$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bf0ca975-c303-3fe2-acd5-fa91d979f203.roa File: bf0ca975-c303-3fe2-acd5-fa91d979f203.roa (raw, json) Hash identifier: ESq9RMeUPCZHXHoPiJ++9A01gB8kYGHxHDIJiISrxaY= Subject key identifier: 34:57:DE:E3:40:6A:DD:94:1F:3A:D8:5D:57:AC:E4:57:83:30:D9:F5 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F432858471E7072BFB87D2103BE852B00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bf0ca975-c303-3fe2-acd5-fa91d979f203.roa Signing time: Fri 06 Sep 2024 01:00:31 +0000 ROA not before: Fri 06 Sep 2024 01:00:31 +0000 ROA not after: Thu 05 Dec 2024 02:00:31 +0000 asID: 15169 IP address blocks: 74.125.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Sep 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:1e:70:72:bf:b8:7d:21:03:be:85:2b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 6 01:00:31 2024 GMT Not After : Dec 5 02:00:31 2024 GMT Subject: CN=5eb0b5a1-4a0c-4b35-8d8e-678e98ae6448 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:3d:bd:00:40:cb:35:a5:56:fb:b6:c7:ae:cc: 5c:4d:90:1f:3e:2d:5e:20:e8:bc:f6:e9:e8:ec:41: 36:04:a7:f9:1d:11:77:3a:77:68:9e:7e:45:92:72: 37:20:98:a8:91:cf:a7:64:24:f8:66:a1:bd:22:6a: 69:65:9c:94:54:3f:6d:42:6b:b2:5d:69:a7:d9:24: 7c:d8:84:1c:ad:7c:57:13:0d:5d:4a:e3:0e:61:65: f1:55:4a:dd:cd:ed:85:c5:76:72:9f:6d:01:6c:7b: ca:95:3c:c0:1f:09:b2:e1:58:53:93:27:33:3c:f8: 6c:22:65:17:3a:c8:04:9b:2e:f1:cb:41:3c:e0:61: 2d:61:24:30:4f:14:f7:a8:15:fc:cd:ac:0f:03:e5: 91:49:4a:5d:6e:0a:80:89:aa:01:14:52:fb:a9:c6: 1e:10:b4:65:99:a1:06:bb:b4:07:79:87:e7:3c:a3: 2e:75:90:69:18:6b:89:ce:0e:2d:63:0b:69:9c:6a: 1f:74:7a:60:e6:04:f3:29:84:49:6a:ac:40:3b:1b: 90:a6:c3:b9:e5:22:13:9d:06:d8:01:08:3b:0c:98: 84:ba:fa:31:4d:1d:31:95:0b:c2:21:ab:f0:53:a6: 2f:87:a9:da:ac:61:b5:f9:04:fd:a3:df:35:3d:16: 3a:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:57:DE:E3:40:6A:DD:94:1F:3A:D8:5D:57:AC:E4:57:83:30:D9:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bf0ca975-c303-3fe2-acd5-fa91d979f203.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 74.125.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:ae:a7:23:0f:ea:70:8f:80:8a:f8:3a:37:79:2a:5b:64:72: af:fe:e3:82:6c:87:00:b4:da:da:fd:08:7e:13:f0:1b:e8:96: c2:5b:60:51:0e:85:7b:10:a0:85:61:5d:da:0c:47:83:57:5a: d9:8c:eb:d7:d0:8b:34:eb:19:91:9f:cd:69:4a:19:53:2c:2b: 80:fd:87:32:66:85:dd:31:5b:d7:8e:25:c1:a8:1b:18:5e:77: 22:cc:23:34:02:3b:8d:ef:8f:89:c6:92:f7:64:a5:15:fb:ae: 43:39:e0:3c:fb:05:51:ea:49:39:94:36:d2:f5:1f:ad:cd:55: dc:56:1f:ba:78:e7:d4:3e:9c:21:4a:43:8e:90:5b:9a:02:98: 0a:eb:b7:3e:89:c9:3c:04:b2:d5:46:a5:6e:fd:b6:8d:a9:fa: 46:82:67:5f:43:ff:ec:78:5a:d7:d8:da:da:49:47:22:ab:47: bf:a7:e0:be:52:87:ee:54:5c:48:bf:2e:00:5b:5a:4f:1b:1e: f7:28:77:aa:da:05:0a:91:30:38:e1:41:71:43:d4:07:f3:01: e1:e8:96:d1:15:66:d8:94:6b:e3:07:62:50:f3:56:43:ce:f5: 30:b3:b8:ff:68:8a:d4:4f:73:5c:4b:5e:36:61:54:eb:f5:f6: 57:7c:e1:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcecHK/uH0hA76FKwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI0MDkwNjAxMDAzMVoXDTI0MTIwNTAyMDAzMVowLzEtMCsGA1UEAxMk NWViMGI1YTEtNGEwYy00YjM1LThkOGUtNjc4ZTk4YWU2NDQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqT29AEDLNaVW+7bHrsxcTZAfPi1eIOi89uno 7EE2BKf5HRF3Ondonn5FknI3IJiokc+nZCT4ZqG9ImppZZyUVD9tQmuyXWmn2SR8 2IQcrXxXEw1dSuMOYWXxVUrdze2FxXZyn20BbHvKlTzAHwmy4VhTkyczPPhsImUX OsgEmy7xy0E84GEtYSQwTxT3qBX8zawPA+WRSUpdbgqAiaoBFFL7qcYeELRlmaEG u7QHeYfnPKMudZBpGGuJzg4tYwtpnGofdHpg5gTzKYRJaqxAOxuQpsO55SITnQbY AQg7DJiEuvoxTR0xlQvCIavwU6Yvh6narGG1+QT9o981PRY6awIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDRX3uNAat2UHzrYXVes5FeDMNn1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYmYwY2E5NzUtYzMwMy0z ZmUyLWFjZDUtZmE5MWQ5NzlmMjAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASn19MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKiupyMP6nCPgIr4Ojd5Kltkcq/+44JshwC02tr9CH4T8BvolsJbYFEO hXsQoIVhXdoMR4NXWtmM69fQizTrGZGfzWlKGVMsK4D9hzJmhd0xW9eOJcGoGxhe dyLMIzQCO43vj4nGkvdkpRX7rkM54Dz7BVHqSTmUNtL1H63NVdxWH7p459Q+nCFK Q46QW5oCmArrtz6JyTwEstVGpW79to2p+kaCZ19D/+x4WtfY2tpJRyKrR7+n4L5S h+5UXEi/LgBbWk8bHvcod6raBQqRMDjhQXFD1AfzAeHoltEVZtiUa+MHYlDzVkPO 9TCzuP9oitRPc1xLXjZhVOv19ld84SI= -----END CERTIFICATE-----Generated at Sat Sep 7 22:45:09 2024 by rpki-client on console-ams.rpki-client.org