$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a09e4db4-7d2b-3bd8-a369-11b4d1714a34.roa File: a09e4db4-7d2b-3bd8-a369-11b4d1714a34.roa (raw, json) Hash identifier: 7Tfv8ibWLPlhVzSTl3j1GK4UXxjPj91bnlblbBeYvVw= Subject key identifier: B2:2A:F3:E0:30:6D:E1:DB:C7:26:11:90:C2:56:1B:0A:60:54:08:76 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285847E62B47E142DD0CD85AC96400 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a09e4db4-7d2b-3bd8-a369-11b4d1714a34.roa Signing time: Sat 16 Nov 2024 14:00:41 +0000 ROA not before: Sat 16 Nov 2024 14:00:41 +0000 ROA not after: Fri 14 Feb 2025 14:00:41 +0000 asID: 15169 IP address blocks: 142.251.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e6:2b:47:e1:42:dd:0c:d8:5a:c9:64:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Nov 16 14:00:41 2024 GMT Not After : Feb 14 14:00:41 2025 GMT Subject: CN=0baf6a32-1076-402a-a8fe-44c537f1159d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ad:9f:9c:39:8e:e4:12:a6:b7:82:0f:0c:76: d0:18:1a:c5:36:b3:fd:c9:46:41:eb:d8:d1:3d:d6: d9:ff:20:72:29:bf:8e:05:87:4f:ca:cd:4d:fd:f3: 98:72:ea:23:30:bc:bc:2d:ca:aa:a8:4d:3c:1f:06: ab:bd:e7:76:9f:a5:39:2c:b7:b1:36:90:be:a1:8d: 8e:05:26:8d:32:43:47:85:8c:6c:e2:29:6f:f1:52: 65:ab:eb:ae:f3:12:dc:02:ff:95:ca:c6:2d:ab:90: fd:35:e3:6c:ef:de:8a:07:41:85:67:01:83:ab:b5: f4:57:58:30:a5:07:d6:6e:31:04:fa:97:61:26:8d: 0f:b8:e9:92:f2:61:0b:11:ae:d7:15:0a:a6:43:2d: ce:26:62:8b:6d:cf:89:f8:55:ec:66:89:1d:b9:af: de:af:5e:be:3f:38:61:d6:3f:29:b0:e9:4b:1b:d8: b0:79:25:ea:e3:bc:4d:e0:f3:27:57:82:ce:c1:fd: 7e:99:77:00:01:b8:7c:9f:c1:e6:45:f0:cb:01:bd: 84:7c:ff:e6:2d:2a:8e:5b:a2:24:b6:2e:f7:de:3d: ab:a1:c8:fa:49:c1:16:e7:f3:56:5d:1c:88:95:af: 54:57:5d:0c:68:df:f4:ea:fe:6f:4b:3f:37:86:80: b9:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:2A:F3:E0:30:6D:E1:DB:C7:26:11:90:C2:56:1B:0A:60:54:08:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a09e4db4-7d2b-3bd8-a369-11b4d1714a34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:ef:a2:94:e5:d9:6f:b3:58:20:a2:0d:1a:2d:56:e4:fc:c5: 1d:c0:0c:35:10:64:df:02:12:a6:c5:4c:b1:8f:cb:e2:a9:76: 66:bd:16:69:bc:18:10:92:e8:42:91:a8:c5:37:79:cf:23:3d: 4b:60:76:07:f6:1c:45:a0:77:9c:35:83:58:8a:9c:7a:66:62: 85:e7:7e:13:45:8a:62:6e:b5:69:f6:8d:af:11:b7:c5:b2:f8: 45:5f:e6:01:ea:6c:1c:3d:74:b1:9f:7e:84:ec:62:b8:33:15: df:59:dc:b0:5c:7a:ca:be:d7:e9:ae:22:df:63:05:cb:f8:dd: 7f:d7:7d:ef:fe:eb:42:b5:fe:3f:1d:59:8b:a5:49:79:92:69: 15:fc:d2:ba:bb:64:28:13:1e:cb:af:9e:48:8a:80:01:1c:b5: 56:ab:36:16:92:b0:14:ea:0b:24:64:66:fa:83:e6:83:9d:26: 5f:b3:a7:a3:11:e9:de:74:d7:1c:fb:c4:c9:82:df:64:79:70: 6f:26:2b:b4:46:ba:82:11:b0:f6:b7:b9:c3:4a:96:f7:80:f4: eb:04:e0:cb:59:5e:65:e5:d5:11:1c:1d:36:5b:64:7f:d1:74: 5a:5d:91:9d:d2:c3:53:21:25:2e:fc:4e:ef:d4:7f:5e:9d:71: a5:6a:cc:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmK0fhQt0M2FrJZAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk MGJhZjZhMzItMTA3Ni00MDJhLWE4ZmUtNDRjNTM3ZjExNTlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyq2fnDmO5BKmt4IPDHbQGBrFNrP9yUZB69jR PdbZ/yByKb+OBYdPys1N/fOYcuojMLy8LcqqqE08Hwarved2n6U5LLexNpC+oY2O BSaNMkNHhYxs4ilv8VJlq+uu8xLcAv+VysYtq5D9NeNs796KB0GFZwGDq7X0V1gw pQfWbjEE+pdhJo0PuOmS8mELEa7XFQqmQy3OJmKLbc+J+FXsZokdua/er16+Pzhh 1j8psOlLG9iweSXq47xN4PMnV4LOwf1+mXcAAbh8n8HmRfDLAb2EfP/mLSqOW6Ik ti733j2rocj6ScEW5/NWXRyIla9UV10MaN/06v5vSz83hoC5wwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLIq8+AwbeHbxyYRkMJWGwpgVAh2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYTA5ZTRkYjQtN2QyYi0z YmQ4LWEzNjktMTFiNGQxNzE0YTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvsrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACnvopTl2W+zWCCiDRotVuT8xR3ADDUQZN8CEqbFTLGPy+Kpdma9Fmm8 GBCS6EKRqMU3ec8jPUtgdgf2HEWgd5w1g1iKnHpmYoXnfhNFimJutWn2ja8Rt8Wy +EVf5gHqbBw9dLGffoTsYrgzFd9Z3LBcesq+1+muIt9jBcv43X/Xfe/+60K1/j8d WYulSXmSaRX80rq7ZCgTHsuvnkiKgAEctVarNhaSsBTqCyRkZvqD5oOdJl+zp6MR 6d501xz7xMmC32R5cG8mK7RGuoIRsPa3ucNKlveA9OsE4MtZXmXl1REcHTZbZH/R dFpdkZ3Sw1MhJS78Tu/Uf16dcaVqzDc= -----END CERTIFICATE-----Generated at Fri Nov 22 00:25:19 2024 by rpki-client on console-fra.rpki-client.org