$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7a473d71-18ff-344f-9bb9-85ce2c1a2667.roa File: 7a473d71-18ff-344f-9bb9-85ce2c1a2667.roa (raw, json) Hash identifier: 8cGsxhRFQlOgLJjACa3yMA11iZDQ8plcktnreZQjx0Q= Subject key identifier: C7:76:8C:38:AC:20:3D:0C:3D:63:65:93:CF:DF:41:0F:D7:9F:DC:06 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285847E62A9B2EBC680B75B1EE0140 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7a473d71-18ff-344f-9bb9-85ce2c1a2667.roa Signing time: Sat 16 Nov 2024 14:00:41 +0000 ROA not before: Sat 16 Nov 2024 14:00:41 +0000 ROA not after: Fri 14 Feb 2025 14:00:41 +0000 asID: 15169 IP address blocks: 173.194.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e6:2a:9b:2e:bc:68:0b:75:b1:ee:01:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Nov 16 14:00:41 2024 GMT Not After : Feb 14 14:00:41 2025 GMT Subject: CN=b9c42559-4176-40bb-9f6b-7f3fb7aebf80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:a6:49:bc:ac:29:cd:58:f6:57:e9:27:54:fa: 1f:3b:39:f2:6c:5e:80:d1:09:70:c2:ae:aa:c3:e8: 2c:2a:3b:14:b7:fa:23:b3:6b:ed:ef:03:00:86:e1: 2e:b5:6c:ba:b0:6c:cd:13:cb:9f:c0:18:68:e4:fd: d7:32:74:58:db:de:95:2e:60:80:5e:1c:f8:99:06: bb:bd:f2:a8:ac:8b:b7:aa:c7:42:de:35:ed:26:2c: 97:3b:9e:c0:20:48:ab:48:12:c1:70:67:94:89:d3: cd:03:95:b6:25:91:c1:84:f5:98:31:c0:f0:80:c4: 2f:68:98:71:29:5b:37:8a:ca:05:b6:a4:46:6a:f2: cb:b5:1c:e4:f5:f8:92:c0:ab:6b:46:b8:3c:e8:27: ba:a8:f8:0f:3c:d9:e3:c2:f1:e8:0e:b8:ac:7a:d4: 2d:be:c6:a8:80:9b:90:c2:0f:2f:80:ce:61:9a:4d: 18:a9:b0:91:1a:48:6e:a9:11:0b:e2:53:42:c1:e6: 86:6e:ba:1a:b7:d5:62:49:c1:29:c9:81:56:27:5f: d2:19:01:be:65:5a:8d:84:40:9b:6f:2c:5f:04:cd: 5d:9a:46:95:48:c8:f0:7b:71:c9:68:b9:8f:ad:46: 8d:16:10:13:9d:e3:b2:b7:6c:40:03:f6:62:ed:8e: c6:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:76:8C:38:AC:20:3D:0C:3D:63:65:93:CF:DF:41:0F:D7:9F:DC:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7a473d71-18ff-344f-9bb9-85ce2c1a2667.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 173.194.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:dd:72:cd:6b:6c:7f:54:cb:37:ad:0f:ef:4c:91:b8:b1:05: 49:02:95:95:37:2b:3f:a7:3e:f8:39:0d:61:6e:39:aa:ff:f8: 10:b7:73:97:a1:fa:47:c7:1a:5b:a1:69:5c:ad:10:bf:51:50: 06:e2:27:20:b8:3a:e0:3e:d2:96:d8:a1:b3:03:e7:d6:01:20: ce:29:09:8b:f8:72:30:74:52:64:e9:5c:73:45:74:8d:3c:b1: b0:66:05:67:91:0f:4b:91:5e:a2:63:e3:a0:e0:03:3c:f1:0c: 17:5e:f9:23:6e:13:e6:90:bb:bb:3b:51:82:3b:2f:27:61:3a: dc:ec:6c:79:f8:42:ce:91:9a:a4:e8:e5:f1:42:bb:36:ea:1c: c7:c1:2d:8e:26:03:ea:bf:03:44:bd:13:3f:a1:6f:a4:34:8f: c0:ec:b1:d8:40:d1:01:8c:aa:ae:74:06:36:5f:29:59:ab:a2: f4:be:ec:63:b9:19:1d:62:c0:a1:8a:22:17:38:57:c3:49:11: 73:f2:d8:b3:fe:86:32:4a:37:03:06:9a:d1:ce:28:9b:d0:c5: 55:36:0a:ba:0a:99:93:89:db:09:d6:8c:8f:7c:7e:6b:e6:81: e5:f9:1d:6f:65:dd:97:27:33:4d:8c:b4:df:94:b0:72:50:90: e5:9c:76:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKpsuvGgLdbHuAUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk YjljNDI1NTktNDE3Ni00MGJiLTlmNmItN2YzZmI3YWViZjgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4qZJvKwpzVj2V+knVPofOznybF6A0Qlwwq6q w+gsKjsUt/ojs2vt7wMAhuEutWy6sGzNE8ufwBho5P3XMnRY296VLmCAXhz4mQa7 vfKorIu3qsdC3jXtJiyXO57AIEirSBLBcGeUidPNA5W2JZHBhPWYMcDwgMQvaJhx KVs3isoFtqRGavLLtRzk9fiSwKtrRrg86Ce6qPgPPNnjwvHoDrisetQtvsaogJuQ wg8vgM5hmk0YqbCRGkhuqREL4lNCweaGbroat9ViScEpyYFWJ1/SGQG+ZVqNhECb byxfBM1dmkaVSMjwe3HJaLmPrUaNFhATneOyt2xAA/Zi7Y7G0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMd2jDisID0MPWNlk8/fQQ/Xn9wGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvN2E0NzNkNzEtMThmZi0z NDRmLTliYjktODVjZTJjMWEyNjY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcJ1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKzdcs1rbH9UyzetD+9MkbixBUkClZU3Kz+nPvg5DWFuOar/+BC3c5eh +kfHGluhaVytEL9RUAbiJyC4OuA+0pbYobMD59YBIM4pCYv4cjB0UmTpXHNFdI08 sbBmBWeRD0uRXqJj46DgAzzxDBde+SNuE+aQu7s7UYI7LydhOtzsbHn4Qs6RmqTo 5fFCuzbqHMfBLY4mA+q/A0S9Ez+hb6Q0j8DssdhA0QGMqq50BjZfKVmrovS+7GO5 GR1iwKGKIhc4V8NJEXPy2LP+hjJKNwMGmtHOKJvQxVU2CroKmZOJ2wnWjI98fmvm geX5HW9l3ZcnM02MtN+UsHJQkOWcdns= -----END CERTIFICATE-----Generated at Sun Nov 24 23:10:12 2024 by rpki-client on console-ams.rpki-client.org