$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/36570800-5c11-3c22-8e0c-a78d28863714.roa File: 36570800-5c11-3c22-8e0c-a78d28863714.roa (raw, json) Hash identifier: mEOiEI5lEew5jqGrTeN+TkVcjYmhCmvOTMApQ3duB00= Subject key identifier: 53:5A:D3:B9:BB:ED:99:88:E7:70:71:13:AA:7D:74:1E:5D:63:DA:B8 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584546266164F8D0B58D3C0EBA40 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/36570800-5c11-3c22-8e0c-a78d28863714.roa Signing time: Wed 20 Mar 2024 20:49:59 +0000 ROA not before: Wed 20 Mar 2024 20:49:59 +0000 ROA not after: Tue 18 Jun 2024 20:49:59 +0000 asID: 15169 IP address blocks: 142.250.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:46:26:61:64:f8:d0:b5:8d:3c:0e:ba:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 20 20:49:59 2024 GMT Not After : Jun 18 20:49:59 2024 GMT Subject: CN=a20255bf-b092-4c17-a9d4-123b8af426ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:31:a9:c5:67:62:7e:8a:db:b7:cf:e7:f6:fd: d7:ad:53:2b:28:92:e2:2c:7f:dd:12:29:99:c9:49: 60:49:7a:c4:49:16:05:9b:09:d7:0f:ef:02:60:78: 40:f6:f3:55:f8:43:07:29:ef:bd:77:fd:6c:e9:e2: 60:8d:67:1c:ad:41:a0:78:5f:a1:2c:78:90:bf:0e: d0:90:74:29:8d:14:40:52:bb:43:b4:a2:e6:87:6f: 1b:e3:9a:11:10:2b:f0:9a:c8:e5:c6:70:58:02:6e: 8f:d1:ec:18:93:9d:96:82:eb:3e:44:be:b1:54:7f: 35:2a:1c:84:35:f2:aa:5d:3f:7d:45:ec:96:d1:e7: be:9c:4b:aa:35:46:cf:80:0f:1f:9c:40:cb:d5:b6: a0:27:ba:59:68:af:9c:5d:06:1e:70:46:cd:69:34: 8a:18:2d:80:ba:26:f1:90:25:81:4d:8d:01:9b:b2: a8:2d:81:1d:1e:c1:5e:5a:e6:30:dd:30:bb:e4:14: 7c:b1:bd:55:eb:ea:8b:47:d2:e1:ea:91:1c:5e:c3: 43:74:bb:e3:2d:03:3d:07:28:7f:3e:d7:fe:33:df: b6:68:07:40:5e:0b:19:09:1b:47:15:21:29:d0:84: 07:ad:0d:2d:e4:30:fa:f5:1a:51:c4:dc:8d:56:a9: 73:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:5A:D3:B9:BB:ED:99:88:E7:70:71:13:AA:7D:74:1E:5D:63:DA:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/36570800-5c11-3c22-8e0c-a78d28863714.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:57:99:68:65:13:13:9f:6e:a3:fd:2c:2e:cd:cb:4b:45:40: ca:d6:60:13:c0:8d:9b:a8:2a:fa:bb:4a:12:44:82:a8:bb:b7: 5b:3e:ca:a1:25:c0:b3:30:bb:27:78:51:6f:3c:e1:04:5e:cd: 9b:f7:10:5b:a2:59:6b:db:c1:6c:c8:41:a9:16:9c:d9:40:fb: fa:8f:e6:d7:3e:76:e5:ed:c1:18:3b:a1:d2:24:7c:f0:da:89: 19:17:b4:a6:ae:10:4a:05:95:b9:61:e5:67:14:7a:37:01:5c: b0:5e:03:09:3e:29:95:b5:8e:c2:ea:5a:bd:34:82:9a:2c:0d: 03:e8:81:69:e9:29:8e:dd:aa:fd:99:02:65:dc:75:2c:00:1a: b4:69:69:e6:e2:d6:df:8d:af:36:e1:62:25:4a:f0:26:64:47: 05:a2:55:24:4f:2a:91:fe:22:f5:3c:3c:d5:70:a1:6f:21:33: 1b:97:f4:7e:fb:30:c0:70:8f:28:89:ad:62:fb:82:d0:4a:49: e3:13:f8:d8:bb:40:b8:03:ed:25:25:98:ff:d9:32:f8:be:e1: 5c:20:02:8a:a4:07:8d:0f:55:43:8b:69:4a:92:8a:aa:ec:cb: 1b:fa:2b:5a:55:32:17:1a:67:ce:01:1f:e7:77:f1:ff:07:16: ec:3e:58:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVGJmFk+NC1jTwOukAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI0MDMyMDIwNDk1OVoXDTI0MDYxODIwNDk1OVowLzEtMCsGA1UEAxMk YTIwMjU1YmYtYjA5Mi00YzE3LWE5ZDQtMTIzYjhhZjQyNmVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTGpxWdiforbt8/n9v3XrVMrKJLiLH/dEimZ yUlgSXrESRYFmwnXD+8CYHhA9vNV+EMHKe+9d/1s6eJgjWccrUGgeF+hLHiQvw7Q kHQpjRRAUrtDtKLmh28b45oRECvwmsjlxnBYAm6P0ewYk52Wgus+RL6xVH81KhyE NfKqXT99ReyW0ee+nEuqNUbPgA8fnEDL1bagJ7pZaK+cXQYecEbNaTSKGC2Auibx kCWBTY0Bm7KoLYEdHsFeWuYw3TC75BR8sb1V6+qLR9Lh6pEcXsNDdLvjLQM9Byh/ Ptf+M9+2aAdAXgsZCRtHFSEp0IQHrQ0t5DD69RpRxNyNVqlz6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFNa07m77ZmI53BxE6p9dB5dY9q4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMzY1NzA4MDAtNWMxMS0z YzIyLThlMGMtYTc4ZDI4ODYzNzE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvocMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADBXmWhlExOfbqP9LC7Ny0tFQMrWYBPAjZuoKvq7ShJEgqi7t1s+yqEl wLMwuyd4UW884QRezZv3EFuiWWvbwWzIQakWnNlA+/qP5tc+duXtwRg7odIkfPDa iRkXtKauEEoFlblh5WcUejcBXLBeAwk+KZW1jsLqWr00gposDQPogWnpKY7dqv2Z AmXcdSwAGrRpaebi1t+NrzbhYiVK8CZkRwWiVSRPKpH+IvU8PNVwoW8hMxuX9H77 MMBwjyiJrWL7gtBKSeMT+Ni7QLgD7SUlmP/ZMvi+4VwgAoqkB40PVUOLaUqSiqrs yxv6K1pVMhcaZ84BH+d38f8HFuw+WJ0= -----END CERTIFICATE-----Generated at Fri May 17 16:17:02 2024 by rpki-client on console-fra.rpki-client.org