$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/79b0c2e6-0dd2-3e17-8746-47a41b5b1293.roa File: 79b0c2e6-0dd2-3e17-8746-47a41b5b1293.roa (raw, json) Hash identifier: ZdaaJeCGrCGbIpxHzbP4Xuca4DbdQpNcSHIcg5MLmzQ= Subject key identifier: 6B:FB:21:B1:85:81:A5:2F:92:B9:88:9F:17:2C:B2:2B:CD:D2:8B:E3 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285847E62AAE52CEE4F5D364919680 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/79b0c2e6-0dd2-3e17-8746-47a41b5b1293.roa Signing time: Sat 16 Nov 2024 14:00:41 +0000 ROA not before: Sat 16 Nov 2024 14:00:41 +0000 ROA not after: Fri 14 Feb 2025 14:00:41 +0000 asID: 15169 IP address blocks: 216.58.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e6:2a:ae:52:ce:e4:f5:d3:64:91:96:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Nov 16 14:00:41 2024 GMT Not After : Feb 14 14:00:41 2025 GMT Subject: CN=306ae9c5-7cdf-46de-9123-e83315b1cfe3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:09:e1:fd:b6:e3:9a:1f:00:5e:c1:5b:76:97: 0d:b1:1e:44:82:4c:74:23:15:99:1f:36:d2:ac:c3: ab:73:bf:a3:e3:5a:74:4a:ef:be:ab:d7:ff:08:57: 25:29:18:60:4f:5b:23:62:fe:48:05:f7:6a:28:64: 01:83:69:56:c2:18:67:ab:f2:f8:e7:d3:93:6f:f1: c2:9a:d9:96:7f:32:94:01:bb:aa:42:fa:07:6a:05: c8:6f:bf:18:30:8a:fc:68:72:c7:0e:da:12:15:d0: fb:03:f9:ff:a5:b1:5c:97:5f:71:3a:ca:1d:14:18: 77:38:46:dd:38:e5:11:78:de:fd:d5:32:e4:74:b5: a5:15:51:6a:fc:6c:c7:96:ed:94:2c:31:b3:a8:ed: e4:69:bb:a4:aa:ae:4b:22:b8:a5:47:78:8a:3d:9f: 6c:f6:d4:b2:be:86:ca:77:8a:b8:d1:c1:7b:23:6c: 1e:a4:42:39:c3:92:32:84:d5:70:61:53:a2:d0:98: 1a:09:d4:2e:dc:f2:37:80:34:0a:59:3b:42:6e:a0: 20:66:e6:cc:6d:96:ec:c9:a2:f2:12:a5:fb:2a:9c: bc:a6:24:35:31:cf:22:9e:8a:f3:a0:41:f7:6a:66: eb:e8:3b:b6:25:30:d8:f2:89:d5:20:f7:5d:7e:7b: 14:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:FB:21:B1:85:81:A5:2F:92:B9:88:9F:17:2C:B2:2B:CD:D2:8B:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/79b0c2e6-0dd2-3e17-8746-47a41b5b1293.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 216.58.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:1e:95:62:1f:0d:87:96:3f:4e:05:9a:7f:1d:09:4f:64:4a: b9:32:85:43:78:f0:a6:d8:6a:6f:01:27:c9:44:31:f4:04:e9: 94:c1:9c:fc:df:e6:df:1d:68:fa:1b:f5:d7:d9:52:21:b6:72: b9:aa:9d:e9:cf:be:fd:5b:c2:82:d0:da:6a:ba:8c:64:70:38: 02:30:96:55:e0:b2:84:88:e5:f4:39:ee:82:f0:1d:f3:aa:f6: c8:53:60:ac:ee:84:ce:88:81:56:e5:3e:53:a3:bb:88:56:80: 75:28:18:8e:81:06:ea:89:05:fd:35:45:58:ee:b5:3b:40:66: 10:b3:c3:c7:59:c8:ea:9a:ee:cc:2d:88:c0:5a:bb:40:7b:f5: 55:46:c7:42:9b:3a:f0:4a:c0:11:a2:de:6f:04:00:84:4f:7c: 61:73:e4:1a:c2:51:45:a5:c7:5e:da:0f:1f:75:83:f3:36:e1: 0c:bb:c9:4b:66:3d:96:1a:f8:32:2d:3f:44:49:aa:9d:6e:02: 23:8d:d2:59:a1:e6:36:d6:e5:45:d5:64:3d:1b:41:d0:38:cd: 10:01:5e:8c:7e:41:d7:11:55:a7:07:41:8e:27:9c:02:44:df: 32:75:2a:5d:d9:55:6a:86:d6:cf:5b:d9:f1:19:d3:a0:6e:1f: 41:96:fd:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKq5SzuT102SRloAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk MzA2YWU5YzUtN2NkZi00NmRlLTkxMjMtZTgzMzE1YjFjZmUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgwnh/bbjmh8AXsFbdpcNsR5Egkx0IxWZHzbS rMOrc7+j41p0Su++q9f/CFclKRhgT1sjYv5IBfdqKGQBg2lWwhhnq/L459OTb/HC mtmWfzKUAbuqQvoHagXIb78YMIr8aHLHDtoSFdD7A/n/pbFcl19xOsodFBh3OEbd OOUReN791TLkdLWlFVFq/GzHlu2ULDGzqO3kabukqq5LIrilR3iKPZ9s9tSyvobK d4q40cF7I2wepEI5w5IyhNVwYVOi0JgaCdQu3PI3gDQKWTtCbqAgZubMbZbsyaLy EqX7Kpy8piQ1Mc8inorzoEH3ambr6Du2JTDY8onVIPddfnsUCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGv7IbGFgaUvkrmInxcssivN0ovjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNzliMGMyZTYtMGRkMi0z ZTE3LTg3NDYtNDdhNDFiNWIxMjkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2DrYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADEelWIfDYeWP04Fmn8dCU9kSrkyhUN48KbYam8BJ8lEMfQE6ZTBnPzf 5t8daPob9dfZUiG2crmqnenPvv1bwoLQ2mq6jGRwOAIwllXgsoSI5fQ57oLwHfOq 9shTYKzuhM6IgVblPlOju4hWgHUoGI6BBuqJBf01RVjutTtAZhCzw8dZyOqa7swt iMBau0B79VVGx0KbOvBKwBGi3m8EAIRPfGFz5BrCUUWlx17aDx91g/M24Qy7yUtm PZYa+DItP0RJqp1uAiON0lmh5jbW5UXVZD0bQdA4zRABXox+QdcRVacHQY4nnAJE 3zJ1Kl3ZVWqG1s9b2fEZ06BuH0GW/S0= -----END CERTIFICATE-----Generated at Fri Nov 22 00:25:18 2024 by rpki-client on console-fra.rpki-client.org