$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d5fd37bd-341a-30b3-a5bf-c402e4909202.roa File: d5fd37bd-341a-30b3-a5bf-c402e4909202.roa (raw, json) Hash identifier: 6dj7F20AonpZHLpdT6I9pR0cfbyMCDfIE+lMhLD8ao8= Subject key identifier: 34:D2:30:55:39:45:E5:F7:DA:CA:36:DC:5C:14:6A:1C:22:21:1F:20 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F432858454628CD99B51CDB3A8585E080 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d5fd37bd-341a-30b3-a5bf-c402e4909202.roa Signing time: Wed 20 Mar 2024 20:54:52 +0000 ROA not before: Wed 20 Mar 2024 20:54:52 +0000 ROA not after: Tue 18 Jun 2024 20:54:52 +0000 asID: 15169 IP address blocks: 172.253.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:46:28:cd:99:b5:1c:db:3a:85:85:e0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 20 20:54:52 2024 GMT Not After : Jun 18 20:54:52 2024 GMT Subject: CN=56d39338-7dd3-4914-9094-ae22b90e05ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:da:e4:51:62:8e:53:97:c9:ee:0d:43:8a:73: cb:02:59:8e:c2:47:40:76:00:e1:cd:fa:93:d4:a4: 97:b8:df:9e:c2:f9:2a:70:91:27:ff:6f:a4:4f:15: e6:cd:be:2c:95:87:63:9f:f8:53:98:04:db:33:1b: 9d:11:3d:5c:93:0f:7a:28:b3:5e:b1:ed:2b:7a:ba: e6:69:40:24:fd:7f:2c:d4:ac:1e:12:a6:78:7b:7b: be:bb:a1:c7:6b:42:c5:8c:ee:c9:55:4f:60:1e:a6: 2f:d2:2e:de:27:bb:b7:af:c9:e5:02:64:76:27:e2: b2:62:2c:10:ab:5a:9c:13:f8:72:95:b8:8d:ef:d7: 98:90:df:ab:13:36:d9:7b:f0:4a:c4:6a:04:b3:2c: c9:6a:d6:e3:47:08:0f:19:c6:79:01:2e:2a:bb:fa: 0a:16:3b:03:cf:94:43:aa:7e:59:bc:b1:f2:19:2d: 56:0c:1e:e8:2c:6c:6e:67:55:3e:7e:ab:9f:ec:6d: 82:d5:cc:35:a9:fb:65:7a:2c:06:f8:d9:dc:fc:3e: 1e:c4:1b:1e:8f:13:b8:1a:a4:66:cb:75:18:3c:0d: ad:f5:a8:b9:8c:d9:41:05:90:23:25:5b:b2:66:a2: 90:d7:26:64:61:27:e7:7d:d2:1d:33:65:4d:03:c3: 69:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:D2:30:55:39:45:E5:F7:DA:CA:36:DC:5C:14:6A:1C:22:21:1F:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d5fd37bd-341a-30b3-a5bf-c402e4909202.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.118.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:5a:04:fb:5e:b3:f4:cc:17:d8:e2:d4:2d:f3:c8:f3:ab:2e: e2:3d:22:59:93:55:66:00:96:f2:8a:a5:3b:66:b9:ca:e1:8a: 83:f4:3a:d2:03:dc:d6:d6:e9:49:01:59:06:68:ad:d5:b6:e5: b5:69:7c:e0:19:03:36:2f:c1:f5:ee:cf:d8:fc:ac:bf:43:44: 51:1d:9e:57:21:0d:e0:e3:df:d9:0b:fb:a7:ad:95:27:1a:4b: f5:48:73:94:f9:b5:5d:05:71:19:2f:db:8e:9e:58:68:30:98: fa:bd:1a:cc:9f:b3:96:8d:d8:5b:8b:b9:b4:87:81:e6:39:d2: d6:d6:f6:de:69:60:56:ee:a5:51:46:7b:05:8c:15:b5:b5:9b: a9:1b:d4:71:d6:35:95:0a:66:89:d5:70:a6:7d:94:f0:c1:0a: 93:87:3c:27:eb:6e:0c:af:1d:20:58:c4:8c:47:ff:5d:56:99: 78:25:a0:91:b5:f7:7d:ec:ed:e8:7a:85:77:dd:c3:80:2b:9a: 91:87:77:75:bb:b4:e7:3c:2e:8d:0a:b5:15:94:ca:63:98:5d: b5:0f:e0:b7:ae:92:d9:48:82:17:e0:69:dc:88:98:c1:cb:ce: 6a:f2:f1:bd:f5:f9:06:6f:f9:e1:a4:2b:aa:96:47:58:e4:21: 49:d7:6c:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVGKM2ZtRzbOoWF4IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI0MDMyMDIwNTQ1MloXDTI0MDYxODIwNTQ1MlowLzEtMCsGA1UEAxMk NTZkMzkzMzgtN2RkMy00OTE0LTkwOTQtYWUyMmI5MGUwNWNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdrkUWKOU5fJ7g1DinPLAlmOwkdAdgDhzfqT 1KSXuN+ewvkqcJEn/2+kTxXmzb4slYdjn/hTmATbMxudET1ckw96KLNese0rerrm aUAk/X8s1KweEqZ4e3u+u6HHa0LFjO7JVU9gHqYv0i7eJ7u3r8nlAmR2J+KyYiwQ q1qcE/hylbiN79eYkN+rEzbZe/BKxGoEsyzJatbjRwgPGcZ5AS4qu/oKFjsDz5RD qn5ZvLHyGS1WDB7oLGxuZ1U+fquf7G2C1cw1qftleiwG+Nnc/D4exBsejxO4GqRm y3UYPA2t9ai5jNlBBZAjJVuyZqKQ1yZkYSfnfdIdM2VNA8Np/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDTSMFU5ReX32so23FwUahwiIR8gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZDVmZDM3YmQtMzQxYS0z MGIzLWE1YmYtYzQwMmU0OTA5MjAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP12MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIVaBPtes/TMF9ji1C3zyPOrLuI9IlmTVWYAlvKKpTtmucrhioP0OtID 3NbW6UkBWQZordW25bVpfOAZAzYvwfXuz9j8rL9DRFEdnlchDeDj39kL+6etlSca S/VIc5T5tV0FcRkv246eWGgwmPq9Gsyfs5aN2FuLubSHgeY50tbW9t5pYFbupVFG ewWMFbW1m6kb1HHWNZUKZonVcKZ9lPDBCpOHPCfrbgyvHSBYxIxH/11WmXgloJG1 933s7eh6hXfdw4ArmpGHd3W7tOc8Lo0KtRWUymOYXbUP4LeuktlIghfgadyImMHL zmry8b31+QZv+eGkK6qWR1jkIUnXbOA= -----END CERTIFICATE-----Generated at Fri May 17 22:52:23 2024 by rpki-client on console-ams.rpki-client.org