$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/fd1f75bb-b322-31d2-97d8-2837137ee140.roa File: fd1f75bb-b322-31d2-97d8-2837137ee140.roa (raw, json) Hash identifier: fCvednmnBlgAfR1KbUfUWAsHj+tyT3yFlWfPp1+yKv8= Subject key identifier: 22:C5:B7:97:DF:1B:56:9D:04:EE:34:2D:A8:DA:A8:71:8D:4B:12:8B Certificate issuer: /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Certificate serial: 010D0C9F432858473A5B836AEFD9291D3F05B808 Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/fd1f75bb-b322-31d2-97d8-2837137ee140.roa Signing time: Mon 16 Sep 2024 01:00:29 +0000 ROA not before: Mon 16 Sep 2024 01:00:29 +0000 ROA not after: Sun 15 Dec 2024 02:00:29 +0000 asID: 1280 IP address blocks: 149.20.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:3a:5b:83:6a:ef:d9:29:1d:3f:05:b8:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Validity Not Before: Sep 16 01:00:29 2024 GMT Not After : Dec 15 02:00:29 2024 GMT Subject: CN=ae448bff-8530-44b0-ba4a-0e00dd3bb90e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:5d:f6:87:10:db:9d:4a:f6:ec:cd:4e:c4:b2: 7f:b4:45:11:5e:4a:45:fb:38:d7:f7:20:94:c6:c7: 24:47:0b:fe:d6:ec:3c:ca:6d:9b:b8:cc:e0:6f:ef: c1:c0:bc:b8:2f:02:fd:a4:c3:25:fe:10:77:9c:4a: 64:a8:a6:33:22:72:e2:21:41:54:ad:f3:45:e7:32: 75:a0:bc:34:f0:35:9c:b1:c4:17:da:4e:82:d2:cb: 34:56:50:a8:d4:2e:ee:7f:4e:09:35:85:b7:3b:8f: 3a:3b:b4:56:c3:5d:89:4b:d7:27:57:e6:91:9a:35: e8:09:c0:56:64:72:74:1e:98:e4:63:94:7f:3c:80: 9a:f6:a1:09:1b:5d:2f:3f:20:6b:42:4d:71:26:d0: 2c:a6:dc:b3:ac:74:78:f1:78:c3:72:7d:c7:4f:74: 2a:ef:d1:78:fd:26:7b:92:d2:2a:e8:e1:c7:47:43: d8:c7:e7:58:64:8f:c7:1f:7d:51:83:71:cb:26:b5: ca:ba:35:8f:e7:af:dc:f7:91:d8:0e:0a:92:e8:8f: 5d:69:4c:70:95:dc:0d:8d:90:b5:95:e5:fc:22:b5: 05:58:5b:7b:b1:16:7c:ff:44:53:9d:68:16:fc:69: 0e:6c:c3:de:95:19:ae:6f:f8:ef:77:97:b2:bc:8e: 89:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:C5:B7:97:DF:1B:56:9D:04:EE:34:2D:A8:DA:A8:71:8D:4B:12:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/fd1f75bb-b322-31d2-97d8-2837137ee140.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl X509v3 Authority Key Identifier: keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer sbgp-ipAddrBlock: critical IPv4: 149.20.