$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d8fec74f-a0be-3c2e-b675-d05ed7e6434a.roa File: d8fec74f-a0be-3c2e-b675-d05ed7e6434a.roa (raw, json) Hash identifier: Ryc2/v4fy3wE0Y+3It/DdODgyljW+iu1BaK7hxVRA0s= Subject key identifier: 16:37:82:F0:88:2D:1D:B5:32:A8:77:74:A6:5A:9F:61:CA:7B:C5:17 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285847E62B38C3C1F1390CD9967480 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d8fec74f-a0be-3c2e-b675-d05ed7e6434a.roa Signing time: Sat 16 Nov 2024 14:00:41 +0000 ROA not before: Sat 16 Nov 2024 14:00:41 +0000 ROA not after: Fri 14 Feb 2025 14:00:41 +0000 asID: 15169 IP address blocks: 216.58.204.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e6:2b:38:c3:c1:f1:39:0c:d9:96:74:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Nov 16 14:00:41 2024 GMT Not After : Feb 14 14:00:41 2025 GMT Subject: CN=627bf5fb-f208-445e-973e-800d389e9a3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:95:e0:bb:49:be:10:49:37:34:bf:b7:b3:4f: 27:ac:7c:f7:4b:05:93:fb:76:d7:34:d4:94:ef:9c: 84:ff:6c:63:bf:a8:f2:63:ad:21:4d:f8:a4:fc:20: e3:35:c7:1b:52:b0:e4:00:90:5c:0c:04:b8:04:c2: df:80:10:17:22:d7:c9:14:fd:9d:f4:3a:7f:7b:6c: 39:c5:55:28:4e:69:d6:92:bd:c6:93:5d:2f:36:8c: 32:92:b6:76:47:d9:6d:9f:f6:9b:62:7e:5e:7f:0a: d7:8e:75:80:ea:2e:91:6a:0f:6a:6d:f0:1d:9a:a1: 9a:9d:6a:9a:f8:a1:3e:98:24:7a:77:0d:b6:e6:1d: 06:84:b0:c2:8e:ae:f6:04:78:a1:13:59:c3:35:0f: 82:ed:fe:27:b5:04:83:0e:a1:6a:e0:54:96:dc:28: 6f:80:03:cb:5e:37:1f:a3:28:78:f3:46:9c:4c:4b: d6:78:6a:96:3d:a6:f3:c3:98:15:70:b1:12:8d:4a: 09:18:4e:c7:e9:7a:ed:d7:2b:24:f9:be:96:f7:01: fb:2b:22:8b:0b:fa:ec:98:2c:61:25:42:50:4c:19: 3b:92:37:1e:98:5c:b4:46:84:a3:92:18:0b:54:a4: 07:4d:1f:31:c2:be:3a:01:2f:27:5f:b8:1f:68:8d: 44:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:37:82:F0:88:2D:1D:B5:32:A8:77:74:A6:5A:9F:61:CA:7B:C5:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d8fec74f-a0be-3c2e-b675-d05ed7e6434a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 216.58.204.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:94:76:e3:a3:b1:29:65:23:8a:e8:59:49:98:9a:66:88:83: 65:cc:18:62:35:26:ba:a0:1d:0d:4a:1e:97:7e:78:24:13:e9: 70:88:93:98:e0:8c:12:c8:75:60:ca:17:84:01:c6:0d:c9:a3: d8:7c:b6:98:25:f5:97:09:9b:53:5b:f7:23:8e:96:40:cb:c4: 73:eb:b0:75:19:3f:a0:4c:56:d0:ea:03:39:df:ca:de:15:7b: 14:00:1b:13:f6:20:bd:80:c6:15:6b:41:80:6a:5b:93:45:85: 23:85:82:d1:20:06:18:ce:cb:07:36:a5:39:f2:db:78:64:1c: bb:c2:47:01:11:66:4c:d6:cb:51:9d:70:ba:b5:78:ab:86:68: fa:20:3b:f6:a6:0e:95:f7:e1:96:f0:ed:73:87:c5:fa:89:d8: 65:16:37:42:1d:85:5a:e3:da:86:8d:06:23:3b:ef:0b:6c:79: ae:a8:46:a4:1b:59:06:5a:9f:ff:a3:79:b5:6d:13:f3:5c:75: 92:33:52:b9:65:61:24:58:14:0c:c4:96:18:23:3d:a4:7b:ca: 1d:0b:04:08:c4:26:9c:c1:da:92:93:79:77:8d:30:b4:7d:d6: aa:67:4a:97:a5:50:25:30:c3:b8:ac:d4:d8:28:70:42:7c:32: 39:a8:c7:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKzjDwfE5DNmWdIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk NjI3YmY1ZmItZjIwOC00NDVlLTk3M2UtODAwZDM4OWU5YTNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZXgu0m+EEk3NL+3s08nrHz3SwWT+3bXNNSU 75yE/2xjv6jyY60hTfik/CDjNccbUrDkAJBcDAS4BMLfgBAXItfJFP2d9Dp/e2w5 xVUoTmnWkr3Gk10vNowykrZ2R9ltn/abYn5efwrXjnWA6i6Rag9qbfAdmqGanWqa +KE+mCR6dw225h0GhLDCjq72BHihE1nDNQ+C7f4ntQSDDqFq4FSW3ChvgAPLXjcf oyh480acTEvWeGqWPabzw5gVcLESjUoJGE7H6Xrt1ysk+b6W9wH7KyKLC/rsmCxh JUJQTBk7kjcemFy0RoSjkhgLVKQHTR8xwr46AS8nX7gfaI1EkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBY3gvCILR21Mqh3dKZan2HKe8UXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZDhmZWM3NGYtYTBiZS0z YzJlLWI2NzUtZDA1ZWQ3ZTY0MzRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2DrMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHqUduOjsSllI4roWUmYmmaIg2XMGGI1JrqgHQ1KHpd+eCQT6XCIk5jg jBLIdWDKF4QBxg3Jo9h8tpgl9ZcJm1Nb9yOOlkDLxHPrsHUZP6BMVtDqAznfyt4V exQAGxP2IL2AxhVrQYBqW5NFhSOFgtEgBhjOywc2pTny23hkHLvCRwERZkzWy1Gd cLq1eKuGaPogO/amDpX34Zbw7XOHxfqJ2GUWN0IdhVrj2oaNBiM77wtsea6oRqQb WQZan/+jebVtE/NcdZIzUrllYSRYFAzElhgjPaR7yh0LBAjEJpzB2pKTeXeNMLR9 1qpnSpelUCUww7is1NgocEJ8Mjmox6c= -----END CERTIFICATE-----Generated at Sun Nov 24 23:59:17 2024 by rpki-client on console-fra.rpki-client.org