$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a1d4f84d-72f5-38c1-8e4d-9a453c823383.roa File: a1d4f84d-72f5-38c1-8e4d-9a453c823383.roa (raw, json) Hash identifier: hM4/WYvjgPlOB9+BaxyUwB69bcwL8uUbOKzN9FQ+Jvc= Subject key identifier: 00:19:98:31:E0:4F:10:90:F2:40:E9:99:35:C3:C7:08:59:37:33:3C Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285847E62B4240DEC3D1F69FBD1BE0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a1d4f84d-72f5-38c1-8e4d-9a453c823383.roa Signing time: Sat 16 Nov 2024 14:00:41 +0000 ROA not before: Sat 16 Nov 2024 14:00:41 +0000 ROA not after: Fri 14 Feb 2025 14:00:41 +0000 asID: 15169 IP address blocks: 142.250.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e6:2b:42:40:de:c3:d1:f6:9f:bd:1b:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Nov 16 14:00:41 2024 GMT Not After : Feb 14 14:00:41 2025 GMT Subject: CN=1c569d84-ebe4-41af-b308-fe5bcd663220 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:78:a3:e6:9b:2c:66:41:ea:c0:be:36:63:eb: 79:aa:47:1d:07:1c:2f:d7:57:d1:5b:2c:e1:1e:de: 17:7d:45:1b:80:d8:c9:ab:b4:6b:9f:89:de:21:0f: 39:95:b9:bb:73:40:77:20:aa:08:6c:e0:de:ff:94: c2:9e:4f:a5:ea:a9:b9:b2:1e:5a:83:b4:c3:17:ee: 94:4b:51:8d:06:5f:a2:70:04:e6:84:0d:3a:d1:e3: a4:78:a5:b8:78:41:ab:9a:fe:72:d0:a5:d8:64:0b: 07:d3:0d:b2:92:10:d7:e1:bf:5e:7e:bb:9f:c3:00: 26:ac:e3:4a:92:95:1d:69:88:39:61:80:d8:1e:1e: 71:b4:09:33:23:b9:3a:2b:a6:32:c4:6d:aa:87:48: 11:24:7e:a2:3b:b8:c3:c6:84:f3:63:91:d0:12:3e: e7:80:1a:c1:ae:25:02:e3:d9:61:ae:6c:e4:17:b2: 1f:5f:c2:3e:b5:4f:cc:f7:b7:20:85:76:56:72:a8: 62:7f:9c:e2:12:bb:4b:92:83:73:20:94:eb:39:f2: 61:2e:fd:31:4c:4f:44:0a:a6:39:7e:90:96:1a:e1: 22:e5:42:48:30:9f:e8:fb:3c:79:e6:ce:b5:a8:98: 17:59:72:6b:74:ad:ad:e5:02:8a:47:d4:f4:d8:04: 1b:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:19:98:31:E0:4F:10:90:F2:40:E9:99:35:C3:C7:08:59:37:33:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a1d4f84d-72f5-38c1-8e4d-9a453c823383.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:25:d6:7e:dd:a8:0d:1d:dd:08:70:a3:44:5c:71:13:ad:c9: bf:b1:67:36:6d:70:a3:6a:c2:0f:55:ce:9f:09:02:be:a1:a6: 39:06:94:95:72:65:4b:b2:cb:b7:1c:1a:ad:50:0e:cd:e0:47: 17:df:33:11:dd:96:98:50:0b:42:3e:a5:6d:e8:19:fc:09:cd: 55:96:87:32:71:84:55:65:91:4c:0b:e6:e2:61:12:c0:9e:45: 46:3d:a5:d4:67:9b:7f:8a:be:01:3c:ab:51:b7:9f:b7:a7:80: 1f:7f:29:22:8e:e8:bf:c8:96:83:5c:95:a1:c4:52:da:be:9a: dd:29:8f:7c:ac:63:af:6d:25:3b:73:06:e0:8e:89:2d:81:fd: 95:b2:41:af:40:b8:b2:1f:fa:d6:cb:b9:27:b5:f0:d0:b4:0c: 9b:7d:d9:5d:62:5c:9c:bd:f2:2c:80:2e:b2:be:d8:d8:d9:0a: 92:da:1c:59:98:61:ba:32:5c:97:9b:fb:0c:3b:34:51:21:05: dd:bc:e9:98:9c:7a:4b:b6:ee:52:e0:b1:68:74:d3:8b:94:c1: eb:5a:28:b5:18:59:1a:80:65:01:d3:ed:c8:3b:c9:e0:d4:13: 58:89:06:8a:48:d2:4d:06:04:1f:40:3c:32:9e:14:0e:4d:de: 5f:a0:bf:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmK0JA3sPR9p+9G+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk MWM1NjlkODQtZWJlNC00MWFmLWIzMDgtZmU1YmNkNjYzMjIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA03ij5pssZkHqwL42Y+t5qkcdBxwv11fRWyzh Ht4XfUUbgNjJq7Rrn4neIQ85lbm7c0B3IKoIbODe/5TCnk+l6qm5sh5ag7TDF+6U S1GNBl+icATmhA060eOkeKW4eEGrmv5y0KXYZAsH0w2ykhDX4b9efrufwwAmrONK kpUdaYg5YYDYHh5xtAkzI7k6K6YyxG2qh0gRJH6iO7jDxoTzY5HQEj7ngBrBriUC 49lhrmzkF7IfX8I+tU/M97cghXZWcqhif5ziErtLkoNzIJTrOfJhLv0xTE9ECqY5 fpCWGuEi5UJIMJ/o+zx55s61qJgXWXJrdK2t5QKKR9T02AQbQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAAZmDHgTxCQ8kDpmTXDxwhZNzM8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYTFkNGY4NGQtNzJmNS0z OGMxLThlNGQtOWE0NTNjODIzMzgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvpwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEIl1n7dqA0d3Qhwo0RccROtyb+xZzZtcKNqwg9Vzp8JAr6hpjkGlJVy ZUuyy7ccGq1QDs3gRxffMxHdlphQC0I+pW3oGfwJzVWWhzJxhFVlkUwL5uJhEsCe RUY9pdRnm3+KvgE8q1G3n7engB9/KSKO6L/IloNclaHEUtq+mt0pj3ysY69tJTtz BuCOiS2B/ZWyQa9AuLIf+tbLuSe18NC0DJt92V1iXJy98iyALrK+2NjZCpLaHFmY YboyXJeb+ww7NFEhBd286Ziceku27lLgsWh004uUwetaKLUYWRqAZQHT7cg7yeDU E1iJBopI0k0GBB9APDKeFA5N3l+gvz0= -----END CERTIFICATE-----Generated at Sun Nov 24 23:10:14 2024 by rpki-client on console-ams.rpki-client.org