$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8cfe6a28-4ace-363a-8f77-fbfd9f33de5a.roa File: 8cfe6a28-4ace-363a-8f77-fbfd9f33de5a.roa (raw, json) Hash identifier: yjA92ohe+cIuAN44YROR9RZWhj90j1T2JWXhMNPPoH4= Subject key identifier: 58:98:66:C1:8B:21:31:FC:C3:55:4C:87:5E:40:A4:68:6D:91:75:14 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285847E62B48E00B659DFFF346B600 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8cfe6a28-4ace-363a-8f77-fbfd9f33de5a.roa Signing time: Sat 16 Nov 2024 14:00:41 +0000 ROA not before: Sat 16 Nov 2024 14:00:41 +0000 ROA not after: Fri 14 Feb 2025 14:00:41 +0000 asID: 15169 IP address blocks: 216.58.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e6:2b:48:e0:0b:65:9d:ff:f3:46:b6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Nov 16 14:00:41 2024 GMT Not After : Feb 14 14:00:41 2025 GMT Subject: CN=632672de-f0f9-450d-8288-134c1e8e7e59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:61:4e:68:e1:6b:92:98:24:44:f7:a7:87:6c: d2:80:5b:03:ba:99:1c:47:73:d3:8a:10:fc:9f:af: 21:10:c7:f8:b0:9c:d1:a6:94:69:52:9b:52:5e:0c: 8f:ae:42:81:a4:2e:c8:61:3e:2f:c1:28:92:53:45: 64:92:d4:41:1e:3c:a2:4d:6b:31:1d:b3:2c:49:3b: 43:72:12:c1:cb:32:bf:74:52:a1:25:a3:fb:33:30: 2c:7e:6b:ee:0f:41:3d:8e:7f:82:32:8e:14:6d:04: ff:58:ee:18:c2:c9:b2:42:6e:61:c5:73:38:6d:ef: de:7c:60:2b:b5:a1:6d:8b:97:0a:a5:24:5a:96:25: 71:82:c2:9e:1a:83:25:88:92:9b:fa:c1:17:3e:8b: 43:75:2c:06:f4:6b:c1:15:ab:a6:cd:b9:59:15:50: 7c:59:bd:5b:24:6d:d1:02:01:f0:af:ca:f4:e7:1e: 4f:cd:9e:9c:23:77:d2:33:ac:9f:4a:e6:e9:58:9b: 89:e2:2d:ff:8a:40:29:c7:5c:61:79:c8:f3:07:ae: c3:b4:7c:d9:a9:02:24:61:a7:1b:27:ee:59:91:fd: db:67:cd:d8:cc:d2:50:a2:17:af:66:01:f0:74:7f: e3:de:33:3f:83:85:11:a6:b9:89:72:91:26:d9:24: 92:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:98:66:C1:8B:21:31:FC:C3:55:4C:87:5E:40:A4:68:6D:91:75:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8cfe6a28-4ace-363a-8f77-fbfd9f33de5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 216.58.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:c3:4d:0d:cf:85:58:d6:73:8e:f3:48:a9:9e:c5:1a:9d:b6: a6:73:d9:4f:21:9f:04:ff:a8:31:e7:df:a6:2d:63:98:3d:63: 57:0d:fc:0f:18:ab:1e:88:43:52:d4:ba:9e:5d:8e:37:e6:98: b2:85:d0:9a:7a:45:ac:fc:82:b8:80:4c:a1:12:5e:6f:65:cb: f1:bb:55:db:27:54:0f:a4:9b:91:37:73:32:77:e0:93:93:9e: ae:f6:dd:9d:c3:7b:32:cd:81:3e:35:e5:9d:af:e2:76:42:31: fa:99:bc:30:62:e5:32:62:64:14:00:1b:c5:43:6e:a4:e8:ab: fb:62:dc:dc:a2:ee:77:ae:70:7e:25:93:b6:d0:5c:0f:b5:fd: 37:c1:12:b8:94:d1:3c:84:9d:10:17:06:18:5b:94:ec:b7:2b: 88:87:d2:8c:a2:a4:d4:2b:5c:01:da:fe:6d:09:1d:db:0b:02: 6c:b3:17:02:e7:8c:e8:1c:ef:14:42:15:7f:53:e3:59:1b:3a: b8:d2:77:39:24:2b:89:ad:9f:04:e5:ea:b6:fd:67:db:89:82: 13:26:fd:a0:1b:a4:47:1a:2c:94:90:83:32:30:c3:32:f6:e5: 52:3f:20:93:3e:9c:a0:0b:64:27:82:e4:f1:74:a2:50:71:bb: ba:df:59:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmK0jgC2Wd//NGtgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk NjMyNjcyZGUtZjBmOS00NTBkLTgyODgtMTM0YzFlOGU3ZTU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhmFOaOFrkpgkRPenh2zSgFsDupkcR3PTihD8 n68hEMf4sJzRppRpUptSXgyPrkKBpC7IYT4vwSiSU0VkktRBHjyiTWsxHbMsSTtD chLByzK/dFKhJaP7MzAsfmvuD0E9jn+CMo4UbQT/WO4YwsmyQm5hxXM4be/efGAr taFti5cKpSRaliVxgsKeGoMliJKb+sEXPotDdSwG9GvBFaumzblZFVB8Wb1bJG3R AgHwr8r05x5PzZ6cI3fSM6yfSubpWJuJ4i3/ikApx1xhecjzB67DtHzZqQIkYacb J+5Zkf3bZ83YzNJQohevZgHwdH/j3jM/g4URprmJcpEm2SSSrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFiYZsGLITH8w1VMh15ApGhtkXUUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOGNmZTZhMjgtNGFjZS0z NjNhLThmNzctZmJmZDlmMzNkZTVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2DrZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAnDTQ3PhVjWc47zSKmexRqdtqZz2U8hnwT/qDHn36YtY5g9Y1cN/A8Y qx6IQ1LUup5djjfmmLKF0Jp6Raz8griATKESXm9ly/G7VdsnVA+km5E3czJ34JOT nq723Z3DezLNgT415Z2v4nZCMfqZvDBi5TJiZBQAG8VDbqToq/ti3Nyi7neucH4l k7bQXA+1/TfBEriU0TyEnRAXBhhblOy3K4iH0oyipNQrXAHa/m0JHdsLAmyzFwLn jOgc7xRCFX9T41kbOrjSdzkkK4mtnwTl6rb9Z9uJghMm/aAbpEcaLJSQgzIwwzL2 5VI/IJM+nKALZCeC5PF0olBxu7rfWb4= -----END CERTIFICATE-----Generated at Sun Nov 24 23:59:15 2024 by rpki-client on console-fra.rpki-client.org