$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c5211ada-1406-3cf0-ace4-7211be6b6547.roa File: c5211ada-1406-3cf0-ace4-7211be6b6547.roa (raw, json) Hash identifier: zgx/lfK/wBe6TTQZbCOjdWJOtTePS6USQ1fmxCj1p88= Subject key identifier: ED:67:A5:38:4C:71:F7:6C:43:14:7A:81:17:08:4A:4D:E6:B9:4C:1D Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F432858471E706E45B0910A53133AA580 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c5211ada-1406-3cf0-ace4-7211be6b6547.roa Signing time: Fri 06 Sep 2024 01:00:31 +0000 ROA not before: Fri 06 Sep 2024 01:00:31 +0000 ROA not after: Thu 05 Dec 2024 02:00:31 +0000 asID: 15169 IP address blocks: 142.250.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:1e:70:6e:45:b0:91:0a:53:13:3a:a5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 6 01:00:31 2024 GMT Not After : Dec 5 02:00:31 2024 GMT Subject: CN=a1b1a0df-5dcc-4a8b-8b04-df5530b528fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:4b:e5:0d:28:bc:9e:e4:17:11:e0:f6:5e:cb: 45:35:ce:b2:77:7b:dd:be:cc:56:1e:34:21:80:2f: 89:01:b9:3b:07:6b:a6:49:7d:e7:6c:4b:85:76:a0: 61:d9:45:44:c3:6f:db:83:01:8e:d4:53:72:70:3f: af:c8:22:a1:af:cd:3e:2c:54:a1:2f:c7:08:8b:ec: 92:b1:c6:ab:27:a1:56:a4:c1:ca:53:be:96:60:e1: 16:49:b9:6f:b9:d4:25:9a:67:aa:21:a0:ed:94:90: a8:33:3f:b4:f3:4b:93:03:1d:ca:e6:d5:ce:82:32: a4:71:b6:f1:59:8d:f3:34:6d:8b:9f:55:a4:cb:f3: c6:86:59:ed:e8:7e:e2:70:82:85:65:fb:72:13:b7: 16:7d:d8:e6:aa:07:9a:31:de:93:78:b6:14:2c:b7: 2b:55:3d:a0:95:4b:2b:31:0c:4d:59:7c:a5:aa:ba: ea:41:e2:28:34:6e:23:c6:78:e3:32:65:7e:f1:d3: b3:f7:53:2e:14:f9:98:f8:c8:f9:8f:46:9e:51:ce: 0a:8f:73:74:20:4a:09:cf:e5:1b:f6:6c:79:78:c6: 9c:ed:cd:3e:3b:c9:a0:44:f7:c2:e6:be:e2:e5:b9: 3f:32:a6:0b:91:34:6a:27:64:cd:df:f4:d2:ae:32: b8:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:67:A5:38:4C:71:F7:6C:43:14:7A:81:17:08:4A:4D:E6:B9:4C:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c5211ada-1406-3cf0-ace4-7211be6b6547.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:8b:13:bc:0f:ef:07:92:3e:2a:3e:6b:fb:63:84:f8:30:01: 01:9c:6d:d3:f6:99:84:34:c0:9b:88:a6:ad:cb:f0:81:e9:b9: ef:cd:50:2d:f5:a2:1e:60:3a:8a:62:b7:af:92:d6:a5:a4:49: d4:6d:af:0d:ed:56:66:72:2e:47:17:0e:c6:95:ee:ee:ed:46: 9b:cd:02:43:80:b7:8d:03:33:60:10:4e:07:8f:25:de:c6:92: 50:70:c5:04:d0:6a:6c:e6:e8:88:29:69:d7:06:43:83:57:49: 43:f0:91:92:23:98:ed:dd:29:c4:e1:fa:62:63:49:4a:6b:83: f9:36:6f:57:13:e3:09:7a:75:fe:0a:9a:b8:3a:5f:97:5b:32: 69:00:c9:96:89:95:5a:25:6d:3f:3d:e5:d5:bb:3c:9e:8e:d6: ee:cb:97:fc:3c:d3:d0:b0:09:07:5d:3a:ff:78:4e:c5:24:d5: f2:62:a6:09:3e:1d:ee:8b:da:eb:fe:6a:9c:b0:c8:21:4d:11: 8a:22:5e:03:49:3d:e4:25:22:f1:0b:4e:1a:5b:46:62:c4:56: 5a:f0:a8:35:57:4c:c5:cc:2d:63:ae:57:48:13:66:81:30:be: ef:00:1e:ab:98:83:87:69:45:cb:e1:0b:30:c7:d1:ad:ef:9c: 6d:2b:d4:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcecG5FsJEKUxM6pYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI0MDkwNjAxMDAzMVoXDTI0MTIwNTAyMDAzMVowLzEtMCsGA1UEAxMk YTFiMWEwZGYtNWRjYy00YThiLThiMDQtZGY1NTMwYjUyOGZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2EvlDSi8nuQXEeD2XstFNc6yd3vdvsxWHjQh gC+JAbk7B2umSX3nbEuFdqBh2UVEw2/bgwGO1FNycD+vyCKhr80+LFShL8cIi+yS scarJ6FWpMHKU76WYOEWSblvudQlmmeqIaDtlJCoMz+080uTAx3K5tXOgjKkcbbx WY3zNG2Ln1Wky/PGhlnt6H7icIKFZftyE7cWfdjmqgeaMd6TeLYULLcrVT2glUsr MQxNWXylqrrqQeIoNG4jxnjjMmV+8dOz91MuFPmY+Mj5j0aeUc4Kj3N0IEoJz+Ub 9mx5eMac7c0+O8mgRPfC5r7i5bk/MqYLkTRqJ2TN3/TSrjK4PwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO1npThMcfdsQxR6gRcISk3muUwdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYzUyMTFhZGEtMTQwNi0z Y2YwLWFjZTQtNzIxMWJlNmI2NTQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvp4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIqLE7wP7weSPio+a/tjhPgwAQGcbdP2mYQ0wJuIpq3L8IHpue/NUC31 oh5gOopit6+S1qWkSdRtrw3tVmZyLkcXDsaV7u7tRpvNAkOAt40DM2AQTgePJd7G klBwxQTQamzm6IgpadcGQ4NXSUPwkZIjmO3dKcTh+mJjSUprg/k2b1cT4wl6df4K mrg6X5dbMmkAyZaJlVolbT895dW7PJ6O1u7Ll/w809CwCQddOv94TsUk1fJipgk+ He6L2uv+apywyCFNEYoiXgNJPeQlIvELThpbRmLEVlrwqDVXTMXMLWOuV0gTZoEw vu8AHquYg4dpRcvhCzDH0a3vnG0r1D8= -----END CERTIFICATE-----Generated at Thu Nov 21 23:41:01 2024 by rpki-client on console-ams.rpki-client.org