$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3a0333ff-017a-3e0c-8975-9b7b580911f6.roa File: 3a0333ff-017a-3e0c-8975-9b7b580911f6.roa (raw, json) Hash identifier: /Bih8Zze992BFM+oG3GQQCmnJzY0rHTbYDja5Hkgy6M= Subject key identifier: E1:CB:F8:B3:BA:A1:B1:42:0C:24:CF:BB:8E:C0:48:07:89:3B:B7:A1 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285847E62B45407E7212F9441A0740 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3a0333ff-017a-3e0c-8975-9b7b580911f6.roa Signing time: Sat 16 Nov 2024 14:00:41 +0000 ROA not before: Sat 16 Nov 2024 14:00:41 +0000 ROA not after: Fri 14 Feb 2025 14:00:41 +0000 asID: 15169 IP address blocks: 142.250.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e6:2b:45:40:7e:72:12:f9:44:1a:07:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Nov 16 14:00:41 2024 GMT Not After : Feb 14 14:00:41 2025 GMT Subject: CN=0a34d92f-91f2-4932-9e8f-2a88898abf32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:1a:b5:3b:d9:31:ba:6f:2a:55:71:db:43:31: 62:ad:8c:23:85:95:f2:9b:45:7a:df:95:89:e4:f8: fd:0c:97:e6:c5:49:56:ce:1c:19:31:31:37:a4:2d: 7c:1e:29:11:b8:d9:fb:a8:ff:a3:09:80:b8:c7:18: 5a:ec:c8:0f:f0:3c:9b:e1:c5:b9:23:2e:f5:0a:ec: 9a:e4:4b:d5:f0:09:06:7a:a6:c8:07:27:be:ae:fd: f3:85:dd:8d:bf:f8:3a:df:0f:75:16:0b:7b:54:2d: d5:76:b0:9e:71:82:9e:35:a8:b4:34:a8:b5:bc:6f: 6d:21:5c:36:3e:fd:97:79:f8:66:05:a2:52:c5:3f: 62:53:85:2b:49:3a:c6:e0:aa:d3:9b:70:40:55:0a: ad:ce:81:87:b5:6e:18:09:35:13:9d:d7:0e:6e:60: d4:33:27:6e:57:7d:c3:5b:32:8d:8f:3f:82:f4:3a: 5a:95:e6:e4:5a:89:c8:c4:e0:92:5c:60:84:51:50: 8d:fd:56:66:4c:1d:0e:2c:c0:ab:cd:f6:ed:45:76: 71:9c:7f:f0:6c:3f:f1:21:5e:d1:42:94:67:62:ef: fb:f4:cf:41:70:30:eb:ab:14:37:1c:81:87:63:c8: c3:78:c9:1d:da:e7:a2:fe:e7:85:68:fe:a8:48:67: b1:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:CB:F8:B3:BA:A1:B1:42:0C:24:CF:BB:8E:C0:48:07:89:3B:B7:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3a0333ff-017a-3e0c-8975-9b7b580911f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:27:74:81:9e:f4:19:67:1c:d9:8d:02:6c:b1:e6:24:b1:2d: 60:80:0f:26:ec:c7:fa:ea:7f:82:be:61:67:78:3c:3a:58:9e: 97:99:ce:83:e1:7f:41:dd:3c:f2:2b:14:1e:84:82:fa:b5:fa: 79:40:56:1e:8d:65:47:9b:c5:2d:a4:59:b8:c7:2c:95:d5:85: 26:2c:66:f0:b0:f9:e4:2b:0d:5a:40:57:89:32:ba:92:89:ce: 1d:9b:75:42:5b:dd:f7:b9:8b:4b:bc:54:e6:6b:a8:8c:fa:aa: cc:11:44:4f:05:02:af:da:65:62:61:35:2d:56:75:b8:5a:35: 17:b3:99:c2:35:7b:2b:04:e1:3d:64:a1:75:42:12:4d:b1:f2: c1:82:17:11:16:a2:0a:46:74:78:96:bb:dd:c4:ea:4d:b0:a5: eb:ec:4e:db:91:c3:db:62:e1:78:cc:80:5e:53:2b:e0:25:07: 4b:e1:b0:47:f6:55:97:28:e2:9f:01:bc:f3:14:1c:35:7c:7d: 41:5c:d2:26:34:29:3c:d0:0b:89:75:56:bb:d9:38:0c:b2:9b: 99:a2:f0:0e:c4:59:c4:bc:ab:d3:49:94:a8:ba:e6:a5:0c:74: 3d:68:2a:7c:7f:47:09:37:d7:5c:e3:b8:39:86:7a:d6:6c:49: db:ec:ad:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmK0VAfnIS+UQaB0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk MGEzNGQ5MmYtOTFmMi00OTMyLTllOGYtMmE4ODg5OGFiZjMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRq1O9kxum8qVXHbQzFirYwjhZXym0V635WJ 5Pj9DJfmxUlWzhwZMTE3pC18HikRuNn7qP+jCYC4xxha7MgP8Dyb4cW5Iy71Cuya 5EvV8AkGeqbIBye+rv3zhd2Nv/g63w91Fgt7VC3VdrCecYKeNai0NKi1vG9tIVw2 Pv2XefhmBaJSxT9iU4UrSTrG4KrTm3BAVQqtzoGHtW4YCTUTndcObmDUMyduV33D WzKNjz+C9DpalebkWonIxOCSXGCEUVCN/VZmTB0OLMCrzfbtRXZxnH/wbD/xIV7R QpRnYu/79M9BcDDrqxQ3HIGHY8jDeMkd2uei/ueFaP6oSGexFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOHL+LO6obFCDCTPu47ASAeJO7ehMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvM2EwMzMzZmYtMDE3YS0z ZTBjLTg5NzUtOWI3YjU4MDkxMWY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvprMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAsndIGe9BlnHNmNAmyx5iSxLWCADybsx/rqf4K+YWd4PDpYnpeZzoPh f0HdPPIrFB6Egvq1+nlAVh6NZUebxS2kWbjHLJXVhSYsZvCw+eQrDVpAV4kyupKJ zh2bdUJb3fe5i0u8VOZrqIz6qswRRE8FAq/aZWJhNS1WdbhaNRezmcI1eysE4T1k oXVCEk2x8sGCFxEWogpGdHiWu93E6k2wpevsTtuRw9ti4XjMgF5TK+AlB0vhsEf2 VZco4p8BvPMUHDV8fUFc0iY0KTzQC4l1VrvZOAyym5mi8A7EWcS8q9NJlKi65qUM dD1oKnx/Rwk311zjuDmGetZsSdvsrYo= -----END CERTIFICATE-----Generated at Sun Nov 24 23:10:10 2024 by rpki-client on console-ams.rpki-client.org