$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fa32539a-0dbd-3810-a010-b81c403c8b41.roa File: fa32539a-0dbd-3810-a010-b81c403c8b41.roa (raw, json) Hash identifier: wAwXPb689OoFq7Of/csYmJbm+RENHki4RLarYbi7Iv0= Subject key identifier: 64:C4:23:66:F5:F5:BA:66:FB:B7:E2:51:5B:A6:82:63:9B:B0:8D:A0 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285847E62A9F3AB481E1C962CE9200 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fa32539a-0dbd-3810-a010-b81c403c8b41.roa Signing time: Sat 16 Nov 2024 14:00:41 +0000 ROA not before: Sat 16 Nov 2024 14:00:41 +0000 ROA not after: Fri 14 Feb 2025 14:00:41 +0000 asID: 15169 IP address blocks: 142.251.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e6:2a:9f:3a:b4:81:e1:c9:62:ce:92:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Nov 16 14:00:41 2024 GMT Not After : Feb 14 14:00:41 2025 GMT Subject: CN=fb326396-b172-4442-b529-5d1bc3ee0e76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:23:be:1f:eb:b6:a7:92:30:5f:df:48:ad:ee: 62:ed:bb:ab:31:f2:ea:a6:6e:8c:70:12:6c:be:3e: 1f:75:8b:c2:d8:49:67:f1:7b:1f:d9:7c:36:52:31: 35:e3:c3:d9:4a:a7:09:37:d5:b6:5f:c7:a5:ab:04: aa:14:92:54:c6:7f:83:12:e4:4c:8c:ad:ab:15:9d: 7e:fa:56:0c:66:23:f9:c8:98:18:8d:27:af:07:2c: d6:fe:5f:3b:81:df:b6:40:3c:6e:39:4d:a1:4a:97: 6d:9e:d7:fe:f5:da:ac:4e:03:95:61:eb:88:a3:6a: 8c:16:35:dc:eb:11:39:3b:72:07:18:a4:6d:0e:95: bc:8a:ec:9d:49:22:34:3e:ae:21:c0:e1:2f:3d:22: ce:1f:cc:e8:a7:81:e3:ad:fb:4e:04:c9:24:6d:da: 26:55:2d:3c:8a:e3:22:6c:34:d1:d6:89:5a:01:b3: e5:0f:d7:75:fc:ef:bf:29:b4:05:c1:9c:93:d9:51: c2:a4:54:11:7f:f1:c3:4f:98:8a:1e:62:f6:48:63: a8:e1:11:26:40:70:39:bf:72:95:4b:09:63:0a:54: cd:7b:b9:5e:cf:14:1c:9e:64:54:7b:ca:7e:16:75: 30:f4:0a:90:be:9c:3a:61:45:6d:7a:01:01:9f:80: d5:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:C4:23:66:F5:F5:BA:66:FB:B7:E2:51:5B:A6:82:63:9B:B0:8D:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fa32539a-0dbd-3810-a010-b81c403c8b41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:a2:52:01:8f:a2:e6:dc:7d:96:0b:d1:2e:ed:20:ef:75:47: 82:c3:84:90:17:96:eb:07:d1:bc:9b:52:fd:0f:0f:a4:71:e2: ff:c4:0a:d5:49:cd:3c:36:ab:e1:e4:92:f3:dc:8a:38:4f:0d: 6b:14:a6:07:88:2b:95:2d:4b:58:d8:e5:62:45:7a:47:60:d2: 2b:57:4a:28:38:93:89:ad:0b:02:4d:d9:04:24:c7:57:75:17: 90:a0:bc:40:d8:40:50:8c:2e:9d:33:ee:d9:cb:1f:ba:01:f2: e5:b7:07:d4:74:3f:9e:d4:88:62:4f:c8:dd:51:55:7d:06:d8: c5:a3:e5:41:0d:51:43:0c:dc:43:3a:f5:a3:6f:b3:46:e9:e2: 66:08:e2:d2:51:61:c8:f2:55:e8:f7:48:68:9d:be:ea:db:96: 6a:02:cb:95:30:52:75:fc:9a:db:33:50:b5:28:6e:58:a2:c4: 6f:d1:dc:ce:3a:44:8e:eb:55:c0:2c:f1:88:85:09:28:65:75: 7e:f4:f8:2b:45:18:8b:aa:32:2a:b9:fb:99:1a:9d:19:6c:37: e1:65:8a:6b:8d:88:f3:91:ab:eb:61:46:2c:51:77:87:d6:a7: 4c:d3:51:fc:e8:e7:83:09:1b:41:93:08:40:2c:c0:8b:27:72: fc:93:62:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKp86tIHhyWLOkgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk ZmIzMjYzOTYtYjE3Mi00NDQyLWI1MjktNWQxYmMzZWUwZTc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjiO+H+u2p5IwX99Ire5i7burMfLqpm6McBJs vj4fdYvC2Eln8Xsf2Xw2UjE148PZSqcJN9W2X8elqwSqFJJUxn+DEuRMjK2rFZ1+ +lYMZiP5yJgYjSevByzW/l87gd+2QDxuOU2hSpdtntf+9dqsTgOVYeuIo2qMFjXc 6xE5O3IHGKRtDpW8iuydSSI0Pq4hwOEvPSLOH8zop4HjrftOBMkkbdomVS08iuMi bDTR1olaAbPlD9d1/O+/KbQFwZyT2VHCpFQRf/HDT5iKHmL2SGOo4REmQHA5v3KV SwljClTNe7lezxQcnmRUe8p+FnUw9AqQvpw6YUVtegEBn4DVxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGTEI2b19bpm+7fiUVumgmObsI2gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZmEzMjUzOWEtMGRiZC0z ODEwLWEwMTAtYjgxYzQwM2M4YjQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvufMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKOiUgGPoubcfZYL0S7tIO91R4LDhJAXlusH0bybUv0PD6Rx4v/ECtVJ zTw2q+HkkvPcijhPDWsUpgeIK5UtS1jY5WJFekdg0itXSig4k4mtCwJN2QQkx1d1 F5CgvEDYQFCMLp0z7tnLH7oB8uW3B9R0P57UiGJPyN1RVX0G2MWj5UENUUMM3EM6 9aNvs0bp4mYI4tJRYcjyVej3SGidvurblmoCy5UwUnX8mtszULUobliixG/R3M46 RI7rVcAs8YiFCShldX70+CtFGIuqMiq5+5kanRlsN+FlimuNiPORq+thRixRd4fW p0zTUfzo54MJG0GTCEAswIsncvyTYvE= -----END CERTIFICATE-----Generated at Fri Nov 22 00:25:22 2024 by rpki-client on console-fra.rpki-client.org