$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/98e2edf8-c542-3049-b50c-6a39dee13a72.roa File: 98e2edf8-c542-3049-b50c-6a39dee13a72.roa (raw, json) Hash identifier: rav+jcNcKRGbYn6JlIMtHGhRae9H70Xa7fPN+TPY0HQ= Subject key identifier: 4F:47:CB:10:2D:49:E6:10:85:66:7C:ED:A8:3E:38:2B:FD:1A:DF:A1 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F432858471E708842E04F02211C2460C0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/98e2edf8-c542-3049-b50c-6a39dee13a72.roa Signing time: Fri 06 Sep 2024 01:00:31 +0000 ROA not before: Fri 06 Sep 2024 01:00:31 +0000 ROA not after: Thu 05 Dec 2024 02:00:31 +0000 asID: 15169 IP address blocks: 142.250.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:1e:70:88:42:e0:4f:02:21:1c:24:60:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 6 01:00:31 2024 GMT Not After : Dec 5 02:00:31 2024 GMT Subject: CN=dee4ec2a-0b23-40a9-8e4b-9801a6712f5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:d4:61:dc:bf:03:11:a3:76:82:6f:79:8f:cd: 32:48:35:5f:d3:ba:e6:fe:6d:ff:42:07:dc:c3:ba: b4:23:68:72:9e:6c:7b:d2:95:75:c3:16:11:34:ee: 0a:77:2f:aa:b7:a6:99:e1:4f:75:9d:4e:e4:85:ba: 43:4d:8e:cf:a6:4b:01:e1:db:bd:1a:cb:bd:d8:3e: 5d:9c:c4:9e:7b:b1:b9:d9:19:6c:dd:1a:5a:88:7e: f8:74:1f:c8:0c:96:27:ce:55:7f:be:e3:53:2b:53: ad:0a:36:29:84:cd:a8:f1:25:80:03:4b:25:67:fc: 31:c9:98:0c:e0:d0:b5:d3:72:28:67:63:6b:e9:2b: 2f:b2:e9:34:c6:cb:3f:47:62:97:19:5c:fc:30:93: 4f:8b:bd:5e:cf:d1:e4:3f:9b:0d:62:56:e2:96:75: f6:b4:a3:a7:67:ff:02:0c:ed:11:09:cb:01:e3:75: 5a:5f:a6:13:57:32:94:13:62:8b:ba:3b:5e:cb:11: 16:77:d3:ae:7a:e0:e2:d1:49:6f:92:8e:bd:c3:9f: 26:45:14:2b:b3:23:c3:c0:90:4e:43:54:ba:52:7e: de:a3:33:ac:54:0f:a8:60:65:d8:91:6d:3f:32:e5: 15:2c:b4:fd:c2:f9:48:bd:3c:0b:a2:0b:23:da:37: bf:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:47:CB:10:2D:49:E6:10:85:66:7C:ED:A8:3E:38:2B:FD:1A:DF:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/98e2edf8-c542-3049-b50c-6a39dee13a72.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:5a:6f:a2:e0:51:fb:32:7f:75:d8:a1:1c:2e:6a:63:80:5b: 72:f1:d0:57:b5:f6:b0:56:8d:39:d8:5e:34:e9:f3:e4:b1:60: 64:e9:a0:66:65:dc:f3:60:7d:d2:6e:3e:55:4b:65:cf:a0:dc: 01:61:fa:4a:4a:c3:42:d7:97:d6:37:63:46:5e:49:c1:90:f1: 6c:d8:86:84:1e:cf:9e:74:b7:39:18:03:63:80:50:95:e1:e2: 09:44:43:ee:7d:e2:c4:a4:d0:bb:54:b3:04:d9:90:c6:a9:73: 90:f5:e5:79:58:69:5c:ba:43:e8:53:9e:89:d1:36:67:70:cb: 4b:90:11:de:b1:f4:c2:94:3a:e6:b4:ab:72:74:c3:25:2a:b7: 0f:35:f5:5c:af:51:34:11:8b:02:a7:2d:f9:80:df:b4:ee:30: d0:92:7d:ac:6c:e0:9e:9b:75:e1:59:55:86:03:2d:09:50:b5: f8:b3:65:5f:81:87:3a:d2:44:b0:fc:95:03:bb:ce:b7:b9:37: d1:8d:0a:7e:4e:fb:5e:97:1a:29:97:77:85:f4:cb:67:e1:a5: 42:df:b0:69:1f:3a:6c:c7:f5:62:81:98:91:e3:28:01:6c:b1: 74:01:6b:5f:b3:c1:73:b6:43:62:4d:4a:d9:de:a5:f8:17:74: 22:a2:a5:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcecIhC4E8CIRwkYMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI0MDkwNjAxMDAzMVoXDTI0MTIwNTAyMDAzMVowLzEtMCsGA1UEAxMk ZGVlNGVjMmEtMGIyMy00MGE5LThlNGItOTgwMWE2NzEyZjVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotRh3L8DEaN2gm95j80ySDVf07rm/m3/Qgfc w7q0I2hynmx70pV1wxYRNO4Kdy+qt6aZ4U91nU7khbpDTY7PpksB4du9Gsu92D5d nMSee7G52Rls3RpaiH74dB/IDJYnzlV/vuNTK1OtCjYphM2o8SWAA0slZ/wxyZgM 4NC103IoZ2Nr6Ssvsuk0xss/R2KXGVz8MJNPi71ez9HkP5sNYlbilnX2tKOnZ/8C DO0RCcsB43VaX6YTVzKUE2KLujteyxEWd9OueuDi0Ulvko69w58mRRQrsyPDwJBO Q1S6Un7eozOsVA+oYGXYkW0/MuUVLLT9wvlIvTwLogsj2je/kQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE9HyxAtSeYQhWZ87ag+OCv9Gt+hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOThlMmVkZjgtYzU0Mi0z MDQ5LWI1MGMtNmEzOWRlZTEzYTcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvqMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHNab6LgUfsyf3XYoRwuamOAW3Lx0Fe19rBWjTnYXjTp8+SxYGTpoGZl 3PNgfdJuPlVLZc+g3AFh+kpKw0LXl9Y3Y0ZeScGQ8WzYhoQez550tzkYA2OAUJXh 4glEQ+594sSk0LtUswTZkMapc5D15XlYaVy6Q+hTnonRNmdwy0uQEd6x9MKUOua0 q3J0wyUqtw819VyvUTQRiwKnLfmA37TuMNCSfaxs4J6bdeFZVYYDLQlQtfizZV+B hzrSRLD8lQO7zre5N9GNCn5O+16XGimXd4X0y2fhpULfsGkfOmzH9WKBmJHjKAFs sXQBa1+zwXO2Q2JNStnepfgXdCKipRk= -----END CERTIFICATE-----Generated at Sun Nov 24 23:10:14 2024 by rpki-client on console-ams.rpki-client.org