$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6aa7e434-6a22-3dea-96e4-ed5f66ed3386.roa File: 6aa7e434-6a22-3dea-96e4-ed5f66ed3386.roa (raw, json) Hash identifier: LFB/J04conjXRFglygsfBGQC/X38/xTgqbQVadS8/wY= Subject key identifier: AD:C4:E6:95:62:7E:A6:D2:80:8A:D9:C2:DA:F7:D7:4A:E6:B8:FA:30 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285847E62AB3E62B7C5B4EF5BD2A00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6aa7e434-6a22-3dea-96e4-ed5f66ed3386.roa Signing time: Sat 16 Nov 2024 14:00:41 +0000 ROA not before: Sat 16 Nov 2024 14:00:41 +0000 ROA not after: Fri 14 Feb 2025 14:00:41 +0000 asID: 15169 IP address blocks: 173.194.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e6:2a:b3:e6:2b:7c:5b:4e:f5:bd:2a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Nov 16 14:00:41 2024 GMT Not After : Feb 14 14:00:41 2025 GMT Subject: CN=e4da2858-b242-4527-a0bf-ea5ccb27f7c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:81:9b:ca:5f:f4:0e:aa:d6:83:2b:9b:74:a4: 65:51:5b:e5:dc:3a:18:ff:01:90:44:ad:e2:c3:50: fd:d1:9a:22:9e:15:2a:b5:f8:8f:18:68:29:fd:24: 2c:11:42:86:00:d9:4c:d0:6e:29:fa:f4:e1:ea:68: a1:f4:ff:41:02:94:70:c3:75:50:27:27:f6:48:48: 87:94:62:2c:8b:85:61:06:7f:c1:73:41:b1:67:06: a4:ef:b2:ad:1f:89:07:98:cd:e5:8e:1d:e7:d7:11: 6d:92:e0:ce:9c:ba:43:86:41:aa:f4:01:f6:fa:36: a3:85:a9:47:09:94:5a:04:37:0f:39:54:0f:7a:8a: ea:4c:cf:b1:27:b9:12:01:1e:fb:bc:b0:98:8c:67: b7:c3:68:61:bf:47:21:6b:3c:ae:da:da:f7:76:4a: 19:ce:75:db:bf:f6:be:57:82:cd:09:84:db:37:93: d8:dd:28:22:3b:da:8a:2a:8f:81:a9:c4:59:cd:51: 77:b4:5b:87:96:90:9e:f1:68:89:27:3c:f0:83:71: 55:ec:d6:df:24:4e:2c:77:1d:02:a5:04:67:72:38: 0d:cb:f8:01:a4:b5:47:84:b7:90:b2:c9:75:99:3d: af:9d:fe:05:a4:a3:9c:2e:80:1a:8a:88:8e:c8:b1: 7c:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:C4:E6:95:62:7E:A6:D2:80:8A:D9:C2:DA:F7:D7:4A:E6:B8:FA:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6aa7e434-6a22-3dea-96e4-ed5f66ed3386.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 173.194.218.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:df:9e:8b:05:8e:64:c2:e1:11:a2:3d:91:76:17:6c:52:87: 69:64:36:89:75:05:f3:c6:b2:47:8e:e6:39:76:ed:8d:87:44: b0:98:d1:a6:1b:7a:8e:db:c8:7b:e3:88:04:e1:48:60:2f:72: 82:84:7c:ef:de:d0:27:97:23:12:5b:e1:39:d0:12:af:3e:75: ea:4e:8a:17:1a:54:65:24:80:94:07:bd:1b:ed:45:47:9a:f5: ce:18:1a:14:53:20:20:59:46:7f:6b:05:e6:68:48:87:56:66: 55:76:46:05:cf:da:82:e8:17:62:66:57:8f:61:af:b9:bf:25: af:04:9c:f6:cf:a0:8a:f8:eb:d1:67:c2:5b:7c:22:53:d0:01: b1:05:7f:74:28:97:aa:57:db:9c:17:2c:2f:f7:94:40:7b:ec: 39:14:5f:af:88:9f:7f:c3:15:32:76:5d:be:e8:fb:9b:ce:79: cc:a1:4d:ab:51:5a:df:30:3b:52:e8:22:52:eb:eb:af:79:a5: 45:ea:03:2e:48:aa:13:20:a5:a8:11:b4:e7:e6:77:fb:33:f6: 4c:f7:f5:2e:d5:17:df:5e:74:6e:f9:d7:d5:55:c6:1d:95:38: a6:47:ba:54:68:b3:a7:c2:dc:4b:6f:cf:be:42:9a:61:5b:7a: fd:b5:87:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKrPmK3xbTvW9KgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk ZTRkYTI4NTgtYjI0Mi00NTI3LWEwYmYtZWE1Y2NiMjdmN2M1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4Gbyl/0DqrWgyubdKRlUVvl3DoY/wGQRK3i w1D90ZoinhUqtfiPGGgp/SQsEUKGANlM0G4p+vTh6mih9P9BApRww3VQJyf2SEiH lGIsi4VhBn/Bc0GxZwak77KtH4kHmM3ljh3n1xFtkuDOnLpDhkGq9AH2+jajhalH CZRaBDcPOVQPeorqTM+xJ7kSAR77vLCYjGe3w2hhv0chazyu2tr3dkoZznXbv/a+ V4LNCYTbN5PY3SgiO9qKKo+BqcRZzVF3tFuHlpCe8WiJJzzwg3FV7NbfJE4sdx0C pQRncjgNy/gBpLVHhLeQssl1mT2vnf4FpKOcLoAaioiOyLF8FwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK3E5pVifqbSgIrZwtr310rmuPowMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNmFhN2U0MzQtNmEyMi0z ZGVhLTk2ZTQtZWQ1ZjY2ZWQzMzg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcLaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIHfnosFjmTC4RGiPZF2F2xSh2lkNol1BfPGskeO5jl27Y2HRLCY0aYb eo7byHvjiAThSGAvcoKEfO/e0CeXIxJb4TnQEq8+depOihcaVGUkgJQHvRvtRUea 9c4YGhRTICBZRn9rBeZoSIdWZlV2RgXP2oLoF2JmV49hr7m/Ja8EnPbPoIr469Fn wlt8IlPQAbEFf3Qol6pX25wXLC/3lEB77DkUX6+In3/DFTJ2Xb7o+5vOecyhTatR Wt8wO1LoIlLr6695pUXqAy5IqhMgpagRtOfmd/sz9kz39S7VF99edG7519VVxh2V OKZHulRos6fC3Etvz75CmmFbev21h8c= -----END CERTIFICATE-----Generated at Sun Nov 24 23:59:14 2024 by rpki-client on console-fra.rpki-client.org