$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/069a6faa-a3cc-30c7-9ec2-ffda78e18291.roa File: 069a6faa-a3cc-30c7-9ec2-ffda78e18291.roa (raw, json) Hash identifier: YNTSGoDUkmko9rWIY8XPMhLd7PQOuFlSLDbm+VDTdJA= Subject key identifier: CB:FB:B1:9F:BD:85:0C:D2:56:5F:62:7C:C1:B1:63:C9:75:D4:F1:E6 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F432858454622ADAD46F0846F9A722300 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/069a6faa-a3cc-30c7-9ec2-ffda78e18291.roa Signing time: Wed 20 Mar 2024 20:42:32 +0000 ROA not before: Wed 20 Mar 2024 20:42:32 +0000 ROA not after: Tue 18 Jun 2024 20:42:32 +0000 asID: 15169 IP address blocks: 209.85.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:46:22:ad:ad:46:f0:84:6f:9a:72:23:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 20 20:42:32 2024 GMT Not After : Jun 18 20:42:32 2024 GMT Subject: CN=65e95c9f-9212-4de1-8e5a-313f34a897d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:8a:59:53:e3:0d:0b:f9:e7:7f:35:80:9d:4a: e5:2b:81:45:f3:73:72:06:cb:6e:d3:5a:20:12:4e: f9:42:71:6a:22:a9:03:22:21:23:fd:96:21:f2:00: 2f:fe:da:c1:e1:ec:03:33:03:50:d6:3e:78:4d:2c: 57:f2:01:d6:2e:b4:be:db:56:3b:a8:62:8c:06:3f: 5c:e1:82:65:fc:03:5e:66:b3:b1:b9:e5:d1:fc:46: db:53:70:d6:33:49:7d:ec:8f:42:9e:55:72:ff:51: b6:bf:2b:74:6c:56:b4:a0:bb:dc:0a:9a:56:f4:55: 4d:47:1f:8c:6e:47:d4:b5:4a:de:5b:36:83:60:a2: 42:98:c6:85:cf:64:1a:3e:d5:18:28:d1:c6:de:1a: d0:52:1b:d5:ad:22:91:06:25:8f:11:45:a6:c7:92: 8e:d5:9c:9f:a5:d8:58:ef:95:81:1d:85:6e:e8:b6: 07:db:2d:21:18:64:8d:4d:f4:80:b0:d8:17:45:ca: 97:5b:47:5d:47:6b:0e:e5:47:87:e7:be:c8:95:77: 0f:b2:f5:72:32:0c:4e:68:9c:b9:b7:75:58:cb:fe: 14:89:18:1b:12:42:fb:d7:91:a6:9e:be:17:05:b8: 4b:5c:25:03:70:4b:ef:d9:98:b0:31:16:17:fb:48: 97:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:FB:B1:9F:BD:85:0C:D2:56:5F:62:7C:C1:B1:63:C9:75:D4:F1:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/069a6faa-a3cc-30c7-9ec2-ffda78e18291.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 209.85.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:59:86:3b:5c:ef:0f:cf:34:37:49:a7:78:f1:21:0d:91:ac: e4:30:ea:5f:e7:9f:32:1b:66:14:dc:f6:0c:16:45:ec:80:c5: f5:32:3d:7b:b2:e0:1b:31:73:34:95:0a:75:a9:41:9e:af:c9: c5:50:c2:5d:35:b2:67:c9:60:29:41:77:f7:e6:32:15:65:cf: 9b:29:65:7c:8b:d2:0d:95:9f:8c:c5:1d:fc:79:77:9e:e5:f0: e7:50:5b:7b:d9:75:33:fa:cc:6a:78:46:98:aa:4f:d4:27:ba: 0e:18:48:e3:ab:79:84:1c:68:d8:fc:0d:90:77:67:9e:83:fb: ba:94:81:6f:4c:07:32:8a:b7:b2:0c:a2:75:17:f8:de:55:8a: 1a:03:c0:42:24:81:e9:2f:66:32:97:26:dc:f0:9b:44:e9:70: 76:e3:cf:c2:f5:a8:97:26:ec:ed:55:df:a0:75:f5:67:92:16: f8:9e:14:17:c5:c1:a5:4a:64:88:0c:23:25:cc:3c:5c:b4:b1: db:40:59:52:20:94:1d:bd:bb:05:f7:dc:11:d0:d1:43:fc:18: bb:0e:62:95:70:1d:1c:89:9c:c7:05:f0:c1:f7:08:a3:8f:c5: 8d:10:bd:01:ce:31:ff:9b:d8:19:04:28:b0:24:f9:c5:64:a7: a9:bf:24:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVGIq2tRvCEb5pyIwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI0MDMyMDIwNDIzMloXDTI0MDYxODIwNDIzMlowLzEtMCsGA1UEAxMk NjVlOTVjOWYtOTIxMi00ZGUxLThlNWEtMzEzZjM0YTg5N2Q0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4pZU+MNC/nnfzWAnUrlK4FF83NyBstu01og Ek75QnFqIqkDIiEj/ZYh8gAv/trB4ewDMwNQ1j54TSxX8gHWLrS+21Y7qGKMBj9c 4YJl/ANeZrOxueXR/EbbU3DWM0l97I9CnlVy/1G2vyt0bFa0oLvcCppW9FVNRx+M bkfUtUreWzaDYKJCmMaFz2QaPtUYKNHG3hrQUhvVrSKRBiWPEUWmx5KO1ZyfpdhY 75WBHYVu6LYH2y0hGGSNTfSAsNgXRcqXW0ddR2sO5UeH577IlXcPsvVyMgxOaJy5 t3VYy/4UiRgbEkL715Gmnr4XBbhLXCUDcEvv2ZiwMRYX+0iXkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMv7sZ+9hQzSVl9ifMGxY8l11PHmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMDY5YTZmYWEtYTNjYy0z MGM3LTllYzItZmZkYTc4ZTE4MjkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0VXrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIVZhjtc7w/PNDdJp3jxIQ2RrOQw6l/nnzIbZhTc9gwWReyAxfUyPXuy 4BsxczSVCnWpQZ6vycVQwl01smfJYClBd/fmMhVlz5spZXyL0g2Vn4zFHfx5d57l 8OdQW3vZdTP6zGp4RpiqT9Qnug4YSOOreYQcaNj8DZB3Z56D+7qUgW9MBzKKt7IM onUX+N5VihoDwEIkgekvZjKXJtzwm0TpcHbjz8L1qJcm7O1V36B19WeSFvieFBfF waVKZIgMIyXMPFy0sdtAWVIglB29uwX33BHQ0UP8GLsOYpVwHRyJnMcF8MH3CKOP xY0QvQHOMf+b2BkEKLAk+cVkp6m/JPQ= -----END CERTIFICATE-----Generated at Sat May 18 01:58:28 2024 by rpki-client on console-ams.rpki-client.org