$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c9b88a46-9849-3f2e-a300-a5026564c30f.roa File: c9b88a46-9849-3f2e-a300-a5026564c30f.roa (raw, json) Hash identifier: ODM5urtjNJYJKlk2GGphSXoyrUkXlsWvp0P6WNkc+XA= Subject key identifier: 16:22:11:24:82:18:85:C4:0F:63:66:95:C6:BF:1B:C0:B3:62:D0:E9 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285847E62B5020332621DA6BAFFF80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c9b88a46-9849-3f2e-a300-a5026564c30f.roa Signing time: Sat 16 Nov 2024 14:00:41 +0000 ROA not before: Sat 16 Nov 2024 14:00:41 +0000 ROA not after: Fri 14 Feb 2025 14:00:41 +0000 asID: 15169 IP address blocks: 216.239.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e6:2b:50:20:33:26:21:da:6b:af:ff:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Nov 16 14:00:41 2024 GMT Not After : Feb 14 14:00:41 2025 GMT Subject: CN=bb726028-bc35-4470-9c9b-b745a61fd33f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:07:21:7d:89:f2:f4:03:e0:f9:0f:7b:c6:5d: bb:6e:b0:e6:be:01:cd:40:3c:c8:77:82:07:bf:af: 8e:9f:78:39:7a:1d:83:98:ec:b3:46:1d:4c:60:d1: f8:0a:e5:78:88:69:ba:05:51:29:c0:60:7c:d6:8f: 33:c0:39:b7:c1:6f:f7:6a:4d:65:6f:e0:a4:da:c0: cf:07:fe:04:2b:05:81:6a:56:8a:e5:1d:78:45:3e: 4f:53:07:bc:8e:37:e7:56:e3:e8:26:ff:6a:6f:13: 0e:95:5e:56:bd:ed:11:9c:7c:61:7c:3f:2b:ac:1b: 0f:06:42:72:3c:1d:e1:41:1c:0c:7d:67:ef:32:75: ac:64:8e:32:6a:c2:4f:50:44:92:a5:89:af:57:9a: 51:c2:3c:76:c6:c8:90:e1:a8:46:a2:c8:0f:37:9e: fe:fc:06:f0:b0:51:4c:d7:ea:a0:13:1e:19:23:58: 12:e1:f3:06:11:66:b3:12:84:41:1d:ff:21:ed:52: f5:e0:fc:99:69:6b:35:2e:af:9c:a2:16:81:3a:e5: 79:60:03:ae:c3:4b:a5:1b:a7:b2:de:29:3e:5a:a6: 82:7d:b2:71:76:23:6a:bd:f7:09:0f:48:6b:91:c6: 04:0c:f3:82:a3:9b:48:7f:92:cc:69:b6:b1:fb:7b: 61:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:22:11:24:82:18:85:C4:0F:63:66:95:C6:BF:1B:C0:B3:62:D0:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c9b88a46-9849-3f2e-a300-a5026564c30f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 216.239.34.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:45:50:e6:3f:65:eb:6f:e2:9d:82:60:97:ea:12:0a:41:ee: 04:3c:89:55:91:e4:38:68:e1:f7:c0:61:79:b9:cd:e1:5d:71: e1:15:ad:69:1b:f4:a7:1b:8e:c3:a5:58:d5:50:2d:8a:5e:e4: 8e:2c:e0:a3:8e:93:8c:02:55:98:7b:4d:2a:c2:7c:5b:ed:33: ae:3c:39:01:4b:8b:8a:9e:6e:0c:7f:95:63:67:af:f2:29:73: 14:25:28:ea:72:04:37:4e:38:17:de:79:ff:9e:48:98:70:7a: 5f:d5:04:0c:f4:5b:0f:4e:dd:4f:0f:c4:9e:bc:80:dc:29:7f: 2f:2d:e7:f5:11:0d:97:a5:f0:97:c8:fb:28:54:7b:f6:fa:71: af:ac:85:59:7d:01:7b:b9:d2:ce:d3:a5:7e:83:05:19:3c:9c: f0:29:7d:a3:ab:58:84:e4:59:58:60:61:73:e9:cd:cd:ee:06: 9f:6d:a7:d6:8a:45:01:87:4a:4e:fe:2b:18:ac:2f:5b:75:e4: 0e:8b:1b:0b:cb:13:8a:94:f2:67:e3:b9:d4:7d:b1:0e:86:b3: 3e:1a:cb:d2:7c:16:60:98:d9:70:c9:71:46:95:8b:43:6d:de: f1:c4:2b:72:ac:d4:89:19:f8:9d:0a:36:d3:26:50:40:de:97: 12:4d:3d:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmK1AgMyYh2muv/4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk YmI3MjYwMjgtYmMzNS00NDcwLTljOWItYjc0NWE2MWZkMzNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQchfYny9APg+Q97xl27brDmvgHNQDzId4IH v6+On3g5eh2DmOyzRh1MYNH4CuV4iGm6BVEpwGB81o8zwDm3wW/3ak1lb+Ck2sDP B/4EKwWBalaK5R14RT5PUwe8jjfnVuPoJv9qbxMOlV5Wve0RnHxhfD8rrBsPBkJy PB3hQRwMfWfvMnWsZI4yasJPUESSpYmvV5pRwjx2xsiQ4ahGosgPN57+/AbwsFFM 1+qgEx4ZI1gS4fMGEWazEoRBHf8h7VL14PyZaWs1Lq+cohaBOuV5YAOuw0ulG6ey 3ik+WqaCfbJxdiNqvfcJD0hrkcYEDPOCo5tIf5LMabax+3thNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBYiESSCGIXED2Nmlca/G8CzYtDpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYzliODhhNDYtOTg0OS0z ZjJlLWEzMDAtYTUwMjY1NjRjMzBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2O8iMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJhFUOY/Zetv4p2CYJfqEgpB7gQ8iVWR5Dho4ffAYXm5zeFdceEVrWkb 9KcbjsOlWNVQLYpe5I4s4KOOk4wCVZh7TSrCfFvtM648OQFLi4qebgx/lWNnr/Ip cxQlKOpyBDdOOBfeef+eSJhwel/VBAz0Ww9O3U8PxJ68gNwpfy8t5/URDZel8JfI +yhUe/b6ca+shVl9AXu50s7TpX6DBRk8nPApfaOrWITkWVhgYXPpzc3uBp9tp9aK RQGHSk7+KxisL1t15A6LGwvLE4qU8mfjudR9sQ6Gsz4ay9J8FmCY2XDJcUaVi0Nt 3vHEK3Ks1IkZ+J0KNtMmUEDelxJNPYE= -----END CERTIFICATE-----Generated at Fri Nov 22 00:25:20 2024 by rpki-client on console-fra.rpki-client.org