$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/7bad5279-3d80-339c-9b1a-d2ab4b9b2a38.roa File: 7bad5279-3d80-339c-9b1a-d2ab4b9b2a38.roa (raw, json) Hash identifier: ictWHjwkceT1xN4NMG/Xufw+2GVGsyO99HFfvYFgrf8= Subject key identifier: 11:B7:AF:03:5F:1A:07:6A:C5:59:EE:D3:1E:BC:EC:36:F8:09:C1:74 Certificate issuer: /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20 Certificate serial: 010D0C9F43285847ED24E0D442BD37C5AF777900 Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/7bad5279-3d80-339c-9b1a-d2ab4b9b2a38.roa Signing time: Tue 19 Nov 2024 02:00:27 +0000 ROA not before: Tue 19 Nov 2024 02:00:27 +0000 ROA not after: Mon 17 Feb 2025 02:00:27 +0000 asID: 7764 IP address blocks: 148.129.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ed:24:e0:d4:42:bd:37:c5:af:77:79:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20 Validity Not Before: Nov 19 02:00:27 2024 GMT Not After : Feb 17 02:00:27 2025 GMT Subject: CN=79c3e83b-0765-4917-a5b6-8e563f4c3866 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:36:81:21:75:3e:71:59:b9:9e:79:91:06:f5: 59:dd:39:29:6f:46:41:d0:42:ac:a4:fd:55:26:b3: ab:d5:91:ef:81:32:0b:99:df:a2:ca:76:50:b8:13: 00:1c:b9:76:92:94:cd:c2:33:d8:12:c1:8f:86:66: 19:b8:ac:c2:20:38:bb:6f:65:72:85:78:2c:ae:ce: 02:29:1d:9e:94:e8:a6:f6:e6:b8:e2:78:7a:97:59: b2:f5:75:30:3b:cc:ee:12:f1:7c:e1:1f:3e:9f:ae: f9:2e:36:95:88:71:5b:66:24:bd:6f:fe:4e:04:ff: d7:1e:70:a2:5f:99:ef:7b:30:10:5d:b5:05:06:d2: 1a:e6:56:f9:84:f1:b9:92:91:60:c8:40:ee:5e:fc: b7:59:b7:65:df:87:7f:51:19:e2:86:71:1d:3f:a3: 2f:95:73:1e:2d:af:9a:bf:00:18:8d:62:5b:ee:95: 3b:7f:82:07:43:24:8f:20:ea:cf:23:ab:fc:23:41: fd:7e:73:25:4c:44:d0:6e:1b:a0:8b:38:f0:bd:7f: e8:6f:4e:14:9a:c1:c7:50:95:67:54:c3:c2:31:24: 2f:e6:3f:be:4e:80:bf:c9:02:19:1b:0f:7f:10:d3: 43:2e:b3:8f:2c:12:31:7b:86:0e:d8:f0:d4:ca:76: 7d:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:B7:AF:03:5F:1A:07:6A:C5:59:EE:D3:1E:BC:EC:36:F8:09:C1:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/7bad5279-3d80-339c-9b1a-d2ab4b9b2a38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl X509v3 Authority Key Identifier: keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer sbgp-ipAddrBlock: critical IPv4: 148.129.