$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e91ef3a9-e7a2-3507-9f33-24b0053ea3db.roa File: e91ef3a9-e7a2-3507-9f33-24b0053ea3db.roa (raw, json) Hash identifier: +FTAKl1EF1q1nSUTGuix4Oh2YVxom9OnGqCkS++mIxo= Subject key identifier: BB:26:C0:3C:36:39:80:AC:9B:C9:64:B9:92:F1:3A:D3:40:D9:0C:24 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285847E62B5162B85FB3FFDBF232A0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e91ef3a9-e7a2-3507-9f33-24b0053ea3db.roa Signing time: Sat 16 Nov 2024 14:00:41 +0000 ROA not before: Sat 16 Nov 2024 14:00:41 +0000 ROA not after: Fri 14 Feb 2025 14:00:41 +0000 asID: 15169 IP address blocks: 172.253.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e6:2b:51:62:b8:5f:b3:ff:db:f2:32:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Nov 16 14:00:41 2024 GMT Not After : Feb 14 14:00:41 2025 GMT Subject: CN=71b5b0de-d5de-432b-afec-06935a16813a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:a6:ca:e6:7b:94:37:0e:53:e2:50:38:15:40: 0b:17:39:aa:83:bf:78:4a:74:6d:f0:7f:35:55:bc: dd:e3:27:15:08:07:9c:0a:75:2b:b5:81:0a:87:5d: a8:6e:96:36:18:3f:07:0f:54:2a:66:38:85:44:92: 5e:ee:cb:8f:7d:5c:ef:8b:31:af:2b:cf:f7:7b:70: d4:55:c3:ab:cf:e8:51:94:30:e5:11:14:32:34:92: aa:0e:21:87:6d:50:c4:12:56:62:81:46:2a:66:1a: 62:03:32:06:58:b1:f8:ca:37:77:48:fc:7f:0c:e6: 45:d8:dd:30:74:15:31:57:6b:6e:fe:d4:11:22:ed: f4:3e:55:b9:39:1e:c0:e8:7f:f0:59:81:ee:bc:e8: 87:de:ef:b2:cf:8c:24:2e:68:5f:0c:1d:aa:bb:c8: 59:65:8f:e5:9f:26:55:ac:8d:3e:07:27:4d:6f:5c: 10:ea:18:75:10:7d:8f:f2:5b:65:ad:04:26:3c:26: 1b:bb:98:f7:82:4e:97:65:c9:ab:09:f9:b1:5f:94: 20:d0:96:e7:cd:d5:69:dc:d2:41:cd:d8:ed:07:79: 9c:22:14:88:65:e8:53:eb:2d:fe:32:38:df:87:05: de:82:67:0f:8e:04:34:1f:ae:3c:d9:0f:61:2c:f2: 3f:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:26:C0:3C:36:39:80:AC:9B:C9:64:B9:92:F1:3A:D3:40:D9:0C:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e91ef3a9-e7a2-3507-9f33-24b0053ea3db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.116.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:1c:97:fe:86:a9:7e:25:5b:a9:06:1b:ec:62:28:24:f3:df: 1f:22:29:ac:a6:16:69:6c:32:9d:aa:1a:b7:dc:77:59:c8:2b: 1b:8e:65:0a:83:70:9e:c8:62:49:02:84:af:ce:0d:d2:84:45: d7:e0:51:37:45:84:f1:f9:20:5e:0e:db:f1:a6:e8:45:1b:14: 4a:c9:87:0e:dd:63:5d:77:21:d5:de:c9:0f:56:f7:2c:a5:43: ac:64:5c:e5:a1:d6:8f:04:64:fa:78:0d:1e:4c:17:86:c8:c8: c4:ec:d8:be:41:fb:ad:a9:ee:05:0f:c6:b2:82:78:ec:81:b5: ed:fd:51:f3:21:77:68:b6:69:91:ac:72:a9:bf:06:cb:20:71: ce:97:23:b2:e4:c8:88:7a:2e:91:70:38:da:32:1d:c5:d5:c4: fb:85:14:25:bd:62:04:f3:13:17:b2:d0:bc:36:b0:d3:d1:fb: 56:9a:89:9c:f9:2e:c1:7d:ce:8e:5a:6d:d2:c4:90:11:4e:84: fb:b5:96:78:ca:20:8a:a7:51:87:80:7d:00:33:6a:a1:85:1e: 69:62:37:60:0d:9a:e0:11:0d:a7:25:46:92:b3:62:53:48:b3: f4:31:5a:2a:28:3d:52:57:cd:bb:8f:99:28:c4:90:43:43:3a: 71:36:9e:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmK1FiuF+z/9vyMqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk NzFiNWIwZGUtZDVkZS00MzJiLWFmZWMtMDY5MzVhMTY4MTNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1KbK5nuUNw5T4lA4FUALFzmqg794SnRt8H81 Vbzd4ycVCAecCnUrtYEKh12obpY2GD8HD1QqZjiFRJJe7suPfVzvizGvK8/3e3DU VcOrz+hRlDDlERQyNJKqDiGHbVDEElZigUYqZhpiAzIGWLH4yjd3SPx/DOZF2N0w dBUxV2tu/tQRIu30PlW5OR7A6H/wWYHuvOiH3u+yz4wkLmhfDB2qu8hZZY/lnyZV rI0+BydNb1wQ6hh1EH2P8ltlrQQmPCYbu5j3gk6XZcmrCfmxX5Qg0JbnzdVp3NJB zdjtB3mcIhSIZehT6y3+MjjfhwXegmcPjgQ0H6482Q9hLPI/BQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLsmwDw2OYCsm8lkuZLxOtNA2QwkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZTkxZWYzYTktZTdhMi0z NTA3LTlmMzMtMjRiMDA1M2VhM2RiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP10MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALYcl/6GqX4lW6kGG+xiKCTz3x8iKaymFmlsMp2qGrfcd1nIKxuOZQqD cJ7IYkkChK/ODdKERdfgUTdFhPH5IF4O2/Gm6EUbFErJhw7dY113IdXeyQ9W9yyl Q6xkXOWh1o8EZPp4DR5MF4bIyMTs2L5B+62p7gUPxrKCeOyBte39UfMhd2i2aZGs cqm/Bssgcc6XI7LkyIh6LpFwONoyHcXVxPuFFCW9YgTzExey0Lw2sNPR+1aaiZz5 LsF9zo5abdLEkBFOhPu1lnjKIIqnUYeAfQAzaqGFHmliN2ANmuARDaclRpKzYlNI s/QxWiooPVJXzbuPmSjEkENDOnE2nqw= -----END CERTIFICATE-----Generated at Fri Nov 22 00:25:21 2024 by rpki-client on console-fra.rpki-client.org