$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a430c233-1598-3766-bd27-1c26e3178a02.roa File: a430c233-1598-3766-bd27-1c26e3178a02.roa (raw, json) Hash identifier: 1tuznQHqcj2dfEkPLtR8+V82lPzpBqp4Y4q2rA4eQxU= Subject key identifier: 5E:31:58:9C:20:41:95:19:B5:9D:4F:54:50:9C:96:39:8A:7B:14:A1 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F432858470550D500BC288EE29EF21380 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a430c233-1598-3766-bd27-1c26e3178a02.roa Signing time: Wed 28 Aug 2024 01:00:31 +0000 ROA not before: Wed 28 Aug 2024 01:00:31 +0000 ROA not after: Tue 26 Nov 2024 02:00:31 +0000 asID: 15169 IP address blocks: 173.194.96.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Sep 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:05:50:d5:00:bc:28:8e:e2:9e:f2:13:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Aug 28 01:00:31 2024 GMT Not After : Nov 26 02:00:31 2024 GMT Subject: CN=38369db3-ce99-484e-b1f3-76e6612aab22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:6e:54:34:02:f1:8d:db:2f:aa:8d:02:b9:68: ce:ba:99:03:e8:b8:fe:14:ca:eb:63:09:be:04:ec: 9b:3d:31:63:9b:19:5b:c8:94:61:ed:96:ab:77:b3: 50:17:f4:61:03:b4:5f:4d:12:62:65:cb:dc:26:01: 36:88:ad:31:fb:d2:2b:5b:55:87:f6:27:be:69:21: 24:7b:40:ba:bb:d6:d1:9a:a3:5c:45:38:45:1f:00: bb:05:f8:10:e7:a0:99:81:da:05:50:81:d4:73:b5: c1:85:24:96:da:2b:a8:74:cc:c2:c1:cc:e7:01:b4: ee:87:3f:a5:44:d2:1e:df:c1:d4:cd:97:1e:35:d4: 9a:17:19:e5:04:0d:12:1d:36:30:ba:4c:4f:4a:52: 6d:be:a3:bd:6d:18:3b:c7:6e:7d:e7:92:99:60:c2: e2:a2:de:44:4c:07:ae:3a:d0:83:a3:3d:e9:c0:de: 0c:3e:67:71:5b:9b:55:b1:f5:aa:6b:2d:54:2f:c0: 4f:4d:3e:73:1d:2d:04:b2:1d:fc:40:ee:3d:41:ad: ea:58:08:fc:4c:a8:e1:c6:aa:47:5d:ad:11:ac:df: 34:26:82:11:57:ff:ff:28:89:a2:ea:d5:30:5d:25: ed:7c:16:59:5e:51:72:19:be:bf:05:24:04:d9:4a: 5c:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:31:58:9C:20:41:95:19:B5:9D:4F:54:50:9C:96:39:8A:7B:14:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a430c233-1598-3766-bd27-1c26e3178a02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 173.194.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:c7:95:3d:a5:b2:80:96:82:a8:1f:e3:d3:bf:c8:b2:e7:7c: e1:f5:9b:80:b5:54:ca:14:7f:14:7c:81:16:ca:3d:5d:f9:15: a5:53:97:e0:80:8e:70:70:1e:bd:ee:7f:5c:3e:04:ca:59:cc: e2:3c:2f:c2:02:d6:f8:d1:68:c1:e0:f8:d3:ad:d1:b5:5f:26: de:f3:7d:6f:c3:f9:15:86:e1:3b:92:ec:34:ff:58:5b:53:66: 85:8b:92:9d:89:e2:02:00:94:9b:d1:64:88:2c:2d:88:6e:b8: 04:23:ac:81:79:29:69:65:79:cf:14:67:4b:6a:22:c4:0c:9f: 91:9f:4f:38:25:f2:24:2c:3f:a7:2a:dc:ae:ce:1d:02:45:ca: a7:3f:3d:fd:04:2f:79:90:e3:ba:aa:76:98:68:c9:9f:e2:0c: 24:ac:cd:f6:87:6c:56:26:6b:92:b5:a3:16:31:90:7b:a8:e4: 27:55:e5:e8:d4:1f:e4:31:c5:d3:7f:45:7d:b8:06:d6:be:06: d7:73:92:9a:73:35:25:56:84:fc:67:c2:e9:89:37:c7:87:43: c1:80:a1:36:35:9c:fe:d8:66:84:21:e4:89:0c:bd:2f:57:51: 77:ad:41:ca:a3:ae:87:83:4a:4d:b5:11:f0:92:4f:31:eb:04: 70:fc:7c:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcFUNUAvCiO4p7yE4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI0MDgyODAxMDAzMVoXDTI0MTEyNjAyMDAzMVowLzEtMCsGA1UEAxMk MzgzNjlkYjMtY2U5OS00ODRlLWIxZjMtNzZlNjYxMmFhYjIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzW5UNALxjdsvqo0CuWjOupkD6Lj+FMrrYwm+ BOybPTFjmxlbyJRh7Zard7NQF/RhA7RfTRJiZcvcJgE2iK0x+9IrW1WH9ie+aSEk e0C6u9bRmqNcRThFHwC7BfgQ56CZgdoFUIHUc7XBhSSW2iuodMzCwcznAbTuhz+l RNIe38HUzZceNdSaFxnlBA0SHTYwukxPSlJtvqO9bRg7x25955KZYMLiot5ETAeu OtCDoz3pwN4MPmdxW5tVsfWqay1UL8BPTT5zHS0Esh38QO49Qa3qWAj8TKjhxqpH Xa0RrN80JoIRV///KImi6tUwXSXtfBZZXlFyGb6/BSQE2UpcbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF4xWJwgQZUZtZ1PVFCcljmKexShMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYTQzMGMyMzMtMTU5OC0z NzY2LWJkMjctMWMyNmUzMTc4YTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrcJgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHnHlT2lsoCWgqgf49O/yLLnfOH1m4C1VMoUfxR8gRbKPV35FaVTl+CA jnBwHr3uf1w+BMpZzOI8L8IC1vjRaMHg+NOt0bVfJt7zfW/D+RWG4TuS7DT/WFtT ZoWLkp2J4gIAlJvRZIgsLYhuuAQjrIF5KWllec8UZ0tqIsQMn5GfTzgl8iQsP6cq 3K7OHQJFyqc/Pf0EL3mQ47qqdphoyZ/iDCSszfaHbFYma5K1oxYxkHuo5CdV5ejU H+QxxdN/RX24Bta+BtdzkppzNSVWhPxnwumJN8eHQ8GAoTY1nP7YZoQh5IkMvS9X UXetQcqjroeDSk21EfCSTzHrBHD8fOs= -----END CERTIFICATE-----Generated at Sat Sep 7 22:45:07 2024 by rpki-client on console-ams.rpki-client.org