$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/25d1bf45-3890-342f-9d44-7731a5a90a08.roa File: 25d1bf45-3890-342f-9d44-7731a5a90a08.roa (raw, json) Hash identifier: nehOMHeW8vBNxXoNthEF2MKWk2g1xWETfO6uvGuPY+4= Subject key identifier: AD:5C:9D:6A:23:DD:AA:AE:FC:67:E2:56:38:27:D2:42:97:C2:B5:B3 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285847E8F4D153FDE189A311383880 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/25d1bf45-3890-342f-9d44-7731a5a90a08.roa Signing time: Sun 17 Nov 2024 14:00:38 +0000 ROA not before: Sun 17 Nov 2024 14:00:38 +0000 ROA not after: Sat 15 Feb 2025 14:00:38 +0000 asID: 15169 IP address blocks: 74.125.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e8:f4:d1:53:fd:e1:89:a3:11:38:38:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Nov 17 14:00:38 2024 GMT Not After : Feb 15 14:00:38 2025 GMT Subject: CN=ac4c2313-a45d-4aa8-9364-a438dc991b31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a6:e1:f2:db:41:3c:b8:d3:6f:5c:b4:fb:36: 0b:f9:b2:3d:73:ad:29:58:9e:2d:c7:60:e7:ee:0c: a5:51:f4:5f:f7:0d:21:88:95:bc:e1:9a:0c:c0:85: 46:eb:94:e1:b0:06:ab:6f:bd:38:cf:e7:c3:49:67: ac:d4:e6:be:7b:c5:d0:f9:be:72:f0:2e:b6:af:29: d6:92:50:21:18:85:66:8f:a9:b9:7b:e8:1a:be:1f: 84:13:b2:81:ab:5e:92:e8:19:98:7b:b8:d5:a5:9d: 9b:ae:1d:05:37:d5:6b:64:fa:1a:30:91:fe:e1:7b: 02:53:4a:13:3f:ac:51:fc:da:09:d0:40:e5:9d:3a: 39:6a:8e:df:19:6c:7e:91:a9:b2:12:4b:26:a0:3c: 79:7f:27:2a:e8:98:53:47:71:59:93:30:23:e8:a4: 20:d3:61:55:b2:fc:04:6a:41:5f:58:13:48:36:25: 73:3d:7d:79:a9:d8:c8:d6:a9:cd:b2:f2:a2:2c:4b: 28:75:df:d1:af:a1:46:05:4a:29:6b:17:f7:4e:d4: 75:ac:02:69:7f:de:06:40:85:e6:3f:0c:2b:cf:56: 93:21:c6:03:fd:d4:13:ab:37:a9:72:b3:0e:a2:ae: dd:65:ed:67:1f:cd:92:46:84:f6:20:ff:d6:fc:02: 27:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:5C:9D:6A:23:DD:AA:AE:FC:67:E2:56:38:27:D2:42:97:C2:B5:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/25d1bf45-3890-342f-9d44-7731a5a90a08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 74.125.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:4d:99:58:09:a6:74:bc:61:09:44:14:08:ef:54:df:69:9d: 83:ae:ae:c7:f5:dc:cc:74:ef:a0:b0:ac:e2:e2:33:21:4e:d9: aa:21:c1:3f:73:31:fd:cb:49:f6:1b:05:06:50:42:e3:44:36: 9b:1f:df:dd:d0:10:1c:38:c3:eb:1a:d0:6c:89:0a:64:58:b6: 5e:ca:7f:24:11:6e:61:80:c7:d6:96:10:24:9d:79:3f:9f:61: f8:bc:df:ea:24:8d:60:ef:58:16:21:f0:39:4f:b8:62:2e:f4: 08:09:5e:9c:8d:64:60:b7:a0:d7:f6:3b:90:c5:f1:bb:93:23: b6:ed:48:d8:9a:1c:25:73:7a:15:65:2a:5b:a6:aa:22:2c:14: 9e:c2:60:70:5b:cd:05:4d:37:e0:fe:58:f2:e3:0a:ac:cb:43: ab:40:32:dd:7b:3c:b7:27:c9:f8:10:25:ac:0e:d7:22:a4:b1: 0e:89:e6:50:3d:07:3b:0f:d5:fd:b6:ae:87:6e:96:3d:d4:4e: af:79:12:73:9b:36:b0:2d:4e:31:a4:9c:54:b6:ca:47:7c:14: 12:3b:a6:bd:7f:c8:1d:a9:8f:70:56:f4:03:a8:43:e1:88:88: c8:6b:e3:81:c5:27:14:a1:d2:3e:16:a6:e0:b3:b0:d7:0b:c3: 54:b5:19:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfo9NFT/eGJoxE4OIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI0MTExNzE0MDAzOFoXDTI1MDIxNTE0MDAzOFowLzEtMCsGA1UEAxMk YWM0YzIzMTMtYTQ1ZC00YWE4LTkzNjQtYTQzOGRjOTkxYjMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqbh8ttBPLjTb1y0+zYL+bI9c60pWJ4tx2Dn 7gylUfRf9w0hiJW84ZoMwIVG65ThsAarb704z+fDSWes1Oa+e8XQ+b5y8C62rynW klAhGIVmj6m5e+gavh+EE7KBq16S6BmYe7jVpZ2brh0FN9VrZPoaMJH+4XsCU0oT P6xR/NoJ0EDlnTo5ao7fGWx+kamyEksmoDx5fycq6JhTR3FZkzAj6KQg02FVsvwE akFfWBNINiVzPX15qdjI1qnNsvKiLEsodd/Rr6FGBUopaxf3TtR1rAJpf94GQIXm Pwwrz1aTIcYD/dQTqzepcrMOoq7dZe1nH82SRoT2IP/W/AIn9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK1cnWoj3aqu/GfiVjgn0kKXwrWzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMjVkMWJmNDUtMzg5MC0z NDJmLTlkNDQtNzczMWE1YTkwYTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASn1EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFFNmVgJpnS8YQlEFAjvVN9pnYOursf13Mx076CwrOLiMyFO2aohwT9z Mf3LSfYbBQZQQuNENpsf393QEBw4w+sa0GyJCmRYtl7KfyQRbmGAx9aWECSdeT+f Yfi83+okjWDvWBYh8DlPuGIu9AgJXpyNZGC3oNf2O5DF8buTI7btSNiaHCVzehVl KlumqiIsFJ7CYHBbzQVNN+D+WPLjCqzLQ6tAMt17PLcnyfgQJawO1yKksQ6J5lA9 BzsP1f22rodulj3UTq95EnObNrAtTjGknFS2ykd8FBI7pr1/yB2pj3BW9AOoQ+GI iMhr44HFJxSh0j4WpuCzsNcLw1S1GQQ= -----END CERTIFICATE-----Generated at Sun Nov 24 23:59:12 2024 by rpki-client on console-fra.rpki-client.org