$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0b60ef07-e520-348c-aabf-dcebb3786a36.roa File: 0b60ef07-e520-348c-aabf-dcebb3786a36.roa (raw, json) Hash identifier: gJkBQNUVNrxsVji79CuiZCiWgRxHfdjFyqFbpZtQgVM= Subject key identifier: 00:1C:0A:C6:BB:50:04:4B:A7:D4:A7:42:94:65:83:86:A9:03:98:D9 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F432858471E7075DFD07934028DF3B260 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0b60ef07-e520-348c-aabf-dcebb3786a36.roa Signing time: Fri 06 Sep 2024 01:00:31 +0000 ROA not before: Fri 06 Sep 2024 01:00:31 +0000 ROA not after: Thu 05 Dec 2024 02:00:31 +0000 asID: 15169 IP address blocks: 208.87.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:1e:70:75:df:d0:79:34:02:8d:f3:b2:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 6 01:00:31 2024 GMT Not After : Dec 5 02:00:31 2024 GMT Subject: CN=c2dfdfd6-d045-4b22-b0e0-b3ed533f4688 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:22:92:df:e1:14:e4:c8:2a:79:32:2c:0a:92: 22:5f:d7:08:f0:ac:4e:00:8e:69:46:d4:6e:1b:ea: cd:28:d2:65:c1:bc:8b:20:94:fa:bd:5a:16:6d:49: 20:a8:c4:83:ae:bf:b2:46:b2:eb:13:a3:1b:ce:ac: 1f:9a:0b:e9:9a:d6:e6:b2:9a:68:c0:a0:00:ac:36: 5d:84:1f:77:57:09:05:57:b5:a3:6a:6f:94:61:1a: c8:ce:93:af:94:2d:10:01:c7:bb:0c:b5:ef:b3:aa: 2e:cf:4f:2d:42:c1:38:fc:ca:9b:7d:eb:41:e0:ae: ed:54:f7:3b:2a:5b:f7:dc:df:68:a8:6d:5d:19:a1: 78:6b:fa:a2:64:5f:19:0c:05:4c:c1:0e:2e:49:42: 79:45:99:b6:38:93:c0:64:03:5b:91:63:0d:56:ee: a5:14:5e:cb:31:0b:8d:95:e5:3a:99:79:9e:a9:b0: 3f:b3:42:de:fd:3e:8a:72:ae:13:61:c0:bc:59:f4: d1:ba:a6:88:3d:28:54:e3:12:90:16:08:c5:de:5d: d6:78:ae:91:db:de:dd:0f:f2:3f:bc:1f:4c:4a:6b: 22:54:e7:ff:b2:55:9b:46:aa:22:c0:58:25:e0:45: 30:3a:ca:f4:ca:f5:72:58:b3:4f:c4:97:f9:00:5d: 3d:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:1C:0A:C6:BB:50:04:4B:A7:D4:A7:42:94:65:83:86:A9:03:98:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0b60ef07-e520-348c-aabf-dcebb3786a36.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 208.87.174.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:f0:e2:e4:ac:05:22:c3:33:5c:49:34:c8:46:e6:50:ab:af: 5a:f1:56:f0:67:35:52:60:1c:ca:3e:b5:0b:24:f5:3d:d8:83: 92:92:65:5d:56:80:6e:bb:e4:66:3b:1e:04:47:ed:2d:b9:81: 92:e3:47:1d:ef:b6:1f:12:72:6f:32:b9:86:66:17:05:a7:8e: bf:55:bb:a4:c1:af:c1:2e:af:1b:af:84:ee:76:b6:7c:e9:3a: 90:74:fd:a3:30:77:3f:f9:c1:ce:21:7e:8d:1a:45:6a:29:da: 88:8d:ee:71:a3:16:9e:87:5f:b2:68:17:4b:0b:29:60:9c:f4: 42:55:a1:49:9a:4f:ff:2b:37:73:1c:68:22:d2:b2:66:95:a6: 03:08:ff:9e:e2:cb:ae:0b:b4:45:80:a0:98:35:3c:42:6c:f9: fb:a4:84:dd:4d:f3:49:40:84:41:6c:bf:13:ce:64:e0:cd:73: 48:9c:10:ef:1c:a6:fb:c1:7c:39:2c:54:91:7e:47:f6:31:86: 99:99:db:4b:eb:50:34:b7:94:24:81:5a:c9:70:06:c0:1a:ad: d9:c6:96:56:57:e1:6f:fd:90:b4:49:13:48:f3:8f:6e:24:2d: 23:73:02:c6:50:41:d7:ed:f3:47:b9:a9:0a:12:f4:59:1a:0f: 70:9e:09:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcecHXf0Hk0Ao3zsmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI0MDkwNjAxMDAzMVoXDTI0MTIwNTAyMDAzMVowLzEtMCsGA1UEAxMk YzJkZmRmZDYtZDA0NS00YjIyLWIwZTAtYjNlZDUzM2Y0Njg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhSKS3+EU5MgqeTIsCpIiX9cI8KxOAI5pRtRu G+rNKNJlwbyLIJT6vVoWbUkgqMSDrr+yRrLrE6MbzqwfmgvpmtbmsppowKAArDZd hB93VwkFV7Wjam+UYRrIzpOvlC0QAce7DLXvs6ouz08tQsE4/MqbfetB4K7tVPc7 Klv33N9oqG1dGaF4a/qiZF8ZDAVMwQ4uSUJ5RZm2OJPAZANbkWMNVu6lFF7LMQuN leU6mXmeqbA/s0Le/T6Kcq4TYcC8WfTRuqaIPShU4xKQFgjF3l3WeK6R297dD/I/ vB9MSmsiVOf/slWbRqoiwFgl4EUwOsr0yvVyWLNPxJf5AF09UQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAAcCsa7UARLp9SnQpRlg4apA5jZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMGI2MGVmMDctZTUyMC0z NDhjLWFhYmYtZGNlYmIzNzg2YTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FeuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKfw4uSsBSLDM1xJNMhG5lCrr1rxVvBnNVJgHMo+tQsk9T3Yg5KSZV1W gG675GY7HgRH7S25gZLjRx3vth8Scm8yuYZmFwWnjr9Vu6TBr8EurxuvhO52tnzp OpB0/aMwdz/5wc4hfo0aRWop2oiN7nGjFp6HX7JoF0sLKWCc9EJVoUmaT/8rN3Mc aCLSsmaVpgMI/57iy64LtEWAoJg1PEJs+fukhN1N80lAhEFsvxPOZODNc0icEO8c pvvBfDksVJF+R/YxhpmZ20vrUDS3lCSBWslwBsAardnGllZX4W/9kLRJE0jzj24k LSNzAsZQQdft80e5qQoS9FkaD3CeCVc= -----END CERTIFICATE-----Generated at Sun Nov 24 23:10:06 2024 by rpki-client on console-ams.rpki-client.org