$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c81ecdd5-605b-3621-b645-cf3f099edbbf.roa File: c81ecdd5-605b-3621-b645-cf3f099edbbf.roa (raw, json) Hash identifier: vBMJ/HPNcv5vg7o5eBpiHxRKGH7aBm/hNNHD5V2Egio= Subject key identifier: 98:D5:FC:02:C6:5E:B9:4E:61:19:E0:9F:7F:68:86:E6:06:EE:6E:64 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848DEA130D9C802E2F3A75EE880 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c81ecdd5-605b-3621-b645-cf3f099edbbf.roa Signing time: Thu 13 Feb 2025 14:00:50 +0000 ROA not before: Thu 13 Feb 2025 14:00:50 +0000 ROA not after: Wed 14 May 2025 13:00:50 +0000 asID: 15169 IP address blocks: 172.253.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:de:a1:30:d9:c8:02:e2:f3:a7:5e:e8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 13 14:00:50 2025 GMT Not After : May 14 13:00:50 2025 GMT Subject: CN=e01f4e76-6206-4d66-a321-c73cf403aa9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ef:51:ed:e6:07:29:f5:21:58:84:d3:4a:7d: 0d:e2:c6:85:9e:5a:d1:9e:3b:6b:86:3c:a5:86:c1: d6:58:bd:5b:73:f3:a9:29:67:e6:33:d7:84:0d:19: a2:e6:ec:36:0d:d0:08:80:af:e2:4a:35:7c:6e:4f: 39:60:7e:af:8f:fe:54:bd:fa:33:0b:ed:f2:1a:eb: 53:cb:47:53:0d:a9:f7:a5:c3:b2:e3:d0:b9:8f:af: 2c:2b:33:01:b1:a0:49:dd:9e:3b:19:52:0f:b8:5c: 46:64:62:8e:37:e5:4d:9e:a4:83:b2:af:36:30:8d: e0:cc:e6:df:da:ff:02:c3:e5:b7:44:85:5a:b2:52: 69:27:8f:62:26:db:b1:dc:28:46:9d:ab:b4:dd:70: 4d:3f:13:ca:e7:62:0f:47:a7:e1:91:01:63:c0:fa: 72:7c:86:22:46:25:66:e0:77:9c:d4:24:80:07:71: 19:d9:36:13:52:b6:f5:41:f9:dd:81:8c:23:d6:3c: 15:21:8f:a3:5b:8e:15:51:da:07:19:b1:9a:f7:dc: bf:a0:7b:5c:e5:7d:28:32:ff:ca:67:68:20:b4:b8: 8c:b6:b3:3e:87:01:42:76:d5:2e:39:af:59:97:a5: cc:0f:a9:5e:c2:58:dc:8a:9a:0c:28:24:01:55:cb: 3d:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:D5:FC:02:C6:5E:B9:4E:61:19:E0:9F:7F:68:86:E6:06:EE:6E:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c81ecdd5-605b-3621-b645-cf3f099edbbf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:00:31:54:6c:91:6a:1c:22:87:65:aa:cc:cb:68:a7:fd:17: a1:01:1a:31:3d:36:4a:2c:49:2b:22:71:34:ae:c9:a5:31:07: 16:aa:b8:c4:ac:27:4a:52:99:3a:ce:6c:d2:97:77:eb:c9:0a: 93:eb:a0:d6:5f:88:a9:b5:ae:5b:0d:f4:ef:cf:5e:b0:49:13: cd:3e:0b:76:dc:11:23:76:bc:f6:80:5d:aa:92:64:bd:6b:d6: cf:9e:22:00:fb:38:1f:3e:29:06:f5:8b:62:32:e4:58:4d:9d: ff:7d:15:57:9b:46:db:0a:16:4c:01:72:b0:45:09:59:57:b6: 7b:be:09:6d:4e:19:af:15:b3:67:76:1a:24:05:f4:9c:dc:19: 92:88:2c:66:06:00:89:8b:84:48:64:f0:ea:9f:cf:34:28:fe: a7:c5:49:3a:d0:7e:5d:af:a3:0c:62:bd:ac:18:c8:1c:c2:41: 2c:3e:4a:0f:a1:d3:35:e2:b8:cf:3f:4b:fd:c5:dc:be:7d:bc: a5:84:65:c5:a0:20:73:67:2b:23:c6:b8:fe:ee:cc:70:d6:ac: e9:c5:eb:2a:80:18:97:10:1d:f9:ad:8b:48:47:bb:c0:41:f7: 72:11:ae:55:40:7f:89:ad:55:9f:f6:a4:d2:ea:e4:37:8f:07: dd:c4:73:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjeoTDZyALi86de6IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIxMzE0MDA1MFoXDTI1MDUxNDEzMDA1MFowLzEtMCsGA1UEAxMk ZTAxZjRlNzYtNjIwNi00ZDY2LWEzMjEtYzczY2Y0MDNhYTllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+9R7eYHKfUhWITTSn0N4saFnlrRnjtrhjyl hsHWWL1bc/OpKWfmM9eEDRmi5uw2DdAIgK/iSjV8bk85YH6vj/5UvfozC+3yGutT y0dTDan3pcOy49C5j68sKzMBsaBJ3Z47GVIPuFxGZGKON+VNnqSDsq82MI3gzObf 2v8Cw+W3RIVaslJpJ49iJtux3ChGnau03XBNPxPK52IPR6fhkQFjwPpyfIYiRiVm 4Hec1CSAB3EZ2TYTUrb1QfndgYwj1jwVIY+jW44VUdoHGbGa99y/oHtc5X0oMv/K Z2ggtLiMtrM+hwFCdtUuOa9Zl6XMD6lewljcipoMKCQBVcs9MQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJjV/ALGXrlOYRngn39ohuYG7m5kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYzgxZWNkZDUtNjA1Yi0z NjIxLWI2NDUtY2YzZjA5OWVkYmJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP15MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK8AMVRskWocIodlqszLaKf9F6EBGjE9NkosSSsicTSuyaUxBxaquMSs J0pSmTrObNKXd+vJCpProNZfiKm1rlsN9O/PXrBJE80+C3bcESN2vPaAXaqSZL1r 1s+eIgD7OB8+KQb1i2Iy5FhNnf99FVebRtsKFkwBcrBFCVlXtnu+CW1OGa8Vs2d2 GiQF9JzcGZKILGYGAImLhEhk8OqfzzQo/qfFSTrQfl2vowxivawYyBzCQSw+Sg+h 0zXiuM8/S/3F3L59vKWEZcWgIHNnKyPGuP7uzHDWrOnF6yqAGJcQHfmti0hHu8BB 93IRrlVAf4mtVZ/2pNLq5DePB93Ec1M= -----END CERTIFICATE-----Generated at Sun Feb 16 15:40:29 2025 by rpki-client