$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/289e72dc-240a-3333-b80e-6a466f6a78a6.roa File: 289e72dc-240a-3333-b80e-6a466f6a78a6.roa (raw, json) Hash identifier: r297qyHycSfgL3z1qBKkJU+KPF1K2xZt2NNZYxCQhHk= Subject key identifier: EA:DC:37:1C:10:72:E0:F0:00:BC:3A:15:0F:2F:70:69:22:85:74:72 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F432858471E7098EE5471F32E43876A00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/289e72dc-240a-3333-b80e-6a466f6a78a6.roa Signing time: Fri 06 Sep 2024 01:00:31 +0000 ROA not before: Fri 06 Sep 2024 01:00:31 +0000 ROA not after: Thu 05 Dec 2024 02:00:31 +0000 asID: 15169 IP address blocks: 142.250.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:1e:70:98:ee:54:71:f3:2e:43:87:6a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 6 01:00:31 2024 GMT Not After : Dec 5 02:00:31 2024 GMT Subject: CN=709e6bfd-7a26-4a57-84bd-c276fce35c25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:78:6d:7d:30:fe:7e:64:c4:51:be:39:75:1d: 38:19:94:2d:5f:3c:38:1f:5b:24:3e:a7:89:ac:82: 87:85:22:d2:5c:66:66:94:59:e5:b6:f4:50:b3:63: 11:a2:b0:f6:7e:f8:22:cd:b6:de:0a:6a:85:83:1c: b2:05:22:91:01:18:93:1d:d4:93:6f:f3:dc:a5:31: 31:93:53:57:c7:a4:f2:a1:e9:13:fc:13:dc:e2:d1: b2:42:f7:7e:16:27:ad:84:0c:ca:1b:3b:17:b4:0e: 06:0c:cb:01:bf:e5:13:6f:65:1d:9e:a6:fd:78:73: 3f:be:88:27:c5:ee:54:d6:86:57:04:ca:d3:22:49: a9:da:a3:98:a9:5d:08:75:9a:07:dd:ec:cd:80:ba: 19:60:93:4c:84:75:ac:a9:78:94:de:06:28:df:8f: 95:41:ed:3b:42:a4:6a:bb:fd:11:d4:58:e2:97:e7: 81:0f:d2:e6:0f:60:96:45:91:38:fc:de:6b:66:96: eb:ab:9e:23:e1:c7:47:e0:59:7d:bb:fd:cf:7f:6d: 10:98:bc:b0:8a:fd:54:f3:46:55:58:01:05:4c:51: 8b:d0:b8:71:08:e2:f6:28:8e:0d:7e:9b:65:8d:84: 4e:9c:10:53:cc:b9:f1:cd:79:8b:ed:d2:42:c3:de: 9a:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:DC:37:1C:10:72:E0:F0:00:BC:3A:15:0F:2F:70:69:22:85:74:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/289e72dc-240a-3333-b80e-6a466f6a78a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:26:e5:46:07:72:3d:fc:de:e3:f8:0d:0a:99:c2:c7:ea:7b: 7a:bc:d3:b5:5b:fc:f2:5f:e2:ca:21:e3:85:6d:c8:0e:48:3a: 92:c3:df:f4:b2:09:20:11:57:b2:d0:15:74:ab:a8:43:94:e2: 17:1e:d5:70:cc:83:a0:d2:c2:13:9f:ef:92:0b:41:5e:7e:d3: 49:14:03:ac:ed:6d:d9:81:4d:c9:b2:61:00:55:ad:d0:6f:59: 7b:7c:3b:58:2a:03:92:2b:0e:26:e6:e3:3f:73:84:09:7a:fe: c9:77:ed:3a:b8:65:4f:7f:93:84:8a:e8:60:7e:98:c7:cc:29: 22:9d:0f:6a:7e:c4:85:00:04:ec:9c:89:2d:9b:8c:c2:f2:7e: 32:86:ea:b7:cb:ff:34:40:b9:7d:f2:e5:6a:27:5d:5f:9e:bc: 26:28:11:9e:ca:97:4c:d3:d8:da:42:0a:64:a6:97:77:aa:33: 86:1e:3d:98:d5:dc:14:43:14:b7:6a:b9:5e:a9:8c:d5:94:bc: 82:9c:04:74:7b:64:3f:48:79:34:44:41:59:65:21:9f:68:e1: 22:78:35:76:63:1c:b3:f1:ce:d4:2c:80:bd:94:57:23:80:8b: f0:f2:c9:47:37:b3:4b:56:53:64:f7:dd:89:aa:29:cf:bd:93: 7a:5a:c1:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcecJjuVHHzLkOHagAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI0MDkwNjAxMDAzMVoXDTI0MTIwNTAyMDAzMVowLzEtMCsGA1UEAxMk NzA5ZTZiZmQtN2EyNi00YTU3LTg0YmQtYzI3NmZjZTM1YzI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1HhtfTD+fmTEUb45dR04GZQtXzw4H1skPqeJ rIKHhSLSXGZmlFnltvRQs2MRorD2fvgizbbeCmqFgxyyBSKRARiTHdSTb/PcpTEx k1NXx6TyoekT/BPc4tGyQvd+FiethAzKGzsXtA4GDMsBv+UTb2Udnqb9eHM/vogn xe5U1oZXBMrTIkmp2qOYqV0IdZoH3ezNgLoZYJNMhHWsqXiU3gYo34+VQe07QqRq u/0R1Fjil+eBD9LmD2CWRZE4/N5rZpbrq54j4cdH4Fl9u/3Pf20QmLywiv1U80ZV WAEFTFGL0LhxCOL2KI4NfptljYROnBBTzLnxzXmL7dJCw96aEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOrcNxwQcuDwALw6FQ8vcGkihXRyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMjg5ZTcyZGMtMjQwYS0z MzMzLWI4MGUtNmE0NjZmNmE3OGE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvp8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFEm5UYHcj383uP4DQqZwsfqe3q807Vb/PJf4soh44VtyA5IOpLD3/Sy CSARV7LQFXSrqEOU4hce1XDMg6DSwhOf75ILQV5+00kUA6ztbdmBTcmyYQBVrdBv WXt8O1gqA5IrDibm4z9zhAl6/sl37Tq4ZU9/k4SK6GB+mMfMKSKdD2p+xIUABOyc iS2bjMLyfjKG6rfL/zRAuX3y5WonXV+evCYoEZ7Kl0zT2NpCCmSml3eqM4YePZjV 3BRDFLdquV6pjNWUvIKcBHR7ZD9IeTREQVllIZ9o4SJ4NXZjHLPxztQsgL2UVyOA i/DyyUc3s0tWU2T33YmqKc+9k3pawc8= -----END CERTIFICATE-----Generated at Sun Nov 24 23:59:12 2024 by rpki-client on console-fra.rpki-client.org