$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/df2e2f0f-0ef1-3b15-8474-16e7683a8f30.roa File: df2e2f0f-0ef1-3b15-8474-16e7683a8f30.roa (raw, json) Hash identifier: 9I9+Q1/C7o2iRVMdB2wxtCwblMKZYahSOuzXwk4z6oc= Subject key identifier: E6:14:5C:6B:F3:AA:A0:F8:B8:CF:81:FF:25:32:2E:54:33:6A:66:1D Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285847E8F4FF5BA37652F03F6CE200 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/df2e2f0f-0ef1-3b15-8474-16e7683a8f30.roa Signing time: Sun 17 Nov 2024 14:00:38 +0000 ROA not before: Sun 17 Nov 2024 14:00:38 +0000 ROA not after: Sat 15 Feb 2025 14:00:38 +0000 asID: 15169 IP address blocks: 74.125.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e8:f4:ff:5b:a3:76:52:f0:3f:6c:e2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Nov 17 14:00:38 2024 GMT Not After : Feb 15 14:00:38 2025 GMT Subject: CN=5af628c5-9d76-4a12-b5ea-0859c416b194 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:01:61:6c:0b:96:da:d9:af:f6:00:dc:86:a3: a9:ed:11:7e:bc:47:9e:5e:8d:30:a7:25:57:34:df: 5b:5d:d4:3e:c1:4c:7b:d6:51:2a:b8:2c:5d:4b:c3: 8f:00:38:49:17:00:3c:4a:07:1e:1c:ea:93:44:6f: 38:8e:a3:36:d8:ff:12:b1:39:25:37:ab:c7:24:b1: 47:c3:e6:f8:81:0b:aa:09:05:76:a6:5f:0b:6e:e0: df:15:d3:68:e1:4b:5f:ad:ce:18:c7:a1:53:1a:f3: f2:89:32:39:df:5e:ca:fe:97:d2:ec:fa:8c:87:73: 77:c7:b6:00:c9:b8:4d:80:0f:27:38:2d:a6:3c:97: af:6f:e7:d1:ba:c6:c6:e6:f2:8c:70:5c:34:a4:77: 47:85:e3:2c:23:58:ee:9e:a1:83:54:e3:1f:e7:c1: c0:80:cb:19:38:ee:01:e7:06:8a:5a:4f:ec:59:b9: 6d:23:8a:dd:bc:ef:56:fb:19:31:e6:f8:c9:4c:7f: 44:0b:c8:0e:ff:a3:50:8b:18:3c:72:e9:b2:8f:78: 64:59:3e:6e:26:8c:a0:2f:9a:29:c7:92:81:56:71: 05:31:d1:94:34:2b:91:96:65:a0:9c:a3:14:c3:b6: 84:cc:ea:33:aa:ad:38:83:8c:52:42:a0:ed:4f:bd: 35:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:14:5C:6B:F3:AA:A0:F8:B8:CF:81:FF:25:32:2E:54:33:6A:66:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/df2e2f0f-0ef1-3b15-8474-16e7683a8f30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 74.125.198.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:39:4f:b2:9a:5c:dd:ed:12:65:f9:2e:43:76:20:82:b8:92: f5:d5:f0:7d:0b:79:0f:13:d3:72:18:15:c4:15:39:1a:5e:8e: c3:43:e7:3b:f2:37:3e:cc:93:92:64:ce:84:0d:f1:ed:5d:83: bf:a4:9c:45:83:e0:cc:eb:2a:cd:b5:95:4d:0d:9f:31:d4:ef: 1c:36:6f:78:cc:80:32:e1:fb:e0:9b:6f:51:cd:0f:cd:41:01: e0:61:72:95:46:da:65:66:88:74:d9:5d:d8:db:8d:f1:eb:65: aa:72:a7:e6:9d:9f:2c:7d:c4:70:2e:f4:d9:b0:5a:4f:ce:68: c3:d9:17:e3:cf:12:a6:3e:17:ed:90:d2:53:d0:59:2e:d2:ee: 09:47:34:26:c7:a1:8a:13:2e:2f:ce:47:f0:f1:a9:09:a0:40: 06:73:d4:60:cd:71:df:fd:63:3f:29:5e:c6:5b:60:e0:89:09: de:ca:8a:c1:9f:e6:3b:5a:03:23:d5:fa:ae:e5:ef:75:05:d6: 78:1e:22:3d:6f:30:9c:66:f4:87:48:2c:9c:73:5a:8f:d3:d1: 01:1a:e7:1a:e6:f1:7a:f4:87:d7:42:02:9e:33:81:e4:c9:4a: 6b:da:da:cd:80:17:b4:d4:d8:a0:0d:90:6b:67:53:29:83:65: 23:75:f2:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfo9P9bo3ZS8D9s4gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI0MTExNzE0MDAzOFoXDTI1MDIxNTE0MDAzOFowLzEtMCsGA1UEAxMk NWFmNjI4YzUtOWQ3Ni00YTEyLWI1ZWEtMDg1OWM0MTZiMTk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygFhbAuW2tmv9gDchqOp7RF+vEeeXo0wpyVX NN9bXdQ+wUx71lEquCxdS8OPADhJFwA8SgceHOqTRG84jqM22P8SsTklN6vHJLFH w+b4gQuqCQV2pl8LbuDfFdNo4Utfrc4Yx6FTGvPyiTI5317K/pfS7PqMh3N3x7YA ybhNgA8nOC2mPJevb+fRusbG5vKMcFw0pHdHheMsI1junqGDVOMf58HAgMsZOO4B 5waKWk/sWbltI4rdvO9W+xkx5vjJTH9EC8gO/6NQixg8cumyj3hkWT5uJoygL5op x5KBVnEFMdGUNCuRlmWgnKMUw7aEzOozqq04g4xSQqDtT7011QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOYUXGvzqqD4uM+B/yUyLlQzamYdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZGYyZTJmMGYtMGVmMS0z YjE1LTg0NzQtMTZlNzY4M2E4ZjMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASn3GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHs5T7KaXN3tEmX5LkN2IIK4kvXV8H0LeQ8T03IYFcQVORpejsND5zvy Nz7Mk5JkzoQN8e1dg7+knEWD4MzrKs21lU0NnzHU7xw2b3jMgDLh++Cbb1HND81B AeBhcpVG2mVmiHTZXdjbjfHrZapyp+adnyx9xHAu9NmwWk/OaMPZF+PPEqY+F+2Q 0lPQWS7S7glHNCbHoYoTLi/OR/DxqQmgQAZz1GDNcd/9Yz8pXsZbYOCJCd7KisGf 5jtaAyPV+q7l73UF1ngeIj1vMJxm9IdILJxzWo/T0QEa5xrm8Xr0h9dCAp4zgeTJ Smva2s2AF7TU2KANkGtnUymDZSN18hA= -----END CERTIFICATE-----Generated at Fri Nov 22 00:25:21 2024 by rpki-client on console-fra.rpki-client.org