$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/647f9435-6948-34d1-9a8e-d32e6d7948c2.roa File: 647f9435-6948-34d1-9a8e-d32e6d7948c2.roa (raw, json) Hash identifier: 6l1pi+TkyIqspfaxSbpV5ttkSHbE9HuCfhNLj1kNNEU= Subject key identifier: 02:42:34:B2:1A:D1:12:EC:4F:30:F4:70:C1:8D:8F:BA:A1:42:68:13 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F432858471E70745870711DC18B5669C0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/647f9435-6948-34d1-9a8e-d32e6d7948c2.roa Signing time: Fri 06 Sep 2024 01:00:31 +0000 ROA not before: Fri 06 Sep 2024 01:00:31 +0000 ROA not after: Thu 05 Dec 2024 02:00:31 +0000 asID: 15169 IP address blocks: 142.251.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:1e:70:74:58:70:71:1d:c1:8b:56:69:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 6 01:00:31 2024 GMT Not After : Dec 5 02:00:31 2024 GMT Subject: CN=de005c21-bda5-4a8e-80e3-a54096985458 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:86:37:7e:8a:75:92:1a:08:bf:67:97:20:cd: e7:71:81:1f:9f:1a:68:d7:b1:4c:9e:e7:04:d3:af: 55:a3:f0:98:68:90:eb:4a:d9:09:62:f9:fb:fa:cb: cd:f7:c6:a7:14:a1:69:cd:f6:74:62:d3:51:30:58: c4:3b:c7:f4:78:00:02:20:49:2a:d2:cb:e0:88:27: 5e:a4:6f:6e:68:17:33:38:13:10:28:4e:7a:78:4a: c4:b5:bb:fb:34:b1:fa:fa:79:5c:52:51:40:09:15: c7:fd:2d:b7:ed:a9:be:9f:22:f5:72:70:44:78:a3: 58:24:d0:18:2f:7b:b4:9f:c2:bd:8e:af:60:0a:5a: 14:46:f9:de:0c:ab:62:4e:1b:8a:74:5d:79:38:fc: ae:d7:04:2d:07:f4:73:ac:d7:c3:bc:71:06:d1:74: de:12:b0:a3:e7:22:b3:ec:89:db:dd:a1:5e:1c:ef: a6:22:99:80:ed:48:33:95:0e:ba:1f:1c:7d:d8:27: 2a:ad:a1:e4:27:30:df:86:a7:91:81:da:8f:09:45: f0:ee:c4:b8:cf:96:a9:c6:fd:20:97:d8:74:5d:c0: b7:fd:96:84:27:d5:20:2d:0e:06:53:42:8b:54:40: e0:09:93:f5:07:f5:47:ff:dd:16:bb:df:8d:41:79: 57:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:42:34:B2:1A:D1:12:EC:4F:30:F4:70:C1:8D:8F:BA:A1:42:68:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/647f9435-6948-34d1-9a8e-d32e6d7948c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.26.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:1c:1e:3b:68:77:12:a2:ff:a9:69:b6:14:cd:47:74:35:4c: 82:f1:e9:9d:f6:35:ff:ee:5a:d4:1e:4b:1e:e9:c6:76:08:06: fe:d9:f7:da:38:88:c4:df:8c:9d:c4:29:76:3d:c8:e4:e0:1f: e0:65:97:47:5f:e5:8b:b5:a2:11:ec:d2:78:aa:10:14:d2:70: 06:79:a2:25:c4:18:ce:68:e8:84:13:86:ba:74:f2:df:77:59: 04:91:99:68:6a:ab:c0:7e:81:73:ca:11:cb:ec:6e:37:b1:db: 37:ad:c7:6d:f5:e6:df:ef:42:33:4f:d7:c3:8a:e5:ba:84:ba: 03:9c:36:d4:fa:3b:f8:5f:97:c2:9f:b1:8b:38:0d:be:64:74: 95:4a:2a:f6:c3:b2:c5:25:65:8a:4e:68:4e:c5:1e:9d:8f:d7: b9:a2:23:f0:50:17:b7:cd:f7:f8:3f:f3:b6:aa:6f:88:18:b2: 97:47:79:fa:c7:9f:72:80:16:70:1b:9b:bc:ee:18:49:61:9c: a7:88:d9:b3:52:08:1d:66:cc:a3:9f:27:c0:1b:4b:53:11:a2: 7b:85:42:99:14:7c:a6:7c:b0:66:55:f5:ca:4a:49:32:7b:cf: ce:1b:10:4c:09:de:8c:81:fa:11:7e:78:97:02:53:59:3f:eb: 4a:2c:9f:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcecHRYcHEdwYtWacAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI0MDkwNjAxMDAzMVoXDTI0MTIwNTAyMDAzMVowLzEtMCsGA1UEAxMk ZGUwMDVjMjEtYmRhNS00YThlLTgwZTMtYTU0MDk2OTg1NDU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgYY3fop1khoIv2eXIM3ncYEfnxpo17FMnucE 069Vo/CYaJDrStkJYvn7+svN98anFKFpzfZ0YtNRMFjEO8f0eAACIEkq0svgiCde pG9uaBczOBMQKE56eErEtbv7NLH6+nlcUlFACRXH/S237am+nyL1cnBEeKNYJNAY L3u0n8K9jq9gCloURvneDKtiThuKdF15OPyu1wQtB/RzrNfDvHEG0XTeErCj5yKz 7Inb3aFeHO+mIpmA7UgzlQ66Hxx92CcqraHkJzDfhqeRgdqPCUXw7sS4z5apxv0g l9h0XcC3/ZaEJ9UgLQ4GU0KLVEDgCZP1B/VH/90Wu9+NQXlXvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAJCNLIa0RLsTzD0cMGNj7qhQmgTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNjQ3Zjk0MzUtNjk0OC0z NGQxLTlhOGUtZDMyZTZkNzk0OGMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvsaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKEcHjtodxKi/6lpthTNR3Q1TILx6Z32Nf/uWtQeSx7pxnYIBv7Z99o4 iMTfjJ3EKXY9yOTgH+Bll0df5Yu1ohHs0niqEBTScAZ5oiXEGM5o6IQThrp08t93 WQSRmWhqq8B+gXPKEcvsbjex2zetx2315t/vQjNP18OK5bqEugOcNtT6O/hfl8Kf sYs4Db5kdJVKKvbDssUlZYpOaE7FHp2P17miI/BQF7fN9/g/87aqb4gYspdHefrH n3KAFnAbm7zuGElhnKeI2bNSCB1mzKOfJ8AbS1MRonuFQpkUfKZ8sGZV9cpKSTJ7 z84bEEwJ3oyB+hF+eJcCU1k/60osn3Y= -----END CERTIFICATE-----Generated at Sun Nov 24 23:59:13 2024 by rpki-client on console-fra.rpki-client.org