$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ff9bbe8c-47ef-3326-ba49-cf68998170a7.roa File: ff9bbe8c-47ef-3326-ba49-cf68998170a7.roa (raw, json) Hash identifier: I951D2aKYlti+8by2qHbRlXEDga8sBlf+eIo1eCiLAw= Subject key identifier: 43:F0:73:FA:B8:25:5C:86:B7:6D:46:D3:1A:1E:A6:9F:9A:9F:E0:41 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285847E62AB401C59524D4DA9DAA00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ff9bbe8c-47ef-3326-ba49-cf68998170a7.roa Signing time: Sat 16 Nov 2024 14:00:41 +0000 ROA not before: Sat 16 Nov 2024 14:00:41 +0000 ROA not after: Fri 14 Feb 2025 14:00:41 +0000 asID: 15169 IP address blocks: 216.58.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e6:2a:b4:01:c5:95:24:d4:da:9d:aa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Nov 16 14:00:41 2024 GMT Not After : Feb 14 14:00:41 2025 GMT Subject: CN=95eb561b-9d2c-4812-b8cd-b55ebfdf9a68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:7e:a4:fc:8a:41:1e:1e:bd:38:cd:da:1f:9e: f8:d3:74:29:dc:84:a7:b9:8b:96:29:0a:aa:8e:11: a7:5b:fb:ec:4b:7e:34:1f:7f:b9:2a:5a:a2:ba:60: 71:4a:ee:d9:d2:a0:92:c2:9f:05:7f:fd:ce:79:f1: fd:9c:0a:c2:cf:0c:e2:c2:aa:bf:38:56:12:e1:b1: 9a:04:22:41:50:ae:da:54:8c:14:35:47:ce:67:ba: 85:93:e2:01:ac:50:67:ba:5f:cd:a5:3c:ee:b4:d1: 35:cc:fe:56:4d:48:12:32:48:65:03:38:11:09:3a: e8:6c:e7:cc:35:f8:63:45:a6:6e:61:73:d3:0c:56: 22:05:d3:29:a5:43:0f:1c:b9:86:b9:17:90:ec:39: 87:9a:2d:47:37:94:20:e5:dc:04:4c:4c:7e:95:7f: b1:f1:1f:71:19:87:43:3e:07:f7:42:8d:1e:c6:fa: e5:38:29:da:7f:fd:53:40:c2:68:c4:b1:93:fb:d7: b6:da:d5:bb:56:87:50:0c:53:d2:ed:f1:c6:f1:86: 61:d0:c2:62:15:82:bb:19:81:3c:49:c8:54:a1:c9: 21:89:bb:c9:b4:63:77:ab:36:78:42:74:25:ea:1a: 4c:7f:21:13:18:6c:31:86:87:75:96:3f:ce:c7:bd: 98:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:F0:73:FA:B8:25:5C:86:B7:6D:46:D3:1A:1E:A6:9F:9A:9F:E0:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ff9bbe8c-47ef-3326-ba49-cf68998170a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 216.58.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:6a:3e:68:21:75:07:f3:ff:f0:21:be:1a:03:04:ea:78:25: 6e:d6:51:51:e0:e9:e1:93:19:53:e4:24:47:08:51:ea:e1:52: 14:95:42:fd:35:4a:f0:4b:9f:8f:e5:08:32:f2:9d:fb:ef:6c: 65:08:3c:07:81:8e:87:91:a5:3d:fe:87:6a:9b:78:d2:81:86: 6b:eb:b1:7f:85:dd:46:bf:73:71:70:a9:6b:53:a1:ab:4b:03: a4:a5:e5:74:1f:1f:61:2b:1d:cc:85:1b:de:ba:c4:81:6f:16: dc:15:65:9b:35:53:12:55:93:a2:44:b6:87:71:47:45:ec:10: ae:dc:07:4d:af:2c:19:f4:1f:a3:20:02:41:0f:96:4c:06:9a: e1:0b:52:2e:67:1a:f9:0a:6c:1f:9f:68:61:66:2b:7b:92:56: 26:d2:d0:8e:5a:15:46:1b:49:70:df:b7:c1:fa:3d:2b:96:70: 24:1c:f5:99:0e:4c:be:ee:24:8d:dd:30:87:1e:de:32:e4:29: 93:1e:79:b9:6f:eb:e7:27:93:6d:e1:d1:ce:dc:8c:9b:24:a2: 06:6e:06:24:da:5c:39:a6:0e:cc:f0:10:a4:13:19:3d:dc:09: e3:55:0e:51:07:92:fd:d7:54:67:c2:f2:97:d5:46:7f:fb:4a: e6:90:ab:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKrQBxZUk1NqdqgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk OTVlYjU2MWItOWQyYy00ODEyLWI4Y2QtYjU1ZWJmZGY5YTY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl36k/IpBHh69OM3aH57403Qp3ISnuYuWKQqq jhGnW/vsS340H3+5KlqiumBxSu7Z0qCSwp8Ff/3OefH9nArCzwziwqq/OFYS4bGa BCJBUK7aVIwUNUfOZ7qFk+IBrFBnul/NpTzutNE1zP5WTUgSMkhlAzgRCTrobOfM NfhjRaZuYXPTDFYiBdMppUMPHLmGuReQ7DmHmi1HN5Qg5dwETEx+lX+x8R9xGYdD Pgf3Qo0exvrlOCnaf/1TQMJoxLGT+9e22tW7VodQDFPS7fHG8YZh0MJiFYK7GYE8 SchUockhibvJtGN3qzZ4QnQl6hpMfyETGGwxhod1lj/Ox72Y7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEPwc/q4JVyGt21G0xoepp+an+BBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZmY5YmJlOGMtNDdlZi0z MzI2LWJhNDktY2Y2ODk5ODE3MGE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2DrfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIZqPmghdQfz//AhvhoDBOp4JW7WUVHg6eGTGVPkJEcIUerhUhSVQv01 SvBLn4/lCDLynfvvbGUIPAeBjoeRpT3+h2qbeNKBhmvrsX+F3Ua/c3FwqWtToatL A6Sl5XQfH2ErHcyFG966xIFvFtwVZZs1UxJVk6JEtodxR0XsEK7cB02vLBn0H6Mg AkEPlkwGmuELUi5nGvkKbB+faGFmK3uSVibS0I5aFUYbSXDft8H6PSuWcCQc9ZkO TL7uJI3dMIce3jLkKZMeeblv6+cnk23h0c7cjJskogZuBiTaXDmmDszwEKQTGT3c CeNVDlEHkv3XVGfC8pfVRn/7SuaQq/o= -----END CERTIFICATE-----Generated at Sun Nov 24 23:59:18 2024 by rpki-client on console-fra.rpki-client.org