$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/558a9f03-d275-3df3-9fd9-2afd50775883.roa File: 558a9f03-d275-3df3-9fd9-2afd50775883.roa (raw, json) Hash identifier: Fyu7mTu3iD29lNGbivUFl+qS+uCmSIT1RrLr1URo7e8= Subject key identifier: 7E:D2:56:74:4A:F7:67:C6:4B:62:4E:0C:1A:63:04:D9:44:FE:A5:04 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F432858471E707C0E3A38A9E8DBD32680 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/558a9f03-d275-3df3-9fd9-2afd50775883.roa Signing time: Fri 06 Sep 2024 01:00:31 +0000 ROA not before: Fri 06 Sep 2024 01:00:31 +0000 ROA not after: Thu 05 Dec 2024 02:00:31 +0000 asID: 15169 IP address blocks: 142.250.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:1e:70:7c:0e:3a:38:a9:e8:db:d3:26:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 6 01:00:31 2024 GMT Not After : Dec 5 02:00:31 2024 GMT Subject: CN=9c0b0d2f-87f9-4ca6-89c1-06d809971b91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e4:be:8d:8b:01:e3:ad:04:18:c4:0b:e6:f9: e1:7c:39:c5:a9:2b:10:b5:91:63:b8:ad:12:c6:d0: 32:d3:0c:44:0e:3e:29:86:43:8f:36:37:51:fa:8f: 37:0e:3a:e1:1e:5b:dc:56:5b:fb:c7:80:ff:39:27: b8:5c:fd:3f:1b:f4:84:aa:4d:bb:d1:88:8b:86:45: 63:a8:40:e8:75:24:55:9a:6d:48:7e:9c:ea:5b:d7: 4f:08:5e:80:84:3d:fa:55:3d:3c:53:8a:a3:79:de: 7f:71:59:be:5d:5e:17:0d:d8:84:0b:56:21:d4:8b: 92:d3:6d:1d:23:92:d2:e0:0d:df:94:b3:94:9d:b5: de:5e:53:08:63:e9:05:43:aa:a0:cd:b6:f4:94:db: 20:05:bc:37:c2:13:4c:64:56:30:6b:2d:44:66:eb: 4c:4e:f1:7e:25:4d:4e:8e:f5:d7:92:e9:f1:f2:e7: c5:60:6e:f6:31:aa:a2:6c:3a:53:f7:64:8a:75:b0: d1:99:c3:46:09:8f:e7:ab:da:8e:54:51:0e:6f:e3: 2b:fd:91:e0:e4:a3:0f:b6:74:ba:e2:91:d6:ec:26: db:a8:0e:e0:85:b0:69:ae:e9:68:d7:ab:87:0d:68: 43:a2:ee:16:e3:82:4c:cc:6e:d8:01:4f:95:25:54: 3a:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:D2:56:74:4A:F7:67:C6:4B:62:4E:0C:1A:63:04:D9:44:FE:A5:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/558a9f03-d275-3df3-9fd9-2afd50775883.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:16:49:3e:a4:54:58:07:76:50:6f:5b:7e:08:13:67:d3:c4: 7d:9c:fb:57:49:04:c7:1b:01:6d:dd:14:7b:5c:ee:00:49:c3: f3:9e:14:35:ec:ef:d6:64:66:39:0e:c7:bb:2a:46:44:cc:ca: 4a:00:c7:b0:33:8e:73:94:f1:0a:96:cf:5c:ad:c6:0a:06:e0: 02:17:b1:01:6c:05:87:95:3e:d9:81:26:d0:da:7b:b1:65:5c: 8a:e1:c9:3d:e0:1e:82:45:0d:7c:0f:55:10:71:da:0c:0f:75: 57:2d:4b:37:38:8d:03:d7:4f:0e:ce:98:ab:d4:5c:fd:dd:1b: 1e:4d:e7:da:c0:7d:de:80:28:07:c7:43:6b:c5:6c:82:d6:ee: 3f:bc:56:24:d1:14:52:e8:1d:7a:e1:34:df:c6:2b:16:91:91: 5f:c6:31:70:30:12:97:1d:3b:e1:e5:0c:f4:95:25:9d:b8:d2: 1b:85:64:e8:94:43:9c:2e:87:f5:14:23:84:46:8f:95:48:ac: 99:42:4f:82:75:e3:29:60:6c:f3:1f:68:14:ab:59:5a:79:57: 78:f0:fa:c0:61:1c:80:39:77:8f:82:84:ed:fe:38:37:34:a9: b4:f1:54:0b:30:a8:13:36:23:44:e6:11:fc:ef:5e:55:3c:ce: 69:41:33:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcecHwOOjip6NvTJoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI0MDkwNjAxMDAzMVoXDTI0MTIwNTAyMDAzMVowLzEtMCsGA1UEAxMk OWMwYjBkMmYtODdmOS00Y2E2LTg5YzEtMDZkODA5OTcxYjkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+S+jYsB460EGMQL5vnhfDnFqSsQtZFjuK0S xtAy0wxEDj4phkOPNjdR+o83DjrhHlvcVlv7x4D/OSe4XP0/G/SEqk270YiLhkVj qEDodSRVmm1IfpzqW9dPCF6AhD36VT08U4qjed5/cVm+XV4XDdiEC1Yh1IuS020d I5LS4A3flLOUnbXeXlMIY+kFQ6qgzbb0lNsgBbw3whNMZFYway1EZutMTvF+JU1O jvXXkunx8ufFYG72MaqibDpT92SKdbDRmcNGCY/nq9qOVFEOb+Mr/ZHg5KMPtnS6 4pHW7CbbqA7ghbBprulo16uHDWhDou4W44JMzG7YAU+VJVQ6OQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH7SVnRK92fGS2JODBpjBNlE/qUEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNTU4YTlmMDMtZDI3NS0z ZGYzLTlmZDktMmFmZDUwNzc1ODgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvoYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJgWST6kVFgHdlBvW34IE2fTxH2c+1dJBMcbAW3dFHtc7gBJw/OeFDXs 79ZkZjkOx7sqRkTMykoAx7AzjnOU8QqWz1ytxgoG4AIXsQFsBYeVPtmBJtDae7Fl XIrhyT3gHoJFDXwPVRBx2gwPdVctSzc4jQPXTw7OmKvUXP3dGx5N59rAfd6AKAfH Q2vFbILW7j+8ViTRFFLoHXrhNN/GKxaRkV/GMXAwEpcdO+HlDPSVJZ240huFZOiU Q5wuh/UUI4RGj5VIrJlCT4J14ylgbPMfaBSrWVp5V3jw+sBhHIA5d4+ChO3+ODc0 qbTxVAswqBM2I0TmEfzvXlU8zmlBM9g= -----END CERTIFICATE-----Generated at Fri Nov 22 00:25:16 2024 by rpki-client on console-fra.rpki-client.org