$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/675e72b5-cb9f-3cc6-8c63-46ee14999ed2.roa File: 675e72b5-cb9f-3cc6-8c63-46ee14999ed2.roa (raw, json) Hash identifier: m7OuxOLcGdQ3Jd4Ri5yZWZGqA1/yXYBj4Tb98ogKK1M= Subject key identifier: 58:6B:3E:88:23:B3:25:51:A3:23:AE:39:32:4F:2F:4E:37:10:0C:01 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285847E62B33CD9E42A12736600480 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/675e72b5-cb9f-3cc6-8c63-46ee14999ed2.roa Signing time: Sat 16 Nov 2024 14:00:41 +0000 ROA not before: Sat 16 Nov 2024 14:00:41 +0000 ROA not after: Fri 14 Feb 2025 14:00:41 +0000 asID: 15169 IP address blocks: 216.58.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e6:2b:33:cd:9e:42:a1:27:36:60:04:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Nov 16 14:00:41 2024 GMT Not After : Feb 14 14:00:41 2025 GMT Subject: CN=94335acd-cbda-4f76-9c98-4d476c05c27f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:76:8a:07:3a:1c:0b:44:94:88:4c:9a:b6:6c: 52:09:fc:b7:d7:f6:c4:a2:6c:f9:0b:00:64:5b:95: 91:ab:03:52:de:0e:de:1d:4f:ba:32:a6:a4:f0:13: f7:e1:35:34:a9:af:5a:32:fb:5b:b8:1c:85:cf:df: 26:5b:86:22:93:fc:1f:22:e3:76:fa:0b:47:39:cf: 54:0d:3b:d0:2b:19:b5:33:d7:cc:5c:0a:be:e2:2b: cc:f4:fe:5a:3d:58:d3:89:75:38:0d:95:3e:40:e9: 6e:fa:6a:62:31:ec:81:26:68:c7:df:6c:0f:0a:13: 88:5c:7a:0e:39:4e:76:85:f0:aa:66:fa:aa:36:6e: 5e:c1:d3:b4:79:d8:2d:2a:a9:7a:8a:bd:cf:e5:54: 96:f0:42:f9:c1:9e:8d:64:4e:f8:a8:2f:80:40:7c: 72:a9:c8:a8:12:22:c5:2a:7d:7c:2e:59:ed:83:8e: 1f:c4:35:76:43:0f:e5:a5:c8:ff:89:4e:2d:d2:2f: f7:07:14:0f:b6:af:66:19:80:e7:f4:f6:d4:56:fe: 97:ae:fd:73:ae:19:c0:7f:5c:d9:36:d0:9d:fb:cd: e3:36:f3:21:35:73:4a:f2:51:0e:86:e7:70:7e:b3: c0:9e:a4:45:0b:7d:ab:0b:3b:d2:04:a4:8f:10:32: 8b:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:6B:3E:88:23:B3:25:51:A3:23:AE:39:32:4F:2F:4E:37:10:0C:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/675e72b5-cb9f-3cc6-8c63-46ee14999ed2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 216.58.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:4d:58:3c:59:db:59:31:7a:bf:00:85:fe:7d:ca:e1:da:1f: 24:35:09:4d:46:0c:45:de:9b:48:a9:0d:59:bf:4b:57:f4:c7: 79:0e:cd:20:46:b7:79:8f:c4:02:a5:24:a6:09:58:1b:3c:ab: 18:ab:f6:a5:1f:5a:63:b5:ad:79:a5:12:35:17:f8:90:9c:44: c8:d0:e8:7b:51:7e:62:6e:d6:af:03:5c:e0:ca:fc:f5:14:8e: 8a:1f:40:7a:e0:70:77:45:a3:bb:b5:85:27:0f:fc:60:a2:05: 8c:8d:95:5a:97:90:a1:fd:3f:43:88:31:6b:6b:ab:b0:9b:4b: 19:75:06:00:bd:ee:41:a0:77:c7:02:41:50:cd:37:c9:05:ea: 02:4c:ad:e0:4f:be:3f:44:a7:bb:63:26:59:fc:8d:7d:ab:89: 30:3e:b8:dc:4f:a4:ac:54:36:e5:72:fe:07:38:d4:8d:ab:50: 0a:ae:d3:aa:3c:65:99:26:5e:be:fe:c4:44:1b:e8:21:cc:28: 9f:bb:33:59:6d:c6:2b:c2:12:d6:f5:67:9e:3f:83:78:78:47: e8:80:38:99:be:8e:6c:65:53:25:37:04:9c:b8:6b:7e:1b:4c: d8:bf:d7:ea:29:85:f0:f5:6a:5e:9a:3d:59:06:69:b5:05:f3: c1:6d:32:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKzPNnkKhJzZgBIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk OTQzMzVhY2QtY2JkYS00Zjc2LTljOTgtNGQ0NzZjMDVjMjdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAinaKBzocC0SUiEyatmxSCfy31/bEomz5CwBk W5WRqwNS3g7eHU+6Mqak8BP34TU0qa9aMvtbuByFz98mW4Yik/wfIuN2+gtHOc9U DTvQKxm1M9fMXAq+4ivM9P5aPVjTiXU4DZU+QOlu+mpiMeyBJmjH32wPChOIXHoO OU52hfCqZvqqNm5ewdO0edgtKql6ir3P5VSW8EL5wZ6NZE74qC+AQHxyqcioEiLF Kn18Llntg44fxDV2Qw/lpcj/iU4t0i/3BxQPtq9mGYDn9PbUVv6Xrv1zrhnAf1zZ NtCd+83jNvMhNXNK8lEOhudwfrPAnqRFC32rCzvSBKSPEDKLnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFhrPogjsyVRoyOuOTJPL043EAwBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNjc1ZTcyYjUtY2I5Zi0z Y2M2LThjNjMtNDZlZTE0OTk5ZWQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2DrcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAChNWDxZ21kxer8Ahf59yuHaHyQ1CU1GDEXem0ipDVm/S1f0x3kOzSBG t3mPxAKlJKYJWBs8qxir9qUfWmO1rXmlEjUX+JCcRMjQ6HtRfmJu1q8DXODK/PUU joofQHrgcHdFo7u1hScP/GCiBYyNlVqXkKH9P0OIMWtrq7CbSxl1BgC97kGgd8cC QVDNN8kF6gJMreBPvj9Ep7tjJln8jX2riTA+uNxPpKxUNuVy/gc41I2rUAqu06o8 ZZkmXr7+xEQb6CHMKJ+7M1ltxivCEtb1Z54/g3h4R+iAOJm+jmxlUyU3BJy4a34b TNi/1+ophfD1al6aPVkGabUF88FtMlg= -----END CERTIFICATE-----Generated at Sun Nov 24 23:10:12 2024 by rpki-client on console-ams.rpki-client.org