$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9a02ed3b-3fe5-3496-aa98-53ba142188c5.roa File: 9a02ed3b-3fe5-3496-aa98-53ba142188c5.roa (raw, json) Hash identifier: og5Oho6dyhCWfKfuqp1qojE0myq+1Lazxzu/Qw+RFJg= Subject key identifier: 02:56:54:7F:3A:1B:64:D7:7E:34:01:77:B8:13:A1:46:D6:31:C2:82 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285847E8F532FEC807F1A38A75F780 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9a02ed3b-3fe5-3496-aa98-53ba142188c5.roa Signing time: Sun 17 Nov 2024 14:00:38 +0000 ROA not before: Sun 17 Nov 2024 14:00:38 +0000 ROA not after: Sat 15 Feb 2025 14:00:38 +0000 asID: 15169 IP address blocks: 74.125.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e8:f5:32:fe:c8:07:f1:a3:8a:75:f7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Nov 17 14:00:38 2024 GMT Not After : Feb 15 14:00:38 2025 GMT Subject: CN=57063b6a-9b8b-4596-b619-d3c32bec8d42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:c2:58:f9:7d:6f:30:4c:0e:8a:91:a7:8a:30: 0e:29:12:44:f6:70:9e:dc:f0:dc:af:95:a5:29:a7: c7:cc:b1:ce:8d:6a:80:b3:b5:cc:ff:20:3a:cc:c5: cf:fc:bf:52:df:8c:ae:af:64:c2:98:c7:98:fb:93: 39:dd:b7:62:d5:dc:ae:05:16:4e:91:35:42:14:bd: f8:99:27:e5:55:48:19:a6:1a:c4:9f:be:5d:08:62: 97:40:7f:4a:3f:08:6c:6e:bc:e6:05:c8:93:a1:b0: 48:08:ec:e1:db:0f:7a:d0:3f:8d:b6:45:c4:f7:72: 3c:89:c9:1c:0f:96:aa:ce:6b:b5:c0:f6:3f:c8:c5: 02:c9:d4:be:e5:e4:da:03:46:34:b8:55:b2:73:6f: cf:a0:22:05:8a:d4:79:3c:f6:bb:80:29:95:9d:e7: 52:54:9e:2a:b9:70:1e:c1:a8:26:20:5b:c2:65:b3: d0:23:d2:f6:e8:68:de:a1:55:55:f4:a5:3c:a9:d5: b8:74:1b:a0:06:25:27:ce:02:cb:c2:36:a0:ed:6a: 24:30:ec:8c:58:57:5a:8f:6a:d0:92:97:3a:66:c8: 6a:53:8c:0a:ea:99:6f:28:e7:61:2b:f4:dc:c8:d4: 88:de:c4:cf:29:29:2f:e7:08:74:3e:da:65:4b:3c: 78:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:56:54:7F:3A:1B:64:D7:7E:34:01:77:B8:13:A1:46:D6:31:C2:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9a02ed3b-3fe5-3496-aa98-53ba142188c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 74.125.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:9d:1d:f8:94:d3:ce:1d:96:f8:c7:83:cd:4e:f7:47:e4:71: 0a:10:4e:c0:2d:9c:61:e1:88:56:cc:46:d5:db:16:0a:10:3a: 08:ac:ec:9d:d5:e0:35:88:30:9d:6a:24:f7:0f:56:1f:27:8b: 6e:8f:34:d5:1a:d2:51:b4:69:53:8a:26:04:ca:d0:fa:73:80: 23:8f:f3:c5:4a:41:56:83:40:a2:5a:c0:2e:8e:b9:26:b1:0b: 2d:fc:c0:d6:e1:4b:dc:a5:40:c1:8e:34:f1:be:ab:77:82:52: 74:ae:e9:db:14:8f:9e:ae:06:8b:77:dd:37:fb:a5:b0:fc:2e: 38:4b:53:04:9a:3e:6e:a6:39:c1:18:fa:d0:0e:d1:f5:3c:4c: 09:d2:b3:db:96:1c:d4:67:7a:83:ff:61:da:72:a4:80:dd:b0: e9:9f:64:b2:21:1b:e3:69:f2:bc:45:25:25:63:84:aa:7c:5c: 2d:68:90:61:22:80:ec:7c:bb:d3:c6:8b:82:aa:ca:43:0c:0d: c3:a0:b0:8a:aa:11:78:49:e0:da:8f:1d:77:a7:25:69:3c:2f: 1e:01:4f:9e:75:60:88:1c:33:3e:43:53:bc:9c:b4:c7:75:34: 9b:55:a3:ad:b0:17:5b:91:46:6b:f9:d8:f9:3f:87:d6:64:cf: 8c:ae:b0:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfo9TL+yAfxo4p194AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI0MTExNzE0MDAzOFoXDTI1MDIxNTE0MDAzOFowLzEtMCsGA1UEAxMk NTcwNjNiNmEtOWI4Yi00NTk2LWI2MTktZDNjMzJiZWM4ZDQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8JY+X1vMEwOipGnijAOKRJE9nCe3PDcr5Wl KafHzLHOjWqAs7XM/yA6zMXP/L9S34yur2TCmMeY+5M53bdi1dyuBRZOkTVCFL34 mSflVUgZphrEn75dCGKXQH9KPwhsbrzmBciTobBICOzh2w960D+NtkXE93I8ickc D5aqzmu1wPY/yMUCydS+5eTaA0Y0uFWyc2/PoCIFitR5PPa7gCmVnedSVJ4quXAe wagmIFvCZbPQI9L26GjeoVVV9KU8qdW4dBugBiUnzgLLwjag7WokMOyMWFdaj2rQ kpc6ZshqU4wK6plvKOdhK/TcyNSI3sTPKSkv5wh0PtplSzx4OwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAJWVH86G2TXfjQBd7gToUbWMcKCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOWEwMmVkM2ItM2ZlNS0z NDk2LWFhOTgtNTNiYTE0MjE4OGM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASn2MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAedHfiU084dlvjHg81O90fkcQoQTsAtnGHhiFbMRtXbFgoQOgis7J3V 4DWIMJ1qJPcPVh8ni26PNNUa0lG0aVOKJgTK0PpzgCOP88VKQVaDQKJawC6OuSax Cy38wNbhS9ylQMGONPG+q3eCUnSu6dsUj56uBot33Tf7pbD8LjhLUwSaPm6mOcEY +tAO0fU8TAnSs9uWHNRneoP/YdpypIDdsOmfZLIhG+Np8rxFJSVjhKp8XC1okGEi gOx8u9PGi4KqykMMDcOgsIqqEXhJ4NqPHXenJWk8Lx4BT551YIgcMz5DU7yctMd1 NJtVo62wF1uRRmv52Pk/h9Zkz4yusGg= -----END CERTIFICATE-----Generated at Sun Nov 24 23:10:14 2024 by rpki-client on console-ams.rpki-client.org