$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4af43742-c872-3d5e-a21f-1c5ec5858071.roa File: 4af43742-c872-3d5e-a21f-1c5ec5858071.roa (raw, json) Hash identifier: N3n+E0dLMkjYtxJsc0hEmpjg5ZcNCr22qOE6UQ4F2KA= Subject key identifier: 7C:0C:43:04:D8:1E:B9:76:02:4E:99:D7:77:FA:F2:F0:12:7F:59:03 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285847E62B5C7F24212B0161E39A00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4af43742-c872-3d5e-a21f-1c5ec5858071.roa Signing time: Sat 16 Nov 2024 14:00:41 +0000 ROA not before: Sat 16 Nov 2024 14:00:41 +0000 ROA not after: Fri 14 Feb 2025 14:00:41 +0000 asID: 15169 IP address blocks: 142.250.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e6:2b:5c:7f:24:21:2b:01:61:e3:9a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Nov 16 14:00:41 2024 GMT Not After : Feb 14 14:00:41 2025 GMT Subject: CN=11a38dda-ab98-4a48-bfd2-c14754977476 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:8a:68:11:3e:31:69:42:da:bb:7e:8b:87:90: 20:73:4e:69:fe:61:2a:4c:da:3f:06:ad:37:8e:ed: 4d:39:71:57:44:2a:9a:36:c9:58:2c:6f:c8:8e:4c: 4b:8e:83:d2:a3:70:76:65:ad:7e:9a:ac:0f:5a:2e: 0c:d8:0f:49:1b:9a:29:d0:a7:40:d9:f5:03:53:65: 63:dc:51:c3:69:95:2f:8e:d0:42:c7:3c:d7:af:7b: 38:e9:86:3e:9a:e0:65:36:26:74:7b:fa:b5:46:b5: a1:29:eb:bd:17:02:5d:ff:b1:d7:97:76:65:6b:24: c6:5c:73:8a:a1:8f:85:c8:91:9f:0f:2f:91:3d:25: a9:97:22:14:ef:00:15:dc:59:c2:ae:5b:29:ef:39: 40:34:c3:4a:4d:da:07:aa:d1:04:0d:66:1c:47:56: 52:ba:b3:63:83:a9:d8:cb:bb:c8:b4:0f:85:73:f3: 40:37:d7:1a:4a:90:81:ba:c5:86:25:2d:57:5a:80: 04:e0:77:5b:ca:74:b4:57:5c:89:fc:20:0f:1e:8d: d7:2e:8f:18:5a:09:cc:aa:cd:7d:db:2c:eb:e2:0a: 57:1d:be:f5:cb:d0:37:5c:73:c5:b3:5a:ab:98:03: e2:e3:34:cc:fe:e3:b7:0e:02:f6:85:61:5f:54:f5: 03:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:0C:43:04:D8:1E:B9:76:02:4E:99:D7:77:FA:F2:F0:12:7F:59:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4af43742-c872-3d5e-a21f-1c5ec5858071.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:93:28:fb:04:ba:65:b0:d3:6d:0f:a2:c6:61:8a:df:37:a1: 45:29:eb:29:6f:f6:c5:9a:5e:a3:9c:51:6c:e6:45:7c:21:74: 3a:b1:10:d8:a0:04:4c:a9:dd:62:5a:c5:eb:dd:87:14:9c:0e: 6b:67:06:95:25:55:2d:02:3f:dc:bd:47:89:ef:8d:91:fe:10: 0f:01:d1:30:df:7e:87:51:6f:81:aa:3e:89:9f:df:fb:55:8d: 35:37:e5:e6:1d:e4:56:e2:4b:a6:a7:f8:e8:76:47:82:48:d4: 46:88:6a:51:6e:ff:e1:2e:be:0c:99:e2:34:24:78:74:9e:52: d6:ea:da:28:5e:55:c4:6d:08:39:64:c2:64:37:09:82:d7:97: ca:9f:f9:5d:7d:b9:10:27:ab:78:34:5e:04:a0:0e:cd:1d:0d: f6:a0:b6:ad:63:15:e9:1e:4d:ab:9a:bc:f7:3c:38:e2:5e:74: 87:7e:70:ff:f9:14:c8:2f:76:4c:c4:84:a3:06:9c:e5:b3:5a: 55:e1:ae:3a:69:ef:b7:d8:32:1f:db:71:18:ad:b5:be:13:0d: 15:13:51:a0:be:73:3c:a3:05:1d:b8:4e:a0:8d:14:a6:61:cc: 93:e1:92:6d:86:a7:bb:ac:19:80:c9:64:27:f5:9e:29:19:a7: 09:84:08:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmK1x/JCErAWHjmgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk MTFhMzhkZGEtYWI5OC00YTQ4LWJmZDItYzE0NzU0OTc3NDc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4opoET4xaULau36Lh5Agc05p/mEqTNo/Bq03 ju1NOXFXRCqaNslYLG/IjkxLjoPSo3B2Za1+mqwPWi4M2A9JG5op0KdA2fUDU2Vj 3FHDaZUvjtBCxzzXr3s46YY+muBlNiZ0e/q1RrWhKeu9FwJd/7HXl3ZlayTGXHOK oY+FyJGfDy+RPSWplyIU7wAV3FnCrlsp7zlANMNKTdoHqtEEDWYcR1ZSurNjg6nY y7vItA+Fc/NAN9caSpCBusWGJS1XWoAE4HdbynS0V1yJ/CAPHo3XLo8YWgnMqs19 2yzr4gpXHb71y9A3XHPFs1qrmAPi4zTM/uO3DgL2hWFfVPUD2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHwMQwTYHrl2Ak6Z13f68vASf1kDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNGFmNDM3NDItYzg3Mi0z ZDVlLWEyMWYtMWM1ZWM1ODU4MDcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvoEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAKTKPsEumWw020PosZhit83oUUp6ylv9sWaXqOcUWzmRXwhdDqxENig BEyp3WJaxevdhxScDmtnBpUlVS0CP9y9R4nvjZH+EA8B0TDffodRb4GqPomf3/tV jTU35eYd5FbiS6an+Oh2R4JI1EaIalFu/+EuvgyZ4jQkeHSeUtbq2iheVcRtCDlk wmQ3CYLXl8qf+V19uRAnq3g0XgSgDs0dDfagtq1jFekeTauavPc8OOJedId+cP/5 FMgvdkzEhKMGnOWzWlXhrjpp77fYMh/bcRittb4TDRUTUaC+czyjBR24TqCNFKZh zJPhkm2Gp7usGYDJZCf1nikZpwmECFw= -----END CERTIFICATE-----Generated at Thu Nov 21 23:40:52 2024 by rpki-client on console-ams.rpki-client.org