$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a838f9f3-0bc7-3996-9c53-4f361a3393f2.roa File: a838f9f3-0bc7-3996-9c53-4f361a3393f2.roa (raw, json) Hash identifier: 7eCln4dwLNWjkL7DoYmDdzigxvlKFM5hUCz3AWcJOfA= Subject key identifier: A5:16:58:AB:08:E1:93:2A:F8:03:92:9D:6C:83:85:43:76:FF:22:64 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285847E8F531E3C99712FF81382040 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a838f9f3-0bc7-3996-9c53-4f361a3393f2.roa Signing time: Sun 17 Nov 2024 14:00:38 +0000 ROA not before: Sun 17 Nov 2024 14:00:38 +0000 ROA not after: Sat 15 Feb 2025 14:00:38 +0000 asID: 15169 IP address blocks: 74.125.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e8:f5:31:e3:c9:97:12:ff:81:38:20:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Nov 17 14:00:38 2024 GMT Not After : Feb 15 14:00:38 2025 GMT Subject: CN=09b2136c-94d4-4efc-9533-04b7f4104c7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:03:ed:95:e4:e7:b2:b7:96:02:19:fc:b7:af: 1f:57:52:8f:f3:49:80:a0:6b:c7:16:64:3d:81:94: 31:b4:71:15:43:2f:f5:39:7b:d0:cc:d5:6f:a4:fc: 25:13:1a:23:53:08:fe:32:6e:60:ea:ea:ee:9c:b9: 38:13:9f:b0:38:9a:77:bb:52:72:c4:e3:e0:2b:b1: d5:90:1a:3c:cd:c4:5e:b5:0f:69:1d:3e:1d:3e:a6: 5b:e6:a3:2c:13:c1:8b:18:85:8f:c5:3b:27:13:2a: db:d1:6e:ec:a9:26:11:2f:ec:02:0b:3d:63:98:30: fe:88:a5:2a:20:84:ef:07:fc:be:e8:fa:bc:ad:88: c4:b7:3c:4b:57:cd:7c:fb:54:3b:50:85:4c:c5:92: 78:03:03:03:7d:50:d0:50:e7:fb:14:c1:54:6f:fc: 7f:d8:08:07:7a:e1:3d:bd:ab:c3:8b:99:75:b5:e5: 79:0c:e0:6c:05:86:2d:94:f4:f9:a9:0b:be:f5:5c: a0:04:44:80:56:91:10:59:ba:aa:d2:90:4c:88:ee: 02:c5:9c:c4:a4:52:35:ed:50:78:30:c4:2d:2e:57: 00:72:8b:6e:76:33:03:22:fe:fd:85:9f:fa:63:54: 7d:e0:76:6b:bc:71:eb:7e:81:38:17:e9:c9:eb:6e: 2e:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:16:58:AB:08:E1:93:2A:F8:03:92:9D:6C:83:85:43:76:FF:22:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a838f9f3-0bc7-3996-9c53-4f361a3393f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 74.125.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:03:47:2d:7b:00:23:80:87:58:b0:53:3d:73:b2:20:1e:c1: d0:3a:fb:c6:b8:ea:7a:7f:56:ac:0e:83:2f:07:f2:88:8a:23: e3:3a:eb:64:49:79:1f:24:88:8e:c5:87:21:27:c6:b2:0b:b0: 33:fb:a6:61:20:e2:ef:47:7f:27:81:a9:13:33:a8:ae:97:a2: 67:49:24:ab:32:b0:fa:2b:a4:23:b2:d4:80:cd:df:c8:bd:67: ea:32:72:a0:6b:c7:f7:01:3e:56:4c:88:ff:2f:34:bd:66:98: 29:28:7e:cf:03:77:3e:2c:4b:c8:0d:43:cc:0b:5a:91:a0:66: ea:42:86:21:b8:a4:a4:29:81:d4:0f:e9:f3:21:60:c1:35:2d: c7:71:37:34:75:b8:3f:ae:3e:4e:7e:bf:52:39:5e:da:ed:87: 5d:a7:18:7d:6c:45:16:b3:97:52:37:75:fd:d3:8c:3c:44:73: 28:b7:3c:65:cd:b4:39:b5:fc:6f:48:45:9d:9d:d9:a7:39:4e: 10:ea:8a:2e:8f:e6:12:71:5f:16:69:97:7c:4c:77:f5:08:f7: 55:9d:0d:4a:7b:cd:ac:99:4b:60:c3:ec:55:cc:7e:d3:7b:bf: 03:76:56:36:df:04:43:9c:b3:66:ea:bb:21:1e:23:52:25:2f: d8:c2:32:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfo9THjyZcS/4E4IEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI0MTExNzE0MDAzOFoXDTI1MDIxNTE0MDAzOFowLzEtMCsGA1UEAxMk MDliMjEzNmMtOTRkNC00ZWZjLTk1MzMtMDRiN2Y0MTA0YzdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQPtleTnsreWAhn8t68fV1KP80mAoGvHFmQ9 gZQxtHEVQy/1OXvQzNVvpPwlExojUwj+Mm5g6urunLk4E5+wOJp3u1JyxOPgK7HV kBo8zcRetQ9pHT4dPqZb5qMsE8GLGIWPxTsnEyrb0W7sqSYRL+wCCz1jmDD+iKUq IITvB/y+6Pq8rYjEtzxLV818+1Q7UIVMxZJ4AwMDfVDQUOf7FMFUb/x/2AgHeuE9 vavDi5l1teV5DOBsBYYtlPT5qQu+9VygBESAVpEQWbqq0pBMiO4CxZzEpFI17VB4 MMQtLlcAcotudjMDIv79hZ/6Y1R94HZrvHHrfoE4F+nJ624uSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKUWWKsI4ZMq+AOSnWyDhUN2/yJkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYTgzOGY5ZjMtMGJjNy0z OTk2LTljNTMtNGYzNjFhMzM5M2YyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASn3oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJoDRy17ACOAh1iwUz1zsiAewdA6+8a46np/VqwOgy8H8oiKI+M662RJ eR8kiI7FhyEnxrILsDP7pmEg4u9HfyeBqRMzqK6XomdJJKsysPorpCOy1IDN38i9 Z+oycqBrx/cBPlZMiP8vNL1mmCkofs8Ddz4sS8gNQ8wLWpGgZupChiG4pKQpgdQP 6fMhYME1LcdxNzR1uD+uPk5+v1I5Xtrth12nGH1sRRazl1I3df3TjDxEcyi3PGXN tDm1/G9IRZ2d2ac5ThDqii6P5hJxXxZpl3xMd/UI91WdDUp7zayZS2DD7FXMftN7 vwN2VjbfBEOcs2bquyEeI1IlL9jCMvU= -----END CERTIFICATE-----Generated at Thu Nov 21 23:40:59 2024 by rpki-client on console-ams.rpki-client.org