$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8602a905-b263-30a4-8140-3c7d39eccf04.roa File: 8602a905-b263-30a4-8140-3c7d39eccf04.roa (raw, json) Hash identifier: TVKHyLsg5aVWRzGe6QWlTSP9yWtUexsU/WHVPcmaPEM= Subject key identifier: 11:CB:91:75:01:74:32:A8:48:D6:13:95:7B:9F:01:28:3F:E8:BE:AD Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285847E62B3C9A9215CDA0F4EFBF00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8602a905-b263-30a4-8140-3c7d39eccf04.roa Signing time: Sat 16 Nov 2024 14:00:41 +0000 ROA not before: Sat 16 Nov 2024 14:00:41 +0000 ROA not after: Fri 14 Feb 2025 14:00:41 +0000 asID: 36040 IP address blocks: 209.85.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e6:2b:3c:9a:92:15:cd:a0:f4:ef:bf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Nov 16 14:00:41 2024 GMT Not After : Feb 14 14:00:41 2025 GMT Subject: CN=2ac076a0-95a1-4a40-8b26-78d987dfe259 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:45:7c:a6:9b:b6:20:60:e3:f5:82:d0:4d:08: e5:a4:57:f9:ca:43:b8:24:59:c4:97:a4:45:7e:d9: 40:6a:70:83:8c:43:ca:6b:bb:b3:36:d9:fd:4b:ba: 4d:31:c9:7a:d1:64:c4:96:08:76:85:79:11:ec:60: 9d:85:d7:fe:d2:e5:a9:9e:eb:50:da:af:aa:6e:18: 26:6a:45:65:e1:52:83:00:07:9c:5f:a4:12:82:68: 9a:4c:57:f4:19:b9:fd:3a:e2:48:30:02:8f:c1:cb: 3a:10:45:5d:c8:fe:61:7d:00:6d:f0:22:23:da:71: 67:bc:20:bd:c4:9e:9e:32:a0:61:ca:a7:9f:da:fc: fa:c2:64:fb:3f:92:c7:86:c9:d7:6d:50:e7:d2:7f: 01:66:af:75:87:a5:65:1e:e1:c5:70:c0:25:e9:93: e0:2c:21:bb:5f:22:ad:7d:a2:df:67:09:25:cc:4c: 32:50:81:46:5c:30:20:fd:f1:de:6d:c4:00:03:2e: 1f:f3:bb:78:51:f1:22:34:5f:d5:ef:87:8d:3c:87: 59:23:c1:34:c9:b4:f1:5c:40:b0:ac:36:a4:8e:10: 68:ea:9e:a1:54:90:35:07:63:79:58:0e:02:8a:90: 8d:32:fe:91:89:f5:09:7e:ac:40:26:da:ca:4d:a3: 65:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:CB:91:75:01:74:32:A8:48:D6:13:95:7B:9F:01:28:3F:E8:BE:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8602a905-b263-30a4-8140-3c7d39eccf04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 209.85.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:53:80:af:74:35:e0:86:8d:1b:c1:64:c6:17:6d:fd:d6:31: b3:8a:3e:f3:c9:2e:ea:ff:43:dc:b7:c5:64:65:cf:64:35:1f: 93:c1:0d:86:9f:77:c5:88:ab:7c:c6:d4:9b:8b:5a:4d:d6:7d: c2:ea:73:fe:f2:28:b6:3d:7a:4d:19:02:73:83:d6:d2:54:d0: c2:de:97:90:04:68:21:0d:86:2f:61:c1:9c:a0:ed:00:58:05: f5:65:21:ca:df:15:c5:d3:f3:a1:cc:bc:a9:69:84:40:4a:34: ac:df:43:6e:cf:e4:ed:e9:2f:51:9f:0b:a8:16:d9:4f:f1:41: 33:6e:90:25:4b:c0:a7:5e:4b:ac:ff:f3:17:4a:87:dc:a6:47: e5:18:dd:41:25:71:18:3e:c7:50:59:c0:7a:75:2b:ae:be:cf: f9:97:b6:40:3e:2c:f8:69:55:84:24:2b:dc:5a:2a:19:b6:0a: b6:e1:8b:45:de:77:30:69:ee:17:79:e3:0e:c1:6c:e6:89:fc: d6:ab:e2:b0:6b:70:c1:b7:a2:cd:71:11:70:9f:03:8c:68:a9: d2:6c:55:21:f6:68:2a:af:48:0a:38:9e:16:07:20:80:14:42: 00:f9:58:54:a6:50:82:4b:df:b5:23:27:3b:ce:04:7b:49:b1: 81:3d:6d:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKzyakhXNoPTvvwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk MmFjMDc2YTAtOTVhMS00YTQwLThiMjYtNzhkOTg3ZGZlMjU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUV8ppu2IGDj9YLQTQjlpFf5ykO4JFnEl6RF ftlAanCDjEPKa7uzNtn9S7pNMcl60WTElgh2hXkR7GCdhdf+0uWpnutQ2q+qbhgm akVl4VKDAAecX6QSgmiaTFf0Gbn9OuJIMAKPwcs6EEVdyP5hfQBt8CIj2nFnvCC9 xJ6eMqBhyqef2vz6wmT7P5LHhsnXbVDn0n8BZq91h6VlHuHFcMAl6ZPgLCG7XyKt faLfZwklzEwyUIFGXDAg/fHebcQAAy4f87t4UfEiNF/V74eNPIdZI8E0ybTxXECw rDakjhBo6p6hVJA1B2N5WA4CipCNMv6RifUJfqxAJtrKTaNlXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBHLkXUBdDKoSNYTlXufASg/6L6tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvODYwMmE5MDUtYjI2My0z MGE0LTgxNDAtM2M3ZDM5ZWNjZjA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0VWJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHVTgK90NeCGjRvBZMYXbf3WMbOKPvPJLur/Q9y3xWRlz2Q1H5PBDYaf d8WIq3zG1JuLWk3WfcLqc/7yKLY9ek0ZAnOD1tJU0MLel5AEaCENhi9hwZyg7QBY BfVlIcrfFcXT86HMvKlphEBKNKzfQ27P5O3pL1GfC6gW2U/xQTNukCVLwKdeS6z/ 8xdKh9ymR+UY3UElcRg+x1BZwHp1K66+z/mXtkA+LPhpVYQkK9xaKhm2Crbhi0Xe dzBp7hd54w7BbOaJ/Nar4rBrcMG3os1xEXCfA4xoqdJsVSH2aCqvSAo4nhYHIIAU QgD5WFSmUIJL37UjJzvOBHtJsYE9bZI= -----END CERTIFICATE-----Generated at Fri Nov 22 04:31:06 2024 by rpki-client on console-fra.rpki-client.org