$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1c68adcb-e030-30cd-9cd4-6a7353a50978.roa File: 1c68adcb-e030-30cd-9cd4-6a7353a50978.roa (raw, json) Hash identifier: x9yrL4uiR1cjby3uF8wVqNGhIep/lBuDfjRCYGlaJZ0= Subject key identifier: 47:BF:47:AF:BD:36:70:10:BA:4D:B1:C1:89:02:47:E5:68:65:2C:43 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F432858454903C3C6B346525ACBCDC380 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1c68adcb-e030-30cd-9cd4-6a7353a50978.roa Signing time: Thu 21 Mar 2024 21:27:40 +0000 ROA not before: Thu 21 Mar 2024 21:27:40 +0000 ROA not after: Wed 19 Jun 2024 21:27:40 +0000 asID: 15169 IP address blocks: 74.125.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 May 2024 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:49:03:c3:c6:b3:46:52:5a:cb:cd:c3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 21 21:27:40 2024 GMT Not After : Jun 19 21:27:40 2024 GMT Subject: CN=b5e6c078-4466-4b53-99f0-94dcfa3a1047 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:48:4b:30:0e:2f:bb:ff:3c:de:b0:5a:ae:08: b6:f0:72:87:c3:5d:e2:c9:01:40:86:aa:15:8b:28: b0:29:47:07:f9:39:4e:6c:83:13:1e:66:b0:dd:64: d1:a9:7a:2e:59:44:00:95:f2:ef:e0:5f:aa:2c:d5: fd:7c:93:b2:1b:6d:88:98:76:f8:c5:10:ff:0f:83: bb:62:f3:48:84:0b:cf:6f:e7:d4:e3:b1:19:44:05: 3f:69:7d:4b:07:a6:4b:f0:55:85:9d:ec:74:53:d4: 27:84:6f:98:34:40:b1:ae:b6:35:39:78:d0:2b:a5: b4:d0:3a:14:19:cc:23:4f:fa:00:4c:71:9f:4a:e0: fa:0c:dc:44:e8:12:8d:11:df:d7:f8:b6:cf:3c:08: 4f:66:dd:1d:5e:29:76:d7:97:d7:a3:34:f9:a9:6e: e4:91:f6:75:64:1d:04:02:19:b4:fe:1c:1c:24:a0: 6a:02:68:7d:6b:ed:1d:10:94:2d:af:c1:0c:f5:aa: cf:ac:8c:50:5e:80:b7:62:31:02:09:73:69:76:c2: d7:86:ba:23:da:82:4f:9b:9c:93:2d:4f:a0:cd:12: 74:82:15:0d:6e:be:cb:58:c4:2b:90:66:ad:ab:87: c7:19:1d:1e:c4:6a:2f:69:5a:76:42:d6:5e:8c:bb: 2c:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:BF:47:AF:BD:36:70:10:BA:4D:B1:C1:89:02:47:E5:68:65:2C:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1c68adcb-e030-30cd-9cd4-6a7353a50978.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 74.125.142.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:a2:d6:88:db:7a:e0:04:7a:6e:db:c2:2a:0a:c6:da:28:f5: 34:1a:62:2b:32:f9:08:1a:30:3b:20:7f:50:aa:fa:d9:41:df: be:1f:c1:7e:f5:e7:60:76:07:55:20:18:6b:82:17:4d:9d:b2: 70:1e:34:3d:47:5b:11:29:03:9a:e6:2e:dd:d3:45:d6:a6:3a: 0c:91:3a:d0:02:9e:05:e9:26:25:5d:2a:60:46:b1:48:64:1a: 49:8e:d2:ff:f9:55:6b:25:95:6e:94:8c:4a:38:d2:11:83:44: 70:d7:9e:37:30:0a:e4:bd:9c:f7:d1:66:06:d6:3e:7b:b0:81: 88:54:02:29:b0:f1:b7:bf:67:cb:e3:d4:db:fc:14:77:f4:9c: ca:cf:ad:d4:93:01:cb:8e:4b:e0:f1:d7:7b:db:1a:d3:5e:84: 10:7c:b1:5f:4f:9a:4e:8d:5b:f0:d6:f6:14:7d:aa:52:03:d0: d1:a4:41:9b:af:a3:58:74:95:2b:0f:9f:d6:0a:31:8c:5b:7b: 68:d4:43:4f:87:ba:29:5d:94:66:03:7e:be:65:23:b9:ce:52: d4:3d:37:86:02:90:9d:23:e0:1a:03:53:b1:37:36:10:15:89: 24:05:19:cc:eb:c5:37:63:44:2f:b4:e0:9f:d8:11:51:eb:2c: 64:c2:64:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVJA8PGs0ZSWsvNw4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI0MDMyMTIxMjc0MFoXDTI0MDYxOTIxMjc0MFowLzEtMCsGA1UEAxMk YjVlNmMwNzgtNDQ2Ni00YjUzLTk5ZjAtOTRkY2ZhM2ExMDQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg0hLMA4vu/883rBargi28HKHw13iyQFAhqoV iyiwKUcH+TlObIMTHmaw3WTRqXouWUQAlfLv4F+qLNX9fJOyG22ImHb4xRD/D4O7 YvNIhAvPb+fU47EZRAU/aX1LB6ZL8FWFnex0U9QnhG+YNECxrrY1OXjQK6W00DoU GcwjT/oATHGfSuD6DNxE6BKNEd/X+LbPPAhPZt0dXil215fXozT5qW7kkfZ1ZB0E Ahm0/hwcJKBqAmh9a+0dEJQtr8EM9arPrIxQXoC3YjECCXNpdsLXhroj2oJPm5yT LU+gzRJ0ghUNbr7LWMQrkGatq4fHGR0exGovaVp2QtZejLssHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEe/R6+9NnAQuk2xwYkCR+VoZSxDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMWM2OGFkY2ItZTAzMC0z MGNkLTljZDQtNmE3MzUzYTUwOTc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASn2OMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALWi1ojbeuAEem7bwioKxtoo9TQaYisy+QgaMDsgf1Cq+tlB374fwX71 52B2B1UgGGuCF02dsnAeND1HWxEpA5rmLt3TRdamOgyROtACngXpJiVdKmBGsUhk GkmO0v/5VWsllW6UjEo40hGDRHDXnjcwCuS9nPfRZgbWPnuwgYhUAimw8be/Z8vj 1Nv8FHf0nMrPrdSTAcuOS+Dx13vbGtNehBB8sV9Pmk6NW/DW9hR9qlID0NGkQZuv o1h0lSsPn9YKMYxbe2jUQ0+HuildlGYDfr5lI7nOUtQ9N4YCkJ0j4BoDU7E3NhAV iSQFGczrxTdjRC+04J/YEVHrLGTCZI4= -----END CERTIFICATE-----Generated at Fri May 17 22:03:23 2024 by rpki-client on console-ams.rpki-client.org