$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/69bcf842-176d-3e20-9648-54a62aa8308f.roa File: 69bcf842-176d-3e20-9648-54a62aa8308f.roa (raw, json) Hash identifier: khazFY/X00qlc212Dm4qIAMHo84Jq00uhZBhPOyQI6M= Subject key identifier: 3E:1D:34:0E:8B:99:8F:3D:29:56:FE:57:80:65:31:32:07:30:76:76 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F432858454626C2C09E9E7D497A580900 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/69bcf842-176d-3e20-9648-54a62aa8308f.roa Signing time: Wed 20 Mar 2024 20:50:45 +0000 ROA not before: Wed 20 Mar 2024 20:50:45 +0000 ROA not after: Tue 18 Jun 2024 20:50:45 +0000 asID: 15169 IP address blocks: 173.194.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:46:26:c2:c0:9e:9e:7d:49:7a:58:09:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 20 20:50:45 2024 GMT Not After : Jun 18 20:50:45 2024 GMT Subject: CN=56306744-d40a-4f57-8e3d-c0e16dd4c7de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ac:4b:28:5f:25:d8:01:bf:72:81:75:11:9e: fe:e1:19:30:f9:2c:72:1c:2b:a8:3f:04:4b:0d:b2: 9b:1d:43:f8:78:1f:0d:54:07:8b:33:9d:48:08:48: e2:ec:70:3d:33:ab:4c:f4:c9:9b:96:f4:56:af:db: 2b:0e:a7:fb:f6:a3:38:34:84:84:d1:c5:cc:98:12: d7:a0:0c:c7:17:69:c1:73:3c:ce:1c:30:61:8a:ea: b7:30:07:94:27:12:a4:0c:91:eb:72:20:fc:e6:1f: 34:02:24:a1:9b:b8:21:07:91:ef:fa:a6:0a:82:26: 9f:6a:7f:24:66:c1:c8:e0:05:0f:c8:e8:1a:e4:42: 1e:17:2f:2f:dc:20:00:d0:d7:fd:41:68:3e:6f:06: 7f:2a:a7:3e:36:96:e3:37:91:cc:cc:96:23:31:fd: 52:6e:b5:db:1d:16:3f:56:6c:09:a7:8d:0e:d9:46: 96:3d:f0:a6:73:54:39:31:81:e6:e5:a3:54:1c:e5: b5:36:3f:6b:57:d1:bf:d8:f2:73:b6:64:33:03:b8: 3f:39:20:ea:aa:80:42:22:33:98:21:bf:d7:52:f1: 1e:b7:5c:61:24:43:1b:9a:95:73:ca:bb:72:a8:b4: e2:36:52:ee:83:0d:71:74:00:44:92:f2:c4:00:8f: 13:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:1D:34:0E:8B:99:8F:3D:29:56:FE:57:80:65:31:32:07:30:76:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/69bcf842-176d-3e20-9648-54a62aa8308f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 173.194.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:dc:73:64:7a:f5:32:4f:25:a0:2c:e2:51:a9:ad:4e:b9:9c: bf:a5:b1:d9:25:aa:17:87:91:73:94:a5:0e:e1:06:51:70:35: fa:ed:a5:7d:f8:a6:e7:0b:7d:a1:2d:02:5a:72:7e:f4:f3:bc: af:dd:a0:44:8d:63:0c:d4:a4:76:9d:3e:0d:1b:bf:69:b7:d1: 00:9f:97:ca:9e:5a:2c:04:29:bb:50:21:e9:a3:bf:2d:d2:62: 2f:cc:c6:8b:9d:ed:ed:9d:66:42:6f:28:a8:c1:92:35:84:6f: 5d:b9:1f:28:b3:45:40:ed:5c:3b:b6:dc:10:f3:3f:49:f5:9c: 46:76:63:44:fe:a1:41:0f:bf:31:e1:39:0c:75:b4:91:98:2e: ae:8e:93:77:e9:d7:a5:d3:53:c1:b7:0b:42:fa:4f:75:f4:bc: 25:2e:69:49:23:57:b6:48:e4:96:02:07:ed:40:79:53:11:8f: b9:9a:26:b9:7a:72:5e:d1:44:90:08:f0:db:b3:33:ea:b7:e6: 8d:11:93:a2:69:2a:80:25:0a:29:64:07:f9:7c:68:67:a3:08: 9f:00:57:45:fb:ac:aa:73:48:a3:7d:70:6a:2a:65:b9:4b:11: d6:5b:b4:95:9e:4c:ac:44:18:5c:22:d0:b6:22:19:d8:49:e4: 70:c1:ce:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVGJsLAnp59SXpYCQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI0MDMyMDIwNTA0NVoXDTI0MDYxODIwNTA0NVowLzEtMCsGA1UEAxMk NTYzMDY3NDQtZDQwYS00ZjU3LThlM2QtYzBlMTZkZDRjN2RlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6xLKF8l2AG/coF1EZ7+4Rkw+SxyHCuoPwRL DbKbHUP4eB8NVAeLM51ICEji7HA9M6tM9MmblvRWr9srDqf79qM4NISE0cXMmBLX oAzHF2nBczzOHDBhiuq3MAeUJxKkDJHrciD85h80AiShm7ghB5Hv+qYKgiafan8k ZsHI4AUPyOga5EIeFy8v3CAA0Nf9QWg+bwZ/Kqc+NpbjN5HMzJYjMf1SbrXbHRY/ VmwJp40O2UaWPfCmc1Q5MYHm5aNUHOW1Nj9rV9G/2PJztmQzA7g/OSDqqoBCIjOY Ib/XUvEet1xhJEMbmpVzyrtyqLTiNlLugw1xdABEkvLEAI8TNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD4dNA6LmY89KVb+V4BlMTIHMHZ2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNjliY2Y4NDItMTc2ZC0z ZTIwLTk2NDgtNTRhNjJhYTgzMDhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcJ5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIvcc2R69TJPJaAs4lGprU65nL+lsdklqheHkXOUpQ7hBlFwNfrtpX34 pucLfaEtAlpyfvTzvK/doESNYwzUpHadPg0bv2m30QCfl8qeWiwEKbtQIemjvy3S Yi/Mxoud7e2dZkJvKKjBkjWEb125HyizRUDtXDu23BDzP0n1nEZ2Y0T+oUEPvzHh OQx1tJGYLq6Ok3fp16XTU8G3C0L6T3X0vCUuaUkjV7ZI5JYCB+1AeVMRj7maJrl6 cl7RRJAI8NuzM+q35o0Rk6JpKoAlCilkB/l8aGejCJ8AV0X7rKpzSKN9cGoqZblL EdZbtJWeTKxEGFwi0LYiGdhJ5HDBzk0= -----END CERTIFICATE-----Generated at Fri May 17 22:52:20 2024 by rpki-client on console-ams.rpki-client.org