$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/79b397b9-94f3-3a6c-a384-6a64ace2f888.roa File: 79b397b9-94f3-3a6c-a384-6a64ace2f888.roa (raw, json) Hash identifier: TEemGd9ffoHtL1Mqwfkq8UJWnMSubb28IO2vtUfJxx0= Subject key identifier: E9:80:9F:90:3E:36:E9:3D:5F:0B:D6:3B:40:7E:68:F0:34:71:F5:B2 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285847E62AA6371427746E9A388800 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/79b397b9-94f3-3a6c-a384-6a64ace2f888.roa Signing time: Sat 16 Nov 2024 14:00:41 +0000 ROA not before: Sat 16 Nov 2024 14:00:41 +0000 ROA not after: Fri 14 Feb 2025 14:00:41 +0000 asID: 15169 IP address blocks: 173.194.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e6:2a:a6:37:14:27:74:6e:9a:38:88:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Nov 16 14:00:41 2024 GMT Not After : Feb 14 14:00:41 2025 GMT Subject: CN=dc6faf21-cea5-4e62-b0f1-f5e89176988f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:eb:a1:45:2d:7d:36:b3:4a:a0:4f:7e:f6:e3: 23:5a:1e:cc:cd:22:74:8a:79:c5:4e:f3:4d:43:8a: 74:3f:fb:03:3b:26:29:42:23:67:39:1b:8a:a7:95: cc:ed:b4:4a:fa:f7:74:50:dc:e4:d2:35:fc:5a:7d: ee:a2:ce:b7:e3:28:b4:ef:9d:ba:d8:e7:15:29:bf: 49:c7:a4:49:12:fd:59:24:c6:87:70:5d:95:74:be: a3:ef:f3:d0:31:c0:0e:39:94:e8:1b:19:a0:91:df: 27:1c:86:ae:4f:ca:79:30:60:ba:3a:07:51:c5:88: 29:92:84:b5:e6:0b:83:67:52:74:9b:7b:d5:6b:20: c0:d7:1c:1f:92:8e:c7:37:90:b7:2a:77:70:d9:d8: 64:7b:a9:2a:92:e9:5d:87:20:d0:10:03:6c:56:37: 5a:fa:5b:1c:c1:89:ae:4c:ed:bc:05:87:90:13:8e: 2c:9b:75:b1:de:b2:ab:d1:00:ef:b8:80:8b:4b:f2: d8:c8:03:f0:da:48:b9:d5:55:0d:ad:0b:0c:92:1d: bf:7f:a6:7a:3c:a1:48:c9:6f:01:9f:b1:f8:d8:6a: f8:a0:45:32:67:ee:9b:dd:45:a4:99:1f:8e:64:12: aa:ee:7e:12:2a:85:60:12:6f:36:f7:4f:62:c5:78: 4f:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:80:9F:90:3E:36:E9:3D:5F:0B:D6:3B:40:7E:68:F0:34:71:F5:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/79b397b9-94f3-3a6c-a384-6a64ace2f888.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 173.194.39.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:86:30:06:07:5d:77:96:58:c3:62:fd:8c:44:b9:ef:16:2c: f9:3f:19:d4:0c:34:24:e6:da:e1:ba:de:3c:a0:b3:ac:53:32: b0:26:0f:ce:86:96:74:2a:a4:a5:67:0e:54:45:14:0a:ab:63: c8:d0:29:5f:4e:33:da:68:ce:b3:90:bd:8b:e2:93:5d:4a:2e: a0:17:68:bc:8d:66:b6:23:a9:9f:7e:95:82:ab:bd:77:5d:9d: 0b:9a:4c:13:87:c5:2b:a7:53:bb:3f:e5:f9:16:af:6e:c5:7d: 02:80:cf:98:6c:78:0e:99:21:97:70:89:4f:c4:45:26:76:aa: 7e:42:de:25:9f:f5:33:b6:af:79:9b:b0:05:ab:7b:b6:73:61: aa:4f:11:b4:df:86:7c:10:4f:d5:47:23:df:05:84:75:5c:f4: f2:47:f3:69:be:1e:dd:80:4b:21:3d:31:e0:99:9d:f4:39:7b: 8f:98:b4:46:7a:1c:0c:14:97:a4:8d:d4:d2:39:4a:60:14:c4: ca:5f:a8:78:8f:27:d6:af:c6:9f:6e:1e:5b:a3:e7:b0:ea:6a: d1:e8:a4:aa:ca:87:f2:7c:73:c6:23:bc:03:ec:80:6c:e9:59: 38:b3:bc:45:92:69:1a:2b:64:bf:d1:20:c4:af:1e:18:29:a8: 26:25:c3:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKqY3FCd0bpo4iAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk ZGM2ZmFmMjEtY2VhNS00ZTYyLWIwZjEtZjVlODkxNzY5ODhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+uhRS19NrNKoE9+9uMjWh7MzSJ0innFTvNN Q4p0P/sDOyYpQiNnORuKp5XM7bRK+vd0UNzk0jX8Wn3uos634yi075262OcVKb9J x6RJEv1ZJMaHcF2VdL6j7/PQMcAOOZToGxmgkd8nHIauT8p5MGC6OgdRxYgpkoS1 5guDZ1J0m3vVayDA1xwfko7HN5C3Kndw2dhke6kqkuldhyDQEANsVjda+lscwYmu TO28BYeQE44sm3Wx3rKr0QDvuICLS/LYyAPw2ki51VUNrQsMkh2/f6Z6PKFIyW8B n7H42Gr4oEUyZ+6b3UWkmR+OZBKq7n4SKoVgEm82909ixXhPvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOmAn5A+Nuk9XwvWO0B+aPA0cfWyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNzliMzk3YjktOTRmMy0z YTZjLWEzODQtNmE2NGFjZTJmODg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcInMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAOGMAYHXXeWWMNi/YxEue8WLPk/GdQMNCTm2uG63jygs6xTMrAmD86G lnQqpKVnDlRFFAqrY8jQKV9OM9pozrOQvYvik11KLqAXaLyNZrYjqZ9+lYKrvXdd nQuaTBOHxSunU7s/5fkWr27FfQKAz5hseA6ZIZdwiU/ERSZ2qn5C3iWf9TO2r3mb sAWre7ZzYapPEbTfhnwQT9VHI98FhHVc9PJH82m+Ht2ASyE9MeCZnfQ5e4+YtEZ6 HAwUl6SN1NI5SmAUxMpfqHiPJ9avxp9uHluj57DqatHopKrKh/J8c8YjvAPsgGzp WTizvEWSaRorZL/RIMSvHhgpqCYlw+A= -----END CERTIFICATE-----Generated at Sun Nov 24 23:59:14 2024 by rpki-client on console-fra.rpki-client.org