$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/db4b3d57-ee5a-3b89-a956-ff4aa0ca25c6.roa File: db4b3d57-ee5a-3b89-a956-ff4aa0ca25c6.roa (raw, json) Hash identifier: U1kwNrCjxEORPhBwDPCtEjAS13pRAdpie0pCdm1CNaI= Subject key identifier: 0B:37:CA:97:E0:C3:97:81:7F:54:F5:11:CF:DA:D4:66:92:5D:A2:02 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F432858471E706F613C941D36639F0D80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/db4b3d57-ee5a-3b89-a956-ff4aa0ca25c6.roa Signing time: Fri 06 Sep 2024 01:00:31 +0000 ROA not before: Fri 06 Sep 2024 01:00:31 +0000 ROA not after: Thu 05 Dec 2024 02:00:31 +0000 asID: 15169 IP address blocks: 142.251.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:1e:70:6f:61:3c:94:1d:36:63:9f:0d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 6 01:00:31 2024 GMT Not After : Dec 5 02:00:31 2024 GMT Subject: CN=255dfb3e-ac3c-4d9c-b62e-1e89cdc20700 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b5:4e:02:39:e4:bb:ac:28:83:bd:10:dc:64: 85:8b:5f:5d:cf:02:3c:ec:cb:0f:77:72:60:2d:fa: ab:3a:eb:e3:56:f2:6e:e5:56:df:6e:a6:12:99:3c: aa:c9:49:be:02:a4:67:be:66:b2:d9:ac:f2:16:9d: e2:3c:48:9f:70:0b:51:c2:1d:3b:76:04:52:1b:3f: 44:70:1f:58:ef:ca:78:d0:ef:d8:19:15:50:7a:53: 0f:4d:c6:92:b7:1a:3b:ff:23:ed:ea:56:a5:0e:e8: 92:d8:3b:14:5d:82:3a:c4:0c:b9:75:c5:56:a8:77: c2:c1:c5:17:4a:20:20:3c:cd:cf:c5:c5:2c:b0:b4: 4e:d5:4f:af:77:19:ef:ff:02:b9:5a:b2:96:73:7b: 73:32:7e:80:5e:0e:b4:09:bf:fa:fb:84:a8:dc:bd: ca:1a:51:4a:fa:3d:96:a7:c4:d9:a1:53:f2:0f:6b: c0:d0:e5:f2:8d:4e:ad:05:34:d1:95:36:a3:a6:d6: 42:41:49:cd:25:4a:58:95:10:38:53:01:bc:19:79: df:63:a2:7a:de:2d:9d:2b:91:cf:7c:52:34:e7:fd: fa:48:a4:17:b1:98:d5:b2:e8:bd:37:55:00:24:6e: 03:2c:73:ca:7a:05:84:8e:ab:22:f0:8d:fa:16:6b: d5:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:37:CA:97:E0:C3:97:81:7F:54:F5:11:CF:DA:D4:66:92:5D:A2:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/db4b3d57-ee5a-3b89-a956-ff4aa0ca25c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:17:04:d2:d6:eb:98:10:ba:d9:7e:08:da:4f:75:79:30:d9: d5:0a:49:88:a9:72:2e:cd:ae:f4:7b:6d:a0:d7:90:f8:e6:ad: f2:56:73:16:29:a9:a7:f0:fa:e9:f8:f0:37:d7:b1:3c:6f:ca: 4c:fb:93:bd:97:9a:b0:7a:9c:b6:80:4c:b7:6c:05:d8:93:7e: c7:c9:a3:a7:0a:97:90:b7:62:db:e7:c8:8f:5b:ae:a0:08:da: ed:8d:e5:f2:ad:57:23:39:ee:77:74:c4:e0:c7:56:95:c1:56: 73:83:b4:db:60:2e:9a:ce:0e:3b:f7:64:2c:b8:b9:e6:af:2f: ba:32:b8:d5:32:8a:2d:f3:3d:3c:bb:cf:43:95:ed:cc:f4:91: 2f:2a:c6:23:07:60:90:52:50:6e:bd:87:75:7b:a7:31:60:08: e1:52:8f:a6:9a:31:00:99:16:11:5a:7c:8b:1f:bb:f3:0f:b0: 46:99:7b:b5:ab:e8:29:b4:c4:19:d8:6c:31:8f:fb:f0:c5:5d: b7:7f:a1:d5:af:a5:88:c8:bc:ec:23:78:4a:6c:00:9a:eb:4d: 59:f4:76:03:3c:cc:4b:8f:5e:33:ee:cb:b0:06:7c:d9:20:08: 40:71:6c:2a:cd:f5:2f:0f:fc:1c:88:75:46:13:e4:72:f5:17: cb:e7:71:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcecG9hPJQdNmOfDYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI0MDkwNjAxMDAzMVoXDTI0MTIwNTAyMDAzMVowLzEtMCsGA1UEAxMk MjU1ZGZiM2UtYWMzYy00ZDljLWI2MmUtMWU4OWNkYzIwNzAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbVOAjnku6wog70Q3GSFi19dzwI87MsPd3Jg LfqrOuvjVvJu5VbfbqYSmTyqyUm+AqRnvmay2azyFp3iPEifcAtRwh07dgRSGz9E cB9Y78p40O/YGRVQelMPTcaStxo7/yPt6lalDuiS2DsUXYI6xAy5dcVWqHfCwcUX SiAgPM3PxcUssLRO1U+vdxnv/wK5WrKWc3tzMn6AXg60Cb/6+4So3L3KGlFK+j2W p8TZoVPyD2vA0OXyjU6tBTTRlTajptZCQUnNJUpYlRA4UwG8GXnfY6J63i2dK5HP fFI05/36SKQXsZjVsui9N1UAJG4DLHPKegWEjqsi8I36FmvV+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAs3ypfgw5eBf1T1Ec/a1GaSXaICMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZGI0YjNkNTctZWU1YS0z Yjg5LWE5NTYtZmY0YWEwY2EyNWM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvsYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACwXBNLW65gQutl+CNpPdXkw2dUKSYipci7NrvR7baDXkPjmrfJWcxYp qafw+un48DfXsTxvykz7k72XmrB6nLaATLdsBdiTfsfJo6cKl5C3YtvnyI9brqAI 2u2N5fKtVyM57nd0xODHVpXBVnODtNtgLprODjv3ZCy4ueavL7oyuNUyii3zPTy7 z0OV7cz0kS8qxiMHYJBSUG69h3V7pzFgCOFSj6aaMQCZFhFafIsfu/MPsEaZe7Wr 6Cm0xBnYbDGP+/DFXbd/odWvpYjIvOwjeEpsAJrrTVn0dgM8zEuPXjPuy7AGfNkg CEBxbCrN9S8P/ByIdUYT5HL1F8vncSY= -----END CERTIFICATE-----Generated at Thu Nov 21 23:41:02 2024 by rpki-client on console-ams.rpki-client.org