$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1d917417-38e1-3644-8592-3ec865cce6fc.roa File: 1d917417-38e1-3644-8592-3ec865cce6fc.roa (raw, json) Hash identifier: DUH1/6q+rKdNua95LUm26wlr1QDUuAvO9DHTEsgr/xw= Subject key identifier: 19:4D:5A:AA:3E:3A:25:CF:09:58:D3:21:EA:20:EB:29:3C:67:D2:34 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285847E62AAED2347E5FEA90002000 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1d917417-38e1-3644-8592-3ec865cce6fc.roa Signing time: Sat 16 Nov 2024 14:00:41 +0000 ROA not before: Sat 16 Nov 2024 14:00:41 +0000 ROA not after: Fri 14 Feb 2025 14:00:41 +0000 asID: 15169 IP address blocks: 142.250.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e6:2a:ae:d2:34:7e:5f:ea:90:00:20:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Nov 16 14:00:41 2024 GMT Not After : Feb 14 14:00:41 2025 GMT Subject: CN=07fde2e6-171f-4171-9310-a361a36ce919 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:88:23:1d:d3:bf:04:aa:2d:61:dd:a6:60:d5: 32:8d:5d:aa:e5:2f:33:f1:c3:22:a1:80:d2:79:59: 11:ee:5e:33:35:1d:78:5a:f9:56:e0:0f:41:5d:99: 07:6f:26:c9:9a:69:97:82:2d:f3:07:25:76:d4:a9: 83:d4:1e:37:21:55:4a:17:6b:77:b2:ea:71:bc:d1: a1:f8:91:7d:49:95:61:9a:e0:0c:9a:e1:28:da:ab: 8e:a0:fe:a3:d5:0b:84:66:fa:dc:11:d9:d5:56:23: 7e:ed:75:e4:b7:bb:cf:05:1a:ac:ea:87:9c:3e:45: 7e:09:96:15:24:2f:56:ff:ce:97:c1:9d:03:f5:14: 7e:a8:7b:93:9b:9a:40:3f:af:b2:99:d5:ff:71:a2: 8a:72:eb:1d:8c:67:99:d4:d0:bb:f8:86:e7:b4:50: 0c:5c:13:f7:e3:db:0c:6d:35:cc:6d:dc:2a:2e:7f: 6d:35:ec:50:a6:73:5a:1b:9d:2e:8e:7c:d5:c8:e8: 58:38:e1:b8:4d:fc:e3:58:ab:21:c5:ee:92:44:ce: ba:74:ab:e0:78:16:58:35:e7:f0:ed:85:47:ca:c7: a4:4b:59:08:d1:25:6c:7b:41:2f:e4:ab:e0:bd:1b: 46:18:64:61:29:15:1d:bb:1d:9a:da:ff:80:e8:b5: e3:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:4D:5A:AA:3E:3A:25:CF:09:58:D3:21:EA:20:EB:29:3C:67:D2:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1d917417-38e1-3644-8592-3ec865cce6fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:56:1a:6c:0f:25:b8:ef:12:7b:11:7e:d0:27:6b:29:bd:44: 29:97:a6:5e:b6:8d:6a:9c:05:b4:e4:15:74:7e:12:04:05:e4: 01:b7:5b:f4:50:b9:e7:32:aa:3e:5a:77:0d:ff:c2:b3:20:4a: 39:ce:ea:b1:1b:fb:84:22:85:4c:5c:1a:94:86:c6:53:83:35: 3e:a8:72:29:af:92:07:eb:37:59:33:0f:43:7a:7b:ff:d1:12: 98:22:e3:08:b0:79:e2:ed:e8:90:1d:b3:73:70:1b:05:03:b0: 82:f4:1d:4a:12:d3:60:ee:6c:11:12:f1:ac:77:52:fb:95:b8: 03:a5:01:60:7e:e2:f6:3d:b1:dd:ad:5b:4b:30:d3:28:a3:f7: 16:c7:b7:e4:7e:d9:2a:14:07:37:1e:39:eb:c6:89:9e:f7:30: 66:55:98:27:59:d9:6e:a2:a7:73:89:d0:07:f2:e8:6b:31:b0: 87:88:9d:10:9e:3c:52:ee:de:c4:a8:1c:89:73:27:79:0a:b6: 5a:08:38:ca:9a:64:00:98:e2:1b:0a:17:90:ea:a6:a6:e0:d1: 34:e9:64:c0:fb:1d:e0:e6:14:25:75:a0:c2:d7:18:97:7c:d1: 87:83:7c:44:5e:a6:21:fd:34:b2:75:42:b1:02:5c:75:97:73: da:21:77:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKq7SNH5f6pAAIAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk MDdmZGUyZTYtMTcxZi00MTcxLTkzMTAtYTM2MWEzNmNlOTE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhogjHdO/BKotYd2mYNUyjV2q5S8z8cMioYDS eVkR7l4zNR14WvlW4A9BXZkHbybJmmmXgi3zByV21KmD1B43IVVKF2t3supxvNGh +JF9SZVhmuAMmuEo2quOoP6j1QuEZvrcEdnVViN+7XXkt7vPBRqs6oecPkV+CZYV JC9W/86XwZ0D9RR+qHuTm5pAP6+ymdX/caKKcusdjGeZ1NC7+IbntFAMXBP349sM bTXMbdwqLn9tNexQpnNaG50ujnzVyOhYOOG4TfzjWKshxe6SRM66dKvgeBZYNefw 7YVHysekS1kI0SVse0Ev5KvgvRtGGGRhKRUdux2a2v+A6LXjewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBlNWqo+OiXPCVjTIeog6yk8Z9I0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMWQ5MTc0MTctMzhlMS0z NjQ0LTg1OTItM2VjODY1Y2NlNmZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvqeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHlWGmwPJbjvEnsRftAnaym9RCmXpl62jWqcBbTkFXR+EgQF5AG3W/RQ uecyqj5adw3/wrMgSjnO6rEb+4QihUxcGpSGxlODNT6ocimvkgfrN1kzD0N6e//R Epgi4wiweeLt6JAds3NwGwUDsIL0HUoS02DubBES8ax3UvuVuAOlAWB+4vY9sd2t W0sw0yij9xbHt+R+2SoUBzceOevGiZ73MGZVmCdZ2W6ip3OJ0Afy6GsxsIeInRCe PFLu3sSoHIlzJ3kKtloIOMqaZACY4hsKF5Dqpqbg0TTpZMD7HeDmFCV1oMLXGJd8 0YeDfERepiH9NLJ1QrECXHWXc9ohd3g= -----END CERTIFICATE-----Generated at Thu Nov 21 23:40:51 2024 by rpki-client on console-ams.rpki-client.org