$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ba633f42-5294-38fe-a1b2-d61121b8e9f5.roa File: ba633f42-5294-38fe-a1b2-d61121b8e9f5.roa (raw, json) Hash identifier: UmyNO5qE7aoe27X5VLwS366EPHfl6Eo8zQjzOKrZ4EY= Subject key identifier: CE:DB:BD:58:82:20:2F:43:25:A6:88:E3:EE:34:AF:12:F2:89:8B:31 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285847E8F53ECFAF1DC83EB6E25FC0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ba633f42-5294-38fe-a1b2-d61121b8e9f5.roa Signing time: Sun 17 Nov 2024 14:00:38 +0000 ROA not before: Sun 17 Nov 2024 14:00:38 +0000 ROA not after: Sat 15 Feb 2025 14:00:38 +0000 asID: 15169 IP address blocks: 74.125.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e8:f5:3e:cf:af:1d:c8:3e:b6:e2:5f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Nov 17 14:00:38 2024 GMT Not After : Feb 15 14:00:38 2025 GMT Subject: CN=1e3cbb11-507e-4705-8e09-762405c65efd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:9b:1a:01:5d:46:15:82:b8:74:c5:32:68:59: f9:c1:eb:b5:22:08:02:aa:98:7f:b1:a7:d7:8a:06: d4:d4:89:3f:06:23:fd:8f:2c:bc:ca:bb:94:43:6d: b3:b6:31:a5:36:3f:73:c9:4a:c8:e9:83:7d:da:ce: 31:7c:8b:72:9e:9b:98:49:59:1f:82:44:d8:44:d8: 0a:e0:bc:b5:5c:3b:2c:32:24:39:9b:01:48:00:4a: e1:14:b7:69:80:fd:e6:fe:fa:17:84:28:1e:f6:68: b4:e1:e9:f4:fb:1d:d8:c2:8b:c7:39:58:f0:ac:cf: 42:d5:bc:b5:c0:71:7f:77:4b:f2:cc:3c:cc:9a:50: ed:1b:5d:c6:9b:09:9e:9f:8f:6b:a3:80:df:f0:cd: d2:1e:0b:f5:cd:62:55:51:6c:d5:e9:85:53:6f:1a: c9:3e:00:c8:7c:a0:35:58:f2:c0:6d:9f:42:21:47: f3:54:93:bd:21:4c:38:62:ae:1b:2a:60:14:0c:1f: 12:f2:55:bc:a3:80:22:df:70:a2:c4:da:8b:a1:63: 58:c3:2a:81:ae:bd:e7:12:22:cf:4e:cb:75:f0:54: be:f5:74:fa:57:ad:15:5f:2d:a3:75:88:99:dc:2d: 1c:96:f8:12:26:12:a5:3c:2a:29:91:1c:a9:f2:7c: 35:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:DB:BD:58:82:20:2F:43:25:A6:88:E3:EE:34:AF:12:F2:89:8B:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ba633f42-5294-38fe-a1b2-d61121b8e9f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 74.125.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:8f:66:85:6f:34:b9:ea:d9:1b:07:83:f4:2b:ff:92:9f:c5: cf:4d:57:d9:d5:e4:4f:ec:47:cb:23:c8:05:0c:87:18:7d:f9: 04:3f:a8:11:d2:20:db:1a:1a:db:c1:c3:81:1e:57:06:45:b0: 9f:58:ae:73:97:b2:1e:78:38:a8:9a:d0:9e:54:2c:45:84:2b: 3f:51:f6:4b:5c:06:fd:9b:8e:11:81:ad:16:72:51:23:0b:0f: fd:22:ea:f8:49:c6:fb:54:71:5d:25:96:54:bd:1f:a0:af:6c: 2b:f4:98:83:e9:0c:16:96:11:b4:cf:e7:50:9a:d9:63:9f:16: 02:82:5b:11:c4:19:ef:1a:a3:7d:a9:67:32:03:a0:8f:da:0d: 72:ff:9e:63:9a:ad:f9:06:ee:e8:05:a2:b4:3c:7c:cd:dc:1c: 27:16:7f:1a:0c:28:b6:68:60:f5:45:b6:41:82:bd:34:5e:e8: a7:0a:85:74:84:05:3c:59:2c:1e:a6:71:ac:1c:71:88:be:c1: 56:99:30:33:4c:1b:6f:03:f0:f2:73:57:e6:76:9d:c3:ff:30: af:f5:62:17:3a:7f:12:1d:59:d8:2f:d2:df:53:d5:b4:dc:78: 4b:5a:54:14:2f:bf:b4:95:cb:c1:3c:41:cf:7c:fa:fa:74:e7: d8:ff:ff:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfo9T7Prx3IPrbiX8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI0MTExNzE0MDAzOFoXDTI1MDIxNTE0MDAzOFowLzEtMCsGA1UEAxMk MWUzY2JiMTEtNTA3ZS00NzA1LThlMDktNzYyNDA1YzY1ZWZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJsaAV1GFYK4dMUyaFn5weu1IggCqph/safX igbU1Ik/BiP9jyy8yruUQ22ztjGlNj9zyUrI6YN92s4xfItynpuYSVkfgkTYRNgK 4Ly1XDssMiQ5mwFIAErhFLdpgP3m/voXhCge9mi04en0+x3YwovHOVjwrM9C1by1 wHF/d0vyzDzMmlDtG13Gmwmen49ro4Df8M3SHgv1zWJVUWzV6YVTbxrJPgDIfKA1 WPLAbZ9CIUfzVJO9IUw4Yq4bKmAUDB8S8lW8o4Ai33CixNqLoWNYwyqBrr3nEiLP Tst18FS+9XT6V60VXy2jdYiZ3C0clvgSJhKlPCopkRyp8nw1IwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM7bvViCIC9DJaaI4+40rxLyiYsxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYmE2MzNmNDItNTI5NC0z OGZlLWExYjItZDYxMTIxYjhlOWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASn3qMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFOPZoVvNLnq2RsHg/Qr/5Kfxc9NV9nV5E/sR8sjyAUMhxh9+QQ/qBHS INsaGtvBw4EeVwZFsJ9YrnOXsh54OKia0J5ULEWEKz9R9ktcBv2bjhGBrRZyUSML D/0i6vhJxvtUcV0lllS9H6CvbCv0mIPpDBaWEbTP51Ca2WOfFgKCWxHEGe8ao32p ZzIDoI/aDXL/nmOarfkG7ugForQ8fM3cHCcWfxoMKLZoYPVFtkGCvTRe6KcKhXSE BTxZLB6mcawccYi+wVaZMDNMG28D8PJzV+Z2ncP/MK/1Yhc6fxIdWdgv0t9T1bTc eEtaVBQvv7SVy8E8Qc98+vp059j//zE= -----END CERTIFICATE-----Generated at Sun Nov 24 23:10:15 2024 by rpki-client on console-ams.rpki-client.org