$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b1fd15e7-ea90-36f6-ac41-687ccb187d70.roa File: b1fd15e7-ea90-36f6-ac41-687ccb187d70.roa (raw, json) Hash identifier: XjDQCWtrV6+kWApXYenr+R58zz+c0hrodoVbV+cCSSc= Subject key identifier: 09:D7:FD:70:D2:8A:C5:31:EB:A7:38:FA:9A:33:60:20:F5:88:CF:2F Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285847E62A9F50ED9355B28B5ADB80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b1fd15e7-ea90-36f6-ac41-687ccb187d70.roa Signing time: Sat 16 Nov 2024 14:00:41 +0000 ROA not before: Sat 16 Nov 2024 14:00:41 +0000 ROA not after: Fri 14 Feb 2025 14:00:41 +0000 asID: 15169 IP address blocks: 216.58.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e6:2a:9f:50:ed:93:55:b2:8b:5a:db:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Nov 16 14:00:41 2024 GMT Not After : Feb 14 14:00:41 2025 GMT Subject: CN=8ad42836-4059-41a8-afac-a21a32709978 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:c9:77:2e:7b:ab:69:db:25:6d:76:ca:ad:92: c1:19:19:71:22:2b:14:f9:85:30:75:c3:c2:a1:52: b5:b8:a5:d8:d5:ea:4c:d2:c6:47:9b:e3:1b:71:d7: 7d:22:36:af:8a:b2:b4:f1:c4:9f:1c:71:e5:96:d5: ef:6c:0b:ce:ea:b5:0b:4e:7f:94:20:97:e4:35:2d: 5c:f3:0e:8f:88:e4:d1:28:27:32:5d:98:fa:57:ac: 19:a6:9f:10:64:3c:a4:80:e0:83:ff:2e:8b:e8:08: 88:37:b6:3e:36:5c:41:98:37:92:65:86:92:92:65: 3e:ca:14:58:02:a2:4d:b4:64:14:5f:f8:9b:b1:16: 49:b4:22:42:b6:ac:73:3a:e6:ea:e8:f3:1d:7d:a5: 06:a5:ec:3e:a3:36:23:56:9e:18:99:1d:a4:02:2e: 3c:04:1f:b7:20:93:2d:25:3e:fa:66:48:dd:e2:55: e6:fb:d1:6a:fa:a7:0a:bb:93:cc:58:1d:ee:3f:59: cd:3a:ca:23:b7:cf:0e:f7:dd:e6:41:09:ec:9d:8c: 12:c2:60:31:e2:35:14:ec:35:93:03:64:6a:d5:06: 67:e4:89:dd:d1:27:d7:cd:ba:fa:3d:72:7a:90:19: 1c:8e:55:b8:9e:df:6c:0f:f7:88:db:ad:de:12:ca: a2:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:D7:FD:70:D2:8A:C5:31:EB:A7:38:FA:9A:33:60:20:F5:88:CF:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b1fd15e7-ea90-36f6-ac41-687ccb187d70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 216.58.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:d8:ed:e9:47:a5:a3:3e:e7:ae:9d:bf:7d:7e:42:7a:63:45: bb:6d:57:f7:f3:da:69:56:8b:53:7a:46:e4:1a:af:b7:3d:3d: 93:4a:4e:99:ab:aa:8f:26:10:25:13:2f:db:ed:2d:1b:ac:13: 5c:27:26:8e:99:56:69:9f:e4:f8:0c:bb:06:fb:43:d3:17:0d: 65:c2:49:6e:ca:ab:ee:32:b5:e4:0b:4c:a7:7a:5c:7e:50:ce: 43:bd:50:f4:05:82:ef:f9:c9:66:27:dc:a2:c7:3b:0c:70:e3: 8b:d2:4b:b2:2c:e4:de:00:ee:4d:3c:07:a2:7f:e9:86:b6:65: 4e:c9:09:58:65:e1:47:29:fd:d5:45:36:0d:6b:f9:da:12:3e: 49:96:d9:2b:b0:13:78:4e:2b:45:27:30:69:9f:b2:39:b6:ab: 5a:d1:fc:04:52:f6:fd:33:46:23:97:4a:9f:a4:a7:07:86:45: b6:88:31:20:bc:48:aa:00:84:7b:03:c0:c2:f5:3f:9d:5a:f3: 16:fa:d5:8a:e5:a4:64:c8:74:9a:7d:e6:d5:d9:cd:71:e1:a2: e4:f9:d3:5e:3f:e1:62:2f:29:e8:0f:1a:b1:1e:9e:40:77:5d: ff:12:d4:0c:dc:d2:a8:dc:35:b6:27:b6:bd:93:1c:64:4b:6c: ed:e3:d0:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKp9Q7ZNVsota24AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk OGFkNDI4MzYtNDA1OS00MWE4LWFmYWMtYTIxYTMyNzA5OTc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhcl3LnuradslbXbKrZLBGRlxIisU+YUwdcPC oVK1uKXY1epM0sZHm+Mbcdd9IjavirK08cSfHHHlltXvbAvO6rULTn+UIJfkNS1c 8w6PiOTRKCcyXZj6V6wZpp8QZDykgOCD/y6L6AiIN7Y+NlxBmDeSZYaSkmU+yhRY AqJNtGQUX/ibsRZJtCJCtqxzOubq6PMdfaUGpew+ozYjVp4YmR2kAi48BB+3IJMt JT76Zkjd4lXm+9Fq+qcKu5PMWB3uP1nNOsojt88O993mQQnsnYwSwmAx4jUU7DWT A2Rq1QZn5Ind0SfXzbr6PXJ6kBkcjlW4nt9sD/eI263eEsqi6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAnX/XDSisUx66c4+pozYCD1iM8vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYjFmZDE1ZTctZWE5MC0z NmY2LWFjNDEtNjg3Y2NiMTg3ZDcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2DrTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAnY7elHpaM+566dv31+QnpjRbttV/fz2mlWi1N6RuQar7c9PZNKTpmr qo8mECUTL9vtLRusE1wnJo6ZVmmf5PgMuwb7Q9MXDWXCSW7Kq+4yteQLTKd6XH5Q zkO9UPQFgu/5yWYn3KLHOwxw44vSS7Is5N4A7k08B6J/6Ya2ZU7JCVhl4Ucp/dVF Ng1r+doSPkmW2SuwE3hOK0UnMGmfsjm2q1rR/ARS9v0zRiOXSp+kpweGRbaIMSC8 SKoAhHsDwML1P51a8xb61YrlpGTIdJp95tXZzXHhouT5014/4WIvKegPGrEenkB3 Xf8S1Azc0qjcNbYntr2THGRLbO3j0Nk= -----END CERTIFICATE-----Generated at Fri Nov 22 00:25:19 2024 by rpki-client on console-fra.rpki-client.org