$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8e856e92-81ef-3bec-854a-7c5e0750555b.roa File: 8e856e92-81ef-3bec-854a-7c5e0750555b.roa (raw, json) Hash identifier: z628Bz4umoxLweDxUSX/J5MqKp8ofWXYkTn+QUVLrrE= Subject key identifier: A3:7B:C3:92:D1:79:52:52:D6:34:8A:AA:E6:02:53:E0:AC:8C:C9:13 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F432858455F04B2084F0678C70CCB1340 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8e856e92-81ef-3bec-854a-7c5e0750555b.roa Signing time: Fri 29 Mar 2024 18:37:20 +0000 ROA not before: Fri 29 Mar 2024 18:37:20 +0000 ROA not after: Thu 27 Jun 2024 18:37:20 +0000 asID: 15169 IP address blocks: 142.250.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:5f:04:b2:08:4f:06:78:c7:0c:cb:13:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 29 18:37:20 2024 GMT Not After : Jun 27 18:37:20 2024 GMT Subject: CN=5108b690-ed9a-4e89-ac82-d7fac3e198c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:6a:57:0e:6d:25:42:aa:00:00:1e:cb:19:b4: b6:76:22:b4:d5:93:62:e1:59:36:cc:20:4f:65:82: bc:21:cf:8c:a4:ab:dc:12:fc:d9:9a:45:8f:e6:8c: 61:66:24:b1:bd:ec:42:2d:d0:60:67:8a:0f:1a:17: fd:4f:14:71:77:24:ce:1f:e4:56:69:2d:2b:96:7a: a8:8c:2e:ff:d8:56:cc:cf:0a:55:fe:65:dc:90:49: 2b:f3:b5:23:4c:19:94:dc:82:78:6b:57:a1:36:fc: d1:b7:de:f8:c9:aa:6e:f1:86:a9:3c:5e:64:9b:8a: af:dd:e2:a3:37:4b:7d:77:04:dc:20:d6:e3:3f:be: 6c:14:96:8e:99:d1:cf:da:8f:35:51:a4:12:8e:b2: ba:46:60:5f:30:e1:b0:1c:fa:cd:8d:c0:fd:e5:aa: b9:c8:c7:df:e5:53:32:7a:5f:b2:7d:e8:15:ab:1e: 17:84:c3:c1:93:9a:93:c6:19:7a:f6:21:b2:31:e3: ee:74:b5:7f:ce:c7:60:82:ec:27:6b:e9:8d:61:76: 07:e9:cb:74:73:5c:ab:d6:d4:85:19:c9:84:cc:b8: 23:a3:a9:c3:9e:8d:60:00:e5:44:41:ba:59:64:9a: 91:fc:18:bf:20:9e:b1:ef:da:a1:66:e7:3c:75:1c: 04:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:7B:C3:92:D1:79:52:52:D6:34:8A:AA:E6:02:53:E0:AC:8C:C9:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8e856e92-81ef-3bec-854a-7c5e0750555b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:d9:31:3f:87:b3:3f:c5:37:a5:f9:92:f2:89:88:07:04:91: 29:c6:8a:c8:aa:d7:d3:6d:6c:78:7b:13:5c:5a:b5:49:19:c9: a3:15:bf:bd:aa:5f:d9:2e:74:8e:e4:e1:dd:5e:9b:12:b1:73: cd:c3:11:3b:e7:06:91:00:19:d7:2f:d6:26:97:93:eb:b3:84: bd:d5:f9:c8:52:96:86:7f:52:49:0e:11:d2:bd:69:c5:02:68: f5:3d:7e:c5:a3:39:bc:c1:05:2c:35:77:fa:4b:76:62:5a:bd: 1a:a4:5e:8b:5d:03:6a:96:77:3e:ee:06:a1:a6:25:d5:79:5f: a4:63:1b:a6:af:3a:9f:c1:68:f6:41:2d:3f:c3:25:4c:e6:4a: 27:07:53:14:2d:79:17:5f:12:70:f4:d9:b7:cf:67:36:9d:1e: 51:da:8d:f8:0e:c2:a4:ca:51:0c:9a:b2:1d:c7:e0:5f:d6:28: 6f:8c:48:a9:48:f5:f6:b2:c5:d8:13:4b:c5:6a:75:ef:f0:8f: 20:5f:d1:8e:e9:7c:90:76:67:f2:5b:81:01:d2:3b:22:cb:6e: 93:ba:ec:94:b6:45:62:6e:85:3a:9f:be:f9:f2:ce:eb:ad:7c: 89:01:0c:16:bb:c7:b4:38:04:83:10:b2:9f:88:aa:68:01:f1: cc:bb:23:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVfBLIITwZ4xwzLE0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI0MDMyOTE4MzcyMFoXDTI0MDYyNzE4MzcyMFowLzEtMCsGA1UEAxMk NTEwOGI2OTAtZWQ5YS00ZTg5LWFjODItZDdmYWMzZTE5OGM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkWpXDm0lQqoAAB7LGbS2diK01ZNi4Vk2zCBP ZYK8Ic+MpKvcEvzZmkWP5oxhZiSxvexCLdBgZ4oPGhf9TxRxdyTOH+RWaS0rlnqo jC7/2FbMzwpV/mXckEkr87UjTBmU3IJ4a1ehNvzRt974yapu8YapPF5km4qv3eKj N0t9dwTcINbjP75sFJaOmdHP2o81UaQSjrK6RmBfMOGwHPrNjcD95aq5yMff5VMy el+yfegVqx4XhMPBk5qTxhl69iGyMePudLV/zsdgguwna+mNYXYH6ct0c1yr1tSF GcmEzLgjo6nDno1gAOVEQbpZZJqR/Bi/IJ6x79qhZuc8dRwE3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKN7w5LReVJS1jSKquYCU+CsjMkTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOGU4NTZlOTItODFlZi0z YmVjLTg1NGEtN2M1ZTA3NTA1NTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvoVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFbZMT+Hsz/FN6X5kvKJiAcEkSnGisiq19NtbHh7E1xatUkZyaMVv72q X9kudI7k4d1emxKxc83DETvnBpEAGdcv1iaXk+uzhL3V+chSloZ/UkkOEdK9acUC aPU9fsWjObzBBSw1d/pLdmJavRqkXotdA2qWdz7uBqGmJdV5X6RjG6avOp/BaPZB LT/DJUzmSicHUxQteRdfEnD02bfPZzadHlHajfgOwqTKUQyash3H4F/WKG+MSKlI 9fayxdgTS8Vqde/wjyBf0Y7pfJB2Z/JbgQHSOyLLbpO67JS2RWJuhTqfvvnyzuut fIkBDBa7x7Q4BIMQsp+IqmgB8cy7I/A= -----END CERTIFICATE-----Generated at Fri May 17 15:36:51 2024 by rpki-client on console-ams.rpki-client.org