$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/708f5e88-dc55-3d21-ba06-529f1a8a621b.roa File: 708f5e88-dc55-3d21-ba06-529f1a8a621b.roa (raw, json) Hash identifier: VZDCd8XmNdT4aryDqKqsOIHUhXKs3VLXsx5e/oUjehw= Subject key identifier: B5:00:AC:07:AD:1C:19:43:39:0B:A7:D4:4C:10:14:D4:B3:93:C6:A7 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285847E62B474A8C36F6BE67EAB700 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/708f5e88-dc55-3d21-ba06-529f1a8a621b.roa Signing time: Sat 16 Nov 2024 14:00:41 +0000 ROA not before: Sat 16 Nov 2024 14:00:41 +0000 ROA not after: Fri 14 Feb 2025 14:00:41 +0000 asID: 15169 IP address blocks: 209.85.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e6:2b:47:4a:8c:36:f6:be:67:ea:b7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Nov 16 14:00:41 2024 GMT Not After : Feb 14 14:00:41 2025 GMT Subject: CN=6c92581d-4f62-4ad1-873b-155406ac9b63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:03:bd:93:bf:57:43:33:a4:73:fe:64:28:15: f2:ca:39:92:a4:14:0f:a1:48:96:a8:b2:16:19:76: 9a:13:80:78:ac:4f:ec:0a:28:bc:71:54:e6:79:9b: 98:c2:02:73:9d:45:26:c7:91:de:2d:d6:4d:29:a2: 4a:f1:94:2e:9e:1c:08:ce:26:a0:9a:09:be:c3:31: db:3a:b2:6f:9b:fd:02:02:97:db:1d:bd:87:54:44: be:74:20:9e:56:2c:4c:c0:77:e2:df:4d:b6:42:01: 88:68:e9:b2:3d:8a:5d:3e:f6:8c:45:11:53:d3:0d: 10:cf:01:83:07:59:37:26:2e:60:65:2a:8f:35:38: cc:5a:70:c1:49:e1:71:f4:0c:a4:25:e8:20:07:c0: 79:6c:c4:74:c7:a8:bd:f1:c6:43:fb:ae:13:c1:17: 8d:ff:15:92:28:c2:1b:2a:2c:43:fc:bc:02:e7:c5: ca:22:0c:43:54:04:97:45:1b:ee:c2:b5:f7:0b:08: 58:08:da:81:d6:17:b5:38:8e:fc:8b:d1:eb:d7:b2: cc:db:bf:f8:f4:c6:50:6a:f2:7c:69:8a:fa:3f:e2: e2:b7:04:48:66:09:01:8e:f4:45:d5:c7:75:47:d4: 3b:2d:6a:dc:0a:2e:f1:ce:1c:83:ac:46:d1:93:d2: 0c:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:00:AC:07:AD:1C:19:43:39:0B:A7:D4:4C:10:14:D4:B3:93:C6:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/708f5e88-dc55-3d21-ba06-529f1a8a621b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 209.85.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:dc:44:68:98:44:81:22:bf:57:e0:57:f2:93:0c:d7:00:ce: f5:c9:32:be:67:c4:fd:61:76:93:22:63:36:c0:2e:62:50:2a: 8c:af:95:f5:32:e3:9b:93:a4:88:0a:38:f3:51:82:63:5a:fb: d3:43:99:0c:8b:cd:f1:b9:47:5d:1d:d8:bf:fd:d7:58:ad:fe: 8c:06:b0:93:5d:f6:90:15:67:58:63:be:05:dc:98:ca:06:6e: 8e:0d:c2:f6:13:ae:dc:9b:05:63:ec:73:94:64:71:2e:d0:82: 66:96:5a:ea:68:26:7a:10:49:da:b3:d7:18:9a:66:ad:45:d5: e0:8d:45:f9:79:0a:0b:4b:b7:dc:06:58:84:f7:c7:a8:f5:31: 18:64:90:ea:82:75:95:27:6b:fc:3e:d9:26:5b:eb:f8:d5:47: 27:c0:f8:77:31:8d:dd:f1:a0:27:b4:60:67:93:4e:e9:62:bf: ca:3a:1b:fc:f7:48:c1:b2:2f:fc:fa:d8:13:54:40:f3:33:69: 36:aa:b7:12:6f:2c:68:2b:2d:00:d0:77:55:b0:96:fb:c4:19: 6d:b0:84:5e:43:67:65:6c:a1:f3:52:bf:b8:ec:e5:d8:80:67: e3:db:2b:da:08:84:3c:e0:fd:a7:77:9b:c8:ef:6b:3d:63:9e: c7:e0:ec:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmK0dKjDb2vmfqtwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk NmM5MjU4MWQtNGY2Mi00YWQxLTg3M2ItMTU1NDA2YWM5YjYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQO9k79XQzOkc/5kKBXyyjmSpBQPoUiWqLIW GXaaE4B4rE/sCii8cVTmeZuYwgJznUUmx5HeLdZNKaJK8ZQunhwIziagmgm+wzHb OrJvm/0CApfbHb2HVES+dCCeVixMwHfi3022QgGIaOmyPYpdPvaMRRFT0w0QzwGD B1k3Ji5gZSqPNTjMWnDBSeFx9AykJeggB8B5bMR0x6i98cZD+64TwReN/xWSKMIb KixD/LwC58XKIgxDVASXRRvuwrX3CwhYCNqB1he1OI78i9Hr17LM27/49MZQavJ8 aYr6P+LitwRIZgkBjvRF1cd1R9Q7LWrcCi7xzhyDrEbRk9IMoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLUArAetHBlDOQun1EwQFNSzk8anMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNzA4ZjVlODgtZGM1NS0z ZDIxLWJhMDYtNTI5ZjFhOGE2MjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0VXqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACfcRGiYRIEiv1fgV/KTDNcAzvXJMr5nxP1hdpMiYzbALmJQKoyvlfUy 45uTpIgKOPNRgmNa+9NDmQyLzfG5R10d2L/911it/owGsJNd9pAVZ1hjvgXcmMoG bo4NwvYTrtybBWPsc5RkcS7QgmaWWupoJnoQSdqz1xiaZq1F1eCNRfl5CgtLt9wG WIT3x6j1MRhkkOqCdZUna/w+2SZb6/jVRyfA+Hcxjd3xoCe0YGeTTuliv8o6G/z3 SMGyL/z62BNUQPMzaTaqtxJvLGgrLQDQd1WwlvvEGW2whF5DZ2VsofNSv7js5diA Z+PbK9oIhDzg/ad3m8jvaz1jnsfg7KA= -----END CERTIFICATE-----Generated at Thu Nov 21 23:40:56 2024 by rpki-client on console-ams.rpki-client.org