$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/48a8d3df-9c4e-3937-96fb-5dbdc5e42492.roa File: 48a8d3df-9c4e-3937-96fb-5dbdc5e42492.roa (raw, json) Hash identifier: 3ygj3bFT4c+gdAXVkxWdbs3QoqOgOXDE2UspLo2UfKE= Subject key identifier: 36:DD:73:56:F0:93:02:62:E7:E6:31:95:41:EF:6B:04:1D:75:23:F3 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285847E62AAA47F096C17F4B180B00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/48a8d3df-9c4e-3937-96fb-5dbdc5e42492.roa Signing time: Sat 16 Nov 2024 14:00:41 +0000 ROA not before: Sat 16 Nov 2024 14:00:41 +0000 ROA not after: Fri 14 Feb 2025 14:00:41 +0000 asID: 15169 IP address blocks: 142.250.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e6:2a:aa:47:f0:96:c1:7f:4b:18:0b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Nov 16 14:00:41 2024 GMT Not After : Feb 14 14:00:41 2025 GMT Subject: CN=d8299454-3510-40c2-b2aa-534d72b826c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:39:77:12:01:f2:7e:20:4b:c2:6e:e7:d4:8d: 80:76:e6:50:6e:82:7e:ac:51:cb:e0:95:7a:87:1b: 57:c7:8d:ff:c5:a1:a8:c6:fc:67:d1:2f:03:0a:fd: ac:56:20:08:6c:9f:98:6a:06:9c:7b:f1:68:cc:f3: 03:30:83:13:58:a1:e0:ec:48:74:dc:f3:e4:9a:b0: 01:c0:9a:c7:df:a4:5c:37:40:17:f8:4e:d3:1b:98: 38:5d:d2:43:cc:17:47:6e:35:1d:a6:2d:0b:03:99: e1:7e:d3:5d:a8:af:7c:e6:2c:cb:9b:8c:39:db:16: a7:29:cc:79:23:82:dc:ca:ca:fe:cd:19:fd:46:fb: 9b:26:99:3b:5e:15:d3:5c:6e:98:d3:70:37:dc:58: c2:f0:9a:b9:20:9c:2c:c4:1a:c3:82:11:dd:63:13: 7c:fa:f4:17:5c:e8:32:9f:87:e4:e3:22:26:9c:be: 3b:49:03:ce:19:38:26:ac:39:ae:b4:c6:60:a4:0b: b9:9b:cf:fa:2e:5f:78:bf:5d:9e:ba:f5:e4:aa:41: ad:2d:25:de:2a:48:f6:42:66:8f:a7:2a:30:bf:df: c3:ff:58:07:bc:f7:50:1c:28:0f:32:f6:47:15:b8: 10:c3:de:8c:c0:74:ca:fa:d8:03:e2:f6:33:ee:a0: 56:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:DD:73:56:F0:93:02:62:E7:E6:31:95:41:EF:6B:04:1D:75:23:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/48a8d3df-9c4e-3937-96fb-5dbdc5e42492.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:08:24:b7:56:b9:e3:f0:69:a3:3a:ba:57:01:9e:e7:fb:38: 95:16:56:7f:78:d9:2c:3f:92:42:99:ad:88:83:18:5e:f2:4d: 09:69:d6:0f:da:6e:34:ef:4f:49:bb:14:70:bb:b4:64:0a:1e: ce:9e:1c:08:0b:74:d6:66:e2:a0:de:f0:b7:7d:fa:94:60:7c: 19:7d:78:63:27:5e:74:ee:62:d7:07:d2:a6:3b:65:ad:12:f1: b6:fc:97:66:dc:35:2c:17:8a:2a:cb:e4:1c:4a:86:da:38:86: fc:43:a0:ef:2b:38:12:42:5f:98:0c:e3:fd:cc:c7:91:cc:a8: 4f:83:69:ad:14:65:8d:b1:9e:5c:15:21:a7:d3:08:9b:91:0e: b6:93:34:eb:a9:e3:00:22:03:23:49:70:46:f7:15:15:72:6f: d6:d5:4c:00:f5:c4:9f:48:14:19:27:4d:44:9c:f6:7f:27:98: 76:84:ea:b6:dc:3c:09:57:6e:2f:fa:25:2e:8c:14:7d:3c:cb: c2:9e:2f:4e:39:a2:a0:73:69:d9:97:db:98:ef:b6:d1:ca:3e: 9c:00:d0:4e:e4:3b:52:f3:d3:f6:66:53:85:18:a6:d5:6a:b0: cd:69:ff:70:10:d6:9f:52:85:06:e9:a1:ba:16:cd:b5:8a:6d: e5:a0:78:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKqpH8JbBf0sYCwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk ZDgyOTk0NTQtMzUxMC00MGMyLWIyYWEtNTM0ZDcyYjgyNmMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTl3EgHyfiBLwm7n1I2AduZQboJ+rFHL4JV6 hxtXx43/xaGoxvxn0S8DCv2sViAIbJ+Yagace/FozPMDMIMTWKHg7Eh03PPkmrAB wJrH36RcN0AX+E7TG5g4XdJDzBdHbjUdpi0LA5nhftNdqK985izLm4w52xanKcx5 I4Lcysr+zRn9RvubJpk7XhXTXG6Y03A33FjC8Jq5IJwsxBrDghHdYxN8+vQXXOgy n4fk4yImnL47SQPOGTgmrDmutMZgpAu5m8/6Ll94v12euvXkqkGtLSXeKkj2QmaP pyowv9/D/1gHvPdQHCgPMvZHFbgQw96MwHTK+tgD4vYz7qBWSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDbdc1bwkwJi5+YxlUHvawQddSPzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNDhhOGQzZGYtOWM0ZS0z OTM3LTk2ZmItNWRiZGM1ZTQyNDkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvoLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA8IJLdWuePwaaM6ulcBnuf7OJUWVn942Sw/kkKZrYiDGF7yTQlp1g/a bjTvT0m7FHC7tGQKHs6eHAgLdNZm4qDe8Ld9+pRgfBl9eGMnXnTuYtcH0qY7Za0S 8bb8l2bcNSwXiirL5BxKhto4hvxDoO8rOBJCX5gM4/3Mx5HMqE+Daa0UZY2xnlwV IafTCJuRDraTNOup4wAiAyNJcEb3FRVyb9bVTAD1xJ9IFBknTUSc9n8nmHaE6rbc PAlXbi/6JS6MFH08y8KeL045oqBzadmX25jvttHKPpwA0E7kO1Lz0/ZmU4UYptVq sM1p/3AQ1p9ShQbpoboWzbWKbeWgeIk= -----END CERTIFICATE-----Generated at Sun Nov 24 23:59:13 2024 by rpki-client on console-fra.rpki-client.org