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:c9:0a:d2:d0:50:77:35:90:98:a7:d3:93:9a:5d:ce:60:96: 96:20:7d:de:0c:6a:a8:13:7a:ac:a3:ec:e4:af:65:60:bf:3e: 2f:bc:44:d6:38:50:fd:a2:0b:34:a6:43:19:9e:ce:79:03:ec: 82:c1:9d:b9:00:26:36:6d:d4:ae:f2:92:70:17:7a:a0:2c:1a: 59:7a:24:cb:fc:1d:ad:7d:27:22:81:53:b2:eb:4a:0f:62:4c: 6e:a0:41:87:be:60:00:ee:60:ae:0e:63:28:44:9e:81:d4:ef: 14:a6:c0:af:ee:55:73:ff:9b:a1:85:ea:a1:19:64:d5:b2:7b: ed:41:6e:b5:b4:ce:91:8d:a0:38:07:07:0c:96:ff:77:bc:1c: 2c:38:10:d7:e0:79:c4:6d:ac:ac:a6:04:bc:63:a8:87:f8:f3: 5e:fe:10:ff:68:4a:e2:1f:a8:5f:bb:ca:da:5d:d2:0e:d9:1e: 22:d5:f8:de:66:bf:fe:0b:1b:1d:32:88:5a:4f:83:cf:ee:72: fa:3c:c1:40:b0:da:8d:42:bc:f0:c1:73:f3:06:f7:73:26:0f: 42:1c:20:ca:e2:6a:30:d8:a5:4b:8e:29:0c:38:7c:10:65:13: c8:46:db:ee:be:4a:d8:9c:35:64:06:d5:5e:e0:19:1e:e1:29: 5c:7d:cf:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEftJODUQr03xa93eQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzVlMTM4ZGEtZGJhMy00ZDg5LWFiM2YtNjU2ZmJhNGI5 YzIwMB4XDTI0MTExOTAyMDAyN1oXDTI1MDIxNzAyMDAyN1owLzEtMCsGA1UEAxMk NzljM2U4M2ItMDc2NS00OTE3LWE1YjYtOGU1NjNmNGMzODY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTaBIXU+cVm5nnmRBvVZ3Tkpb0ZB0EKspP1V JrOr1ZHvgTILmd+iynZQuBMAHLl2kpTNwjPYEsGPhmYZuKzCIDi7b2VyhXgsrs4C KR2elOim9ua44nh6l1my9XUwO8zuEvF84R8+n675LjaViHFbZiS9b/5OBP/XHnCi X5nvezAQXbUFBtIa5lb5hPG5kpFgyEDuXvy3Wbdl34d/URnihnEdP6MvlXMeLa+a vwAYjWJb7pU7f4IHQySPIOrPI6v8I0H9fnMlTETQbhugizjwvX/ob04UmsHHUJVn VMPCMSQv5j++ToC/yQIZGw9/ENNDLrOPLBIxe4YO2PDUynZ9TQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBG3rwNfGgdqxVnu0x687Db4CcF0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83NWUx MzhkYS1kYmEzLTRkODktYWIzZi02NTZmYmE0YjljMjAvN2JhZDUyNzktM2Q4MC0z MzljLTliMWEtZDJhYjRiOWIyYTM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzVlMTM4ZGEtZGJhMy00ZDg5LWFi M2YtNjU2ZmJhNGI5YzIwLzc1ZTEzOGRhLWRiYTMtNGQ4OS1hYjNmLTY1NmZiYTRi OWMyMC5jcmwwHwYDVR0jBBgwFoAUWY+WJt0yBRKzMlQ7ckHYRmR2yWEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy83NWUxMzhkYS1kYmEzLTRkODktYWIzZi02NTZm YmE0YjljMjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFlIGAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE/JCtLQUHc1kJin05OaXc5glpYgfd4MaqgTeqyj7OSvZWC/Pi+8RNY4 UP2iCzSmQxmeznkD7ILBnbkAJjZt1K7yknAXeqAsGll6JMv8Ha19JyKBU7LrSg9i TG6gQYe+YADuYK4OYyhEnoHU7xSmwK/uVXP/m6GF6qEZZNWye+1BbrW0zpGNoDgH BwyW/3e8HCw4ENfgecRtrKymBLxjqIf4817+EP9oSuIfqF+7ytpd0g7ZHiLV+N5m v/4LGx0yiFpPg8/ucvo8wUCw2o1CvPDBc/MG93MmD0IcIMriajDYpUuOKQw4fBBl E8hG2+6+SticNWQG1V7gGR7hKVx9z4o= -----END CERTIFICATE-----Generated at Thu Nov 21 21:05:35 2024 by rpki-client on console-fra.rpki-client.org