$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f60e74da-878d-3270-93f0-9904840e3710.roa File: f60e74da-878d-3270-93f0-9904840e3710.roa (raw, json) Hash identifier: UIyApc+LZKSlVD4GHviZeAoHYx4VafySw6U1BRNtwS8= Subject key identifier: 04:57:36:0F:F6:96:F7:1A:CC:5C:1E:EC:93:DD:42:B8:53:2F:1A:95 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285847CFD4DB3A68EE3CE33918E280 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f60e74da-878d-3270-93f0-9904840e3710.roa Signing time: Fri 08 Nov 2024 14:00:39 +0000 ROA not before: Fri 08 Nov 2024 14:00:39 +0000 ROA not after: Thu 06 Feb 2025 14:00:39 +0000 asID: 18779 IP address blocks: 142.111.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:cf:d4:db:3a:68:ee:3c:e3:39:18:e2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Nov 8 14:00:39 2024 GMT Not After : Feb 6 14:00:39 2025 GMT Subject: CN=28b51b62-255e-4f25-9800-1670a412e0b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:5b:97:94:f7:1a:7f:e7:e7:c9:e8:29:6b:7a: fc:26:ad:25:75:19:1d:13:05:dd:56:2f:6d:5a:fb: 9f:90:77:af:2e:17:f5:40:d6:ad:1a:dc:5f:9d:65: de:90:a5:ec:e9:83:af:d2:ba:1d:37:5c:76:90:49: 99:8f:70:a6:94:2d:46:66:70:ec:a8:78:b5:14:07: 69:85:22:3c:a0:bf:a5:be:b2:98:82:5f:61:ab:60: d0:9d:92:d3:0f:cb:af:c5:bf:0d:53:f3:45:b2:47: 3e:92:35:27:cb:17:8d:da:14:5c:35:5c:05:f0:ee: 3e:5c:97:2f:6b:54:81:45:20:44:3f:8b:b3:14:99: 6f:a7:35:8e:7f:81:30:57:f4:4b:ce:0a:1b:9f:38: 09:ca:25:a0:ad:d9:b4:cc:09:03:f4:8e:e6:31:c3: 09:a0:74:e1:43:03:25:a9:4f:43:74:c6:1d:28:5a: 6e:0d:22:3f:41:b8:dc:03:21:17:37:a6:3b:1e:c8: c2:55:ff:91:65:29:36:13:40:9a:4a:c3:08:98:8a: 8e:b1:06:73:ec:f5:27:45:7f:1d:24:a7:1e:56:b6: 44:0f:0a:3a:f9:90:46:d5:ef:17:f3:6f:33:ce:4a: 37:d9:4f:2b:85:47:8b:94:37:57:9f:f6:91:3d:71: 45:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:57:36:0F:F6:96:F7:1A:CC:5C:1E:EC:93:DD:42:B8:53:2F:1A:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f60e74da-878d-3270-93f0-9904840e3710.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 142.111.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:ca:af:4a:de:13:65:b0:87:2f:2a:bd:5a:a5:fb:4b:e8:e3: ff:39:e2:f4:a8:9a:b6:a6:a6:07:13:a0:f4:ee:7f:8b:cc:fe: 22:c8:0b:86:55:6d:ae:2c:b9:11:0d:da:19:29:8a:09:5f:b9: 3a:b0:94:0a:2d:ed:7c:73:96:c4:13:d9:80:99:92:1a:34:b9: f7:11:8f:be:b2:e2:50:e4:47:2d:53:d2:c5:6d:d3:52:2d:2e: a3:2e:25:45:74:14:2d:81:ce:48:34:53:68:0f:94:9c:a2:26: f9:23:87:33:06:1b:fa:32:e3:71:51:98:d1:5b:75:b8:80:cc: 8b:ec:e5:29:c7:32:de:06:e0:e7:15:66:37:c8:7f:aa:4b:c0: 72:f7:80:31:90:28:69:9c:e0:60:4d:a9:2a:ee:b9:46:ea:76: 15:8b:6d:a7:6d:00:33:9f:04:25:c9:16:88:62:11:3a:48:ce: 20:a8:42:ad:49:f1:8d:a3:2c:37:78:a6:0a:5f:50:e0:9e:65: 7f:63:8c:88:4b:61:a6:c7:56:e0:1c:fe:f9:86:3f:38:8c:e4: cf:e5:3e:92:3a:2a:37:80:27:ce:66:84:59:3d:8a:f7:7d:41: 6a:47:fa:68:36:33:12:56:c4:b9:a3:24:0a:a3:9e:d9:13:1f: 17:73:1d:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfP1Ns6aO484zkY4oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI0MTEwODE0MDAzOVoXDTI1MDIwNjE0MDAzOVowLzEtMCsGA1UEAxMk MjhiNTFiNjItMjU1ZS00ZjI1LTk4MDAtMTY3MGE0MTJlMGI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFuXlPcaf+fnyegpa3r8Jq0ldRkdEwXdVi9t WvufkHevLhf1QNatGtxfnWXekKXs6YOv0rodN1x2kEmZj3CmlC1GZnDsqHi1FAdp hSI8oL+lvrKYgl9hq2DQnZLTD8uvxb8NU/NFskc+kjUnyxeN2hRcNVwF8O4+XJcv a1SBRSBEP4uzFJlvpzWOf4EwV/RLzgobnzgJyiWgrdm0zAkD9I7mMcMJoHThQwMl qU9DdMYdKFpuDSI/QbjcAyEXN6Y7HsjCVf+RZSk2E0CaSsMImIqOsQZz7PUnRX8d JKceVrZEDwo6+ZBG1e8X828zzko32U8rhUeLlDdXn/aRPXFFVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFARXNg/2lvcazFwe7JPdQrhTLxqVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZjYwZTc0ZGEtODc4ZC0z MjcwLTkzZjAtOTkwNDg0MGUzNzEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm+ZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHbKr0reE2Wwhy8qvVql+0vo4/854vSomrampgcToPTuf4vM/iLIC4ZV ba4suREN2hkpiglfuTqwlAot7XxzlsQT2YCZkho0ufcRj76y4lDkRy1T0sVt01It LqMuJUV0FC2Bzkg0U2gPlJyiJvkjhzMGG/oy43FRmNFbdbiAzIvs5SnHMt4G4OcV ZjfIf6pLwHL3gDGQKGmc4GBNqSruuUbqdhWLbadtADOfBCXJFohiETpIziCoQq1J 8Y2jLDd4pgpfUOCeZX9jjIhLYabHVuAc/vmGPziM5M/lPpI6KjeAJ85mhFk9ivd9 QWpH+mg2MxJWxLmjJAqjntkTHxdzHYg= -----END CERTIFICATE-----Generated at Thu Nov 21 23:36:39 2024 by rpki-client on console-ams.rpki-client.org