$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/60a013d0-02a4-37bc-80b4-e210514778da.roa File: 60a013d0-02a4-37bc-80b4-e210514778da.roa (raw, json) Hash identifier: ETT2ML54pRyyoK8lKlZb1uUt7l+CXOBDWbN7cb4PqsY= Subject key identifier: 2B:78:40:90:37:67:B5:18:14:97:7E:4C:AC:F7:4D:94:D0:AE:97:68 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285847E62B628AD57DEDE67EF59740 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/60a013d0-02a4-37bc-80b4-e210514778da.roa Signing time: Sat 16 Nov 2024 14:00:41 +0000 ROA not before: Sat 16 Nov 2024 14:00:41 +0000 ROA not after: Fri 14 Feb 2025 14:00:41 +0000 asID: 15169 IP address blocks: 142.251.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e6:2b:62:8a:d5:7d:ed:e6:7e:f5:97:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Nov 16 14:00:41 2024 GMT Not After : Feb 14 14:00:41 2025 GMT Subject: CN=ac251226-32de-46af-a9d4-6a53eaa70497 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:78:2d:c5:e9:dc:46:40:f4:6d:92:7a:f1:b5: fb:33:6e:a0:8e:84:55:3d:a2:71:d2:99:5f:72:77: 4a:00:77:d9:21:70:d3:4c:c3:4f:e0:6a:c8:44:47: dd:b8:bf:2f:38:69:ae:7f:a5:6a:80:04:82:52:cf: 24:61:3e:60:14:56:4a:c5:48:0f:d7:12:92:57:da: ad:58:f7:b9:d1:05:85:d1:18:9b:dc:d2:fe:76:d7: a7:66:e1:db:84:e6:6e:64:fc:90:df:00:97:e6:23: b8:e3:3b:50:16:2f:76:34:10:1d:c2:16:ea:3a:28: 1d:7e:e5:77:e2:4f:80:27:ea:68:ac:4a:6d:76:4d: 83:62:71:72:73:ee:9c:b6:aa:98:f1:97:4a:7f:c3: c9:25:d7:d4:98:8a:9f:04:bc:8a:00:6d:d2:10:83: 3a:e1:21:fa:bf:d2:3a:4a:2e:0e:b2:84:b0:46:5e: 21:d1:26:b4:33:83:0c:04:16:bc:01:a1:5e:6f:70: 55:f5:57:d9:80:a8:78:70:58:83:35:22:c6:81:77: 43:72:0b:d9:b4:b0:3e:61:13:20:f7:3a:c1:e9:61: 32:e2:08:14:34:f0:19:de:5d:e0:f9:1a:ff:6e:f1: 0f:04:b8:6f:5d:3f:36:f4:ba:16:b2:4c:60:ca:d5: f6:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:78:40:90:37:67:B5:18:14:97:7E:4C:AC:F7:4D:94:D0:AE:97:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/60a013d0-02a4-37bc-80b4-e210514778da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:46:68:19:b7:43:14:b4:84:97:6d:c3:c2:56:7b:b7:d3:35: 82:b4:de:23:8a:9e:2f:19:f2:f3:a3:2f:5b:a5:f2:e4:22:3e: 95:92:eb:f5:78:ee:26:10:06:02:6b:45:04:93:d2:bb:ed:7b: e8:62:2d:6a:5c:98:ae:59:4d:9a:3d:64:62:ce:e0:b5:ee:b1: a0:1e:e6:19:60:2d:63:fe:b5:48:f1:82:d1:b1:3a:3d:05:87: c3:66:00:0f:37:fd:1a:13:94:8d:68:90:a6:a1:62:34:eb:ed: 22:96:93:21:f1:b1:99:8d:43:a4:4d:12:51:02:70:9c:3a:9d: 87:58:26:a8:e0:12:69:61:7d:46:73:c5:95:0c:46:21:65:93: a1:3a:1a:4a:36:f3:55:68:c2:5a:9b:9a:23:f3:2f:1a:81:b9: 1f:c4:17:52:f2:c5:15:de:42:cd:40:f9:f1:bc:45:3c:c2:84: 98:a0:3f:2b:35:97:2d:63:1f:8b:23:28:5e:ed:7b:c5:ae:ee: 3b:b7:71:22:6d:6f:65:91:f8:b4:95:28:d2:fc:53:6b:ed:14: bf:40:c7:7f:70:b2:c2:1c:91:0b:44:e5:8b:68:10:df:b0:a9: cc:e8:c1:c9:ef:39:4e:2d:7b:ce:81:35:fc:8c:11:fb:39:4b: 38:a3:c4:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmK2KK1X3t5n71l0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk YWMyNTEyMjYtMzJkZS00NmFmLWE5ZDQtNmE1M2VhYTcwNDk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg3gtxencRkD0bZJ68bX7M26gjoRVPaJx0plf cndKAHfZIXDTTMNP4GrIREfduL8vOGmuf6VqgASCUs8kYT5gFFZKxUgP1xKSV9qt WPe50QWF0Rib3NL+dtenZuHbhOZuZPyQ3wCX5iO44ztQFi92NBAdwhbqOigdfuV3 4k+AJ+porEptdk2DYnFyc+6ctqqY8ZdKf8PJJdfUmIqfBLyKAG3SEIM64SH6v9I6 Si4OsoSwRl4h0Sa0M4MMBBa8AaFeb3BV9VfZgKh4cFiDNSLGgXdDcgvZtLA+YRMg 9zrB6WEy4ggUNPAZ3l3g+Rr/bvEPBLhvXT829LoWskxgytX2uwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCt4QJA3Z7UYFJd+TKz3TZTQrpdoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNjBhMDEzZDAtMDJhNC0z N2JjLTgwYjQtZTIxMDUxNDc3OGRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvskMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJpGaBm3QxS0hJdtw8JWe7fTNYK03iOKni8Z8vOjL1ul8uQiPpWS6/V4 7iYQBgJrRQST0rvte+hiLWpcmK5ZTZo9ZGLO4LXusaAe5hlgLWP+tUjxgtGxOj0F h8NmAA83/RoTlI1okKahYjTr7SKWkyHxsZmNQ6RNElECcJw6nYdYJqjgEmlhfUZz xZUMRiFlk6E6Gko281VowlqbmiPzLxqBuR/EF1LyxRXeQs1A+fG8RTzChJigPys1 ly1jH4sjKF7te8Wu7ju3cSJtb2WR+LSVKNL8U2vtFL9Ax39wssIckQtE5YtoEN+w qczowcnvOU4te86BNfyMEfs5SzijxCA= -----END CERTIFICATE-----Generated at Fri Nov 22 00:25:17 2024 by rpki-client on console-fra.rpki-client.org