$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/60a013d0-02a4-37bc-80b4-e210514778da.roa File: 60a013d0-02a4-37bc-80b4-e210514778da.roa (raw, json) Hash identifier: DlGhAX9yji1mVYjKeQjmx+U+VZR1UxJ+PPKMYHKbcMs= Subject key identifier: 01:8B:D2:56:64:12:6A:A7:3B:C7:5E:22:1E:CA:06:21:09:44:8D:43 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F432858470551698C96ADF9C5D7BF4300 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/60a013d0-02a4-37bc-80b4-e210514778da.roa Signing time: Wed 28 Aug 2024 01:00:31 +0000 ROA not before: Wed 28 Aug 2024 01:00:31 +0000 ROA not after: Tue 26 Nov 2024 02:00:31 +0000 asID: 15169 IP address blocks: 142.251.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Sep 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:05:51:69:8c:96:ad:f9:c5:d7:bf:43:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Aug 28 01:00:31 2024 GMT Not After : Nov 26 02:00:31 2024 GMT Subject: CN=44d8a979-596c-41c4-a388-ae421077feed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:9c:3e:a0:a5:da:19:ca:70:a2:61:7e:f9:73: 2e:c6:e4:12:0f:28:de:ed:7c:d5:7c:5e:d9:83:e4: 13:8c:8f:38:2b:f9:c6:9c:dc:74:26:3d:72:8c:08: 6c:ee:69:37:f0:86:db:0d:31:1d:f8:10:26:2d:c6: 80:93:b6:98:f9:62:91:d6:ca:4b:46:30:ae:74:4d: 7e:3e:b9:d2:81:ce:1d:46:27:4f:e9:e1:de:b8:00: 04:a2:67:b2:0b:89:cd:5f:d3:a9:f3:3c:2c:70:f8: c6:38:ee:aa:63:0a:cf:1a:01:fd:62:09:30:b5:33: da:0b:a5:c0:58:25:56:95:46:9e:ba:27:75:17:50: 10:12:bf:c8:28:1e:74:73:73:fe:e8:bc:0c:54:b3: bf:97:cb:c1:34:09:d1:2f:a1:e4:b3:fa:46:6f:c8: 5a:cb:b6:26:57:5b:67:00:ea:74:ef:9c:cd:44:0e: 74:b8:ac:8b:f8:50:95:75:de:a8:73:ec:d0:b2:ab: 29:02:2a:1e:52:53:32:de:10:2e:30:87:fe:5a:21: e9:15:ed:3b:71:6a:49:3a:de:fb:00:2a:8d:68:b1: 15:a1:3d:8f:f0:18:79:0f:43:af:35:99:16:8b:35: 2b:9d:3a:75:ca:84:32:24:26:16:1d:55:d5:c3:94: 8b:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:8B:D2:56:64:12:6A:A7:3B:C7:5E:22:1E:CA:06:21:09:44:8D:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/60a013d0-02a4-37bc-80b4-e210514778da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:59:63:3b:a1:ab:41:62:7d:83:de:f0:72:46:41:a3:87:01: 49:4d:d9:27:41:48:ac:a6:cd:64:16:b5:c1:b7:b0:3b:ff:76: 9a:ca:7b:bf:8c:2e:c6:b4:12:22:b0:26:e4:be:2c:ef:c9:2e: 9a:26:47:51:77:60:4e:a2:98:b8:55:c2:4c:9d:97:d0:73:af: 1a:5c:f2:f1:6e:3c:ef:71:3f:19:38:81:7d:3e:8a:73:15:34: 68:c3:35:3b:f2:32:a3:34:b4:bb:95:fa:a1:2d:16:08:29:87: 14:72:90:5b:a4:90:3e:29:11:57:58:b5:3a:d2:86:48:75:da: 3b:f2:22:36:da:e7:29:5d:af:f4:e9:b7:ef:83:a8:14:7e:31: 5b:e8:11:11:8f:e7:39:39:58:f3:cf:b9:d8:f8:7b:fa:ce:91: 25:f6:93:71:52:28:ac:00:4a:09:0d:cf:f1:12:99:d3:3f:06: 35:fa:df:ee:ee:e4:09:0f:90:ac:48:fa:d2:b5:25:99:82:c6: 79:2f:ea:37:d1:1e:40:7d:62:11:6e:27:9f:2a:9c:64:08:0d: d4:53:6c:b3:dc:ce:85:1d:3e:8f:b8:36:ba:d4:a5:4d:35:c3: 9b:c2:c4:d1:a5:09:b8:d0:ea:8f:ad:9e:31:e0:35:00:00:66: b8:d4:82:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcFUWmMlq35xde/QwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI0MDgyODAxMDAzMVoXDTI0MTEyNjAyMDAzMVowLzEtMCsGA1UEAxMk NDRkOGE5NzktNTk2Yy00MWM0LWEzODgtYWU0MjEwNzdmZWVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZw+oKXaGcpwomF++XMuxuQSDyje7XzVfF7Z g+QTjI84K/nGnNx0Jj1yjAhs7mk38IbbDTEd+BAmLcaAk7aY+WKR1spLRjCudE1+ PrnSgc4dRidP6eHeuAAEomeyC4nNX9Op8zwscPjGOO6qYwrPGgH9YgkwtTPaC6XA WCVWlUaeuid1F1AQEr/IKB50c3P+6LwMVLO/l8vBNAnRL6Hks/pGb8hay7YmV1tn AOp075zNRA50uKyL+FCVdd6oc+zQsqspAioeUlMy3hAuMIf+WiHpFe07cWpJOt77 ACqNaLEVoT2P8Bh5D0OvNZkWizUrnTp1yoQyJCYWHVXVw5SLJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAGL0lZkEmqnO8deIh7KBiEJRI1DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNjBhMDEzZDAtMDJhNC0z N2JjLTgwYjQtZTIxMDUxNDc3OGRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvskMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAJZYzuhq0FifYPe8HJGQaOHAUlN2SdBSKymzWQWtcG3sDv/dprKe7+M Lsa0EiKwJuS+LO/JLpomR1F3YE6imLhVwkydl9Bzrxpc8vFuPO9xPxk4gX0+inMV NGjDNTvyMqM0tLuV+qEtFggphxRykFukkD4pEVdYtTrShkh12jvyIjba5yldr/Tp t++DqBR+MVvoERGP5zk5WPPPudj4e/rOkSX2k3FSKKwASgkNz/ESmdM/BjX63+7u 5AkPkKxI+tK1JZmCxnkv6jfRHkB9YhFuJ58qnGQIDdRTbLPczoUdPo+4NrrUpU01 w5vCxNGlCbjQ6o+tnjHgNQAAZrjUgmM= -----END CERTIFICATE-----Generated at Sat Sep 7 23:18:48 2024 by rpki-client on console-fra.rpki-client.org