$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ac19a71a-232e-35c1-808c-7efad58fe8a5.roa File: ac19a71a-232e-35c1-808c-7efad58fe8a5.roa (raw, json) Hash identifier: rcjsKKQeAYUtjsvWi6WPWjU9e419gjeLYvoI608479s= Subject key identifier: C7:F2:90:96:C1:F6:17:D2:94:79:48:6A:72:94:8F:84:6E:F5:67:B6 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285847E62B65B9A259067F9C821A80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ac19a71a-232e-35c1-808c-7efad58fe8a5.roa Signing time: Sat 16 Nov 2024 14:00:41 +0000 ROA not before: Sat 16 Nov 2024 14:00:41 +0000 ROA not after: Fri 14 Feb 2025 14:00:41 +0000 asID: 15169 IP address blocks: 142.250.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e6:2b:65:b9:a2:59:06:7f:9c:82:1a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Nov 16 14:00:41 2024 GMT Not After : Feb 14 14:00:41 2025 GMT Subject: CN=11c53731-c797-4681-b66f-e034aebaae4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:49:45:8b:cc:a2:1e:9f:ea:85:8e:72:0a:75: d0:5e:bf:db:17:ce:a9:db:0c:4e:5f:5e:4b:84:99: 12:28:bf:1e:2d:41:1b:43:a5:2f:99:22:62:5d:c1: e4:df:0e:60:5c:4a:63:c5:d5:56:ce:49:b2:0e:ce: c0:38:55:96:4c:bf:18:bd:aa:aa:d2:02:c1:93:9e: 8c:f3:a3:22:71:5f:87:03:6a:2c:7d:e9:91:60:3d: 14:d0:c9:3a:c8:b0:d4:da:5a:35:07:a3:e2:4d:f3: 32:36:22:d1:25:41:4d:01:26:1c:e0:df:5c:2c:67: 8f:95:85:9e:59:dc:b5:99:20:ea:30:d3:5b:9d:6b: 06:09:b6:ab:8e:f9:a0:80:20:a4:35:b9:52:e8:09: f4:a7:b6:6b:fd:92:c2:fa:fb:c7:e8:ee:de:3e:54: 11:21:70:42:3f:50:df:61:46:4d:0f:23:da:1c:66: 73:8f:13:c1:de:0a:d0:22:f5:2d:8c:47:c0:7c:5a: 3e:85:60:62:fc:ee:a4:65:13:65:01:95:66:2b:34: 6f:2c:81:42:06:5f:88:f4:9e:74:97:dc:04:90:13: 7e:f4:3b:f0:ff:9d:1e:4a:61:c4:ce:73:45:01:15: ae:85:ac:47:bb:f3:cd:96:61:b4:09:a7:91:ad:ed: 83:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:F2:90:96:C1:F6:17:D2:94:79:48:6A:72:94:8F:84:6E:F5:67:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ac19a71a-232e-35c1-808c-7efad58fe8a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.190.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:03:47:58:9c:d5:93:35:2e:36:8a:9d:91:f1:13:3a:c4:04: 16:6a:d8:f8:d8:5a:cc:78:70:28:11:52:b5:2c:49:40:89:b2: 2d:5b:4b:09:54:0a:79:cb:73:3c:7a:59:2f:ac:ad:7e:15:4b: 0b:ba:52:6a:c9:c5:ca:36:0c:29:87:8a:0b:b0:85:53:b2:80: 1f:4b:5c:f1:96:d0:fb:05:d8:39:81:dd:67:09:cd:6c:b9:04: a8:98:c9:a8:07:9c:22:83:cc:b7:f2:9b:79:4b:0a:5e:bc:05: f7:b8:33:83:59:78:fe:f1:c8:e5:b4:99:3b:21:32:03:8b:97: d2:89:b4:5b:32:ab:49:1a:4c:55:71:04:53:de:cf:92:53:c1: 8c:3f:73:88:a9:88:ad:df:28:c2:7a:75:b2:17:99:0c:80:40: f6:47:53:99:95:90:0a:54:b8:a1:0a:95:bd:8b:51:90:77:2c: 9e:c1:76:2d:6e:12:55:b9:1d:86:ed:37:29:4e:f9:e6:3d:29: fd:b8:1a:94:84:9d:ac:08:d7:cb:15:ab:d3:c8:eb:60:aa:6d: 6b:c6:97:5e:ce:b1:de:40:0c:7a:5c:07:a2:a0:4b:07:14:60: 36:2a:f6:1a:8f:b0:24:74:03:30:6b:1d:b7:bc:01:04:89:bd: cb:ce:c3:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmK2W5olkGf5yCGoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk MTFjNTM3MzEtYzc5Ny00NjgxLWI2NmYtZTAzNGFlYmFhZTRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUlFi8yiHp/qhY5yCnXQXr/bF86p2wxOX15L hJkSKL8eLUEbQ6UvmSJiXcHk3w5gXEpjxdVWzkmyDs7AOFWWTL8Yvaqq0gLBk56M 86MicV+HA2osfemRYD0U0Mk6yLDU2lo1B6PiTfMyNiLRJUFNASYc4N9cLGePlYWe Wdy1mSDqMNNbnWsGCbarjvmggCCkNblS6An0p7Zr/ZLC+vvH6O7ePlQRIXBCP1Df YUZNDyPaHGZzjxPB3grQIvUtjEfAfFo+hWBi/O6kZRNlAZVmKzRvLIFCBl+I9J50 l9wEkBN+9Dvw/50eSmHEznNFARWuhaxHu/PNlmG0CaeRre2D8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMfykJbB9hfSlHlIanKUj4Ru9We2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYWMxOWE3MWEtMjMyZS0z NWMxLTgwOGMtN2VmYWQ1OGZlOGE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvq+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABwDR1ic1ZM1LjaKnZHxEzrEBBZq2PjYWsx4cCgRUrUsSUCJsi1bSwlU CnnLczx6WS+srX4VSwu6UmrJxco2DCmHiguwhVOygB9LXPGW0PsF2DmB3WcJzWy5 BKiYyagHnCKDzLfym3lLCl68Bfe4M4NZeP7xyOW0mTshMgOLl9KJtFsyq0kaTFVx BFPez5JTwYw/c4ipiK3fKMJ6dbIXmQyAQPZHU5mVkApUuKEKlb2LUZB3LJ7Bdi1u ElW5HYbtNylO+eY9Kf24GpSEnawI18sVq9PI62CqbWvGl17Osd5ADHpcB6KgSwcU YDYq9hqPsCR0AzBrHbe8AQSJvcvOwyQ= -----END CERTIFICATE-----Generated at Sun Nov 24 23:59:16 2024 by rpki-client on console-fra.rpki-client.org