$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/407f53f0-2a9c-3136-9379-57a68568a38a.roa File: 407f53f0-2a9c-3136-9379-57a68568a38a.roa (raw, json) Hash identifier: Ob/z5Hi1ZPKWR2185SGyjKWPVOXS1BULYPKj//DZ72w= Subject key identifier: 90:7E:FA:E1:28:60:BC:1F:2C:74:2F:45:C2:C7:96:AE:24:12:B6:4F Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285847E62B317D1439D612DA6BAD40 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/407f53f0-2a9c-3136-9379-57a68568a38a.roa Signing time: Sat 16 Nov 2024 14:00:41 +0000 ROA not before: Sat 16 Nov 2024 14:00:41 +0000 ROA not after: Fri 14 Feb 2025 14:00:41 +0000 asID: 15169 IP address blocks: 142.250.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e6:2b:31:7d:14:39:d6:12:da:6b:ad:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Nov 16 14:00:41 2024 GMT Not After : Feb 14 14:00:41 2025 GMT Subject: CN=bd3dbcae-9d07-4b6f-8f69-bca5f5db99f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:97:85:ca:67:35:12:70:ad:34:9a:ad:8c:82: cf:34:d6:23:ca:6b:48:f2:b6:e2:00:61:f4:90:3a: 10:fd:0f:36:78:e6:92:10:27:01:31:a0:e9:c0:67: e6:57:45:46:33:4a:0d:04:9e:f6:ac:49:a2:b2:ac: b2:97:66:88:4b:c2:14:5e:97:f3:2b:cf:37:18:5b: 10:89:4e:3a:0a:bb:1d:89:a3:cd:99:c7:7a:8d:b8: 1f:7f:bb:7d:45:d7:56:a8:95:5b:9d:6b:9f:a3:27: 97:c2:d8:80:30:1f:ea:62:19:ea:da:67:0b:fb:3e: 21:c3:b7:b1:7e:d6:f0:9b:a6:af:30:9a:42:a6:27: f0:f4:46:45:2c:5b:52:63:64:af:ed:6b:15:5d:07: cd:3e:1a:f3:d9:e5:5d:4c:90:53:2a:c4:1f:db:eb: 48:fa:94:9a:0e:b3:b1:a6:9e:77:ab:6f:22:02:b9: df:7d:2b:98:f2:7f:fd:a4:d5:8a:e9:c2:a6:63:99: 91:ab:99:c0:54:21:1e:78:cf:c6:b5:96:22:9f:fa: 06:76:cc:8d:12:7c:e2:ae:f9:ed:25:14:8b:a2:77: 2a:9e:91:71:43:62:06:32:91:7d:8e:b3:bf:2f:c6: 95:d3:11:ad:aa:83:db:d7:dd:de:90:c4:62:a2:17: 9b:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:7E:FA:E1:28:60:BC:1F:2C:74:2F:45:C2:C7:96:AE:24:12:B6:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/407f53f0-2a9c-3136-9379-57a68568a38a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:b0:09:5f:b6:ab:da:e8:f8:1b:16:d2:e7:07:29:b2:6a:21: c3:80:83:cc:e0:79:e6:52:4e:43:51:12:d1:98:21:c3:13:52: 23:d1:d4:8b:fc:40:17:e9:6d:8d:a7:0b:79:91:62:1e:9a:bd: 32:75:6f:57:ae:51:2a:cd:70:71:54:e5:2e:38:48:02:64:51: c4:94:47:0a:ea:f5:bc:87:c6:6f:16:8e:ae:b8:fe:04:d9:68: 2c:13:ce:35:23:c0:5c:33:a1:a9:c4:c9:28:98:63:44:d1:25: c2:b1:1c:7c:e9:cd:08:37:d7:88:77:ab:22:8c:92:59:53:b4: f0:9c:c5:75:44:cc:d1:9a:f8:21:18:ac:8d:41:d3:4c:30:9e: ff:bf:0a:53:af:ee:3d:f5:40:3e:19:ec:9f:e7:fc:40:55:fb: e4:64:6b:c3:8a:63:4b:90:ee:68:2f:1a:09:a7:17:59:14:86: 2a:be:e0:b9:f4:1f:1d:16:ba:ea:24:fc:6f:0f:e7:61:73:9f: e9:ea:8c:43:38:70:50:18:5c:b7:6c:38:37:38:f5:75:c3:51: 6c:3d:19:b6:4a:29:1f:e3:3d:c4:c0:c9:7c:50:98:27:01:80: 0e:ee:0b:32:2f:0f:94:63:1f:0d:7e:b3:e7:24:17:80:ae:55: c4:fc:51:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKzF9FDnWEtprrUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk YmQzZGJjYWUtOWQwNy00YjZmLThmNjktYmNhNWY1ZGI5OWYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZeFymc1EnCtNJqtjILPNNYjymtI8rbiAGH0 kDoQ/Q82eOaSECcBMaDpwGfmV0VGM0oNBJ72rEmisqyyl2aIS8IUXpfzK883GFsQ iU46CrsdiaPNmcd6jbgff7t9RddWqJVbnWufoyeXwtiAMB/qYhnq2mcL+z4hw7ex ftbwm6avMJpCpifw9EZFLFtSY2Sv7WsVXQfNPhrz2eVdTJBTKsQf2+tI+pSaDrOx pp53q28iArnffSuY8n/9pNWK6cKmY5mRq5nAVCEeeM/GtZYin/oGdsyNEnzirvnt JRSLoncqnpFxQ2IGMpF9jrO/L8aV0xGtqoPb193ekMRiohebeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJB++uEoYLwfLHQvRcLHlq4kErZPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNDA3ZjUzZjAtMmE5Yy0z MTM2LTkzNzktNTdhNjg1NjhhMzhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGSwCV+2q9ro+BsW0ucHKbJqIcOAg8zgeeZSTkNREtGYIcMTUiPR1Iv8 QBfpbY2nC3mRYh6avTJ1b1euUSrNcHFU5S44SAJkUcSURwrq9byHxm8Wjq64/gTZ aCwTzjUjwFwzoanEySiYY0TRJcKxHHzpzQg314h3qyKMkllTtPCcxXVEzNGa+CEY rI1B00wwnv+/ClOv7j31QD4Z7J/n/EBV++Rka8OKY0uQ7mgvGgmnF1kUhiq+4Ln0 Hx0Wuuok/G8P52Fzn+nqjEM4cFAYXLdsODc49XXDUWw9GbZKKR/jPcTAyXxQmCcB gA7uCzIvD5RjHw1+s+ckF4CuVcT8US8= -----END CERTIFICATE-----Generated at Fri Nov 22 00:25:15 2024 by rpki-client on console-fra.rpki-client.org