$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b8c0b66e-4c4e-30de-927d-314d949f89cb.roa File: b8c0b66e-4c4e-30de-927d-314d949f89cb.roa (raw, json) Hash identifier: tMsOeuEBpOcSX6xXIVRgQc/5cQHZKEfUkxXSCKqa4TA= Subject key identifier: C4:AF:05:84:00:1F:EC:C6:9A:C4:D9:55:44:35:DB:64:4F:B8:95:92 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285847E62AA992DE6E261829035F00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b8c0b66e-4c4e-30de-927d-314d949f89cb.roa Signing time: Sat 16 Nov 2024 14:00:41 +0000 ROA not before: Sat 16 Nov 2024 14:00:41 +0000 ROA not after: Fri 14 Feb 2025 14:00:41 +0000 asID: 36040 IP address blocks: 142.250.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e6:2a:a9:92:de:6e:26:18:29:03:5f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Nov 16 14:00:41 2024 GMT Not After : Feb 14 14:00:41 2025 GMT Subject: CN=86bb8e4f-34c7-41c0-ad3c-0fdd6a7546ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ea:80:95:67:1e:05:33:31:68:0f:80:6f:0b: c1:47:01:34:3f:2f:d2:cf:62:35:51:99:e2:81:af: f1:94:ee:52:56:b1:2c:f6:78:65:f3:3d:77:ec:7e: ae:f5:e8:2e:30:46:de:d9:3f:7a:96:29:79:82:ce: 5b:56:26:c5:96:73:52:99:e2:8f:58:f7:ef:5e:ac: 2c:0c:0c:cb:57:bd:15:e1:c9:eb:8e:26:d3:79:67: 9d:3d:2d:52:26:80:69:99:35:93:1b:2f:f5:0b:42: c5:41:6c:77:8d:ad:76:33:86:52:1a:4e:80:a7:a9: ed:c1:57:12:fd:85:a3:2a:46:13:cf:64:5a:cd:ee: 65:be:93:e0:71:f4:d0:de:9e:21:fc:76:74:7a:23: 5f:50:ce:95:e3:96:94:79:11:84:08:79:5d:82:c6: cd:03:88:c6:53:bf:d5:4f:7d:86:85:b2:40:08:7b: ed:56:e3:73:a7:15:27:06:7a:3d:18:28:cb:b0:78: 7c:26:1e:92:c9:6f:85:9e:15:9e:5e:bc:89:c3:d5: 1d:44:2d:b6:6b:31:da:d8:5c:ee:78:64:24:a2:d5: 12:96:8e:5d:56:d8:fc:dc:e2:46:ba:9d:a0:94:25: 98:c9:e1:71:5d:62:6e:0b:5c:c2:da:17:a1:b1:d1: 39:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:AF:05:84:00:1F:EC:C6:9A:C4:D9:55:44:35:DB:64:4F:B8:95:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b8c0b66e-4c4e-30de-927d-314d949f89cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.34.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:94:d2:86:0d:80:85:b9:d0:27:d7:1a:72:e5:7e:a5:c9:37: a8:52:f8:64:60:82:91:ef:f7:a4:c2:91:07:54:5d:ed:8b:57: 3f:fd:43:23:2f:e5:0e:ea:61:be:c2:34:8f:c4:fe:b9:1c:47: 2d:9f:73:dc:b0:c9:3e:58:21:1f:06:1a:c5:8f:17:93:85:9c: 1b:c4:d9:b2:2e:56:61:c3:f0:b2:19:a8:9f:44:14:7e:aa:d1: c3:34:4d:a1:e7:fe:2e:08:4f:23:88:41:fd:ea:46:57:17:87: 8a:af:20:38:ec:d9:ab:fe:4b:f8:b5:8d:56:b6:d8:c1:55:85: ad:2a:ea:5f:68:a0:61:a6:b9:f1:14:22:41:21:52:9d:50:bf: c4:db:4a:20:7c:eb:e7:38:e0:f0:06:34:8b:34:ed:a1:18:bc: aa:3b:b9:62:f5:92:78:d1:c2:5c:f7:51:fb:9e:f3:50:35:9f: e1:28:79:02:46:2a:07:03:76:fd:24:f9:f6:53:37:1b:fe:26: 64:89:ef:fb:91:0b:d4:ff:9b:b1:93:3a:a2:c3:21:2d:89:99: 46:b3:ff:d6:ee:23:61:5c:df:6f:ab:67:40:65:7e:f9:ff:eb: c8:59:a5:52:62:02:43:ad:c5:c9:a8:15:96:82:83:41:74:81: c7:17:b5:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKqmS3m4mGCkDXwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk ODZiYjhlNGYtMzRjNy00MWMwLWFkM2MtMGZkZDZhNzU0NmZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAleqAlWceBTMxaA+AbwvBRwE0Py/Sz2I1UZni ga/xlO5SVrEs9nhl8z137H6u9eguMEbe2T96lil5gs5bVibFlnNSmeKPWPfvXqws DAzLV70V4cnrjibTeWedPS1SJoBpmTWTGy/1C0LFQWx3ja12M4ZSGk6Ap6ntwVcS /YWjKkYTz2Raze5lvpPgcfTQ3p4h/HZ0eiNfUM6V45aUeRGECHldgsbNA4jGU7/V T32GhbJACHvtVuNzpxUnBno9GCjLsHh8Jh6SyW+FnhWeXryJw9UdRC22azHa2Fzu eGQkotUSlo5dVtj83OJGup2glCWYyeFxXWJuC1zC2hehsdE5QwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMSvBYQAH+zGmsTZVUQ122RPuJWSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYjhjMGI2NmUtNGM0ZS0z MGRlLTkyN2QtMzE0ZDk0OWY4OWNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvoiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABWU0oYNgIW50CfXGnLlfqXJN6hS+GRggpHv96TCkQdUXe2LVz/9QyMv 5Q7qYb7CNI/E/rkcRy2fc9ywyT5YIR8GGsWPF5OFnBvE2bIuVmHD8LIZqJ9EFH6q 0cM0TaHn/i4ITyOIQf3qRlcXh4qvIDjs2av+S/i1jVa22MFVha0q6l9ooGGmufEU IkEhUp1Qv8TbSiB86+c44PAGNIs07aEYvKo7uWL1knjRwlz3Ufue81A1n+EoeQJG KgcDdv0k+fZTNxv+JmSJ7/uRC9T/m7GTOqLDIS2JmUaz/9buI2Fc32+rZ0Blfvn/ 68hZpVJiAkOtxcmoFZaCg0F0gccXtYc= -----END CERTIFICATE-----Generated at Fri Nov 22 00:25:20 2024 by rpki-client on console-fra.rpki-client.org