$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5ea868a1-53fa-343b-8393-c4b366e016ff.roa File: 5ea868a1-53fa-343b-8393-c4b366e016ff.roa (raw, json) Hash identifier: LzwIlh2EIqyZsaKtjliwk/qKqjrG53138IAZijrJIq0= Subject key identifier: FA:11:EB:82:97:A6:1D:28:3C:C5:47:AE:E8:11:DB:DD:D9:DF:72:88 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285847E62A9B23602B9FC3BAE02580 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5ea868a1-53fa-343b-8393-c4b366e016ff.roa Signing time: Sat 16 Nov 2024 14:00:41 +0000 ROA not before: Sat 16 Nov 2024 14:00:41 +0000 ROA not after: Fri 14 Feb 2025 14:00:41 +0000 asID: 15169 IP address blocks: 142.251.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e6:2a:9b:23:60:2b:9f:c3:ba:e0:25:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Nov 16 14:00:41 2024 GMT Not After : Feb 14 14:00:41 2025 GMT Subject: CN=5b73153e-fcb1-4c1e-a2b8-8965a8ec0516 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:1c:b7:36:1c:1e:59:c8:0b:22:45:d1:59:81: 23:e5:94:bd:5f:8b:d3:33:76:86:c3:02:c2:23:bc: a1:f5:9d:fb:03:17:29:19:5c:ee:62:36:28:b8:68: 2f:30:e4:46:fa:72:d7:55:c6:2e:03:54:84:4b:9f: d3:2b:43:8f:0e:a4:7f:6a:02:83:03:d4:a2:a1:74: 71:f0:4f:29:35:94:ed:fe:3f:5d:2e:24:3d:9e:45: 13:d4:df:fd:35:71:32:7a:72:5b:62:38:a8:75:c9: 5d:2b:e8:56:e6:bc:a9:2c:d7:3e:81:16:90:20:0c: 55:30:66:d2:a7:57:d9:70:d0:7c:63:4a:4f:d1:ae: fa:d3:de:1f:cc:dd:58:6e:94:cb:16:6b:28:7e:72: 05:26:db:e0:04:bd:25:58:a4:e8:fa:e3:cb:e7:53: 58:11:59:a0:f3:32:34:ee:cf:b4:2d:79:12:24:0e: a1:ac:30:8c:dd:3e:46:1c:2c:78:40:38:5a:30:55: d6:51:8b:e1:db:56:cc:37:a6:00:f3:0e:d0:52:73: 5a:af:81:5e:fc:85:33:54:a3:bd:80:2a:8b:35:b7: 0a:85:a1:b5:27:88:91:bc:be:c4:7e:26:6c:9b:79: 9a:14:4e:2f:89:88:df:32:af:bd:f7:1b:e6:d8:60: 86:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:11:EB:82:97:A6:1D:28:3C:C5:47:AE:E8:11:DB:DD:D9:DF:72:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5ea868a1-53fa-343b-8393-c4b366e016ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.35.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:3d:a7:36:bc:44:e6:e8:5a:41:f7:cf:af:99:46:2b:19:4a: d5:b5:23:79:15:28:8f:02:7b:02:a2:0e:f6:3b:ed:27:04:7e: bd:c7:7a:da:fe:81:0d:26:7d:3c:c7:83:d1:cc:ff:05:d7:10: 39:71:6f:3e:fd:65:4e:41:ce:88:86:6e:aa:ad:e9:6e:fa:a6: 0d:86:00:22:a3:18:b0:a1:22:61:12:d3:92:71:65:73:b1:9b: 76:b5:88:95:cb:23:28:39:ae:1a:57:e1:ea:7f:1f:92:44:3a: ac:d7:93:e3:3b:70:9e:98:54:7c:9e:bd:b9:bb:57:14:5c:50: 72:d3:cb:1a:3b:88:cd:7d:df:20:ee:ca:df:27:ee:9e:be:86: 9c:b5:46:6b:12:2c:c2:ed:79:92:dd:bc:7f:69:88:de:b8:3f: 5b:cd:e8:67:09:61:7c:bd:be:8d:9c:94:99:ad:c4:3a:f2:ad: 91:d6:9b:8e:03:c0:63:1b:50:07:fc:d1:3e:72:b2:46:be:1a: 4a:9d:88:ac:21:0e:ae:75:49:b8:23:30:24:13:68:f5:47:87: 26:e8:af:61:2f:f7:b5:29:75:c1:2d:9c:85:d1:ca:27:71:b7: 8c:b4:15:1d:7f:f3:96:9e:6d:6d:61:a5:51:2b:07:46:27:fb: 42:8d:e3:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKpsjYCufw7rgJYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk NWI3MzE1M2UtZmNiMS00YzFlLWEyYjgtODk2NWE4ZWMwNTE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjBy3NhweWcgLIkXRWYEj5ZS9X4vTM3aGwwLC I7yh9Z37AxcpGVzuYjYouGgvMORG+nLXVcYuA1SES5/TK0OPDqR/agKDA9SioXRx 8E8pNZTt/j9dLiQ9nkUT1N/9NXEyenJbYjiodcldK+hW5rypLNc+gRaQIAxVMGbS p1fZcNB8Y0pP0a76094fzN1YbpTLFmsofnIFJtvgBL0lWKTo+uPL51NYEVmg8zI0 7s+0LXkSJA6hrDCM3T5GHCx4QDhaMFXWUYvh21bMN6YA8w7QUnNar4Fe/IUzVKO9 gCqLNbcKhaG1J4iRvL7EfiZsm3maFE4viYjfMq+99xvm2GCGIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPoR64KXph0oPMVHrugR293Z33KIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNWVhODY4YTEtNTNmYS0z NDNiLTgzOTMtYzRiMzY2ZTAxNmZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvsjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABI9pza8ROboWkH3z6+ZRisZStW1I3kVKI8CewKiDvY77ScEfr3Hetr+ gQ0mfTzHg9HM/wXXEDlxbz79ZU5BzoiGbqqt6W76pg2GACKjGLChImES05JxZXOx m3a1iJXLIyg5rhpX4ep/H5JEOqzXk+M7cJ6YVHyevbm7VxRcUHLTyxo7iM193yDu yt8n7p6+hpy1RmsSLMLteZLdvH9piN64P1vN6GcJYXy9vo2clJmtxDryrZHWm44D wGMbUAf80T5yska+GkqdiKwhDq51SbgjMCQTaPVHhybor2Ev97UpdcEtnIXRyidx t4y0FR1/85aebW1hpVErB0Yn+0KN47I= -----END CERTIFICATE-----Generated at Fri Nov 22 00:25:17 2024 by rpki-client on console-fra.rpki-client.org