$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/76897ae5-56e4-3d6d-8a09-5c88e5d5f1d8.roa File: 76897ae5-56e4-3d6d-8a09-5c88e5d5f1d8.roa (raw, json) Hash identifier: 7U+tsFQfjVvDjJD8btfCVo4vmm6ac0wYTLDn6DnHg+Q= Subject key identifier: 34:C7:B9:8E:9B:24:8C:B8:49:95:FD:14:C4:89:41:20:F5:FC:0E:7D Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F432858471E709006C93313F7D9EFA7C0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/76897ae5-56e4-3d6d-8a09-5c88e5d5f1d8.roa Signing time: Fri 06 Sep 2024 01:00:31 +0000 ROA not before: Fri 06 Sep 2024 01:00:31 +0000 ROA not after: Thu 05 Dec 2024 02:00:31 +0000 asID: 15169 IP address blocks: 142.250.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:1e:70:90:06:c9:33:13:f7:d9:ef:a7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 6 01:00:31 2024 GMT Not After : Dec 5 02:00:31 2024 GMT Subject: CN=897a4a8d-c8cf-4ded-889f-44e1e109fa4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:1f:15:6c:14:cb:0e:cb:9b:2b:74:58:7e:9f: 60:81:14:e6:93:5a:23:c8:d9:ba:47:28:b6:fa:f3: 3a:88:59:2d:37:c0:97:31:f1:0d:6f:2d:e5:c3:f5: 1a:8f:d6:82:fe:fb:78:9c:8b:70:e5:6a:3a:82:db: a2:be:eb:d8:52:0f:e3:c9:bc:79:c1:d6:b9:87:e4: e5:07:d5:d0:d6:d4:9c:c8:96:fa:f8:2a:a8:a9:14: 04:2d:0c:1e:16:8d:54:55:25:4c:a7:d8:82:9d:56: 1a:cb:b2:38:42:8d:11:bc:2c:5f:b1:2c:80:bf:08: 99:38:f8:ac:ff:df:2d:b8:f9:ef:14:7f:0e:af:6d: e2:93:47:b5:2d:85:68:7a:6d:bd:3f:f9:c2:8a:2f: 48:97:19:91:00:1f:ff:6d:dc:c1:29:62:4b:e6:84: 62:99:39:29:1c:76:f0:5d:ff:fa:3a:a2:0f:2c:08: 5c:0f:4f:2a:6d:21:84:af:8b:a4:b5:37:42:5d:c7: ad:fc:d4:67:4c:e0:c3:f1:30:c5:f8:a4:39:69:f6: f7:1c:d8:16:71:b5:d1:ad:32:19:35:fc:e9:e2:61: f3:f6:64:3c:b3:06:9a:c6:3d:43:9d:02:e6:cd:3d: d9:11:b9:33:a3:07:2f:c5:7d:c9:cd:75:11:fa:a8: 18:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:C7:B9:8E:9B:24:8C:B8:49:95:FD:14:C4:89:41:20:F5:FC:0E:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/76897ae5-56e4-3d6d-8a09-5c88e5d5f1d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:5c:7a:d6:be:ad:6a:3d:a8:1d:fb:b2:4e:05:0b:5e:09:26: 15:d0:37:fa:35:51:12:de:19:ae:bd:e4:a7:5a:b0:e7:2d:58: 24:51:6f:fc:19:16:41:c8:b1:ab:13:3a:4f:a0:d3:50:72:68: 9d:70:d2:70:85:f9:24:02:a1:47:5c:5a:45:d3:58:19:73:ae: 5b:a1:84:2e:81:16:79:a9:e9:20:85:a5:13:13:6a:99:61:bb: 8d:bc:f3:14:d2:c9:3a:b6:c8:1f:d3:6f:26:b5:09:98:e3:d6: 4e:3b:ed:ff:07:f9:35:4d:9c:d6:f0:c9:b3:bd:0f:92:f2:40: 80:1e:93:cc:17:b9:d9:29:0f:67:a8:ec:17:bc:fc:93:bc:5c: 55:46:ef:30:fa:e4:9c:16:fe:0c:a1:8e:60:d1:18:e9:e4:31: a2:2a:14:2c:00:b6:ea:d1:38:d5:d3:cb:d9:33:ec:e3:fc:64: b5:02:0d:08:1d:5c:78:ac:18:1f:9b:4d:4c:3b:57:37:87:45: 95:aa:de:66:c2:b3:a9:af:0e:de:cb:3d:e5:ce:46:c7:42:66: 26:76:4e:a7:48:6e:04:a9:8a:d4:03:ee:af:28:fc:8e:a9:91: 65:d4:22:54:0f:59:08:b5:52:a1:e1:11:7e:57:b7:98:ab:26: 50:fb:d1:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcecJAGyTMT99nvp8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI0MDkwNjAxMDAzMVoXDTI0MTIwNTAyMDAzMVowLzEtMCsGA1UEAxMk ODk3YTRhOGQtYzhjZi00ZGVkLTg4OWYtNDRlMWUxMDlmYTRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgx8VbBTLDsubK3RYfp9ggRTmk1ojyNm6Ryi2 +vM6iFktN8CXMfENby3lw/Uaj9aC/vt4nItw5Wo6gtuivuvYUg/jybx5wda5h+Tl B9XQ1tScyJb6+CqoqRQELQweFo1UVSVMp9iCnVYay7I4Qo0RvCxfsSyAvwiZOPis /98tuPnvFH8Or23ik0e1LYVoem29P/nCii9IlxmRAB//bdzBKWJL5oRimTkpHHbw Xf/6OqIPLAhcD08qbSGEr4uktTdCXcet/NRnTODD8TDF+KQ5afb3HNgWcbXRrTIZ Nfzp4mHz9mQ8swaaxj1DnQLmzT3ZEbkzowcvxX3JzXUR+qgYaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDTHuY6bJIy4SZX9FMSJQSD1/A59MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNzY4OTdhZTUtNTZlNC0z ZDZkLThhMDktNWM4OGU1ZDVmMWQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvqFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEVceta+rWo9qB37sk4FC14JJhXQN/o1URLeGa695KdasOctWCRRb/wZ FkHIsasTOk+g01ByaJ1w0nCF+SQCoUdcWkXTWBlzrluhhC6BFnmp6SCFpRMTaplh u4288xTSyTq2yB/Tbya1CZjj1k477f8H+TVNnNbwybO9D5LyQIAek8wXudkpD2eo 7Be8/JO8XFVG7zD65JwW/gyhjmDRGOnkMaIqFCwAturRONXTy9kz7OP8ZLUCDQgd XHisGB+bTUw7VzeHRZWq3mbCs6mvDt7LPeXORsdCZiZ2TqdIbgSpitQD7q8o/I6p kWXUIlQPWQi1UqHhEX5Xt5irJlD70ag= -----END CERTIFICATE-----Generated at Thu Nov 21 23:40:56 2024 by rpki-client on console-ams.rpki-client.org