$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/708f5e88-dc55-3d21-ba06-529f1a8a621b.roa File: 708f5e88-dc55-3d21-ba06-529f1a8a621b.roa (raw, json) Hash identifier: xRu4+41SSX8ao/qVN3avF27kcsdEK8xzmhv9S9okuUg= Subject key identifier: ED:90:74:9C:B9:FA:03:BD:CC:E0:A5:91:B1:74:95:9F:65:E5:C9:68 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285845462A75949F21C5C2B29DE362 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/708f5e88-dc55-3d21-ba06-529f1a8a621b.roa Signing time: Wed 20 Mar 2024 20:58:13 +0000 ROA not before: Wed 20 Mar 2024 20:58:13 +0000 ROA not after: Tue 18 Jun 2024 20:58:13 +0000 asID: 15169 IP address blocks: 209.85.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:46:2a:75:94:9f:21:c5:c2:b2:9d:e3:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 20 20:58:13 2024 GMT Not After : Jun 18 20:58:13 2024 GMT Subject: CN=85546131-8135-45f1-8760-3049fa643ae1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:f6:44:aa:88:8d:19:4d:ba:8f:03:bf:bb:7f: 5a:61:6d:7d:26:39:56:d0:8b:9d:63:93:15:af:d6: 9d:ba:68:e8:61:e2:0d:c6:4f:df:9b:69:1d:f1:99: db:34:ac:43:2e:8d:69:cf:9d:b0:48:9e:94:a2:30: 6e:b9:b9:67:10:3a:f4:e0:31:63:79:c0:fc:14:79: ec:4a:50:91:0e:6c:c8:dd:9e:d7:1e:15:9e:96:94: 12:22:b6:e4:17:e7:7c:48:06:91:78:d7:1b:1c:7e: fd:15:49:dc:17:41:3d:66:a7:0d:e7:0a:50:c3:76: da:9d:8c:a4:af:27:32:7d:e3:da:f2:e1:02:b4:16: 6f:9c:71:1f:7a:2c:a3:69:5f:0b:67:53:f1:a4:88: fb:eb:e3:2e:48:8e:51:22:d1:2c:72:63:e9:7d:e6: 3f:cf:9c:7a:bb:a7:57:c6:d6:79:c4:87:1f:a7:36: 4c:17:1c:93:4f:fb:d1:e1:04:5a:b3:b4:b1:15:13: ed:a8:80:36:79:cc:77:d6:dc:11:65:29:d9:91:4a: 96:bf:08:a1:68:75:98:1e:87:70:94:ad:14:9f:fe: 52:a9:7e:60:6d:ea:25:2a:38:59:60:c0:6f:85:7e: 85:80:19:07:f2:d0:18:9d:74:4a:d2:91:2f:e2:aa: 1e:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:90:74:9C:B9:FA:03:BD:CC:E0:A5:91:B1:74:95:9F:65:E5:C9:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/708f5e88-dc55-3d21-ba06-529f1a8a621b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 209.85.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:5d:6d:ec:09:e3:c1:db:35:f4:9f:6c:e4:7a:d8:30:9f:c1: bd:43:6c:be:f1:6a:94:94:0b:87:a2:c0:28:f0:36:47:47:8f: 54:75:d6:e9:33:f2:59:8e:c2:d7:2d:09:97:44:57:25:7e:38: 63:8a:2c:bb:51:8e:8b:ae:ac:64:04:c0:ee:39:a8:1f:90:c2: 70:3a:de:a0:a1:44:3d:18:eb:6e:df:04:02:9c:ab:ae:92:4b: 72:b2:bb:a2:47:00:f4:3d:85:1c:29:7c:5f:6a:df:6a:ca:d5: 99:fd:0c:4d:29:67:69:4b:d8:26:0d:1e:f2:3e:64:49:97:91: 4a:27:80:89:ca:f6:72:e2:d7:7e:6f:57:9a:4e:b7:41:dc:73: ce:90:80:6d:3e:f7:db:96:22:2c:02:86:cb:b1:86:3a:ed:1e: ca:47:d9:dd:6c:2b:0f:f1:de:10:dc:9b:99:dd:45:90:a6:72: 1f:80:bb:cd:a5:d7:53:57:e1:26:21:d3:f3:a6:e3:5a:04:6b: 5b:5e:36:de:44:ee:a0:3c:a8:b6:54:64:ec:cb:88:c9:a3:a7: 06:bf:a1:b9:c6:6c:cd:c6:30:50:d7:d2:2b:a4:cf:bc:35:5c: 41:ad:05:06:26:4f:d2:a3:da:38:2c:f9:01:c7:f7:f3:76:43: 08:83:ab:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVGKnWUnyHFwrKd42IwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI0MDMyMDIwNTgxM1oXDTI0MDYxODIwNTgxM1owLzEtMCsGA1UEAxMk ODU1NDYxMzEtODEzNS00NWYxLTg3NjAtMzA0OWZhNjQzYWUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlvZEqoiNGU26jwO/u39aYW19JjlW0IudY5MV r9adumjoYeINxk/fm2kd8ZnbNKxDLo1pz52wSJ6UojBuublnEDr04DFjecD8FHns SlCRDmzI3Z7XHhWelpQSIrbkF+d8SAaReNcbHH79FUncF0E9ZqcN5wpQw3banYyk rycyfePa8uECtBZvnHEfeiyjaV8LZ1PxpIj76+MuSI5RItEscmPpfeY/z5x6u6dX xtZ5xIcfpzZMFxyTT/vR4QRas7SxFRPtqIA2ecx31twRZSnZkUqWvwihaHWYHodw lK0Un/5SqX5gbeolKjhZYMBvhX6FgBkH8tAYnXRK0pEv4qoeiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO2QdJy5+gO9zOClkbF0lZ9l5cloMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNzA4ZjVlODgtZGM1NS0z ZDIxLWJhMDYtNTI5ZjFhOGE2MjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0VXqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAApdbewJ48HbNfSfbOR62DCfwb1DbL7xapSUC4eiwCjwNkdHj1R11ukz 8lmOwtctCZdEVyV+OGOKLLtRjouurGQEwO45qB+QwnA63qChRD0Y627fBAKcq66S S3Kyu6JHAPQ9hRwpfF9q32rK1Zn9DE0pZ2lL2CYNHvI+ZEmXkUongInK9nLi135v V5pOt0Hcc86QgG0+99uWIiwChsuxhjrtHspH2d1sKw/x3hDcm5ndRZCmch+Au82l 11NX4SYh0/Om41oEa1teNt5E7qA8qLZUZOzLiMmjpwa/obnGbM3GMFDX0iukz7w1 XEGtBQYmT9Kj2jgs+QHH9/N2QwiDq+Q= -----END CERTIFICATE-----Generated at Fri May 17 22:52:20 2024 by rpki-client on console-ams.rpki-client.org