$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d0d7549-19b6-40f9-862f-dc6857e17fc0/4a881d38-e71c-3afa-a893-e9ae385f7409.roa File: 4a881d38-e71c-3afa-a893-e9ae385f7409.roa (raw, json) Hash identifier: 3qcphZdDJ747yCPaNIzYIDhVbTZufhgMxpxv7jiNGjg= Subject key identifier: 28:A3:28:9B:B7:08:5F:D7:F4:D1:5A:25:71:3C:AD:46:49:72:5A:2A Certificate issuer: /CN=2d0d7549-19b6-40f9-862f-dc6857e17fc0 Certificate serial: 010D0C9F432858473095EB5E3528E4BEC597DB80 Authority key identifier: 3C:A5:E0:57:50:0E:ED:BC:B4:DC:02:45:2C:72:E8:81:08:E4:90:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d0d7549-19b6-40f9-862f-dc6857e17fc0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d0d7549-19b6-40f9-862f-dc6857e17fc0/4a881d38-e71c-3afa-a893-e9ae385f7409.roa Signing time: Thu 12 Sep 2024 13:00:41 +0000 ROA not before: Thu 12 Sep 2024 13:00:41 +0000 ROA not after: Wed 11 Dec 2024 14:00:41 +0000 asID: 53546 IP address blocks: 144.86.176.0/23 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d0d7549-19b6-40f9-862f-dc6857e17fc0/2d0d7549-19b6-40f9-862f-dc6857e17fc0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d0d7549-19b6-40f9-862f-dc6857e17fc0/2d0d7549-19b6-40f9-862f-dc6857e17fc0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d0d7549-19b6-40f9-862f-dc6857e17fc0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:30:95:eb:5e:35:28:e4:be:c5:97:db:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d0d7549-19b6-40f9-862f-dc6857e17fc0 Validity Not Before: Sep 12 13:00:41 2024 GMT Not After : Dec 11 14:00:41 2024 GMT Subject: CN=3f40303d-3ef6-4150-8f3a-b55a6bf6cf55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:0a:15:ce:dd:04:bd:b6:24:43:70:58:e6:84: ad:52:70:ab:4c:39:31:e5:b3:77:3d:a4:58:5c:d8: 8e:1b:37:44:ac:db:9a:8f:27:ef:d1:1a:b4:80:18: f0:69:3d:d5:2c:01:f2:2c:c7:e3:91:69:a0:0d:66: e2:4c:c4:c7:31:00:10:9b:a5:4c:a1:1c:d4:62:e9: fe:9d:f6:93:28:38:cd:9e:cb:d7:cf:a9:df:cf:0f: 02:bc:81:f5:d0:01:3a:09:86:a1:ec:b7:4d:ae:52: 2e:0e:10:a7:0b:67:5f:51:f5:04:6a:67:17:d1:19: 0d:dc:5b:6e:4e:07:8a:4d:7e:0c:14:9a:87:55:57: 40:c2:10:72:ff:31:65:f4:19:55:49:d5:f1:e6:b1: 81:4f:72:65:d0:77:e8:54:f1:4c:50:95:16:27:ff: a3:ad:85:d2:da:21:61:6e:7e:e3:ab:ba:8b:03:e8: eb:94:5e:f2:aa:e2:d4:c4:ec:b9:c6:b0:e9:33:c2: cd:59:eb:dd:3d:29:80:1b:61:5a:b5:e5:b3:5b:9b: 67:50:74:39:cc:40:63:a8:50:e5:6f:33:8b:24:91: ba:34:2d:2d:6f:8c:df:b2:02:2d:fa:f9:9d:ef:10: b4:8d:bc:89:76:ee:42:32:2b:fb:39:bb:59:2f:56: 52:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:A3:28:9B:B7:08:5F:D7:F4:D1:5A:25:71:3C:AD:46:49:72:5A:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d0d7549-19b6-40f9-862f-dc6857e17fc0/4a881d38-e71c-3afa-a893-e9ae385f7409.