$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b2c1f1a2-24e6-3840-a1ea-451f0625a066.roa File: b2c1f1a2-24e6-3840-a1ea-451f0625a066.roa (raw, json) Hash identifier: abMVLxyE6Y8CD0ZPJIZASe8VEMeacp0n3dpui8dLEhQ= Subject key identifier: 7F:3B:35:63:BF:07:95:02:97:2A:9F:FA:99:34:5B:59:9C:87:F0:20 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285847E62B41BA75D7AD48554C9880 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b2c1f1a2-24e6-3840-a1ea-451f0625a066.roa Signing time: Sat 16 Nov 2024 14:00:41 +0000 ROA not before: Sat 16 Nov 2024 14:00:41 +0000 ROA not after: Fri 14 Feb 2025 14:00:41 +0000 asID: 396982 IP address blocks: 172.253.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e6:2b:41:ba:75:d7:ad:48:55:4c:98:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Nov 16 14:00:41 2024 GMT Not After : Feb 14 14:00:41 2025 GMT Subject: CN=660d157f-177a-4d25-a81d-ac59141e58ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:72:ba:9a:86:05:4f:51:ec:f9:0e:3f:5b:27: 3a:30:f5:45:4b:bb:ae:88:03:1a:d6:13:5f:82:cf: db:47:25:1c:da:93:d8:fc:16:0e:a2:d4:97:b0:12: 0c:d9:9d:04:06:cd:68:5d:13:2c:5f:7e:1d:a9:c6: ce:3e:03:ed:e5:fa:5f:11:a7:b9:46:d3:ee:d7:65: 0c:3d:3e:14:4a:1e:94:d3:5e:8e:93:b3:a1:f4:f1: d8:f5:16:06:c2:54:a5:3f:bf:23:28:f2:a1:4d:11: 01:74:26:18:6c:73:c6:1a:24:b3:24:d2:26:17:d5: e3:80:6d:26:29:42:ab:1d:c7:40:1d:41:4c:51:ae: c0:79:46:ca:52:a7:86:ce:60:62:a1:2f:af:cd:0d: 20:a2:df:8e:88:b2:52:88:b2:06:07:ae:f9:c8:b1: 7c:7d:b4:cc:8b:f4:b2:17:33:2d:d6:41:5a:90:65: 65:67:30:ee:bd:53:32:cc:e7:5b:87:cb:05:22:28: 60:26:80:c3:96:64:f8:64:c7:37:6d:3e:46:c4:9a: 6d:92:d0:25:33:3d:1c:c6:ae:f7:c7:1d:63:d6:22: 12:92:16:d2:3c:e2:bc:39:47:4f:c6:97:9f:a1:3c: 7a:bd:02:91:df:89:a5:8d:5a:a1:74:b3:23:af:fe: af:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:3B:35:63:BF:07:95:02:97:2A:9F:FA:99:34:5B:59:9C:87:F0:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b2c1f1a2-24e6-3840-a1ea-451f0625a066.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:59:d7:3b:07:b1:42:f1:8f:b8:91:0d:85:fd:45:20:4a:03: ce:c3:60:7c:6f:08:5e:2c:31:af:4f:28:6b:f4:20:83:6e:df: 15:60:a7:7e:86:af:a3:0d:83:45:70:15:b6:23:36:22:cb:f7: 58:80:68:80:53:64:bd:81:67:80:21:89:d1:38:e2:32:58:24: 8b:56:1f:be:4a:fb:4e:e0:a1:1e:d2:9e:f2:db:b8:f9:89:55: 2d:a1:85:c9:33:10:b7:19:09:36:26:ab:19:2b:15:df:75:73: 58:57:aa:1d:f1:03:a1:39:e3:cf:1f:74:4e:c3:9e:22:3b:e5: 14:98:74:3a:cd:d8:35:02:55:d3:ef:1b:47:b9:69:e1:0d:4e: a8:dc:d0:69:dd:49:a5:f9:9f:f5:1b:0a:20:09:8e:1e:85:a6: b6:b5:44:a3:f1:f2:28:2c:7c:55:f9:c8:e5:93:be:f6:0d:78: 74:52:21:2a:6a:e3:a0:b7:95:b9:dc:e6:e1:28:dd:50:4d:25: d8:1d:36:fd:65:45:59:a3:69:25:15:36:5e:17:d7:e3:ab:f2: b6:ff:b6:6d:4b:a5:21:05:77:ba:1e:cf:bb:18:f4:6f:3a:13: de:ef:25:19:83:df:4f:8f:c9:f7:94:e5:0c:2c:27:29:bb:39: 25:b1:28:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmK0G6ddetSFVMmIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk NjYwZDE1N2YtMTc3YS00ZDI1LWE4MWQtYWM1OTE0MWU1OGVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHK6moYFT1Hs+Q4/Wyc6MPVFS7uuiAMa1hNf gs/bRyUc2pPY/BYOotSXsBIM2Z0EBs1oXRMsX34dqcbOPgPt5fpfEae5RtPu12UM PT4USh6U016Ok7Oh9PHY9RYGwlSlP78jKPKhTREBdCYYbHPGGiSzJNImF9XjgG0m KUKrHcdAHUFMUa7AeUbKUqeGzmBioS+vzQ0got+OiLJSiLIGB675yLF8fbTMi/Sy FzMt1kFakGVlZzDuvVMyzOdbh8sFIihgJoDDlmT4ZMc3bT5GxJptktAlMz0cxq73 xx1j1iISkhbSPOK8OUdPxpefoTx6vQKR34mljVqhdLMjr/6vDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH87NWO/B5UClyqf+pk0W1mch/AgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYjJjMWYxYTItMjRlNi0z ODQwLWExZWEtNDUxZjA2MjVhMDY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP0QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACJZ1zsHsULxj7iRDYX9RSBKA87DYHxvCF4sMa9PKGv0IINu3xVgp36G r6MNg0VwFbYjNiLL91iAaIBTZL2BZ4AhidE44jJYJItWH75K+07goR7SnvLbuPmJ VS2hhckzELcZCTYmqxkrFd91c1hXqh3xA6E5488fdE7DniI75RSYdDrN2DUCVdPv G0e5aeENTqjc0GndSaX5n/UbCiAJjh6Fpra1RKPx8igsfFX5yOWTvvYNeHRSISpq 46C3lbnc5uEo3VBNJdgdNv1lRVmjaSUVNl4X1+Or8rb/tm1LpSEFd7oez7sY9G86 E97vJRmD30+PyfeU5QwsJym7OSWxKK8= -----END CERTIFICATE-----Generated at Fri Nov 22 00:25:19 2024 by rpki-client on console-fra.rpki-client.org