$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/86ce795d-c584-310b-9693-21cb26b6e90a.roa File: 86ce795d-c584-310b-9693-21cb26b6e90a.roa (raw, json) Hash identifier: +eEztznYU/YcdCm7uQqpuJD+qdhye2wsAEFsvvGGqzI= Subject key identifier: 06:F2:90:65:5F:2B:9E:4C:55:DE:D2:D9:D8:B4:42:DC:AE:68:D0:74 Certificate issuer: /CN=3a636afd-ece5-4e23-a54f-c43e0fc08124 Certificate serial: 010D0C9F43285845A6F35CC4BBB23EA7BE076080 Authority key identifier: 8B:CE:40:F1:5E:3E:E3:95:3C:35:42:B6:04:3C:3E:D1:61:07:37:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/86ce795d-c584-310b-9693-21cb26b6e90a.roa Signing time: Wed 24 Apr 2024 13:00:33 +0000 ROA not before: Wed 24 Apr 2024 13:00:33 +0000 ROA not after: Tue 23 Jul 2024 13:00:33 +0000 asID: 14618 IP address blocks: 148.59.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/3a636afd-ece5-4e23-a54f-c43e0fc08124.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/3a636afd-ece5-4e23-a54f-c43e0fc08124.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 27 Apr 2024 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:a6:f3:5c:c4:bb:b2:3e:a7:be:07:60:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a636afd-ece5-4e23-a54f-c43e0fc08124 Validity Not Before: Apr 24 13:00:33 2024 GMT Not After : Jul 23 13:00:33 2024 GMT Subject: CN=fc2418d0-3ca3-4e57-b677-2e5152aecf43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:56:0c:d3:03:d2:c9:e7:43:50:22:0d:68:fa: d0:da:af:91:37:3c:11:03:43:eb:b8:2c:5e:6b:cf: d5:9e:f2:f2:57:d3:01:cf:df:e3:b8:4e:95:b5:62: cd:3e:24:41:06:bb:99:db:f8:a3:7f:97:89:5a:ba: 42:37:38:f1:8d:b5:aa:92:fb:a0:6b:b1:c4:71:be: ca:d8:52:30:f2:df:f9:d8:5d:4b:de:31:2f:4e:c8: 6d:a5:51:71:6a:db:d2:8e:5b:29:77:95:c6:a7:95: ae:e4:d7:48:2c:7a:8d:00:7d:e8:c3:04:17:e9:1a: ca:c9:ad:eb:51:5c:74:9f:90:7c:e9:a6:ee:d7:5c: d8:56:04:06:0e:96:4f:09:71:c0:d1:ae:17:08:6a: 8a:c6:53:9d:0f:d7:9d:5b:7c:82:b6:16:26:5b:3a: 04:f4:52:20:fe:50:c6:a1:90:13:96:bf:82:6e:03: 10:c2:20:9e:d7:32:60:55:8f:a5:30:56:b5:16:d2: b5:51:69:e6:8a:d0:22:aa:4c:99:05:16:0f:96:72: 31:46:bf:29:9d:40:da:a2:55:34:cb:e9:4c:60:4d: 67:de:3b:4a:97:07:39:6a:42:56:5f:36:2e:28:ef: 0f:11:8d:a1:0a:5f:41:b3:17:ce:16:95:51:b7:4e: f7:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:F2:90:65:5F:2B:9E:4C:55:DE:D2:D9:D8:B4:42:DC:AE:68:D0:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/86ce795d-c584-310b-9693-21cb26b6e90a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/3a636afd-ece5-4e23-a54f-c43e0fc08124.crl X509v3 Authority Key Identifier: keyid:8B:CE:40:F1:5E:3E:E3:95:3C:35:42:B6:04:3C:3E:D1:61:07:37:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124.cer sbgp-ipAddrBlock: critical IPv4: 148.59.78.