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d0d7549-19b6-40f9-862f-dc6857e17fc0/2d0d7549-19b6-40f9-862f-dc6857e17fc0.crl X509v3 Authority Key Identifier: keyid:3C:A5:E0:57:50:0E:ED:BC:B4:DC:02:45:2C:72:E8:81:08:E4:90:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d0d7549-19b6-40f9-862f-dc6857e17fc0.cer sbgp-ipAddrBlock: critical IPv4: 144.86.176.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:e6:e1:62:0d:11:ab:9a:c6:19:c1:3b:96:24:c4:ca:2b:52: b9:0e:5e:ce:cd:04:39:8d:bb:93:39:e8:c3:36:24:86:f5:b1: d0:58:d4:62:23:ea:c8:bf:e9:91:66:3d:09:70:37:33:14:3c: 46:b8:2e:37:6d:30:63:4e:52:c0:81:5b:5a:f7:f5:42:f8:68: 6a:7d:56:d8:a0:b0:18:03:f7:c0:e6:1d:eb:2b:c3:24:81:ae: 1b:4b:52:94:77:0e:8a:d2:98:80:8d:68:08:19:b5:f6:e9:a3: 75:93:be:ea:84:6d:1a:5a:41:3e:6e:97:15:d3:9a:48:0e:b6: 49:7b:73:02:2f:5d:2f:7b:f7:40:9e:64:f6:bc:27:ad:5c:36: fa:88:48:80:19:ea:35:be:b6:49:35:c9:84:2c:df:96:ed:cd: 33:7c:4e:9e:de:e4:96:e8:d2:fc:d0:98:23:14:07:a9:73:16: 10:87:40:f5:ad:33:37:17:ec:1e:69:a6:d8:54:d4:57:43:f2: a4:fa:37:dc:a0:3d:30:93:48:09:23:5a:79:20:89:85:3e:a0: 5a:fb:e3:cd:0e:14:ff:3a:38:c6:34:93:a8:be:e8:2e:f5:57: 58:0e:89:73:b2:38:ac:26:31:51:9c:c1:36:48:63:56:39:3c: 21:c9:69:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcwleteNSjkvsWX24AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmQwZDc1NDktMTliNi00MGY5LTg2MmYtZGM2ODU3ZTE3 ZmMwMB4XDTI0MDkxMjEzMDA0MVoXDTI0MTIxMTE0MDA0MVowLzEtMCsGA1UEAxMk M2Y0MDMwM2QtM2VmNi00MTUwLThmM2EtYjU1YTZiZjZjZjU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQoVzt0EvbYkQ3BY5oStUnCrTDkx5bN3PaRY XNiOGzdErNuajyfv0Rq0gBjwaT3VLAHyLMfjkWmgDWbiTMTHMQAQm6VMoRzUYun+ nfaTKDjNnsvXz6nfzw8CvIH10AE6CYah7LdNrlIuDhCnC2dfUfUEamcX0RkN3Ftu TgeKTX4MFJqHVVdAwhBy/zFl9BlVSdXx5rGBT3Jl0HfoVPFMUJUWJ/+jrYXS2iFh bn7jq7qLA+jrlF7yquLUxOy5xrDpM8LNWevdPSmAG2FateWzW5tnUHQ5zEBjqFDl bzOLJJG6NC0tb4zfsgIt+vmd7xC0jbyJdu5CMiv7ObtZL1ZSbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCijKJu3CF/X9NFaJXE8rUZJcloqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yZDBk NzU0OS0xOWI2LTQwZjktODYyZi1kYzY4NTdlMTdmYzAvNGE4ODFkMzgtZTcxYy0z YWZhLWE4OTMtZTlhZTM4NWY3NDA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMmQwZDc1NDktMTliNi00MGY5LTg2 MmYtZGM2ODU3ZTE3ZmMwLzJkMGQ3NTQ5LTE5YjYtNDBmOS04NjJmLWRjNjg1N2Ux N2ZjMC5jcmwwHwYDVR0jBBgwFoAUPKXgV1AO7by03AJFLHLogQjkkEwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yZDBkNzU0OS0xOWI2LTQwZjktODYyZi1kYzY4 NTdlMTdmYzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBkFawMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACHm4WINEauaxhnBO5YkxMorUrkOXs7NBDmNu5M56MM2JIb1sdBY1GIj 6si/6ZFmPQlwNzMUPEa4LjdtMGNOUsCBW1r39UL4aGp9VtigsBgD98DmHesrwySB rhtLUpR3DorSmICNaAgZtfbpo3WTvuqEbRpaQT5ulxXTmkgOtkl7cwIvXS9790Ce ZPa8J61cNvqISIAZ6jW+tkk1yYQs35btzTN8Tp7e5Jbo0vzQmCMUB6lzFhCHQPWt MzcX7B5ppthU1FdD8qT6N9ygPTCTSAkjWnkgiYU+oFr7480OFP86OMY0k6i+6C71 V1gOiXOyOKwmMVGcwTZIY1Y5PCHJaQY= -----END CERTIFICATE-----Generated at Mon Nov 25 03:17:49 2024 by rpki-client on console-ams.rpki-client.org