$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5c14841b-34b6-3ae7-bc3c-e1de07c1cda2.roa File: 5c14841b-34b6-3ae7-bc3c-e1de07c1cda2.roa (raw, json) Hash identifier: 1j/1oASmBPSTc5GZRRueVYCLl+ylc2ERZu6x9KAT1z4= Subject key identifier: A2:F7:4F:66:DA:2F:06:F3:E6:7B:CC:B4:93:4D:1A:A9:16:72:F4:ED Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285847E62B33846D0B60A98BF25280 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5c14841b-34b6-3ae7-bc3c-e1de07c1cda2.roa Signing time: Sat 16 Nov 2024 14:00:41 +0000 ROA not before: Sat 16 Nov 2024 14:00:41 +0000 ROA not after: Fri 14 Feb 2025 14:00:41 +0000 asID: 15169 IP address blocks: 142.250.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e6:2b:33:84:6d:0b:60:a9:8b:f2:52:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Nov 16 14:00:41 2024 GMT Not After : Feb 14 14:00:41 2025 GMT Subject: CN=c27553b8-fc1c-45f7-92a6-04a651813ad3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:d2:a3:68:36:3c:df:ea:cd:65:66:7a:38:d0: 7c:9f:e0:c7:3d:b4:f6:09:66:c1:35:8c:cc:46:d6: b6:0a:04:ed:dc:68:c1:29:0e:9b:d2:6e:a1:10:78: 6b:48:24:74:03:70:df:02:a2:9c:01:65:6a:59:24: 2b:5c:0f:7d:61:29:86:a9:9d:61:7f:0e:33:36:02: fe:c9:d0:6a:a6:b4:d0:71:22:70:a8:bc:d2:b6:42: e8:69:5f:4c:e2:42:f4:e5:a2:33:33:51:94:08:d8: 92:06:d2:a2:a0:b9:3b:9d:e1:b9:02:42:60:6f:b5: 11:87:bb:81:46:90:7b:d6:6e:81:22:bb:7c:9d:58: c1:b9:cc:19:70:15:c9:c7:57:42:e4:df:7e:f5:71: 78:6e:5e:a3:46:44:c0:cf:d5:86:11:5d:4d:96:37: 1f:37:ee:17:e6:d1:06:bd:a7:25:07:7d:c6:8a:20: 4d:e4:b1:1a:10:82:d5:65:b7:50:68:d6:3c:27:78: db:6d:b7:22:4f:c5:9f:81:46:8b:20:43:68:5a:a7: 54:72:5b:36:7a:c9:af:e4:43:dc:e8:15:9f:17:0d: d9:40:cc:91:6c:e4:26:5b:01:a4:5c:6b:7e:b6:0e: 41:34:ed:d8:21:c5:b0:f4:ea:39:0a:84:89:7b:7a: 63:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:F7:4F:66:DA:2F:06:F3:E6:7B:CC:B4:93:4D:1A:A9:16:72:F4:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5c14841b-34b6-3ae7-bc3c-e1de07c1cda2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:b3:a4:31:53:0c:ba:fe:76:d1:b1:0c:33:3d:f5:69:d7:55: 68:09:f3:ef:35:45:ab:d3:01:51:8d:86:53:eb:17:d0:10:41: 39:c7:6d:49:4f:95:91:9e:68:6a:43:f7:ce:20:40:f3:1c:c8: 71:b3:c0:57:15:7e:b2:0a:7b:7b:5c:42:43:ad:1c:a8:2e:30: c0:83:de:9f:bd:f6:63:52:ff:12:80:41:d6:71:37:d0:03:4b: 2e:08:d6:4b:5f:91:18:8c:c7:e3:b3:47:a4:9f:9d:9f:f2:64: 33:2c:c8:ef:10:27:28:e7:09:29:89:e9:41:3c:c5:23:e1:2d: 1d:6d:1f:df:50:ad:84:09:91:45:29:15:c2:24:db:04:87:50: c6:b0:45:d3:93:68:45:a9:cd:c5:77:3f:be:c2:22:40:9b:99: 79:d3:e9:be:da:84:56:b7:94:fc:c4:d7:3f:23:c1:13:d6:df: 50:c2:a2:87:7b:11:b5:3c:60:7f:b2:d8:6c:d9:d7:87:bb:29: 43:38:e7:21:85:21:7c:2b:af:dc:6b:77:c9:a2:41:bf:34:bf: 27:96:09:fd:22:87:9b:8f:ea:10:4a:94:b4:cf:57:2e:1b:98: d8:57:58:20:f4:e0:7c:89:57:33:cb:eb:76:c0:22:2c:d8:dc: 89:fc:2e:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKzOEbQtgqYvyUoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk YzI3NTUzYjgtZmMxYy00NWY3LTkyYTYtMDRhNjUxODEzYWQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgdKjaDY83+rNZWZ6ONB8n+DHPbT2CWbBNYzM Rta2CgTt3GjBKQ6b0m6hEHhrSCR0A3DfAqKcAWVqWSQrXA99YSmGqZ1hfw4zNgL+ ydBqprTQcSJwqLzStkLoaV9M4kL05aIzM1GUCNiSBtKioLk7neG5AkJgb7URh7uB RpB71m6BIrt8nVjBucwZcBXJx1dC5N9+9XF4bl6jRkTAz9WGEV1NljcfN+4X5tEG vaclB33GiiBN5LEaEILVZbdQaNY8J3jbbbciT8WfgUaLIENoWqdUcls2esmv5EPc 6BWfFw3ZQMyRbOQmWwGkXGt+tg5BNO3YIcWw9Oo5CoSJe3pj2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKL3T2baLwbz5nvMtJNNGqkWcvTtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNWMxNDg0MWItMzRiNi0z YWU3LWJjM2MtZTFkZTA3YzFjZGEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvqwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJazpDFTDLr+dtGxDDM99WnXVWgJ8+81RavTAVGNhlPrF9AQQTnHbUlP lZGeaGpD984gQPMcyHGzwFcVfrIKe3tcQkOtHKguMMCD3p+99mNS/xKAQdZxN9AD Sy4I1ktfkRiMx+OzR6SfnZ/yZDMsyO8QJyjnCSmJ6UE8xSPhLR1tH99QrYQJkUUp FcIk2wSHUMawRdOTaEWpzcV3P77CIkCbmXnT6b7ahFa3lPzE1z8jwRPW31DCood7 EbU8YH+y2GzZ14e7KUM45yGFIXwrr9xrd8miQb80vyeWCf0ih5uP6hBKlLTPVy4b mNhXWCD04HyJVzPL63bAIizY3In8Ljg= -----END CERTIFICATE-----Generated at Fri Nov 22 00:25:16 2024 by rpki-client on console-fra.rpki-client.org