$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b8cec25-d1c2-4372-bf39-1fe2015ee1a9/b28b67af-fc26-3788-8d87-c00f3bd93473.roa File: b28b67af-fc26-3788-8d87-c00f3bd93473.roa (raw, json) Hash identifier: LmscfFB057oWViGWVeq46YQAU27OtIvqplVjD8gE1lM= Subject key identifier: E1:9A:DA:A2:DB:13:F1:DE:DB:60:0B:08:E9:A2:D0:30:19:6B:F9:20 Certificate issuer: /CN=3b8cec25-d1c2-4372-bf39-1fe2015ee1a9 Certificate serial: 010D0C9F432858476EF13C4C4EB385E768979D80 Authority key identifier: 7C:94:A1:84:50:BD:35:0E:33:CA:66:4A:B4:E0:66:EE:F1:0A:3B:EC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b8cec25-d1c2-4372-bf39-1fe2015ee1a9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b8cec25-d1c2-4372-bf39-1fe2015ee1a9/b28b67af-fc26-3788-8d87-c00f3bd93473.roa Signing time: Fri 04 Oct 2024 21:04:56 +0000 ROA not before: Fri 04 Oct 2024 21:04:56 +0000 ROA not after: Thu 02 Jan 2025 22:04:56 +0000 asID: 53356 IP address blocks: 140.235.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b8cec25-d1c2-4372-bf39-1fe2015ee1a9/3b8cec25-d1c2-4372-bf39-1fe2015ee1a9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b8cec25-d1c2-4372-bf39-1fe2015ee1a9/3b8cec25-d1c2-4372-bf39-1fe2015ee1a9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b8cec25-d1c2-4372-bf39-1fe2015ee1a9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:6e:f1:3c:4c:4e:b3:85:e7:68:97:9d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b8cec25-d1c2-4372-bf39-1fe2015ee1a9 Validity Not Before: Oct 4 21:04:56 2024 GMT Not After : Jan 2 22:04:56 2025 GMT Subject: CN=ca89a20a-ee8f-459f-a819-b066dc21c554 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b2:d2:63:18:a7:9e:88:f8:03:b9:47:0b:7f: fa:12:49:3b:fe:99:17:15:6a:be:3d:83:3f:29:b8: 28:cc:85:1f:7a:8d:37:1c:65:0d:17:ec:33:02:0d: c1:99:58:f8:dd:7e:8d:67:5d:c9:24:55:e3:4f:3d: 05:44:91:46:bb:8e:8f:c5:9f:18:00:bd:aa:f0:7b: ef:8a:20:61:46:14:a3:0c:d7:9b:04:09:dc:89:bd: 77:91:fe:63:69:c8:a4:21:43:d6:37:00:4d:36:f9: b7:81:ee:a0:44:17:b4:05:60:ff:2e:72:d8:55:d5: 26:59:fb:a0:af:dd:c3:f9:ab:71:19:e4:46:cb:95: 3c:41:84:6c:78:5c:f5:c8:6a:ae:31:cc:e2:02:9e: 13:69:68:b4:86:05:8e:6e:16:e1:08:04:5b:e4:e5: 6c:b7:39:38:12:72:0b:dc:3b:31:71:b7:a1:1e:64: a2:c5:66:58:dd:a1:3b:70:6e:63:b3:1e:1b:1d:de: 85:16:b1:5d:5c:c4:2e:41:d2:c1:33:fa:b9:c2:f1: b3:0e:2e:62:6d:1a:61:ea:ad:15:45:5c:a8:3f:5a: c2:ad:22:94:a8:24:6a:42:71:98:0b:3a:7d:f0:e1: ab:c4:75:68:a7:72:ee:d2:f0:fa:09:b2:a0:4c:88: 90:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:9A:DA:A2:DB:13:F1:DE:DB:60:0B:08:E9:A2:D0:30:19:6B:F9:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b8cec25-d1c2-4372-bf39-1fe2015ee1a9/b28b67af-fc26-3788-8d87-c00f3bd93473.