$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2b1af465-c310-3f84-8c9a-7ac58d62f231.roa File: 2b1af465-c310-3f84-8c9a-7ac58d62f231.roa (raw, json) Hash identifier: zqF3gA8yYHUYixD/jdnHdwPp2qz6rfWiAQlIpOC8M0w= Subject key identifier: C7:0C:43:81:80:27:01:43:3B:2F:EB:4F:24:74:E2:1F:90:FE:14:14 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285847E62B640174D40F9593CC6E00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2b1af465-c310-3f84-8c9a-7ac58d62f231.roa Signing time: Sat 16 Nov 2024 14:00:41 +0000 ROA not before: Sat 16 Nov 2024 14:00:41 +0000 ROA not after: Fri 14 Feb 2025 14:00:41 +0000 asID: 15169 IP address blocks: 142.251.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e6:2b:64:01:74:d4:0f:95:93:cc:6e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Nov 16 14:00:41 2024 GMT Not After : Feb 14 14:00:41 2025 GMT Subject: CN=13c554a5-21b4-46f4-9cab-eaa1645f06d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:5b:94:91:1f:c2:a4:f5:58:83:7e:24:b9:a8: 7e:c1:7a:47:7e:b8:db:f6:8b:22:53:d0:18:8a:ef: 59:85:41:c8:3e:cf:e0:7f:3c:00:c1:4c:72:07:ab: a6:c9:d3:7f:ac:10:c7:6e:0f:15:1c:8e:3d:54:09: fc:ad:49:2e:db:39:71:19:96:02:8f:8b:96:14:1e: f0:eb:06:65:8a:7e:e5:86:63:35:23:ff:d3:9b:5e: 49:64:de:03:fa:3f:1a:db:88:2a:fe:d9:54:4b:71: 91:9f:b4:2a:75:7b:c8:7c:bb:b8:8e:d4:c8:24:bf: 94:0a:42:f1:9c:9a:59:c1:6c:dd:6d:ee:b0:ad:8f: 53:d6:49:fc:bf:03:be:e3:89:94:92:a0:b4:38:10: 2b:df:b7:88:30:71:f5:19:e6:b7:ef:0b:f5:51:24: aa:a0:a6:68:26:fc:2a:51:92:34:99:55:9a:53:41: 2f:f5:5a:05:65:25:07:d2:d2:0e:11:90:00:6f:7f: 0e:0c:18:1f:fa:89:73:bf:68:f7:23:2a:51:2b:25: 3d:89:e0:ab:76:cd:e0:1a:07:e2:db:a9:be:bf:ed: 39:82:25:1f:5c:1d:84:30:8f:43:f8:7f:3b:f7:75: 40:0f:91:65:21:94:ec:99:74:85:d5:bf:94:95:e0: 24:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:0C:43:81:80:27:01:43:3B:2F:EB:4F:24:74:E2:1F:90:FE:14:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2b1af465-c310-3f84-8c9a-7ac58d62f231.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.41.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:b9:dc:eb:e6:59:71:1a:03:22:ba:18:eb:96:29:ca:90:cd: 40:68:8a:16:b7:fb:29:4f:b5:9d:19:1a:07:5d:38:18:e4:d0: a0:1c:a9:84:d8:7a:ff:09:4e:fa:19:6b:c9:46:6b:4b:46:36: 25:4e:83:aa:12:81:f9:5a:ff:af:57:37:5f:c2:f2:b5:73:16: 26:42:43:58:1c:18:3a:72:8e:18:97:15:e1:c4:f9:68:56:c9: ce:b0:46:9e:6c:63:1c:b4:ef:f2:a0:cb:a5:26:cb:ce:79:72: dc:20:13:ee:fe:5b:4b:91:5a:90:ee:31:2b:9c:3b:49:d0:c7: 8e:d7:64:20:36:ba:f1:b0:d8:d8:d7:72:42:f0:af:17:fe:1a: 65:9d:80:86:e9:ad:49:5c:44:52:5d:f4:22:75:60:90:42:42: fd:56:11:96:4f:f3:ee:ee:84:f0:5a:11:4b:fa:d4:7f:72:3e: fd:a1:a8:c5:8c:45:8c:5f:31:91:bd:f1:84:53:de:9d:c4:d8: 51:64:3c:74:f3:51:77:13:c8:e9:ac:97:34:58:02:ad:d3:c5: 6b:49:28:ca:d9:38:14:fb:b5:77:51:0f:15:0c:24:ae:3d:5a: 93:30:b5:e7:dc:34:a4:13:22:43:12:78:e9:e9:5e:20:50:54: 03:05:01:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmK2QBdNQPlZPMbgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk MTNjNTU0YTUtMjFiNC00NmY0LTljYWItZWFhMTY0NWYwNmQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFuUkR/CpPVYg34kuah+wXpHfrjb9osiU9AY iu9ZhUHIPs/gfzwAwUxyB6umydN/rBDHbg8VHI49VAn8rUku2zlxGZYCj4uWFB7w 6wZlin7lhmM1I//Tm15JZN4D+j8a24gq/tlUS3GRn7QqdXvIfLu4jtTIJL+UCkLx nJpZwWzdbe6wrY9T1kn8vwO+44mUkqC0OBAr37eIMHH1Gea37wv1USSqoKZoJvwq UZI0mVWaU0Ev9VoFZSUH0tIOEZAAb38ODBgf+olzv2j3IypRKyU9ieCrds3gGgfi 26m+v+05giUfXB2EMI9D+H8793VAD5FlIZTsmXSF1b+UleAkAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMcMQ4GAJwFDOy/rTyR04h+Q/hQUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMmIxYWY0NjUtYzMxMC0z Zjg0LThjOWEtN2FjNThkNjJmMjMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvspMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKK53OvmWXEaAyK6GOuWKcqQzUBoiha3+ylPtZ0ZGgddOBjk0KAcqYTY ev8JTvoZa8lGa0tGNiVOg6oSgfla/69XN1/C8rVzFiZCQ1gcGDpyjhiXFeHE+WhW yc6wRp5sYxy07/Kgy6Umy855ctwgE+7+W0uRWpDuMSucO0nQx47XZCA2uvGw2NjX ckLwrxf+GmWdgIbprUlcRFJd9CJ1YJBCQv1WEZZP8+7uhPBaEUv61H9yPv2hqMWM RYxfMZG98YRT3p3E2FFkPHTzUXcTyOmslzRYAq3TxWtJKMrZOBT7tXdRDxUMJK49 WpMwtefcNKQTIkMSeOnpXiBQVAMFAQs= -----END CERTIFICATE-----Generated at Sun Nov 24 23:59:12 2024 by rpki-client on console-fra.rpki-client.org