$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/2b1f44a4-c876-3ecd-b6a6-2389f2610dcd.roa File: 2b1f44a4-c876-3ecd-b6a6-2389f2610dcd.roa (raw, json) Hash identifier: tBDk7kVgUpuajCVg+uzHD7A59lY1SqGup4Sbp0FowNs= Subject key identifier: F2:46:66:BC:8F:54:E4:8E:D7:A7:0B:6C:0D:0E:84:CE:64:F1:F2:AA Certificate issuer: /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Certificate serial: 010D0C9F4328584574B3184A6A229B1F7DE453C0 Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/2b1f44a4-c876-3ecd-b6a6-2389f2610dcd.roa Signing time: Sat 06 Apr 2024 13:00:35 +0000 ROA not before: Sat 06 Apr 2024 13:00:35 +0000 ROA not after: Fri 05 Jul 2024 13:00:35 +0000 asID: 16509 IP address blocks: 149.20.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 05 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:74:b3:18:4a:6a:22:9b:1f:7d:e4:53:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Validity Not Before: Apr 6 13:00:35 2024 GMT Not After : Jul 5 13:00:35 2024 GMT Subject: CN=2c9f0115-4ec5-4c13-ab2c-eba55c795a09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:24:a3:9f:16:99:fc:3c:e1:73:a3:14:a1:aa: f7:dc:23:c1:10:ce:76:ac:21:87:e7:b8:1b:cd:08: 62:0e:f1:ae:48:82:ad:ff:c0:de:41:d0:99:1d:0b: 11:69:c3:65:a3:a6:f4:d7:a6:08:ac:7d:40:6e:34: 61:80:fe:de:32:c3:3a:53:27:72:a9:05:97:69:30: 0e:f6:b2:bb:09:30:a2:34:22:f6:e7:6a:ea:a6:12: 9b:d9:2a:5f:71:f3:e8:f4:90:a2:3d:0d:8d:8d:66: 2f:24:8d:8d:f6:20:ee:47:89:77:21:19:77:dc:9a: 3f:44:26:57:e5:36:29:45:5f:b6:ec:55:ba:aa:8a: 1b:a4:ba:6d:c5:16:02:d3:cf:bc:61:21:d9:2a:b5: 2d:7c:d8:b8:b9:07:00:a3:45:64:b8:e7:5e:fc:f1: b0:b4:c3:25:df:27:db:d7:6e:1d:fd:68:2a:43:15: e2:97:96:9f:32:fe:c6:3c:03:8c:dc:35:ec:00:10: f9:d1:9f:f3:9c:88:67:ad:65:a1:44:c6:61:3c:81: 52:fd:1b:dd:e5:48:fb:87:e5:5f:9f:15:f0:a4:27: 9d:94:75:b7:75:63:e1:3d:cb:11:59:5f:9f:d1:00: fe:73:6e:6e:60:e3:1d:37:16:60:cc:17:46:64:2a: db:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:46:66:BC:8F:54:E4:8E:D7:A7:0B:6C:0D:0E:84:CE:64:F1:F2:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/2b1f44a4-c876-3ecd-b6a6-2389f2610dcd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl X509v3 Authority Key Identifier: keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer sbgp-ipAddrBlock: critical IPv4: 149.20.