kavEwZ7EcxZYvudVcSYAridgpy1Gtg5qWS6NA955g7imf+j pPsAQQVVCmSQLJjMb93AscY8mx1X3L8= -----END CERTIFICATE-----Generated at Thu Nov 21 23:40:56 2024 by rpki-client on console-ams.rpki-client.org