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:b6:ca:37:47:5e:a0:b6:b8:dd:a2:87:43:df:8d:ff:f5:9a: f2:d4:6a:49:59:c8:b1:c1:29:49:a4:83:77:12:bf:fb:01:5f: 4b:45:05:76:ef:52:66:7f:45:04:79:80:3b:57:4d:14:88:c1: a8:8f:f2:56:21:d4:f5:ea:8e:c8:6f:9f:b8:49:a9:cd:83:7e: a8:55:d2:02:2c:e9:c8:24:ad:4d:da:f5:32:7f:5c:0c:97:e6: 0e:fb:a0:77:6a:b6:78:49:86:64:22:d1:0e:80:2c:a0:f2:a1: f9:1a:a4:44:37:79:5b:30:e0:87:2a:ca:8c:15:6f:31:3d:e0: 7e:fb:a0:06:ba:3c:bd:8a:d4:c1:6d:1c:52:44:85:c0:60:35: 7c:0d:36:2d:e8:52:5c:fb:d6:d1:53:17:d5:f3:42:c7:6f:80: 13:2d:99:d3:da:dd:fa:d7:e5:25:58:e2:a7:b4:26:42:4b:b0: 7a:be:88:21:b3:b8:43:c1:5f:71:3c:a7:2e:8b:b0:a3:e5:a1: f2:e5:ad:e7:13:0f:34:ac:2f:5b:9d:36:91:44:c8:5e:e8:fb: 68:fc:c4:f8:d3:e2:a5:1e:c1:57:ae:4c:49:ea:69:d8:e1:d0: 4b:c2:22:f7:2f:2a:9d:63:00:d1:72:c8:cb:fc:9c:9f:f2:6d: f4:54:e9:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWm81zEu7I+p74HYIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2E2MzZhZmQtZWNlNS00ZTIzLWE1NGYtYzQzZTBmYzA4 MTI0MB4XDTI0MDQyNDEzMDAzM1oXDTI0MDcyMzEzMDAzM1owLzEtMCsGA1UEAxMk ZmMyNDE4ZDAtM2NhMy00ZTU3LWI2NzctMmU1MTUyYWVjZjQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk1YM0wPSyedDUCINaPrQ2q+RNzwRA0PruCxe a8/VnvLyV9MBz9/juE6VtWLNPiRBBruZ2/ijf5eJWrpCNzjxjbWqkvuga7HEcb7K 2FIw8t/52F1L3jEvTshtpVFxatvSjlspd5XGp5Wu5NdILHqNAH3owwQX6RrKya3r UVx0n5B86abu11zYVgQGDpZPCXHA0a4XCGqKxlOdD9edW3yCthYmWzoE9FIg/lDG oZATlr+CbgMQwiCe1zJgVY+lMFa1FtK1UWnmitAiqkyZBRYPlnIxRr8pnUDaolU0 y+lMYE1n3jtKlwc5akJWXzYuKO8PEY2hCl9BsxfOFpVRt0735QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAbykGVfK55MVd7S2di0QtyuaNB0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zYTYz NmFmZC1lY2U1LTRlMjMtYTU0Zi1jNDNlMGZjMDgxMjQvODZjZTc5NWQtYzU4NC0z MTBiLTk2OTMtMjFjYjI2YjZlOTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvM2E2MzZhZmQtZWNlNS00ZTIzLWE1 NGYtYzQzZTBmYzA4MTI0LzNhNjM2YWZkLWVjZTUtNGUyMy1hNTRmLWM0M2UwZmMw ODEyNC5jcmwwHwYDVR0jBBgwFoAUi85A8V4+45U8NUK2BDw+0WEHNyMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zYTYzNmFmZC1lY2U1LTRlMjMtYTU0Zi1jNDNl MGZjMDgxMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlDtOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIG2yjdHXqC2uN2ih0Pfjf/1mvLUaklZyLHBKUmkg3cSv/sBX0tFBXbv UmZ/RQR5gDtXTRSIwaiP8lYh1PXqjshvn7hJqc2DfqhV0gIs6cgkrU3a9TJ/XAyX 5g77oHdqtnhJhmQi0Q6ALKDyofkapEQ3eVsw4IcqyowVbzE94H77oAa6PL2K1MFt HFJEhcBgNXwNNi3oUlz71tFTF9XzQsdvgBMtmdPa3frX5SVY4qe0JkJLsHq+iCGz uEPBX3E8py6LsKPlofLlrecTDzSsL1udNpFEyF7o+2j8xPjT4qUewVeuTEnqadjh 0EvCIvcvKp1jANFyyMv8nJ/ybfRU6as= -----END CERTIFICATE-----Generated at Thu Apr 25 22:42:14 2024 by rpki-client on console-fra.rpki-client.org