$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c9b8f0b1-802e-32fc-a9ce-8a216a959966.roa File: c9b8f0b1-802e-32fc-a9ce-8a216a959966.roa (raw, json) Hash identifier: TMTW8pe1pRitTfA+mTptJOahqlM6aWhUguiqCQ+rOqs= Subject key identifier: 00:F4:85:4C:32:E1:64:3B:3C:C4:68:50:F3:FA:08:F1:2A:35:3C:49 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285845490C3792065BE53820505C60 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c9b8f0b1-802e-32fc-a9ce-8a216a959966.roa Signing time: Thu 21 Mar 2024 21:44:42 +0000 ROA not before: Thu 21 Mar 2024 21:44:42 +0000 ROA not after: Wed 19 Jun 2024 21:44:42 +0000 asID: 15169 IP address blocks: 74.125.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:49:0c:37:92:06:5b:e5:38:20:50:5c:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 21 21:44:42 2024 GMT Not After : Jun 19 21:44:42 2024 GMT Subject: CN=92e2062a-54a5-42e4-b923-48d18b4f3e7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:51:5d:55:c8:29:7a:28:30:07:33:80:9e:dd: 3c:6c:d6:f0:3a:2c:44:b0:97:b7:66:02:11:af:5a: 50:d2:f2:aa:e8:67:f2:cf:3d:33:2e:2d:44:08:ab: d7:17:4e:60:46:70:4b:d9:f0:73:57:53:0a:9d:98: 30:f2:52:73:09:aa:5f:cf:08:e6:07:82:ca:4a:e1: 92:4a:13:40:e5:64:27:cd:16:9f:21:20:8d:b9:59: 05:bb:32:48:6d:c3:3a:c6:de:5d:cb:80:23:fd:53: 12:33:34:a5:1b:cf:de:4f:6a:11:0d:14:97:95:d1: a4:40:25:41:26:ef:c4:26:2d:fd:8c:a3:dd:00:78: 3d:16:22:80:21:7f:40:56:21:3b:62:fe:44:df:f0: 10:fa:e4:1d:18:25:8b:4c:2e:89:c5:ff:09:2f:47: 48:0a:09:c3:4a:ed:c5:89:15:85:4e:7d:47:43:03: b1:ea:72:fc:0f:bd:2e:90:c1:4d:fb:7c:65:ea:72: 5f:36:a9:12:8a:aa:44:2e:14:a0:21:7a:23:ab:19: ae:15:0b:bf:ec:4a:64:87:64:00:9e:03:42:bf:05: 66:3e:0f:1b:07:6f:d8:3f:f4:f0:4f:34:4a:7a:c3: 90:2a:03:ef:00:4a:38:a8:64:43:bd:2e:70:5c:ae: b1:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:F4:85:4C:32:E1:64:3B:3C:C4:68:50:F3:FA:08:F1:2A:35:3C:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c9b8f0b1-802e-32fc-a9ce-8a216a959966.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 74.125.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:d3:aa:be:50:ef:d6:91:46:6f:29:2f:e9:0f:50:6a:8a:55: 3f:b8:61:ec:ca:4e:06:c7:9c:78:a7:66:f1:ab:9f:2a:c6:b1: d6:b5:3a:54:1d:c1:08:c9:8a:80:8c:df:24:ef:95:6a:eb:a6: 00:79:09:50:3d:85:7d:5c:20:d5:2e:35:7d:be:90:14:a8:9e: e4:06:d9:c1:bc:d5:38:1d:57:d3:94:b1:d0:50:c8:c4:45:29: f7:52:71:d7:be:e3:06:af:9a:71:27:4d:d8:af:8d:f7:00:5c: f0:40:9a:55:ff:39:5f:29:fb:63:cd:3d:98:58:89:66:39:61: 79:2c:a4:5e:37:d0:97:14:9b:02:1a:da:df:40:72:d4:33:3c: ac:20:07:ad:8e:0d:6a:85:21:08:fe:cc:46:05:5e:f2:ec:62: cc:f5:59:29:79:87:04:7d:ab:9a:f0:26:e5:43:ae:ed:73:b3: c6:1c:f9:a7:0e:37:08:6c:b3:ee:63:94:60:9f:da:ff:73:e8: 6a:f4:16:ad:be:37:b7:0d:1b:e7:fb:67:91:48:83:84:ca:2f: 8e:90:f5:47:ef:fe:df:8c:91:26:17:97:70:88:99:c1:e1:38: c2:d6:2f:14:c4:5a:c1:0b:fb:d3:c7:1a:8e:46:87:4b:a2:62: a9:5c:69:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVJDDeSBlvlOCBQXGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI0MDMyMTIxNDQ0MloXDTI0MDYxOTIxNDQ0MlowLzEtMCsGA1UEAxMk OTJlMjA2MmEtNTRhNS00MmU0LWI5MjMtNDhkMThiNGYzZTdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhFFdVcgpeigwBzOAnt08bNbwOixEsJe3ZgIR r1pQ0vKq6Gfyzz0zLi1ECKvXF05gRnBL2fBzV1MKnZgw8lJzCapfzwjmB4LKSuGS ShNA5WQnzRafISCNuVkFuzJIbcM6xt5dy4Aj/VMSMzSlG8/eT2oRDRSXldGkQCVB Ju/EJi39jKPdAHg9FiKAIX9AViE7Yv5E3/AQ+uQdGCWLTC6Jxf8JL0dICgnDSu3F iRWFTn1HQwOx6nL8D70ukMFN+3xl6nJfNqkSiqpELhSgIXojqxmuFQu/7Epkh2QA ngNCvwVmPg8bB2/YP/TwTzRKesOQKgPvAEo4qGRDvS5wXK6xEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAD0hUwy4WQ7PMRoUPP6CPEqNTxJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYzliOGYwYjEtODAyZS0z MmZjLWE5Y2UtOGEyMTZhOTU5OTY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESn2wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEPTqr5Q79aRRm8pL+kPUGqKVT+4YezKTgbHnHinZvGrnyrGsda1OlQd wQjJioCM3yTvlWrrpgB5CVA9hX1cINUuNX2+kBSonuQG2cG81TgdV9OUsdBQyMRF KfdScde+4wavmnEnTdivjfcAXPBAmlX/OV8p+2PNPZhYiWY5YXkspF430JcUmwIa 2t9ActQzPKwgB62ODWqFIQj+zEYFXvLsYsz1WSl5hwR9q5rwJuVDru1zs8Yc+acO Nwhss+5jlGCf2v9z6Gr0Fq2+N7cNG+f7Z5FIg4TKL46Q9Ufv/t+MkSYXl3CImcHh OMLWLxTEWsEL+9PHGo5Gh0uiYqlcacs= -----END CERTIFICATE-----Generated at Fri May 17 21:09:45 2024 by rpki-client on console-ams.rpki-client.org