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b8cec25-d1c2-4372-bf39-1fe2015ee1a9/3b8cec25-d1c2-4372-bf39-1fe2015ee1a9.crl X509v3 Authority Key Identifier: keyid:7C:94:A1:84:50:BD:35:0E:33:CA:66:4A:B4:E0:66:EE:F1:0A:3B:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b8cec25-d1c2-4372-bf39-1fe2015ee1a9.cer sbgp-ipAddrBlock: critical IPv4: 140.235.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:76:64:16:df:7f:35:95:74:01:fd:7a:cd:3a:2d:e0:ae:cf: 2d:a2:da:aa:4d:7a:b8:c0:5b:e5:d0:e1:3a:9a:a6:8d:f9:6e: e2:89:91:24:c5:1a:24:e9:80:d7:eb:bf:c1:d2:a0:40:f7:10: a5:99:0e:5c:49:9d:72:84:51:2f:db:b8:52:59:f4:80:b0:a3: 5e:b5:9b:3b:6c:2a:04:e9:58:92:06:6f:8f:94:f5:f8:b9:09: f5:08:00:b3:6c:dd:18:fc:ce:07:8f:cb:ab:11:29:69:46:53: d7:28:09:7d:7d:b7:9f:81:b3:ba:8c:63:66:b5:c9:47:eb:95: 90:aa:e8:07:d9:81:ae:14:4a:19:ca:a6:4e:0b:f1:6c:5a:47: 8c:80:fd:f2:0e:34:a7:4f:f7:80:13:e7:6e:d6:91:cb:96:cb: 54:22:53:94:c5:d8:91:e2:57:4c:0d:92:4f:45:fb:a0:95:d9: b7:90:a3:6a:5e:f7:39:31:cd:ef:1d:a2:8b:8a:ec:35:31:f0: 70:d4:df:53:08:32:14:b7:66:5c:5a:ab:db:bb:ff:c2:55:a6: 7e:48:18:21:38:e3:7c:db:a9:cc:76:f3:89:ef:45:2e:3e:10: ba:c9:fd:19:c6:31:cf:7a:92:01:05:5a:a7:19:eb:87:03:90: bd:91:cc:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdu8TxMTrOF52iXnYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2I4Y2VjMjUtZDFjMi00MzcyLWJmMzktMWZlMjAxNWVl MWE5MB4XDTI0MTAwNDIxMDQ1NloXDTI1MDEwMjIyMDQ1NlowLzEtMCsGA1UEAxMk Y2E4OWEyMGEtZWU4Zi00NTlmLWE4MTktYjA2NmRjMjFjNTU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrLSYxinnoj4A7lHC3/6Ekk7/pkXFWq+PYM/ KbgozIUfeo03HGUNF+wzAg3BmVj43X6NZ13JJFXjTz0FRJFGu46PxZ8YAL2q8Hvv iiBhRhSjDNebBAncib13kf5jacikIUPWNwBNNvm3ge6gRBe0BWD/LnLYVdUmWfug r93D+atxGeRGy5U8QYRseFz1yGquMcziAp4TaWi0hgWObhbhCARb5OVstzk4EnIL 3DsxcbehHmSixWZY3aE7cG5jsx4bHd6FFrFdXMQuQdLBM/q5wvGzDi5ibRph6q0V RVyoP1rCrSKUqCRqQnGYCzp98OGrxHVop3Lu0vD6CbKgTIiQoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOGa2qLbE/He22ALCOmi0DAZa/kgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zYjhj ZWMyNS1kMWMyLTQzNzItYmYzOS0xZmUyMDE1ZWUxYTkvYjI4YjY3YWYtZmMyNi0z Nzg4LThkODctYzAwZjNiZDkzNDczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvM2I4Y2VjMjUtZDFjMi00MzcyLWJm MzktMWZlMjAxNWVlMWE5LzNiOGNlYzI1LWQxYzItNDM3Mi1iZjM5LTFmZTIwMTVl ZTFhOS5jcmwwHwYDVR0jBBgwFoAUfJShhFC9NQ4zymZKtOBm7vEKO+wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zYjhjZWMyNS1kMWMyLTQzNzItYmYzOS0xZmUy MDE1ZWUxYTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjOsUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC92ZBbffzWVdAH9es06LeCuzy2i2qpNerjAW+XQ4Tqapo35buKJkSTF GiTpgNfrv8HSoED3EKWZDlxJnXKEUS/buFJZ9ICwo161mztsKgTpWJIGb4+U9fi5 CfUIALNs3Rj8zgePy6sRKWlGU9coCX19t5+Bs7qMY2a1yUfrlZCq6AfZga4UShnK pk4L8WxaR4yA/fIONKdP94AT527WkcuWy1QiU5TF2JHiV0wNkk9F+6CV2beQo2pe 9zkxze8doouK7DUx8HDU31MIMhS3Zlxaq9u7/8JVpn5IGCE443zbqcx284nvRS4+ ELrJ/RnGMc96kgEFWqcZ64cDkL2RzJ0= -----END CERTIFICATE-----Generated at Thu Nov 21 22:36:28 2024 by rpki-client on console-fra.rpki-client.org