$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dff0fcf6-3e94-3def-9e77-27e00efd6b0e.roa File: dff0fcf6-3e94-3def-9e77-27e00efd6b0e.roa (raw, json) Hash identifier: bW3DdtaUPzRymAzmaCgnfiMqEnZvtrhbsNOt0onzPOk= Subject key identifier: 50:79:0E:B3:8B:9D:BA:F0:89:9E:5E:7F:53:9A:39:CF:F8:40:BB:17 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285847055149C43584ABDE3D9EDA00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dff0fcf6-3e94-3def-9e77-27e00efd6b0e.roa Signing time: Wed 28 Aug 2024 01:00:31 +0000 ROA not before: Wed 28 Aug 2024 01:00:31 +0000 ROA not after: Tue 26 Nov 2024 02:00:31 +0000 asID: 15169 IP address blocks: 216.58.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Sep 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:05:51:49:c4:35:84:ab:de:3d:9e:da:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Aug 28 01:00:31 2024 GMT Not After : Nov 26 02:00:31 2024 GMT Subject: CN=352da1b2-6b1d-4983-a608-f0987c93be81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:b3:dd:8f:a0:66:b5:8b:fd:25:fc:1d:7f:9f: 1c:c0:57:a1:1b:4c:4a:c1:1e:7f:6b:2e:b4:c4:c5: a8:3d:ec:98:55:d6:ff:47:39:ef:06:65:c1:d9:1a: 53:39:0e:e1:f5:33:7c:de:e4:b9:57:5e:c6:b4:68: 84:53:71:bf:02:f1:12:09:28:72:96:8f:4c:2d:91: 2e:62:a5:73:cf:16:ce:0f:08:88:98:ac:cc:a6:4f: 3e:c7:5a:b0:a0:8e:5e:f4:8d:d3:44:2f:1b:99:87: c6:c5:38:c0:5a:ba:14:88:76:53:91:17:34:0a:64: 5f:a5:67:22:73:6a:0c:39:59:3c:03:7e:de:5c:bc: 6b:c2:16:c0:f5:ab:78:eb:ce:3c:96:fa:6e:2a:33: 71:12:b6:a1:38:f4:40:17:5a:f8:d8:df:f2:60:51: 8f:b2:ad:cd:e7:4a:90:9f:25:dd:f3:c9:b0:e9:ad: 89:89:ea:d3:a1:ed:8d:b1:b6:76:c8:47:41:89:aa: ab:62:50:64:a4:42:c8:20:88:e7:2e:5a:b1:8b:92: 6c:47:ee:29:e0:87:0d:4b:72:0d:0d:1e:3c:4d:92: a3:8b:c4:24:d9:1b:24:66:69:0d:d4:f6:73:e5:85: ab:76:4b:d6:c7:62:bd:1b:14:d7:9c:12:ef:41:7b: 52:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:79:0E:B3:8B:9D:BA:F0:89:9E:5E:7F:53:9A:39:CF:F8:40:BB:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dff0fcf6-3e94-3def-9e77-27e00efd6b0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 216.58.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:7d:99:54:a1:48:79:32:6c:2a:a2:81:cd:43:35:6c:a7:00: 2a:d3:d1:89:f9:13:00:8f:f3:e2:cc:b7:f7:fe:4a:b6:a3:d0: ba:06:5d:15:40:83:2d:85:47:39:c0:42:70:d0:64:18:8d:17: ad:bd:84:ab:3e:f2:46:a5:2d:17:9a:c4:db:89:1f:d4:33:e3: 2c:42:fe:b6:47:de:c8:ad:67:bd:e2:c1:e0:90:76:a7:29:0b: a7:2d:a8:48:ad:b7:00:0b:07:3b:57:00:8c:ff:73:30:e1:fa: f6:2a:f8:5f:c5:2e:3b:29:a6:94:d4:52:82:0d:84:03:53:1d: b3:fa:d9:96:6f:cd:d5:5f:70:34:8b:86:32:3b:a2:0a:22:41: 98:00:6e:32:50:54:fa:36:7e:09:56:1f:de:cd:26:69:ef:00: ad:32:a0:ee:05:73:95:ec:b3:a2:6a:ee:73:6c:49:4d:17:e3: f1:77:8c:62:87:5e:1b:82:0d:30:79:a2:d9:51:e1:f5:7e:ea: 1c:62:02:3d:5f:66:80:3c:80:9e:90:07:4f:87:61:41:ae:0e: 54:6e:46:28:fe:84:25:da:36:e5:cf:ee:36:14:ad:c9:0a:2e: 9a:6a:f1:27:b4:69:d9:4d:f8:aa:4f:d3:d2:33:ad:77:fd:68: 6a:e9:ed:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcFUUnENYSr3j2e2gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI0MDgyODAxMDAzMVoXDTI0MTEyNjAyMDAzMVowLzEtMCsGA1UEAxMk MzUyZGExYjItNmIxZC00OTgzLWE2MDgtZjA5ODdjOTNiZTgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3rPdj6BmtYv9Jfwdf58cwFehG0xKwR5/ay60 xMWoPeyYVdb/RznvBmXB2RpTOQ7h9TN83uS5V17GtGiEU3G/AvESCShylo9MLZEu YqVzzxbODwiImKzMpk8+x1qwoI5e9I3TRC8bmYfGxTjAWroUiHZTkRc0CmRfpWci c2oMOVk8A37eXLxrwhbA9at46848lvpuKjNxErahOPRAF1r42N/yYFGPsq3N50qQ nyXd88mw6a2JierToe2NsbZ2yEdBiaqrYlBkpELIIIjnLlqxi5JsR+4p4IcNS3IN DR48TZKji8Qk2RskZmkN1PZz5YWrdkvWx2K9GxTXnBLvQXtS+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFB5DrOLnbrwiZ5ef1OaOc/4QLsXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZGZmMGZjZjYtM2U5NC0z ZGVmLTllNzctMjdlMDBlZmQ2YjBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2DreMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADV9mVShSHkybCqigc1DNWynACrT0Yn5EwCP8+LMt/f+Sraj0LoGXRVA gy2FRznAQnDQZBiNF629hKs+8kalLReaxNuJH9Qz4yxC/rZH3sitZ73iweCQdqcp C6ctqEittwALBztXAIz/czDh+vYq+F/FLjspppTUUoINhANTHbP62ZZvzdVfcDSL hjI7ogoiQZgAbjJQVPo2fglWH97NJmnvAK0yoO4Fc5Xss6Jq7nNsSU0X4/F3jGKH XhuCDTB5otlR4fV+6hxiAj1fZoA8gJ6QB0+HYUGuDlRuRij+hCXaNuXP7jYUrckK Lppq8Se0adlN+KpP09IzrXf9aGrp7Qg= -----END CERTIFICATE-----Generated at Sat Sep 7 23:18:57 2024 by rpki-client on console-fra.rpki-client.org