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:08:6e:7f:aa:ae:e9:fc:a8:3e:54:3a:cf:77:9e:ee:f1:53: 22:b3:a8:47:a4:2e:e4:62:9e:47:31:d6:42:81:1d:b6:35:12: 23:88:f2:69:cf:ab:c7:64:29:eb:3a:d8:18:7c:16:c3:65:8f: 6d:e9:16:02:60:b3:00:c1:d5:e9:ba:32:77:aa:44:a6:b1:e8: 53:13:3f:72:29:83:ab:96:f9:18:e2:84:1b:31:5a:aa:02:a1: 71:29:6b:c7:60:2f:71:00:92:04:7a:e1:f0:54:2c:03:85:26: 7a:f4:ae:5a:cc:d7:00:75:d0:a4:4f:05:20:41:62:02:27:94: cb:b4:32:46:08:9f:0c:17:67:88:eb:46:29:d6:07:cb:e1:9b: a1:09:dc:cd:fd:0f:ec:88:1c:07:d0:8d:95:95:84:8e:0f:d8: ff:71:67:48:f9:f3:c2:25:dd:3a:14:10:88:1c:1b:0e:b9:13: 3f:bc:15:86:f9:46:ad:60:14:ed:0e:28:e5:b4:28:b7:88:c9: d6:e5:cc:3a:9c:b3:4e:bc:fb:66:58:3d:86:c8:7e:35:54:37: 14:93:3e:fb:cc:2d:d7:a5:e2:4e:af:99:51:40:2b:8e:ba:bf: 13:7c:9d:d2:ac:aa:7c:cc:52:be:34:c6:74:70:f4:34:8e:25: 3e:03:36:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEV0sxhKaiKbH33kU8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQwYjg0NzYtZjQ4YS00Y2YyLWFiY2YtZjRmYTFkZjI4 NTEwMB4XDTI0MDQwNjEzMDAzNVoXDTI0MDcwNTEzMDAzNVowLzEtMCsGA1UEAxMk MmM5ZjAxMTUtNGVjNS00YzEzLWFiMmMtZWJhNTVjNzk1YTA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2CSjnxaZ/Dzhc6MUoar33CPBEM52rCGH57gb zQhiDvGuSIKt/8DeQdCZHQsRacNlo6b016YIrH1AbjRhgP7eMsM6UydyqQWXaTAO 9rK7CTCiNCL252rqphKb2SpfcfPo9JCiPQ2NjWYvJI2N9iDuR4l3IRl33Jo/RCZX 5TYpRV+27FW6qoobpLptxRYC08+8YSHZKrUtfNi4uQcAo0VkuOde/PGwtMMl3yfb 124d/WgqQxXil5afMv7GPAOM3DXsABD50Z/znIhnrWWhRMZhPIFS/Rvd5Uj7h+Vf nxXwpCedlHW3dWPhPcsRWV+f0QD+c25uYOMdNxZgzBdGZCrbRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPJGZryPVOSO16cLbA0OhM5k8fKqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBi ODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZhMWRmMjg1MTAvMmIxZjQ0YTQtYzg3Ni0z ZWNkLWI2YTYtMjM4OWYyNjEwZGNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDQwYjg0NzYtZjQ4YS00Y2YyLWFi Y2YtZjRmYTFkZjI4NTEwL2Q0MGI4NDc2LWY0OGEtNGNmMi1hYmNmLWY0ZmExZGYy ODUxMC5jcmwwHwYDVR0jBBgwFoAUuowxJ/B7aFkOCYRn6pukVISC9Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBiODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZh MWRmMjg1MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRQLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGkIbn+qrun8qD5UOs93nu7xUyKzqEekLuRinkcx1kKBHbY1EiOI8mnP q8dkKes62Bh8FsNlj23pFgJgswDB1em6MneqRKax6FMTP3Ipg6uW+RjihBsxWqoC oXEpa8dgL3EAkgR64fBULAOFJnr0rlrM1wB10KRPBSBBYgInlMu0MkYInwwXZ4jr RinWB8vhm6EJ3M39D+yIHAfQjZWVhI4P2P9xZ0j588Il3ToUEIgcGw65Ez+8FYb5 Rq1gFO0OKOW0KLeIydblzDqcs068+2ZYPYbIfjVUNxSTPvvMLdel4k6vmVFAK466 vxN8ndKsqnzMUr40xnRw9DSOJT4DNoE= -----END CERTIFICATE-----Generated at Thu May 2 14:59:32 2024 by rpki-client on console-ams.rpki-client.org