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:44:cf:b2:bd:78:c1:fa:31:c5:da:02:bc:05:f2:98:4d:b5: c5:03:26:92:db:cc:65:8e:42:5b:fe:91:58:f4:56:24:e7:65: 37:fb:c7:d0:4a:70:46:d0:2a:2c:de:61:5f:75:71:49:be:85: 87:d9:3f:a6:4f:7c:c0:a4:04:5e:29:61:4f:ef:a6:c1:5f:e4: 83:ee:b6:9f:b0:78:1c:33:75:60:e3:82:4e:02:46:98:65:f9: 16:79:a6:48:98:55:6a:df:0a:71:3e:49:b3:bd:09:5c:f0:bb: 63:5e:f7:be:58:43:2b:a4:4c:88:96:c1:23:f3:5d:a6:52:d0: f6:19:14:0e:c6:a1:05:31:d4:6b:c9:bc:30:e3:be:3c:8d:69: e0:c9:b4:8a:a9:33:9b:cf:f7:ef:9f:c9:24:9b:8a:60:07:5f: a0:5d:cf:fd:16:50:3f:ae:ba:ab:84:ad:03:87:1b:6e:e2:ab: 0b:31:7f:de:54:0e:e3:a6:ba:83:f5:05:5a:47:0c:ee:96:11: b6:ed:5b:dc:be:a8:59:47:3f:0c:74:c8:a9:36:ab:af:30:bc: 43:1f:25:97:86:e1:61:6c:8d:14:95:df:23:5a:36:57:c5:c7: ae:41:aa:f4:e6:dd:6a:6d:02:02:b7:df:64:6b:21:a4:1a:55: c1:e3:13:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc6W4Nq79kpHT8FuAgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQwYjg0NzYtZjQ4YS00Y2YyLWFiY2YtZjRmYTFkZjI4 NTEwMB4XDTI0MDkxNjAxMDAyOVoXDTI0MTIxNTAyMDAyOVowLzEtMCsGA1UEAxMk YWU0NDhiZmYtODUzMC00NGIwLWJhNGEtMGUwMGRkM2JiOTBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmF32hxDbnUr27M1OxLJ/tEURXkpF+zjX9yCU xsckRwv+1uw8ym2buMzgb+/BwLy4LwL9pMMl/hB3nEpkqKYzInLiIUFUrfNF5zJ1 oLw08DWcscQX2k6C0ss0VlCo1C7uf04JNYW3O486O7RWw12JS9cnV+aRmjXoCcBW ZHJ0HpjkY5R/PICa9qEJG10vPyBrQk1xJtAsptyzrHR48XjDcn3HT3Qq79F4/SZ7 ktIq6OHHR0PYx+dYZI/HH31Rg3HLJrXKujWP56/c95HYDgqS6I9daUxwldwNjZC1 leX8IrUFWFt7sRZ8/0RTnWgW/GkObMPelRmub/jvd5eyvI6JZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCLFt5ffG1adBO40LajaqHGNSxKLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBi ODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZhMWRmMjg1MTAvZmQxZjc1YmItYjMyMi0z MWQyLTk3ZDgtMjgzNzEzN2VlMTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDQwYjg0NzYtZjQ4YS00Y2YyLWFi Y2YtZjRmYTFkZjI4NTEwL2Q0MGI4NDc2LWY0OGEtNGNmMi1hYmNmLWY0ZmExZGYy ODUxMC5jcmwwHwYDVR0jBBgwFoAUuowxJ/B7aFkOCYRn6pukVISC9Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBiODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZh MWRmMjg1MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRRYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIREz7K9eMH6McXaArwF8phNtcUDJpLbzGWOQlv+kVj0ViTnZTf7x9BK cEbQKizeYV91cUm+hYfZP6ZPfMCkBF4pYU/vpsFf5IPutp+weBwzdWDjgk4CRphl +RZ5pkiYVWrfCnE+SbO9CVzwu2Ne975YQyukTIiWwSPzXaZS0PYZFA7GoQUx1GvJ vDDjvjyNaeDJtIqpM5vP9++fySSbimAHX6Bdz/0WUD+uuquErQOHG27iqwsxf95U DuOmuoP1BVpHDO6WEbbtW9y+qFlHPwx0yKk2q68wvEMfJZeG4WFsjRSV3yNaNlfF x65BqvTm3WptAgK332RrIaQaVcHjEzg= -----END CERTIFICATE-----Generated at Thu Nov 21 21:09:22 2024 by rpki-client on console-fra.rpki-client.org